Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
File:                     3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft (raw, json)
Hash identifier:          ZrcDeT99kgoVwYZeziuTNEnWka4QTP9pU2IxXN8JHxY=
Subject key identifier:   71:32:C0:CD:23:95:99:9D:49:8C:28:9E:56:A0:20:18:7B:BE:D3:6B
Authority key identifier: DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D
Certificate issuer:       /CN=dd70c5f09b62683292fd9109e694713590281f8d
Certificate serial:       01936A7D9BD694460BAD800444AFA1A6E2ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 22:00:36 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:36 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:36 +0000
Files and hashes:         1: 3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl (hash: YePY6o++XbtoOIPP1WcWfS4QUJWmWrdDJ6ZM7cNsCmU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:9b:d6:94:46:0b:ad:80:04:44:af:a1:a6:e2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd70c5f09b62683292fd9109e694713590281f8d
        Validity
            Not Before: Nov 26 22:00:36 2024 GMT
            Not After : Nov 27 22:00:36 2024 GMT
        Subject: CN=7132c0cd2395999d498c289e56a020187bbed36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d6:23:9e:c9:f8:df:d6:76:db:9b:7f:7c:15:
                    aa:87:0a:ed:ea:e6:23:62:54:9a:d4:f0:cc:60:1f:
                    61:01:7f:f4:97:6a:46:3b:0d:63:15:f7:cc:9e:a8:
                    dd:a8:80:11:42:57:c1:42:73:95:05:df:45:f1:94:
                    a5:18:61:2b:54:83:96:f7:6b:2e:41:25:36:b2:3e:
                    49:70:37:15:a0:6c:31:a0:b5:ba:ad:17:fc:b2:32:
                    61:26:df:16:63:2f:75:ad:bd:6b:34:20:e0:84:2d:
                    df:1d:fa:75:7a:3d:ee:af:5e:f8:0a:3b:60:70:48:
                    92:41:29:03:9f:62:b3:54:72:14:59:ea:e4:c2:58:
                    c9:40:ea:b8:83:8e:15:82:50:4c:22:6e:c3:a9:20:
                    c1:a7:51:46:83:f8:76:c6:e5:8f:9d:0b:8a:8f:95:
                    01:74:d7:f0:c1:68:c5:a1:1b:f0:4d:00:03:4c:e0:
                    fe:f5:56:92:0c:7f:73:d1:ce:6d:44:9f:a6:fa:c9:
                    53:53:1c:97:8f:a5:4a:a9:78:48:0b:1b:6c:ac:9f:
                    77:14:bd:d2:78:a3:ba:ef:07:ea:89:13:4f:ef:66:
                    c0:9e:53:58:89:eb:9c:99:5c:67:84:a6:60:ef:b2:
                    dd:3c:47:56:81:4a:eb:30:7d:9b:4f:ba:32:69:e1:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:32:C0:CD:23:95:99:9D:49:8C:28:9E:56:A0:20:18:7B:BE:D3:6B
            X509v3 Authority Key Identifier:
                keyid:DD:70:C5:F0:9B:62:68:32:92:FD:91:09:E6:94:71:35:90:28:1F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a67557-d89a-4ef1-bd63-a7fcab9aa7aa/1/3XDF8JtiaDKS_ZEJ5pRxNZAoH40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:31:1d:26:48:be:13:bd:8d:e9:92:af:ef:22:1f:e0:e0:04:
         f0:f4:3f:88:97:38:5d:d8:b5:f7:16:68:1d:a9:ea:0c:14:22:
         49:e2:a7:ae:fc:d7:39:88:75:8a:69:23:06:6a:2c:73:54:dd:
         e3:00:f9:71:a5:5d:9c:bc:59:60:f5:dc:77:e4:a0:64:98:0a:
         d0:03:fc:57:f5:36:ef:0b:0a:bd:a4:9c:61:ef:52:33:82:4b:
         b2:47:a0:81:c0:b7:5c:63:31:ec:a2:72:ff:8f:aa:68:ee:a7:
         f8:55:b4:de:e3:25:3c:5e:97:1e:b1:83:de:89:27:b1:5a:84:
         28:de:1f:aa:24:cd:eb:51:e0:2e:4a:1e:3a:a7:58:a5:95:18:
         7f:b0:a3:e1:15:ba:6d:4e:0a:60:c6:0d:88:49:6c:e4:c7:fd:
         01:7d:0b:a3:e1:43:5f:05:37:18:7e:f5:7b:09:e4:19:f7:7e:
         22:c6:23:98:0c:23:1f:65:2f:3b:d0:15:fd:a4:f7:a8:55:0b:
         fe:4a:dc:e6:8d:f1:a1:90:90:0f:16:fe:90:0e:ed:46:69:88:
         51:5f:4e:49:71:d0:9f:3e:ed:c3:de:b7:b2:7c:a2:11:04:90:
         f1:56:07:1e:e6:ca:23:be:c3:94:c0:5e:51:a1:e7:4e:89:22:
         a9:ac:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----