Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
File:                     3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft (raw, json)
Hash identifier:          jKENrx6TkElAL4T2w496lMfPQelM/KuOr7LAP0dS04o=
Subject key identifier:   48:98:79:29:1F:66:6A:07:F3:18:10:CF:F4:EC:F9:56:2F:B1:F6:4E
Authority key identifier: DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3
Certificate issuer:       /CN=ddc0167406441ea16c47406d0522b5c6630abcb3
Certificate serial:       01936A7D83DDC982B1EDFBE0C6273EA1C3E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
Manifest number:          0F73
Signing time:             Tue 26 Nov 2024 22:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:30 +0000
Files and hashes:         1: 3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl (hash: EZttd10y/u16P7pGUokRZY+BIluIlp8/RszONLh7Cww=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:83:dd:c9:82:b1:ed:fb:e0:c6:27:3e:a1:c3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc0167406441ea16c47406d0522b5c6630abcb3
        Validity
            Not Before: Nov 26 22:00:30 2024 GMT
            Not After : Nov 27 22:00:30 2024 GMT
        Subject: CN=489879291f666a07f31810cff4ecf9562fb1f64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:39:2c:cb:ca:a8:fc:c2:eb:70:23:8e:ca:8e:
                    1e:4c:90:fe:f3:5f:1b:eb:21:b8:f6:a4:0a:b9:fc:
                    61:b0:bc:2d:29:d6:40:11:18:89:e8:cb:bf:e7:27:
                    44:aa:a8:c2:28:37:02:e7:aa:2c:3a:23:18:f9:3f:
                    42:8e:20:98:2b:88:95:cd:2e:db:0e:7c:b1:f3:fa:
                    bd:c6:62:f1:05:11:e1:de:57:d9:d2:b3:fb:92:e0:
                    d7:58:25:c4:87:e8:6a:1c:6e:76:90:b7:46:9d:73:
                    29:6a:f8:cf:a3:b0:6e:10:ed:e7:17:10:bb:bd:ad:
                    8e:ba:82:41:68:24:ca:99:99:d4:22:d5:63:b7:c4:
                    d3:ff:00:5e:c1:55:38:76:2e:c2:90:d0:a4:64:b5:
                    ba:9f:07:24:7a:1e:03:cc:7e:2f:a1:52:a3:7c:41:
                    88:2c:c6:fc:ad:f1:3a:69:93:7d:89:cd:2f:df:7d:
                    96:46:17:26:2f:b4:19:e3:e9:5a:5e:ca:e0:7f:32:
                    9a:c9:18:3e:b5:50:fa:5f:77:ef:63:f0:c0:08:1c:
                    26:04:cd:76:cc:48:95:6e:d4:d4:a2:8a:99:ad:23:
                    a5:02:53:04:f4:33:f1:e9:d6:4d:3a:84:d8:e6:7d:
                    e0:47:a3:bf:fc:a4:37:64:83:9f:97:b1:ea:a2:d2:
                    03:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:98:79:29:1F:66:6A:07:F3:18:10:CF:F4:EC:F9:56:2F:B1:F6:4E
            X509v3 Authority Key Identifier:
                keyid:DD:C0:16:74:06:44:1E:A1:6C:47:40:6D:05:22:B5:C6:63:0A:BC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cAWdAZEHqFsR0BtBSK1xmMKvLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c607b7-187b-4545-b614-3d9aedac2b33/1/3cAWdAZEHqFsR0BtBSK1xmMKvLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:5b:df:80:85:cc:d5:38:ad:32:a3:63:93:56:1a:8d:09:
         fe:64:e5:41:1a:6a:b3:e9:98:26:eb:67:65:64:fa:f4:51:ec:
         de:dc:37:10:35:57:ea:0c:b4:49:6b:c2:22:54:6a:c6:56:9d:
         57:a4:d9:de:b1:6a:c4:d6:1d:3e:78:fe:df:ca:38:89:06:03:
         fb:18:b8:b3:fc:c2:2f:87:a1:e0:52:b4:86:13:0a:3a:b6:9e:
         28:57:30:0d:78:bf:87:2f:8d:2c:80:81:f8:f9:0d:44:ea:57:
         d6:9f:f8:e1:0a:ae:0a:50:62:93:06:7d:10:62:45:0b:6c:10:
         dc:83:e5:9b:45:f3:26:e7:fe:33:15:e9:32:d6:8d:75:0f:c2:
         ca:45:a8:bb:9c:a0:48:88:13:b3:94:21:50:d2:ff:ff:ba:11:
         94:8d:1c:4e:38:4e:e3:c9:f8:ac:f1:59:88:ff:d8:d2:6d:f1:
         e7:73:4a:86:e5:9e:9c:2b:eb:2d:80:b6:dd:1c:4a:d7:3e:da:
         d5:4e:6b:3b:73:bf:f3:ab:2d:4b:92:5d:80:81:89:11:e0:14:
         81:51:69:bb:be:74:99:2e:e2:4d:2f:b6:f2:58:31:87:7c:46:
         1c:07:b5:2b:00:1e:10:14:d0:44:b1:6c:a5:3a:79:b4:22:50:
         b3:23:8c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----