Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
File:                     TTpxp39MqbpTb5hhKpxW1AwMO50.mft (raw, json)
Hash identifier:          X2Mcp1PYw7mYZWKlme2RWxBkAmK27emzSJzPSg4lnfQ=
Subject key identifier:   4D:73:A6:35:5B:7D:8A:00:F4:AD:34:CD:D7:3C:B6:1C:B7:6B:5B:85
Authority key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Certificate issuer:       /CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Certificate serial:       019369D8DEEF4C589BB1E660C72C3DCD2ADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:40 +0000
Files and hashes:         1: TTpxp39MqbpTb5hhKpxW1AwMO50.crl (hash: bc165EWMHwOqWxs803HILVGVXEA53gE6Vwf+wCehe90=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:de:ef:4c:58:9b:b1:e6:60:c7:2c:3d:cd:2a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
        Validity
            Not Before: Nov 26 19:00:40 2024 GMT
            Not After : Nov 27 19:00:40 2024 GMT
        Subject: CN=4d73a6355b7d8a00f4ad34cdd73cb61cb76b5b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:c8:73:5a:1d:a3:6c:a7:d4:4e:24:e5:90:
                    b1:22:93:55:b1:45:a8:32:dc:09:76:31:0e:9c:44:
                    7d:53:de:e4:75:2b:1e:cf:ae:e9:a4:09:b3:23:58:
                    9f:4f:82:11:4b:b7:65:51:fd:d5:3e:7a:54:c6:a2:
                    6e:7a:77:3a:f8:74:36:cd:54:1b:18:f0:d8:3c:82:
                    e8:3c:5d:02:d3:51:09:a7:63:0b:ff:f1:8e:f4:2a:
                    2a:6d:cf:20:5c:c6:b1:88:5b:6f:4d:79:20:04:20:
                    48:a6:4f:c5:53:0b:71:8a:c4:9c:de:2a:fe:df:e2:
                    5a:7d:b7:28:f8:ab:33:35:01:5c:8a:ad:3f:05:8e:
                    ee:60:1b:69:b2:d0:6f:42:12:9c:cd:55:a5:fd:1d:
                    18:0e:7e:25:b7:ff:ef:5c:5c:34:da:16:62:dc:52:
                    c9:fe:7e:09:e7:59:bd:6f:0d:6c:d4:7a:73:53:a8:
                    cc:40:a9:b7:43:d0:86:66:31:81:73:79:8e:61:9f:
                    60:6c:09:17:63:c7:0a:98:6b:f9:12:51:5d:67:e7:
                    a5:7a:a2:08:c2:f8:25:37:3e:81:a4:39:19:20:be:
                    fb:d8:d4:c9:02:9f:84:c4:44:b3:55:ee:bd:b4:2e:
                    69:39:12:78:3b:5a:52:de:43:01:04:e9:65:8f:a7:
                    41:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:73:A6:35:5B:7D:8A:00:F4:AD:34:CD:D7:3C:B6:1C:B7:6B:5B:85
            X509v3 Authority Key Identifier:
                keyid:4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:59:b4:79:57:f2:27:4e:e2:19:78:d3:53:b3:76:1d:17:cd:
         6a:ef:02:42:01:f1:d7:29:9c:4a:64:da:89:c6:24:60:7c:7e:
         c3:f3:5f:d8:40:8a:0c:27:0a:cf:41:c0:6a:bb:d7:6a:44:9a:
         39:3f:ff:9d:8d:6d:b0:d4:f9:a4:21:f6:92:2c:8f:61:ce:f4:
         0f:90:5f:01:11:4c:49:f3:ee:5f:b4:88:e3:03:6a:95:86:cf:
         28:2c:8a:7a:d1:d5:31:a6:80:3d:56:06:08:f4:55:cc:9c:78:
         28:6f:fd:46:ee:50:27:98:d2:64:c7:6e:1b:93:46:d9:d3:ed:
         d6:12:fd:68:23:2d:4c:1c:8e:d8:c6:05:7d:3b:47:e5:29:ea:
         af:cc:26:18:87:1e:fd:d3:ff:18:0c:b3:a2:23:fd:31:a2:2a:
         9d:9c:0c:7c:1d:ee:c0:ac:0e:35:e2:9b:19:24:48:be:78:cf:
         36:7b:c7:94:73:e9:2e:ee:5f:08:51:ee:7e:ea:3f:93:83:59:
         68:b7:5a:c8:d0:50:cb:84:02:1d:5b:c1:98:22:4d:5d:55:03:
         af:ce:ca:a8:2b:a9:e1:c4:60:40:c6:c1:2b:a3:36:4a:1d:f0:
         38:82:8d:b9:36:ca:13:4d:3d:d7:68:e2:b6:83:2d:d9:23:81:
         de:8c:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----