Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
File:                     1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json)
Hash identifier:          d2HUHttW/Mxub+ccuB5sADddOCPaYJ0r++qB06buiOo=
Subject key identifier:   06:1C:84:A5:D6:B2:D7:C5:68:11:60:F3:5A:5F:D1:00:E0:C2:17:EF
Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
Certificate issuer:       /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Certificate serial:       019369345114EAED739B041D19D19AB15180
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 16:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 16:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 16:00:56 +0000
Files and hashes:         1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: 0OkFw64BgaZXeCeYzf1kl5g2Y7s8Y1s8yon7hDQLAt0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:34:51:14:ea:ed:73:9b:04:1d:19:d1:9a:b1:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
        Validity
            Not Before: Nov 26 16:00:56 2024 GMT
            Not After : Nov 27 16:00:56 2024 GMT
        Subject: CN=061c84a5d6b2d7c5681160f35a5fd100e0c217ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:34:42:d0:a1:3d:84:94:04:34:e3:34:ef:
                    50:4f:76:75:c9:73:e1:27:6e:52:9a:7c:7a:9c:45:
                    89:a5:f9:44:02:38:bc:64:75:6c:75:0e:08:a7:56:
                    8a:c3:39:b6:c9:95:89:b9:f7:36:a5:55:3f:1f:66:
                    d0:23:8d:3a:ce:d7:b1:e1:ef:f4:2c:5d:90:aa:2d:
                    01:31:a9:bd:3e:d3:72:e1:75:6c:6f:2a:03:19:38:
                    11:ec:f6:57:eb:4e:0d:b1:19:6d:3f:08:d8:d3:40:
                    72:fc:2d:86:be:0b:72:a1:b4:e7:af:68:4f:86:b0:
                    a1:fd:bc:fb:93:49:b4:c1:1a:ea:46:84:96:a1:84:
                    b4:49:ea:e1:be:f3:0f:e2:07:26:bd:bc:f1:f0:0b:
                    a4:e5:e5:8b:60:26:3e:72:d7:18:3f:95:20:db:7d:
                    82:d2:27:2f:6a:a4:b0:86:32:25:84:f4:51:9d:f4:
                    8f:f1:bc:84:ae:6e:09:04:a6:e0:7b:8a:cc:82:04:
                    01:54:a6:5c:e2:39:d2:c0:2c:50:c8:a9:e2:b9:c9:
                    25:02:c5:26:47:31:98:3d:2e:68:b6:10:0d:f3:cc:
                    34:36:52:58:57:b3:74:0d:9f:b7:a4:17:d7:42:06:
                    df:bd:be:bb:d3:f0:e3:40:0d:38:2a:4d:6b:0e:94:
                    91:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1C:84:A5:D6:B2:D7:C5:68:11:60:F3:5A:5F:D1:00:E0:C2:17:EF
            X509v3 Authority Key Identifier:
                keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:93:1f:db:0f:c8:43:f7:aa:0f:8a:0a:a9:65:c6:18:6c:
         ab:05:4b:02:b0:ec:28:9b:b2:22:ee:95:49:26:54:b0:52:f5:
         69:4b:b3:28:b9:93:b1:38:d6:d0:c3:fb:6c:77:bf:41:f2:10:
         53:60:8f:68:03:bd:a1:1c:9a:e2:4d:a9:dd:01:d8:44:4c:47:
         c3:f2:0e:1a:52:17:cd:f8:af:a7:37:fe:ad:dd:63:7f:e2:b8:
         30:fa:59:80:16:08:df:0f:a1:aa:6c:51:c3:28:91:06:e3:75:
         11:47:47:c4:9b:7e:6f:6b:f9:e8:89:7c:69:cf:f7:be:55:c8:
         e1:d8:3b:16:de:c6:d2:99:26:c5:18:25:5d:0f:28:5f:a4:8a:
         25:94:f9:9e:97:20:82:71:98:32:db:e0:81:9f:5c:e8:c3:3e:
         25:38:b1:6e:c8:df:5d:1a:41:78:6e:fc:a1:aa:d5:94:3f:72:
         1e:14:92:23:13:d4:5a:f0:95:45:50:25:f5:2a:22:06:0f:eb:
         e0:ab:47:75:1b:b1:a0:2b:66:9b:98:38:f5:06:fb:c2:97:b3:
         49:56:23:ea:5f:a7:3b:15:34:eb:9b:41:4a:20:a7:9d:72:f3:
         6a:8f:5a:9a:a1:5f:55:50:9a:97:91:b9:70:4e:2e:72:78:30:
         0b:76:85:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----