Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File:                     dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier:          q3FusCticwzK3KTaOy+ofjPYGjLkiwqqcUBYlaCbwxM=
Subject key identifier:   D2:9D:07:12:E4:14:D7:86:1D:CF:40:7E:A8:59:B4:A2:F4:AF:31:AD
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       019369D9A68DFD52CE04BE33B7F18B9F957D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number:          07A1
Signing time:             Tue 26 Nov 2024 19:01:31 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:31 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:31 +0000
Files and hashes:         1: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: Bm5WuhGBkW4J9JvXn7RfQ30OxIYvDHjLEirS7QRQNn0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:a6:8d:fd:52:ce:04:be:33:b7:f1:8b:9f:95:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Nov 26 19:01:31 2024 GMT
            Not After : Nov 27 19:01:31 2024 GMT
        Subject: CN=d29d0712e414d7861dcf407ea859b4a2f4af31ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:c1:16:63:6f:6b:99:e6:01:05:da:07:c2:
                    b5:73:b3:de:20:46:5d:b5:89:c1:55:6e:ed:ed:38:
                    64:e6:58:42:04:2b:59:2d:f7:f1:ae:7d:ec:33:ed:
                    21:31:10:a3:a8:14:31:7f:9a:85:34:ed:10:51:57:
                    e6:9f:ee:b2:6a:18:38:f4:7d:99:3b:f6:78:ef:39:
                    2c:88:cf:1c:4d:4b:d2:be:a8:56:2e:0c:41:c8:e3:
                    17:40:78:88:22:75:72:7a:c1:18:5f:76:63:04:ac:
                    82:15:a9:86:3b:f1:7c:98:ae:5f:99:47:2f:c7:35:
                    b7:a9:57:fa:6e:2a:19:af:98:fd:b4:49:77:68:f2:
                    55:00:8d:39:d1:79:f4:6d:de:e1:c4:77:d1:a1:a6:
                    b2:34:61:0a:d5:61:44:a8:35:6a:a5:7f:28:dc:2a:
                    ad:a8:6d:66:d4:81:10:b4:47:26:93:79:fa:45:15:
                    91:93:fe:cf:65:bd:45:70:1d:f1:34:13:d5:7d:bc:
                    2a:88:38:e4:7f:8d:f7:fb:e0:cb:51:52:25:21:4e:
                    4a:a5:1b:b7:9a:33:a9:29:b6:77:4f:3a:62:47:f4:
                    10:3e:cb:49:56:0f:ca:0e:8d:62:dd:70:c5:4d:02:
                    f6:d6:2a:fc:4e:e3:09:94:c6:44:8a:26:4d:fb:51:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9D:07:12:E4:14:D7:86:1D:CF:40:7E:A8:59:B4:A2:F4:AF:31:AD
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:b5:46:00:36:9f:85:48:f4:1f:96:59:66:60:4e:18:7e:29:
         03:d0:73:94:75:a2:89:f6:34:0d:1e:7d:fc:3c:6a:e4:ab:1b:
         31:17:66:b3:0d:30:f1:bb:b4:e4:f7:3e:c4:90:8f:03:76:8c:
         69:f5:2d:04:9c:28:1f:22:a6:cd:21:d3:40:ba:1b:29:5b:a8:
         17:67:42:c7:5f:80:34:75:66:07:f5:98:89:26:ee:c7:52:4f:
         1c:1d:f2:f4:c1:d1:f4:a8:f4:42:65:9c:4a:1d:3b:05:ad:cc:
         ea:bb:38:05:37:f6:fb:13:92:f4:c4:41:f7:23:22:5e:5e:6d:
         f3:37:1b:50:d5:9b:a5:ff:6b:69:1c:e9:89:25:f7:43:45:aa:
         2d:24:c9:59:8c:ae:14:01:18:9b:dc:63:3c:29:49:f3:92:6c:
         6e:2f:d0:b3:80:af:35:28:5b:45:91:55:16:12:69:c2:23:eb:
         20:58:48:46:e9:bb:8e:dd:a6:ff:ea:3b:74:6d:c9:87:ee:23:
         3b:59:45:89:97:7e:d4:2e:27:29:85:f5:25:ae:50:e8:89:88:
         8f:41:46:44:23:60:61:a3:2e:24:a4:47:50:3d:f6:0b:b5:cd:
         2f:fe:78:66:18:30:dd:8c:a5:a9:15:ed:bc:8a:9f:4f:ca:e9:
         f0:79:aa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----