Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
File:                     iwjmq-L-QyImUc6Z780Sr2DmT1s.mft (raw, json)
Hash identifier:          RfuE6mzKyZUwJ0Ax/5OoiebflSXutPVuEuZb8OvydB4=
Subject key identifier:   C4:CF:75:AB:8A:0E:8C:36:87:50:A5:79:A9:C4:7F:D3:7A:AA:04:A2
Authority key identifier: 8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B
Certificate issuer:       /CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
Certificate serial:       019369DA67EF067DD8D5FADFB079C042C261
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
Manifest number:          0368
Signing time:             Tue 26 Nov 2024 19:02:21 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:21 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:21 +0000
Files and hashes:         1: iwjmq-L-QyImUc6Z780Sr2DmT1s.crl (hash: p2uGsVnEMSq2uLlCX18pR222Y8gy05+BH7i1Mlht984=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:67:ef:06:7d:d8:d5:fa:df:b0:79:c0:42:c2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b08e6abe2fe43222651ce99efcd12af60e64f5b
        Validity
            Not Before: Nov 26 19:02:21 2024 GMT
            Not After : Nov 27 19:02:21 2024 GMT
        Subject: CN=c4cf75ab8a0e8c368750a579a9c47fd37aaa04a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:6e:bb:13:47:a7:e2:64:c0:7e:6d:7c:f2:
                    b1:39:95:0f:67:f0:e1:c3:54:ba:f8:07:f1:af:8b:
                    49:aa:de:6d:da:f1:ad:39:df:8a:a4:29:12:e1:7f:
                    04:9a:b7:18:9e:99:cd:63:9c:96:cc:a1:07:6e:8c:
                    b3:3b:86:95:ef:bc:84:e0:23:e3:99:5d:e7:0e:86:
                    79:b2:19:01:c1:0f:f7:3b:53:ee:69:a7:33:7f:a5:
                    53:7f:47:de:70:e9:6a:4a:b7:88:24:af:ea:28:1b:
                    8d:ff:aa:3e:45:de:16:a7:da:fe:33:7a:05:5d:84:
                    62:58:d4:33:bb:0a:f6:58:7a:f8:23:85:8a:0f:7d:
                    36:3a:02:82:9c:8b:33:b8:43:ff:df:66:29:e9:2d:
                    25:25:5b:d5:c4:57:11:a7:55:6e:69:e8:1d:01:36:
                    e5:4f:09:71:03:26:d4:ba:b7:b0:5f:b9:8c:4d:a3:
                    77:f4:5f:46:46:62:83:ae:9e:93:37:b6:14:a8:14:
                    00:6e:89:11:38:ce:f5:ee:4f:ca:02:02:6a:7a:29:
                    ba:21:ad:d9:09:27:2b:24:d7:8a:34:ed:02:ea:9c:
                    a1:ea:f9:87:ae:f1:5d:19:03:07:cd:c2:42:9b:97:
                    68:ef:6e:52:99:08:22:d4:8b:a4:9b:92:dc:9f:7b:
                    54:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CF:75:AB:8A:0E:8C:36:87:50:A5:79:A9:C4:7F:D3:7A:AA:04:A2
            X509v3 Authority Key Identifier:
                keyid:8B:08:E6:AB:E2:FE:43:22:26:51:CE:99:EF:CD:12:AF:60:E6:4F:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwjmq-L-QyImUc6Z780Sr2DmT1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/6756a4-40de-42d5-b474-cb6b80c9e3f8/1/iwjmq-L-QyImUc6Z780Sr2DmT1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:2b:5e:c0:bb:14:b2:9d:fb:ce:10:ec:14:c9:c7:11:de:55:
         ff:35:f1:16:f9:25:ed:ec:5a:6d:ee:47:bb:5d:fd:19:78:cb:
         42:5a:fe:07:c0:c5:d3:36:ec:2b:b7:6d:92:ef:c4:1f:11:b3:
         10:66:26:0d:fc:04:c9:9e:61:5c:c4:3c:d7:bc:86:a9:ca:ab:
         78:65:f2:20:0c:c3:c0:e5:f7:44:a0:37:90:ca:e9:33:90:1a:
         e3:f0:e0:3a:aa:da:c6:6c:07:9b:0b:43:5e:c8:10:6c:89:10:
         7f:39:3d:0f:ac:44:67:b9:4c:04:33:d4:2b:40:82:84:fe:6d:
         f7:64:98:6a:35:c2:6d:a8:3b:69:ad:4a:33:05:15:27:b2:e1:
         ac:ea:b6:9c:97:75:5c:84:07:1b:a3:52:c0:9c:5a:0f:0d:70:
         ca:a2:8c:9e:4b:66:e1:35:f5:07:fa:2e:ab:ae:23:16:d2:5c:
         5a:94:a1:96:dc:70:f1:0c:bd:16:3a:eb:3b:16:97:e4:1f:0b:
         d0:51:ce:4e:0b:9d:97:15:2e:f1:b1:5a:78:f4:c3:e5:c9:7e:
         a3:50:85:0e:88:59:f7:cf:45:bb:e7:1a:84:5b:5d:d9:1e:ce:
         f3:e1:37:fe:21:0e:db:fa:19:09:ad:84:ad:06:a2:cc:1d:96:
         99:5b:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----