Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
File:                     RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft (raw, json)
Hash identifier:          DtNbypSwRXG0z/t/eqP81W1pLDtUh0hIxYdMHVWK/qA=
Subject key identifier:   08:51:80:34:75:E3:77:FD:AC:16:4E:36:49:8B:75:11:9E:70:3E:0F
Authority key identifier: 44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
Certificate issuer:       /CN=44b437b31b50670384fa5d20d8924d611b91633e
Certificate serial:       01936B226A602707BF1F208E18915901B19F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
Manifest number:          0277
Signing time:             Wed 27 Nov 2024 01:00:37 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:37 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:37 +0000
Files and hashes:         1: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl (hash: uLSuZ4/EcHrU9L2ozvOBVN6rK/AFm1M6vj12oeLhSsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:6a:60:27:07:bf:1f:20:8e:18:91:59:01:b1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b437b31b50670384fa5d20d8924d611b91633e
        Validity
            Not Before: Nov 27 01:00:37 2024 GMT
            Not After : Nov 28 01:00:37 2024 GMT
        Subject: CN=0851803475e377fdac164e36498b75119e703e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8f:a1:cc:7d:19:ad:2e:cd:72:15:05:1e:16:
                    31:eb:6e:9e:14:e4:52:09:6c:6f:a8:df:2c:08:85:
                    5d:ef:f6:ce:4a:36:60:00:93:56:68:10:8e:ba:96:
                    dc:09:78:a3:7b:d1:b2:49:e6:7a:d2:5b:38:29:35:
                    46:3c:c7:57:24:bf:49:fd:a5:b2:56:fd:79:40:0c:
                    a1:f1:79:b2:eb:5d:cc:e9:a9:d3:b6:aa:4d:b2:e7:
                    56:16:e4:af:e0:bf:83:c7:28:25:c2:06:0d:f6:de:
                    1b:2d:29:25:0d:ed:5f:94:78:5c:14:84:b2:71:2c:
                    4f:ba:97:4d:35:5c:01:ea:3e:90:48:fa:f4:3b:27:
                    f8:e9:3f:67:c1:18:1e:17:e5:7d:f7:80:b5:06:28:
                    00:45:e3:d6:b4:b2:b1:b8:47:2e:c8:06:c9:64:36:
                    18:3e:8e:99:4f:34:d4:a5:23:f0:c3:be:14:75:c7:
                    05:30:85:4d:1a:fd:aa:d3:f7:8c:65:f6:09:4f:cb:
                    8a:3c:d8:b1:a7:1c:01:7f:d2:70:64:50:f6:c2:44:
                    bf:98:90:39:ab:67:53:8f:84:24:4f:02:99:55:39:
                    ac:37:4d:f1:ea:5d:45:f3:ee:bc:04:e1:95:45:d5:
                    3c:a3:0f:9e:50:dc:48:53:47:58:00:fe:83:4b:ca:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:51:80:34:75:E3:77:FD:AC:16:4E:36:49:8B:75:11:9E:70:3E:0F
            X509v3 Authority Key Identifier:
                keyid:44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2f:d7:1f:27:e2:2f:61:7a:37:dd:bc:ae:cf:20:1d:d8:09:
         f3:53:16:00:c9:c1:93:5f:93:7c:71:10:44:3c:66:fe:d8:5a:
         ec:51:33:10:4b:34:f5:5c:00:cc:3c:79:16:a9:bd:e7:8f:1e:
         79:60:36:d3:51:7e:d9:6f:94:d3:79:5d:01:f4:d2:b3:ea:14:
         7b:6c:25:7f:f1:f3:b5:c2:c9:c7:36:c4:6a:fc:84:39:5f:6e:
         10:2f:37:f0:2c:0b:a7:55:1f:39:59:ba:9f:f8:1c:98:47:09:
         7f:cc:28:3b:d1:bd:73:18:ef:6f:76:d8:a2:f6:0e:9a:41:71:
         45:7a:8d:62:86:fe:cd:fd:f8:69:3d:33:db:22:35:cb:f7:aa:
         29:5b:f5:c0:5f:27:ce:a0:45:3d:d0:e2:1d:b4:19:3e:ef:14:
         4b:80:f4:0a:32:31:f7:47:44:e8:5b:d6:c4:7f:72:9e:9c:c7:
         c5:6c:c0:1d:94:63:4e:a5:4c:d6:a1:38:cf:2e:bb:13:c3:cd:
         f9:ea:65:8f:96:0a:0c:16:47:71:d7:35:ca:87:8c:e1:c5:0d:
         f7:6c:40:94:f3:d6:04:f8:b7:a1:83:b9:3a:70:b6:14:17:ef:
         ad:bc:30:5c:c3:91:13:1a:71:b2:f5:ef:23:b7:0b:49:44:9c:
         cb:d4:5e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----