Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File:                     4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier:          Diek8GfXaGpkGpf614Wn91xbnDq5D6zz7VYeprI8kQk=
Subject key identifier:   9C:10:A8:D0:44:4E:F7:7E:80:DA:D2:64:9E:F6:BE:88:15:52:33:73
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer:       /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial:       019369DAE1779E525DCE5F6087E1FB182E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:02:52 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:52 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:52 +0000
Files and hashes:         1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: x1oO4rLMSOsFQ8FuNVyPGzCe4kEZvbfpFAoUd9zLuD4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:e1:77:9e:52:5d:ce:5f:60:87:e1:fb:18:2e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
        Validity
            Not Before: Nov 26 19:02:52 2024 GMT
            Not After : Nov 27 19:02:52 2024 GMT
        Subject: CN=9c10a8d0444ef77e80dad2649ef6be8815523373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:47:48:2b:33:5d:af:1b:89:e0:26:9f:32:
                    fb:e3:83:17:a6:a3:d4:31:c2:37:7d:71:9f:27:dc:
                    10:29:26:29:ac:f5:e7:b4:4c:e6:eb:a2:42:52:7c:
                    e7:4d:69:83:bf:71:14:be:8a:07:85:24:a3:f8:af:
                    ea:68:84:56:af:a2:17:7e:3e:d5:74:fb:17:0d:2e:
                    9c:91:88:10:21:da:eb:1b:66:c6:ac:a3:ee:53:36:
                    27:16:5c:0e:20:33:f4:15:d0:a1:fd:64:d7:9c:73:
                    30:77:d9:32:74:32:83:2b:35:04:09:7d:c6:a7:d0:
                    7a:77:44:c5:a6:6b:0c:81:44:3d:6b:08:9f:9e:28:
                    47:99:e4:d2:9a:e3:ab:9b:fe:f8:b9:85:a1:20:e5:
                    ed:56:32:45:a4:01:71:3c:d4:10:b4:7f:1e:0e:8e:
                    e5:e8:36:48:e4:dd:b3:bd:5f:bf:51:68:3c:b6:8b:
                    83:23:b4:92:83:21:fa:7a:1c:c8:9e:c1:1c:0f:82:
                    a2:b9:f4:06:43:fe:6d:bd:0b:ff:dd:bb:f3:ea:3a:
                    44:b7:1f:03:f8:db:85:c4:96:6f:20:94:70:4a:b9:
                    89:32:b5:e7:ee:d6:7e:dc:d9:fa:02:16:80:ec:b1:
                    5f:f5:63:08:4e:e0:ec:a4:5b:a0:af:c0:c4:e9:ee:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:10:A8:D0:44:4E:F7:7E:80:DA:D2:64:9E:F6:BE:88:15:52:33:73
            X509v3 Authority Key Identifier:
                keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8b:c4:fc:d5:08:9f:fa:b3:ec:d7:8d:94:84:f7:af:bd:a4:
         ac:fd:94:da:51:77:83:6b:a7:32:1b:5e:61:16:51:0d:88:1b:
         83:15:46:07:68:5b:10:81:fc:a3:18:76:b2:50:b5:83:85:57:
         cd:aa:37:d1:01:75:a7:76:5c:bd:86:cb:b1:c7:e1:9a:11:1a:
         3d:59:8b:a1:44:df:b4:da:df:5c:74:c3:4f:d1:e6:e2:69:0c:
         7e:28:c5:48:c4:b2:d3:23:1c:67:97:fb:28:0c:70:ff:1d:6c:
         57:f8:c5:19:87:26:d2:cc:25:5e:b6:f7:7c:17:1b:2b:49:8e:
         e9:d0:fe:ca:64:b8:96:cb:10:31:30:ff:24:2c:fb:99:b0:ff:
         79:ba:0f:67:b0:39:af:ae:d9:4c:5e:4f:85:e3:61:9d:ac:05:
         94:ce:fc:91:01:ec:bc:42:09:97:e6:f0:97:98:e8:46:65:39:
         15:0c:a2:d5:b8:ce:a1:2f:bc:39:48:ea:3a:ce:e3:44:0a:ad:
         e5:ef:7f:40:9d:6b:52:54:05:2c:20:c5:b3:ef:99:a4:33:25:
         66:be:d9:ac:27:8c:00:0b:59:23:26:32:41:02:4f:0e:4b:da:
         6c:ec:a1:2a:83:9f:92:70:77:98:aa:7e:85:e5:4a:c2:c6:33:
         17:c0:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----