Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
File:                     GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json)
Hash identifier:          HEVHw3o2gmX+MwwVCWgmJ4yXFto5NDDFDUYATtQn3aA=
Subject key identifier:   3C:7D:AE:90:89:BA:6E:C1:27:22:86:82:88:78:4B:BD:3B:2E:C1:8A
Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
Certificate issuer:       /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Certificate serial:       019356897F0E7AE34B632E2E8BB3FB0A4DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
Manifest number:          0EB5
Signing time:             Sat 23 Nov 2024 01:01:11 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:11 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:11 +0000
Files and hashes:         1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: YmMhij84K8atsY1xGUDufA5SFJwSZ1GSfiqc8YL8ruI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:7f:0e:7a:e3:4b:63:2e:2e:8b:b3:fb:0a:4d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
        Validity
            Not Before: Nov 23 01:01:11 2024 GMT
            Not After : Nov 24 01:01:11 2024 GMT
        Subject: CN=3c7dae9089ba6ec12722868288784bbd3b2ec18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:e3:73:89:70:06:ec:ab:fc:4f:5a:4c:03:
                    ca:e6:0c:57:33:c4:20:eb:4a:6a:6c:5d:ed:02:fd:
                    9d:35:ad:84:99:c1:2b:08:6b:a8:c3:14:19:20:ab:
                    38:18:26:0e:3f:b0:7c:8c:f4:ed:5c:4b:ef:e1:5b:
                    93:3b:71:19:16:34:d9:e2:e7:00:4c:96:e4:00:90:
                    42:06:c8:f8:bd:92:7b:aa:59:e9:12:3b:ed:14:0b:
                    b8:d3:88:dc:5c:89:b2:fe:e7:21:43:48:be:60:78:
                    03:bd:a4:e5:fe:28:31:b5:93:68:96:8f:a8:75:13:
                    50:f7:08:74:f0:1e:d6:e1:8e:2e:b5:dc:da:8c:49:
                    bf:f0:43:25:70:67:c9:b2:43:1e:cf:2f:ad:36:e6:
                    63:ec:74:61:cf:15:c9:e4:47:77:27:1d:44:bd:5a:
                    df:2a:db:f9:c9:69:7b:24:ba:24:57:b9:c0:2b:cb:
                    bb:bf:75:2d:da:0a:2f:2b:8e:b4:1d:55:cb:b4:1a:
                    d7:2b:5d:41:0d:61:11:8f:a2:59:d2:3e:08:23:06:
                    3e:07:a9:85:aa:cd:38:40:07:a3:5f:ea:6f:e1:68:
                    ad:f1:27:ba:d6:ce:b3:21:58:05:41:72:64:ee:cd:
                    36:3b:c1:fd:65:5d:91:a4:12:1d:70:99:f1:ec:75:
                    fd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7D:AE:90:89:BA:6E:C1:27:22:86:82:88:78:4B:BD:3B:2E:C1:8A
            X509v3 Authority Key Identifier:
                keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:18:b8:80:90:01:e9:5c:3b:c5:60:df:d3:c8:79:d9:4d:c5:
         2f:96:fd:9e:54:0a:69:f2:6f:1d:86:76:fc:a8:9a:f9:6d:94:
         43:da:6f:f8:eb:6d:65:11:86:3d:4e:02:c6:e3:d5:19:13:5c:
         91:5a:ff:9c:2a:6b:94:86:da:2a:2b:f6:86:a1:9b:d9:fe:f3:
         01:83:64:aa:7b:e2:70:99:c0:91:da:13:f4:c8:9d:92:38:ae:
         33:46:74:16:59:f1:9d:59:59:3a:ca:1e:53:8f:75:05:81:46:
         21:d0:0a:a1:1c:9c:1d:cf:15:59:b4:74:08:ed:ad:ba:ed:85:
         37:00:d6:ce:6a:ae:0e:90:be:3d:39:33:ed:99:7e:31:11:f6:
         ec:d8:fb:71:14:d8:40:eb:68:99:c7:53:e9:7a:f5:61:c2:d9:
         34:cc:e5:3a:ac:68:44:54:88:d8:3b:27:03:4c:0b:29:b7:a5:
         2e:a9:e0:e6:1d:be:41:f9:2a:9f:5f:e8:4b:e1:71:36:fa:55:
         83:ad:29:15:51:ac:72:63:d8:59:ea:60:ab:4e:45:ee:87:53:
         7d:9d:3b:e6:f2:b6:3e:c5:a3:37:fa:eb:04:1b:90:88:ec:4b:
         15:db:2d:03:17:df:3a:1a:02:a3:56:1b:a0:a8:28:78:ce:6e:
         3f:14:4b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----