Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
File:                     q8Legg4C88P4bluMnEndxJMlEj8.mft (raw, json)
Hash identifier:          jGOqjP0Uk/LbrYsQxz94Lpl6KfIE0eoIC2yk7EAWHtI=
Subject key identifier:   7A:09:34:EF:7B:0D:2B:52:98:10:8F:5F:F6:5C:09:D5:11:3B:11:2B
Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F
Certificate issuer:       /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
Certificate serial:       019369D9CC4798582B29D3B60DE6ACC38AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:01:41 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:41 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:41 +0000
Files and hashes:         1: q8Legg4C88P4bluMnEndxJMlEj8.crl (hash: OaJ4GodFI2tvliB3lRFKgGy6oBM0iNz15kJds0WWHn4=)
                          2: uQ84OjfWymLhhXSjPJE0HdM5Edo.roa (hash: BKcmoZ4tD4ick2qhMB3PZ78y5jEeGU8XFql3VZxR6U8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:cc:47:98:58:2b:29:d3:b6:0d:e6:ac:c3:8a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f
        Validity
            Not Before: Nov 26 19:01:41 2024 GMT
            Not After : Nov 27 19:01:41 2024 GMT
        Subject: CN=7a0934ef7b0d2b5298108f5ff65c09d5113b112b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f6:e6:04:5e:52:65:df:0f:c5:05:d4:1b:b3:
                    ac:fd:46:d5:15:86:38:f6:81:c1:60:f5:52:d9:0e:
                    3e:4d:31:f1:48:48:f4:8c:22:9e:54:7c:5d:c4:64:
                    54:e6:51:65:5a:72:75:bc:79:51:58:c2:64:ec:5c:
                    5c:30:8a:f1:32:47:68:23:c7:24:a1:3c:90:aa:5f:
                    c7:8f:b7:a7:06:f5:61:df:25:68:40:51:ba:2d:6c:
                    42:79:61:0a:09:bf:3b:74:19:5d:0d:4b:4e:bf:03:
                    9f:f2:95:e0:a7:94:71:84:b7:70:7c:5a:50:1a:99:
                    9b:cb:da:71:4b:3f:b6:73:45:83:17:54:ac:16:31:
                    70:4c:0f:f0:df:b8:09:78:de:ee:75:cb:15:e8:0f:
                    0d:9c:fa:cb:63:5b:ea:c5:28:03:4a:66:19:3c:8f:
                    99:6f:ca:43:3f:c2:fb:e0:dc:11:e7:a7:2f:90:bb:
                    72:a6:b3:6e:f9:e7:cf:7d:49:3b:72:7e:65:9b:66:
                    d0:0f:7c:86:c6:d6:ad:d0:5b:d4:e2:12:cf:9d:65:
                    4d:a5:2b:56:da:c7:bf:20:78:b7:c1:90:02:19:59:
                    24:2e:ec:cc:a7:fd:aa:69:3e:76:73:e3:43:d7:a3:
                    ae:7a:67:39:14:ae:34:20:8e:dc:67:26:cd:45:d9:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:09:34:EF:7B:0D:2B:52:98:10:8F:5F:F6:5C:09:D5:11:3B:11:2B
            X509v3 Authority Key Identifier:
                keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:6e:be:5d:30:ba:f5:ae:4b:b6:1c:bf:ba:74:0f:b4:e5:7f:
         04:10:91:a6:a0:0b:7a:ca:00:84:e3:ad:2a:f0:c9:39:1e:0a:
         01:60:28:8b:ac:2c:89:d9:cb:ea:53:35:68:5d:76:cb:ba:12:
         59:fb:f3:03:48:7b:8c:a9:27:70:6b:4a:4f:99:3b:36:05:fc:
         3d:56:4b:5b:48:70:12:87:d2:a6:39:7a:9e:10:9a:de:6d:3a:
         4e:12:74:68:cf:2f:66:28:e6:7d:62:b2:7d:40:a6:64:07:3a:
         01:c2:71:4d:fc:fa:cb:57:a3:e3:d9:4a:fc:da:a7:97:53:2f:
         c0:17:34:ea:a9:c3:c4:8c:51:7f:fc:5d:03:03:7a:90:b3:a5:
         ea:a8:24:c9:79:16:9e:9b:f8:36:f5:e2:1e:65:a4:7c:c6:af:
         39:41:a2:ae:99:6a:06:b4:2b:22:1d:61:cd:51:58:fd:36:2c:
         ea:5a:c4:28:ce:b6:c5:93:82:27:03:17:d7:ef:20:23:97:d2:
         0d:aa:b6:57:81:fb:64:30:18:d2:1a:f2:41:0c:19:01:23:5d:
         e2:63:4c:45:fa:d6:13:2c:51:7e:4b:1d:db:cf:61:1c:12:17:
         27:09:de:71:e2:b0:05:f3:b6:c9:27:6b:3d:5c:e7:9a:02:94:
         89:38:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----