Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.mft
File:                     QDxEw1yTwSM_BWMIwgNOcTDrmjc.mft (raw, json)
Hash identifier:          h87yB6Jdfk6fCow4fne8bRmwF0NLEyf7k4xRc+CsSYI=
Subject key identifier:   28:49:62:77:B3:77:4C:29:13:47:FE:AA:F8:0F:29:14:EB:47:12:F3
Authority key identifier: 40:3C:44:C3:5C:93:C1:23:3F:05:63:08:C2:03:4E:71:30:EB:9A:37
Certificate issuer:       /CN=403c44c35c93c1233f056308c2034e7130eb9a37
Certificate serial:       01936B22B1BBFEA06AFB5158015966725EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QDxEw1yTwSM_BWMIwgNOcTDrmjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.mft
Manifest number:          013A
Signing time:             Wed 27 Nov 2024 01:00:55 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:55 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:55 +0000
Files and hashes:         1: QDxEw1yTwSM_BWMIwgNOcTDrmjc.crl (hash: GgZIfOFnmo44dsLnHUXXzJIdKvy0gHEjmtfaLXWDbmw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QDxEw1yTwSM_BWMIwgNOcTDrmjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:b1:bb:fe:a0:6a:fb:51:58:01:59:66:72:5e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403c44c35c93c1233f056308c2034e7130eb9a37
        Validity
            Not Before: Nov 27 01:00:55 2024 GMT
            Not After : Nov 28 01:00:55 2024 GMT
        Subject: CN=28496277b3774c291347feaaf80f2914eb4712f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:43:f3:98:be:e2:f9:ec:65:54:c7:6f:34:93:
                    19:67:6c:92:dc:f6:0e:72:01:e5:5d:5e:b3:80:cd:
                    49:02:7a:10:95:58:c0:8b:4a:76:60:0b:11:3a:ca:
                    db:be:4a:bf:ff:ea:73:18:d2:5a:82:91:81:c8:48:
                    29:c4:07:bb:67:10:e3:42:ba:b9:44:79:99:cf:cf:
                    d2:91:91:16:bc:5c:df:c1:59:6b:23:26:b1:14:22:
                    d0:fd:d8:a7:61:4d:82:50:0c:ca:6a:ef:01:aa:23:
                    81:c5:78:50:95:55:6b:b9:7e:19:c4:a7:36:77:a3:
                    05:8c:d1:a8:30:70:07:af:b1:01:61:9e:99:6e:cb:
                    fb:58:85:36:b1:66:85:89:76:09:a3:31:08:0a:87:
                    c6:fc:94:b0:e8:43:b2:57:72:5d:47:02:37:7d:07:
                    30:3f:f5:0f:fd:68:a4:ae:da:b3:a0:4b:c0:5d:20:
                    9c:83:98:7c:f4:de:5a:6e:66:0d:de:a0:98:0d:ef:
                    f9:72:db:1e:77:34:de:e4:1d:06:e9:d7:85:ac:73:
                    3f:2f:10:23:6e:6d:12:9e:f5:de:49:20:0c:de:11:
                    e3:05:4d:42:f5:b5:7b:93:6f:e4:93:98:9a:fe:9c:
                    9a:eb:46:4e:03:8c:8a:e5:e7:78:fe:5c:4d:22:b0:
                    b2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:49:62:77:B3:77:4C:29:13:47:FE:AA:F8:0F:29:14:EB:47:12:F3
            X509v3 Authority Key Identifier:
                keyid:40:3C:44:C3:5C:93:C1:23:3F:05:63:08:C2:03:4E:71:30:EB:9A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QDxEw1yTwSM_BWMIwgNOcTDrmjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/198eca-b029-428c-b1c9-a04823cefc64/1/QDxEw1yTwSM_BWMIwgNOcTDrmjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:01:22:37:86:e7:4a:94:e8:ce:5b:b7:95:ee:48:86:95:
         09:fd:41:7d:b5:d7:90:b1:93:b4:cd:63:4f:0f:15:4d:eb:3a:
         77:44:60:2f:5a:18:73:c4:b8:a5:51:26:c7:b0:83:e9:15:73:
         9f:5c:a3:91:7c:1e:c3:56:5c:3a:6a:91:38:7d:b6:07:6d:71:
         ed:e0:b6:ef:99:7c:fb:8c:35:fd:51:3b:c2:df:f3:4f:bb:5b:
         12:e6:d4:c2:47:13:5d:ec:c9:15:48:75:99:9e:c2:95:22:7a:
         c6:58:42:3f:9a:7d:c5:2d:4a:d8:ca:f4:70:08:97:4d:92:09:
         37:9c:c1:13:f8:e1:20:3d:30:60:e6:86:8d:a8:83:15:01:0c:
         63:ae:5f:e9:94:d4:7e:ea:33:2c:ee:a1:43:58:a0:8d:ae:21:
         4c:f1:71:85:31:a4:67:48:c7:aa:82:60:23:55:ac:77:0e:3e:
         6e:f9:53:10:a3:c2:fd:19:84:b4:9b:7b:0e:b7:4e:30:53:b9:
         c5:62:8b:9d:c9:9e:24:85:dc:d7:38:8f:c6:e0:3d:7d:1e:b4:
         ad:1a:c9:06:2f:f8:8d:6e:0d:a4:50:69:10:a1:75:b2:7d:73:
         c6:98:65:cb:7b:78:26:37:74:41:ac:e1:b9:6c:42:a8:5a:b7:
         66:be:e6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----