Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
File:                     49Kjha2TYDYTUH2JV3iL8b3H4hs.mft (raw, json)
Hash identifier:          HV6qOqaYPkoXY3Otz/HjaGdjePmXhmV2GqEEoAvrp8k=
Subject key identifier:   F2:66:E4:81:72:09:0D:86:22:66:09:B3:95:C5:9C:34:8B:D2:4A:38
Authority key identifier: E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B
Certificate issuer:       /CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
Certificate serial:       019369D93C4BD25169C1CBE65E031356798D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
Manifest number:          0C4E
Signing time:             Tue 26 Nov 2024 19:01:04 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:04 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:04 +0000
Files and hashes:         1: 49Kjha2TYDYTUH2JV3iL8b3H4hs.crl (hash: G+3ZLv/bsBhoVhRy4Sur7Q5+iBl9bb5gQTQJ36TX6Kg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:3c:4b:d2:51:69:c1:cb:e6:5e:03:13:56:79:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3d2a385ad93603613507d8957788bf1bdc7e21b
        Validity
            Not Before: Nov 26 19:01:04 2024 GMT
            Not After : Nov 27 19:01:04 2024 GMT
        Subject: CN=f266e48172090d86226609b395c59c348bd24a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b7:e9:12:31:9e:55:0b:e7:f2:c2:0b:cb:53:
                    df:17:dd:f2:1e:fc:87:b0:bf:9e:73:ff:f3:ef:1b:
                    cc:43:d9:de:ca:25:a5:33:cf:cd:1c:b7:19:3c:ec:
                    05:aa:b7:81:53:dd:50:2b:b7:02:a9:b2:ce:8e:35:
                    56:e9:55:13:7e:32:25:8f:00:a2:8d:23:e6:d6:79:
                    d1:22:c7:17:f8:9d:86:17:81:e5:0e:1f:a4:c5:b9:
                    4c:11:5b:11:1b:46:73:46:38:0e:c2:7c:df:ac:44:
                    e0:25:b1:75:dd:22:6f:bc:d6:3e:cd:ee:7f:32:8d:
                    c9:66:57:b9:c0:96:3f:6e:d2:6c:69:5a:95:7b:35:
                    74:90:0f:e9:4e:e8:ee:95:04:09:21:79:92:ac:e3:
                    0a:45:54:84:d5:53:0b:d0:5d:5f:c9:1f:44:3b:94:
                    02:c7:1e:b2:01:ec:46:25:fc:af:c3:a2:60:40:f8:
                    1b:8c:61:50:1e:59:af:3c:a9:38:69:71:80:ed:33:
                    96:a7:f0:fd:f8:13:72:02:25:c6:55:1c:b0:8a:38:
                    7d:58:6a:78:78:0d:f0:54:cf:a2:69:ba:37:eb:20:
                    37:56:c7:0f:7b:3b:96:a9:c7:59:d8:1e:31:a3:ff:
                    cf:e4:7e:c5:f5:0d:ba:19:c4:ab:3f:12:86:6f:ea:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:66:E4:81:72:09:0D:86:22:66:09:B3:95:C5:9C:34:8B:D2:4A:38
            X509v3 Authority Key Identifier:
                keyid:E3:D2:A3:85:AD:93:60:36:13:50:7D:89:57:78:8B:F1:BD:C7:E2:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49Kjha2TYDYTUH2JV3iL8b3H4hs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5b9237-6736-4d90-bff6-fed2dc3ecd71/1/49Kjha2TYDYTUH2JV3iL8b3H4hs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:11:30:9b:36:c1:38:22:93:95:aa:50:8c:35:d2:31:d7:31:
         b8:99:09:6c:38:46:4e:e8:3c:ef:c1:ed:8e:02:78:db:c8:5b:
         d3:9a:ef:fc:cb:a2:56:3a:4b:ea:2b:eb:2a:1f:c7:74:18:60:
         c7:e6:21:92:3f:15:ac:00:55:0e:63:a5:e2:f3:3e:74:d6:b1:
         59:c9:92:15:d0:43:a8:72:d6:17:32:b5:5f:ff:a8:2c:06:0e:
         ec:ab:96:5f:bc:4c:8e:e7:8f:4b:74:a3:f8:61:2f:81:88:71:
         77:56:a6:e1:3f:3f:2c:20:5f:bc:15:48:41:d0:16:35:7c:ef:
         d0:33:e8:82:a6:96:c7:fc:a1:c7:4e:e9:61:8f:4d:98:a2:ce:
         57:04:80:43:5d:4b:44:a5:ec:f9:9f:64:37:cc:f9:2c:98:d8:
         72:d3:45:41:23:d4:99:84:71:f3:66:c3:b9:ba:44:7d:a8:74:
         5c:d4:49:e6:9f:24:1b:7a:12:98:41:4b:c6:8e:3d:7a:71:a0:
         e5:34:bf:d4:94:69:e4:96:8a:d7:0f:88:f6:b0:70:8f:6b:a6:
         c1:5a:b8:f3:76:db:bb:54:6e:d4:04:78:3b:64:44:02:e0:d4:
         cf:c7:fd:09:c3:da:9a:9f:1b:7c:da:bf:91:22:f1:37:e3:67:
         f2:73:b7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----