Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
File:                     qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json)
Hash identifier:          Gd8yxkQIajDl2oqBgdQSrsF4VfH25nPE03ziqvMuBK8=
Subject key identifier:   B9:9C:3F:2D:D1:0A:48:F4:59:0C:17:90:A7:97:D5:1D:DA:75:70:63
Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
Certificate issuer:       /CN=a934e106be5386ed10675ee0de336dc77e200d59
Certificate serial:       019358094B47E6E732AAFE13567867602DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
Manifest number:          01C3
Signing time:             Sat 23 Nov 2024 08:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:24 +0000
Files and hashes:         1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: HQy1Rq3goc3Uvy7AK7RF01NGBUxG8p22SY45BpHeAtE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:4b:47:e6:e7:32:aa:fe:13:56:78:67:60:2d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59
        Validity
            Not Before: Nov 23 08:00:24 2024 GMT
            Not After : Nov 24 08:00:24 2024 GMT
        Subject: CN=b99c3f2dd10a48f4590c1790a797d51dda757063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a9:62:65:e6:55:d0:24:35:27:4c:e0:64:6e:
                    85:b1:78:a4:98:1b:56:5a:91:bf:51:42:60:6f:9a:
                    1e:fa:6b:4e:53:97:09:eb:89:b1:a9:4f:d5:af:cf:
                    93:bc:95:ac:18:2f:d3:f2:ae:ae:83:94:f3:2a:f2:
                    51:d7:ba:35:fd:d7:45:02:02:ff:9b:7c:64:70:1c:
                    46:e4:ff:70:1d:79:da:5b:cb:47:46:09:4d:51:c9:
                    eb:1c:c9:92:0f:4a:7c:a9:db:52:1a:1f:2a:26:13:
                    be:3d:c0:17:9f:12:46:9f:5c:c0:bc:c0:ef:5d:23:
                    b0:9d:ac:b3:c1:61:61:72:e3:5a:40:bd:3d:78:99:
                    e8:e2:50:da:7e:49:c6:74:87:f4:4f:f5:94:50:75:
                    66:eb:ef:55:2b:f8:3d:b6:8a:b3:1f:17:0c:ed:c6:
                    21:3d:9c:e9:ab:ab:99:61:2c:52:7a:45:be:da:b0:
                    45:62:c1:88:e7:72:fe:a9:56:5a:69:23:4a:da:65:
                    6a:54:31:fe:18:48:9b:7d:16:4b:dc:00:81:eb:92:
                    46:73:b0:67:44:93:14:4a:33:f5:a2:2f:c3:a4:d4:
                    73:4c:4f:dd:71:8f:8e:7d:0a:79:1e:d1:61:0f:70:
                    ec:30:90:81:40:8a:d8:5a:25:65:4c:98:74:61:24:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9C:3F:2D:D1:0A:48:F4:59:0C:17:90:A7:97:D5:1D:DA:75:70:63
            X509v3 Authority Key Identifier:
                keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:80:da:5c:4b:80:1c:65:01:62:df:a6:5a:a1:41:49:8c:82:
         c1:92:73:28:a1:4e:b2:62:87:06:91:14:4d:e6:cb:4f:1d:fe:
         d2:96:b0:68:b7:f9:7e:9a:5a:75:a9:f7:16:02:32:99:4e:11:
         98:54:a1:ac:5a:5d:b2:36:e9:09:97:77:a3:a5:04:bd:00:82:
         2e:85:ef:51:26:0e:18:ed:9a:e9:11:0a:bd:4f:e8:31:08:d1:
         c6:f5:bf:41:64:a6:9f:af:84:5c:b7:2a:84:92:5c:d0:a8:0e:
         58:d5:08:eb:d3:fe:2e:d0:22:66:65:d7:fb:82:3b:3b:57:ca:
         4c:9c:a1:6f:02:64:a5:5f:03:7a:00:f4:44:66:17:48:a4:93:
         fe:07:17:13:ec:08:0f:97:9e:97:36:53:0d:27:aa:2b:c2:45:
         ab:58:2b:5d:e1:04:c8:b7:c7:42:ab:fb:94:f0:b3:85:fc:b8:
         cb:4f:ec:cc:fb:e2:45:b2:4d:57:83:78:53:6a:51:25:8e:cf:
         70:67:cb:08:64:e5:dc:10:13:31:8b:17:c1:cf:7b:94:11:83:
         1f:51:3a:91:bd:cb:25:89:34:e7:b6:b9:84:2a:5e:17:49:98:
         46:5c:f0:7e:2c:fb:cd:a7:9d:b0:b1:f9:81:ae:40:1c:5d:e6:
         24:64:c5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----