Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
File:                     xhs9YopilpHrqSpzhD7UU_coejc.mft (raw, json)
Hash identifier:          1oNggPoOhwfxDBK2wQIuvIJMzlxNkZerPKEmHikDgy0=
Subject key identifier:   61:59:B8:B7:22:A4:13:8E:C6:9C:35:94:CF:6A:44:CD:83:E8:4D:D2
Authority key identifier: C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37
Certificate issuer:       /CN=c61b3d628a629691eba92a73843ed453f7287a37
Certificate serial:       01936B22136FCAE2EBF299B578356F18E962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
Manifest number:          1378
Signing time:             Wed 27 Nov 2024 01:00:15 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:15 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:15 +0000
Files and hashes:         1: xhs9YopilpHrqSpzhD7UU_coejc.crl (hash: UJ1mrbNmVjn2P7z17ZbBpuj848rVh5nNtmoUq6KkSu8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:13:6f:ca:e2:eb:f2:99:b5:78:35:6f:18:e9:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61b3d628a629691eba92a73843ed453f7287a37
        Validity
            Not Before: Nov 27 01:00:15 2024 GMT
            Not After : Nov 28 01:00:15 2024 GMT
        Subject: CN=6159b8b722a4138ec69c3594cf6a44cd83e84dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3b:a8:3d:ca:dd:32:1f:ac:8b:64:47:3b:20:
                    a1:22:12:68:39:3b:f9:14:7f:35:cf:c6:27:41:f8:
                    9e:ff:ca:b1:e2:c3:74:a3:ce:eb:49:bd:72:52:40:
                    05:29:d0:c6:af:2d:3a:82:bb:48:04:18:ce:ac:ac:
                    2e:28:0c:29:6d:2b:b8:a5:7a:d1:e4:86:73:d0:73:
                    97:58:b8:da:97:de:31:d1:57:91:b9:ca:7d:e9:7e:
                    a5:cf:7d:ce:b5:aa:11:5d:7d:81:d5:18:ec:e8:59:
                    29:e7:60:23:0a:82:11:53:77:7e:46:46:e2:3f:bf:
                    9b:ec:42:5d:22:f2:e0:98:7b:f7:82:57:6a:ff:28:
                    d6:c9:18:8d:18:3d:4e:e5:5c:66:92:d5:88:65:67:
                    c4:e4:29:cd:e0:c5:cb:4b:60:d2:3c:12:bc:17:5c:
                    1b:25:dc:fe:76:2a:e9:bb:ee:35:24:f8:53:b9:eb:
                    83:c3:08:07:a1:04:4a:da:f6:c4:f2:f4:2f:7b:fd:
                    c2:a5:13:18:f8:20:9b:1f:1a:60:db:bb:5b:27:15:
                    a3:76:54:df:e7:16:5c:b4:ef:dd:86:86:04:ea:27:
                    17:e4:0e:97:a7:48:bc:68:00:bc:52:5d:da:5e:a7:
                    18:eb:9c:9f:0a:9d:81:05:d7:68:56:6f:07:71:f9:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:59:B8:B7:22:A4:13:8E:C6:9C:35:94:CF:6A:44:CD:83:E8:4D:D2
            X509v3 Authority Key Identifier:
                keyid:C6:1B:3D:62:8A:62:96:91:EB:A9:2A:73:84:3E:D4:53:F7:28:7A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhs9YopilpHrqSpzhD7UU_coejc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a517eb-5d26-4468-91f2-7dcc4ed1cdbc/1/xhs9YopilpHrqSpzhD7UU_coejc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:53:4b:28:5c:8f:9f:b4:be:e1:61:89:6d:04:c5:60:c4:2e:
         d6:ea:f6:37:82:16:10:e0:01:b2:cd:87:52:f8:25:19:1b:7e:
         2b:62:9a:7b:ff:89:88:41:1a:c1:e6:99:35:98:9d:15:35:b3:
         11:e7:da:21:81:98:ff:db:6c:9e:5f:27:d3:d7:ec:38:47:8e:
         d5:61:31:da:d7:f3:0f:d5:4a:33:0e:03:de:a0:8d:5e:db:4c:
         de:3a:e1:63:75:42:c8:4e:4d:4d:6e:39:21:ae:e0:44:86:69:
         ec:07:47:e7:a3:5c:10:c5:9c:d3:1b:a0:07:73:11:2d:44:27:
         8a:65:c0:57:a7:15:a1:f0:32:52:73:c2:79:d1:d1:91:e7:46:
         cc:b1:28:bb:4b:bf:7a:eb:a7:7f:47:ab:5c:7e:17:2e:48:62:
         ae:d0:44:b0:d1:f1:d6:ee:f5:3f:2a:da:c8:50:11:d6:d7:25:
         b0:82:26:24:4a:d8:39:2f:93:be:89:53:16:b0:49:c5:09:79:
         b5:9b:f1:8d:40:fa:d6:99:ad:82:45:b0:96:21:3d:53:6b:b9:
         a5:a3:f6:8e:1f:bd:24:4b:c6:78:8c:69:5e:15:5d:b8:6b:d6:
         33:e1:d7:3c:d8:71:cb:a5:94:56:58:54:33:54:fe:fb:0c:34:
         32:dd:fa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----