Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File:                     QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier:          7yn0T8OJji/k/AStBbJoF1U0b0twBqcelY9BIqydXKE=
Subject key identifier:   54:23:22:2D:17:41:09:E1:F9:59:25:28:B0:D0:43:A5:7D:6E:8E:14
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer:       /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial:       019369DAD5EF2F7D2B90759C9F430092F0F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:02:49 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:49 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:49 +0000
Files and hashes:         1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: uVBrA5pDmvh0r8DJtTJbxM9pE/5YFWVY4pVrkdv5iJY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:d5:ef:2f:7d:2b:90:75:9c:9f:43:00:92:f0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
        Validity
            Not Before: Nov 26 19:02:49 2024 GMT
            Not After : Nov 27 19:02:49 2024 GMT
        Subject: CN=5423222d174109e1f9592528b0d043a57d6e8e14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:26:4a:c6:57:1c:1a:1f:b6:ee:49:ca:87:
                    84:d8:2d:77:5e:20:60:da:7e:f7:0e:e0:c0:66:5e:
                    21:0b:27:93:9d:3e:f2:86:d5:43:56:c1:89:a7:e4:
                    e5:5d:c8:f0:63:6a:b4:4e:88:f7:d9:2b:20:80:8e:
                    e8:1f:4b:81:60:af:fe:8e:0b:13:80:8f:5e:2f:4d:
                    02:0e:68:07:90:7a:65:3e:a9:ef:91:18:c9:d3:bc:
                    3b:a1:2e:b1:d9:81:df:e9:e9:07:4f:fa:77:f0:c8:
                    51:af:fa:53:62:82:7e:3a:35:25:0e:12:57:ae:cc:
                    d8:5e:a0:13:27:dd:80:73:f9:fa:c8:6b:c4:20:84:
                    ec:e7:86:47:cf:f5:8b:94:51:ed:81:93:81:42:57:
                    24:7e:52:b7:2e:9f:0b:2c:6d:fc:2b:ce:40:f9:ed:
                    cc:f7:ff:97:84:55:0f:67:66:25:0e:d7:80:f6:5c:
                    65:2b:3d:be:6c:9d:66:70:b2:b3:1e:76:66:e5:21:
                    ab:4f:f9:4e:6b:33:13:4b:d9:a0:90:e7:c9:50:2a:
                    a2:3e:66:af:e1:90:a1:a5:39:fd:03:69:fb:b6:39:
                    08:3f:5f:cb:3d:14:c9:32:92:b6:50:64:16:88:15:
                    5c:b4:d2:ae:fd:65:5d:a8:18:18:4e:6c:4b:9a:87:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:23:22:2D:17:41:09:E1:F9:59:25:28:B0:D0:43:A5:7D:6E:8E:14
            X509v3 Authority Key Identifier:
                keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:76:2b:de:24:42:2e:66:1b:08:ea:83:ce:a1:f9:f9:b6:4f:
         4b:5b:a9:9f:0a:ff:dd:f1:2f:de:25:0f:7e:d4:18:34:ac:b9:
         73:f8:5b:e6:88:26:8f:f8:8e:a4:03:f1:75:07:d1:22:b5:e9:
         38:ae:b8:37:e5:f4:23:76:b6:90:aa:5d:28:46:6a:60:3b:fd:
         85:e5:0c:f5:0f:19:13:6a:56:fa:99:9b:83:98:47:09:a5:52:
         2d:89:9a:27:de:a0:eb:0d:b9:d0:f7:4b:2f:0a:2f:d8:e0:e6:
         0d:28:c4:59:6f:5f:cb:a8:a7:e8:3a:96:6c:ed:d2:39:36:6d:
         08:f0:6c:08:e1:96:93:77:bb:12:cb:76:7e:c0:0a:0b:85:59:
         10:b2:73:94:e1:c2:49:69:14:d2:c6:dc:a9:bd:c8:ad:6a:74:
         67:56:79:c8:6e:3b:f7:33:63:d2:b8:33:51:10:db:c7:be:f7:
         63:b7:5f:74:a8:38:01:ad:53:98:4f:c0:3b:a1:cc:3b:f7:44:
         fe:be:f6:3e:de:6e:97:3e:ec:5b:8b:bb:c9:fa:6c:ab:a5:50:
         cf:17:06:58:a1:88:13:a6:4c:36:43:40:19:3e:ea:a0:65:ea:
         9a:47:da:59:26:94:1d:e2:53:e3:05:07:5b:ba:8a:9c:d7:e3:
         9c:9c:13:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----