Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File:                     8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier:          DgAzZGGBkYyZm3AQ6vwLUUzY5g6W0EXOe9bpCS0q2eU=
Subject key identifier:   33:F2:67:CD:DC:D0:2E:F0:32:0C:9E:7B:48:45:32:A3:D2:83:F7:7C
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer:       /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial:       0191FAB50EB6980437CB9E5B07FC27014E90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number:          0117
Signing time:             Mon 16 Sep 2024 12:00:55 +0000
Manifest this update:     Mon 16 Sep 2024 12:00:55 +0000
Manifest next update:     Tue 17 Sep 2024 12:00:55 +0000
Files and hashes:         1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: Fb852eWSV42Xmr4LTAHaPppaimC79gaZIc65B+YgBQ4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:b5:0e:b6:98:04:37:cb:9e:5b:07:fc:27:01:4e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
        Validity
            Not Before: Sep 16 12:00:55 2024 GMT
            Not After : Sep 17 12:00:55 2024 GMT
        Subject: CN=33f267cddcd02ef0320c9e7b484532a3d283f77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d6:23:0a:9c:2b:d4:3d:ab:f2:4e:dd:2c:5e:
                    2b:27:ac:5f:17:18:ff:4c:eb:57:58:85:4c:bc:fb:
                    f9:e0:bf:60:e4:bb:0c:50:5b:c4:cd:ae:aa:54:67:
                    d3:67:fd:1e:9a:29:93:68:f9:de:fe:88:dc:f3:35:
                    4a:77:7e:96:70:5e:d3:27:ff:37:73:8e:6b:8a:a5:
                    c0:04:48:0c:59:a2:bb:36:42:c0:03:28:06:c6:f3:
                    6c:f1:6d:fd:2b:85:be:66:af:e5:fc:7d:f3:01:5f:
                    85:a1:bd:fc:d6:51:3c:c7:4d:15:be:9d:99:78:79:
                    b4:11:bf:a5:41:bf:07:b1:a5:32:ca:0c:a4:c7:56:
                    ff:19:aa:ff:ba:66:2e:48:66:3e:73:11:57:6b:dd:
                    ec:81:94:00:63:0f:26:99:6c:cd:b0:83:b3:5b:c1:
                    ba:4b:85:e6:46:8e:a1:82:62:56:e7:87:a3:6d:2a:
                    8f:e9:ff:2f:47:26:ea:89:54:3a:5b:6f:43:31:02:
                    af:cb:66:48:d9:4e:11:1c:bd:7a:3c:1a:f6:4f:4d:
                    0e:9e:79:08:de:4f:7d:9c:4c:46:7b:1a:85:20:89:
                    ee:00:bc:ef:78:9a:dc:2c:c2:5f:2e:f0:0b:d1:8b:
                    63:74:98:e4:b9:17:76:75:5d:a3:3d:a2:6f:0a:6c:
                    93:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:67:CD:DC:D0:2E:F0:32:0C:9E:7B:48:45:32:A3:D2:83:F7:7C
            X509v3 Authority Key Identifier:
                keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:10:eb:46:5c:27:2a:16:cd:fc:72:59:76:b7:fc:99:60:bf:
         7c:df:2b:f7:f1:bb:be:f1:a1:66:76:d5:6e:b3:75:56:3c:50:
         fd:19:73:91:c2:81:8d:41:28:b0:f4:30:13:b1:18:af:fb:11:
         d2:00:14:b5:88:15:67:06:05:c7:07:7e:18:79:98:4b:cd:f5:
         47:be:c7:15:e9:f2:e5:b0:51:26:a4:47:a0:7a:99:ad:d0:33:
         f3:5c:f9:79:cf:bb:fa:5d:f1:f5:8c:61:18:09:01:77:00:62:
         a6:d0:80:2d:9c:f2:68:d6:f3:85:89:84:87:84:05:a0:ce:b8:
         50:d2:6d:79:50:30:1b:a1:9f:63:f7:94:ef:0f:36:00:48:d5:
         ec:68:c2:be:75:4f:ce:2a:08:b5:7f:33:df:04:04:05:43:9e:
         3b:00:64:f7:a4:7c:72:c3:43:5b:e7:d4:5d:0d:22:91:c0:8b:
         ff:2f:22:3d:aa:3c:b9:37:a2:e3:1f:e6:ab:ed:c3:b4:6d:c5:
         4b:79:6c:ae:27:60:00:1e:7d:bc:3a:75:33:46:8a:39:e9:c8:
         20:12:9c:d0:a3:ea:6c:10:af:83:42:ba:2c:b7:ab:a8:04:2b:
         81:88:7d:e0:e0:87:f5:70:f2:0c:2a:9e:fe:97:3e:55:ab:cb:
         2d:16:a6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----