Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
File:                     RX6_qZz102gBj6f-DBEjQfXTZcA.mft (raw, json)
Hash identifier:          v13EmT02M72YFBFL8ieCbry5YZTyVPIq0aqv6alqu/Y=
Subject key identifier:   C2:41:63:41:15:0B:6F:2C:1F:75:D0:AB:AF:01:AB:CE:FA:14:88:07
Authority key identifier: 45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0
Certificate issuer:       /CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
Certificate serial:       01936AB463A68F4E7E182D3F8CEF65D4DE8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
Manifest number:          0130
Signing time:             Tue 26 Nov 2024 23:00:26 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:26 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:26 +0000
Files and hashes:         1: RX6_qZz102gBj6f-DBEjQfXTZcA.crl (hash: FffkayibvpHLXBW7f/SiywGxzSCojdQDDLk4jAyUg/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:63:a6:8f:4e:7e:18:2d:3f:8c:ef:65:d4:de:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=457ebfa99cf5d368018fa7fe0c112341f5d365c0
        Validity
            Not Before: Nov 26 23:00:26 2024 GMT
            Not After : Nov 27 23:00:26 2024 GMT
        Subject: CN=c2416341150b6f2c1f75d0abaf01abcefa148807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:3a:f2:3c:ea:2c:e1:11:75:eb:12:6a:88:
                    65:20:39:5f:42:3e:33:98:fb:72:17:38:ed:9f:53:
                    52:d6:be:04:fd:ac:d1:5a:39:fa:af:82:d6:36:b6:
                    5d:24:da:21:39:1a:59:4f:91:96:c9:c3:b6:bc:18:
                    8f:87:12:05:8a:2e:4e:e1:21:a2:a8:12:c2:a6:bd:
                    ca:0e:74:1f:df:fc:2b:78:26:6b:44:db:78:b1:87:
                    4f:84:0f:67:8e:81:6f:90:6d:3f:a8:a4:5e:bd:fe:
                    36:84:fc:dc:fb:53:85:87:41:2a:51:85:43:01:81:
                    09:15:09:89:f5:ad:85:af:2f:8a:09:cb:0e:df:39:
                    9a:a8:00:68:b2:f2:4c:48:9d:e2:6e:69:e0:e1:9a:
                    7a:3a:28:bf:1f:a0:17:03:e9:ad:64:a4:c9:af:80:
                    22:cb:3e:c6:e9:75:ef:18:db:e7:5f:cd:b8:f2:1f:
                    7c:e0:89:da:cb:22:5f:9f:30:1d:73:e4:77:e6:90:
                    66:0c:3a:cd:ea:23:01:3f:77:78:32:46:b9:58:f4:
                    0e:67:38:49:33:bc:9f:4d:4c:b9:39:f0:0d:fa:4b:
                    3f:86:c4:72:90:34:cf:83:bc:9c:be:b2:04:23:f2:
                    b0:be:05:6b:a6:73:30:33:cd:c8:b6:d4:97:e5:33:
                    da:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:41:63:41:15:0B:6F:2C:1F:75:D0:AB:AF:01:AB:CE:FA:14:88:07
            X509v3 Authority Key Identifier:
                keyid:45:7E:BF:A9:9C:F5:D3:68:01:8F:A7:FE:0C:11:23:41:F5:D3:65:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RX6_qZz102gBj6f-DBEjQfXTZcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb159f-995c-4974-a764-3bcc52f94ca0/1/RX6_qZz102gBj6f-DBEjQfXTZcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:60:f4:21:80:51:77:a6:eb:10:37:df:ee:ee:14:db:44:16:
         33:6a:ac:de:00:6f:d3:96:ad:d2:7b:4f:a2:1d:7f:7b:d1:d5:
         49:44:b9:da:55:12:09:29:7d:39:ca:22:57:f0:8b:8c:06:a8:
         29:05:0f:8d:55:cd:e8:2d:0e:dd:dc:17:78:f7:ab:83:d8:db:
         18:1e:ae:c9:1f:38:4d:81:0c:8d:f0:b9:aa:aa:32:1a:a6:60:
         34:9c:59:20:1a:00:e8:53:7f:ee:a7:f1:5e:47:4c:6d:08:aa:
         22:9a:1b:26:96:43:92:8a:ae:ee:bb:33:5c:8f:2a:44:da:e3:
         2a:d5:12:ec:ca:de:d0:37:c8:f6:6c:09:91:33:25:35:d8:10:
         22:25:e4:ac:67:ad:b9:90:c4:a7:f9:18:64:04:f0:6d:50:a9:
         2c:3a:98:62:57:06:90:c7:08:cf:ac:40:05:87:57:40:da:a1:
         29:48:d8:64:d9:fc:85:50:25:ae:3c:90:a3:6d:ce:e6:90:67:
         d8:6c:d6:ff:5f:c7:a1:52:2d:66:77:25:cd:84:b1:f8:44:43:
         00:67:1a:d6:2f:19:86:e7:ba:d1:ea:45:24:2c:bd:60:75:7b:
         09:8c:03:6f:23:86:2e:b1:6d:4b:18:fa:f4:8b:0d:f5:fd:59:
         b9:01:9b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----