Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
File:                     Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft (raw, json)
Hash identifier:          g5ASdMraAgDl20uVon7gCMMSKR4IKFXmj4uJrFSxTS0=
Subject key identifier:   38:70:81:C2:7B:00:5B:FC:13:71:4B:67:24:60:1C:15:43:44:7E:31
Authority key identifier: 43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9
Certificate issuer:       /CN=4398f624d57f4613c0bf651161c756c316659ab9
Certificate serial:       01935689BF1FAAC0B19BB22F32B8A1379197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:28 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:28 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:28 +0000
Files and hashes:         1: Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl (hash: 2Mk7ucP7+9EAeTS589bTcmWfigwYjEdLoq4GwuDBkI8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:bf:1f:aa:c0:b1:9b:b2:2f:32:b8:a1:37:91:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4398f624d57f4613c0bf651161c756c316659ab9
        Validity
            Not Before: Nov 23 01:01:28 2024 GMT
            Not After : Nov 24 01:01:28 2024 GMT
        Subject: CN=387081c27b005bfc13714b6724601c1543447e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bc:df:17:00:cb:29:af:8b:24:81:73:d7:48:
                    34:93:cd:d3:3c:9c:0c:62:dc:5b:8d:f0:cb:2b:9d:
                    02:69:71:2e:f2:bb:21:af:f8:f9:a9:04:9e:8f:54:
                    74:7b:af:4a:42:de:a4:4b:a7:d0:bc:4b:81:6a:fe:
                    ae:b3:b8:de:94:6b:f6:fe:88:90:dd:2c:aa:9e:ee:
                    26:c3:62:97:54:3a:f5:74:2d:e6:ef:c9:98:58:76:
                    aa:57:03:e8:d4:fc:f4:67:7b:47:32:2e:90:80:4c:
                    d0:40:07:a0:93:99:67:8d:d7:a8:7f:c8:7d:32:cd:
                    0d:3e:ff:11:46:0f:07:0a:2c:23:f0:8e:5b:d3:4b:
                    8b:ec:ce:98:3f:77:26:f0:b5:0b:6f:bd:a2:9d:ca:
                    c4:a6:dc:35:77:4e:54:c4:98:01:30:00:8a:88:d9:
                    bc:6a:d2:21:86:aa:58:a0:1e:12:21:87:64:c6:13:
                    fd:61:95:b6:19:29:a6:17:ac:ad:05:4b:24:98:ad:
                    76:42:bf:88:60:a3:f4:1a:57:3c:58:b6:33:5e:7d:
                    7f:4a:aa:43:16:b0:a0:86:09:b9:41:93:41:ba:a6:
                    e5:f6:3e:13:54:4d:c0:8d:60:19:c1:fd:78:47:b6:
                    8e:57:a0:2f:fe:fd:79:d8:8d:4a:8c:dd:87:79:85:
                    13:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:70:81:C2:7B:00:5B:FC:13:71:4B:67:24:60:1C:15:43:44:7E:31
            X509v3 Authority Key Identifier:
                keyid:43:98:F6:24:D5:7F:46:13:C0:BF:65:11:61:C7:56:C3:16:65:9A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5j2JNV_RhPAv2URYcdWwxZlmrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d7c4a0-272e-4409-8d3b-6a79fee919eb/1/Q5j2JNV_RhPAv2URYcdWwxZlmrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:56:db:85:b8:22:17:85:01:98:c6:c0:75:1e:48:ee:f1:
         fe:d5:3c:74:e6:9c:7d:1e:c0:a1:39:1e:ab:9b:d0:c7:de:85:
         5e:94:47:fe:82:37:fa:44:a4:17:da:e9:11:ae:cd:43:03:2d:
         4b:92:a9:93:48:27:11:c7:c2:82:9a:0e:36:83:3f:07:99:20:
         f7:60:8a:36:66:cf:1a:13:53:dd:b1:26:c0:f1:86:2c:99:e6:
         fd:25:e2:26:47:c7:ec:c4:fc:41:fc:41:c0:6c:63:2e:51:a6:
         8c:df:bb:d0:64:67:db:43:13:f4:68:b4:20:bd:ca:3e:2a:41:
         c2:ec:64:ab:46:d5:2e:6e:18:a7:bc:6d:95:ba:4c:94:ba:69:
         3f:c5:e0:dd:31:f0:5d:42:24:d8:df:f4:68:af:f8:10:56:ad:
         74:85:9c:cb:76:43:6d:c5:61:fd:8a:c4:c8:52:80:03:d3:a2:
         92:d4:5b:a7:24:c0:6b:1a:fa:3c:28:55:aa:bc:ee:9a:f7:cc:
         5f:18:c8:b9:7d:6f:2a:13:f4:27:b0:65:f2:9a:fb:f0:23:40:
         f8:a4:f4:bb:e1:8d:f7:ff:88:13:dd:63:b9:ff:41:98:0c:c4:
         6f:c8:ca:1d:cc:0e:95:44:23:31:88:86:f1:9a:91:39:ad:ce:
         cf:ee:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----