Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File:                     V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier:          Vig9wAiQVba19/nOZ9D3z7cDj/NX08t9gmA3jyVBC68=
Subject key identifier:   99:7C:DE:08:5F:59:DE:39:F9:25:AC:A8:46:C8:45:B1:90:FB:65:35
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer:       /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial:       019369DB19D1E8CDC8CC44F15528652F1204
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 19:03:06 +0000
Manifest this update:     Tue 26 Nov 2024 19:03:06 +0000
Manifest next update:     Wed 27 Nov 2024 19:03:06 +0000
Files and hashes:         1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: Yq8rqBI0AjFWcTMp4DzA0s2g+bFzEA8Dka2rF4k0Kq0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:db:19:d1:e8:cd:c8:cc:44:f1:55:28:65:2f:12:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
        Validity
            Not Before: Nov 26 19:03:06 2024 GMT
            Not After : Nov 27 19:03:06 2024 GMT
        Subject: CN=997cde085f59de39f925aca846c845b190fb6535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d1:c5:ac:7c:c3:ff:84:2c:e6:83:8b:90:61:
                    76:2b:fd:56:3c:53:27:18:3b:64:2e:74:32:ee:84:
                    0d:1a:f8:47:6d:b6:ac:bf:52:9d:5d:48:e8:86:c8:
                    0c:67:f6:7f:ef:57:00:6b:a2:a1:f2:f2:63:db:1e:
                    91:c3:bb:7b:0c:2b:0b:3b:dd:df:cb:5f:25:ee:7b:
                    cd:b8:26:e1:18:cd:e3:70:ff:73:13:7d:7b:54:07:
                    e6:50:a9:6e:da:46:16:49:0a:de:ec:f8:bc:48:8d:
                    ea:17:c1:aa:31:ae:1b:e9:8d:2e:63:ec:00:b3:7b:
                    54:a9:d3:bc:b3:3a:1c:1f:d3:b0:9e:3a:ae:4e:90:
                    70:4c:bd:ee:dd:0d:bf:a4:c7:d0:51:f2:3a:dd:ac:
                    7a:4d:1e:21:2d:f6:fc:b9:9b:15:f8:da:cc:31:73:
                    b4:b7:0c:92:9b:1d:a6:d1:9f:8b:3d:20:49:11:e7:
                    8e:f3:00:65:ea:2a:0c:f3:a9:ea:4b:f7:75:4d:f2:
                    02:7b:fd:a4:ee:40:61:8e:13:f3:80:d2:cb:2e:c7:
                    b8:a0:24:96:47:a5:d2:e3:5d:31:c6:bc:91:a5:0c:
                    f7:23:3b:85:b5:86:e1:15:b1:1a:36:b2:1c:f9:1f:
                    ed:de:2e:98:49:32:38:ec:25:b6:c9:77:b9:d0:97:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7C:DE:08:5F:59:DE:39:F9:25:AC:A8:46:C8:45:B1:90:FB:65:35
            X509v3 Authority Key Identifier:
                keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:93:a4:2d:95:5e:d2:e3:21:ee:69:d1:69:06:23:dc:2a:4c:
         c9:1a:5c:7b:69:77:ef:a3:5a:5e:ad:ea:73:7a:36:a2:12:82:
         e2:23:16:33:f2:b5:77:4d:e8:5b:95:23:19:8a:9c:eb:c1:8c:
         aa:64:40:77:2b:0e:2e:de:06:2e:19:b0:cb:8d:58:93:75:11:
         cf:e1:3a:11:bc:54:8c:18:32:4f:bf:ad:3e:47:12:df:38:b1:
         14:db:28:67:3c:95:08:65:02:77:ff:1b:91:06:58:df:9d:67:
         6a:52:17:81:c1:0a:75:a1:55:5c:cf:df:7e:95:5f:f7:be:8a:
         7f:52:35:6e:b1:db:eb:9c:32:e6:4a:11:aa:32:5a:96:d3:e2:
         1e:c5:ba:f3:72:92:57:87:fa:67:77:84:b5:e3:e3:74:42:68:
         89:e5:68:2e:db:fd:86:77:3f:3d:ac:2a:52:ed:a4:99:10:da:
         40:ae:0a:5e:cd:90:3a:e2:30:46:80:30:c4:f8:32:99:62:4b:
         f9:04:22:13:a8:e6:cb:6b:7a:74:cf:01:ba:fa:6d:fa:c5:ad:
         44:53:c2:ad:58:d6:9c:e7:31:bd:1f:b5:5e:42:26:e0:ed:73:
         9f:b9:f9:78:50:56:65:9e:a8:35:42:eb:25:fe:e5:99:8a:d9:
         9c:5f:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----