Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
File:                     ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json)
Hash identifier:          h4gwvMQOcBgM4jy0WUf2cLXOuRW12HBuT9tfVFSQfGs=
Subject key identifier:   94:04:A7:78:B6:FA:FA:86:00:8D:DD:84:F5:68:D4:E5:48:8E:88:70
Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA
Certificate issuer:       /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
Certificate serial:       019369DA78155E4FF6E63F36348C63ADC3D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:02:25 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:25 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:25 +0000
Files and hashes:         1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: Fjj4vgNB4J33zSt6oqUXihPrZeeriuzW/ANp8QbX7qU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:78:15:5e:4f:f6:e6:3f:36:34:8c:63:ad:c3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa
        Validity
            Not Before: Nov 26 19:02:25 2024 GMT
            Not After : Nov 27 19:02:25 2024 GMT
        Subject: CN=9404a778b6fafa86008ddd84f568d4e5488e8870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:07:0d:2a:98:4d:7a:5d:83:66:fd:46:4d:
                    23:57:27:4a:c0:1b:71:14:d7:c6:87:51:e6:1a:40:
                    55:72:64:c9:b7:6a:f7:20:c6:9a:93:31:fb:78:a2:
                    ad:c7:c0:73:bb:3d:e8:6c:5c:70:42:a9:df:66:11:
                    38:c8:80:46:29:7c:0c:b8:d9:82:15:40:7f:e1:05:
                    a0:70:2d:09:83:77:48:54:ea:60:d7:8d:c0:a5:ad:
                    da:9e:ab:28:df:71:5c:04:f1:a7:b6:4b:05:f5:e0:
                    4c:b2:21:da:e8:85:b7:ac:94:8b:a9:e8:73:b1:12:
                    03:f1:c3:1b:3b:13:f5:7c:bd:d6:4e:49:0f:c8:c3:
                    2a:cd:2c:da:b8:f5:88:da:cc:ce:8a:cc:48:5d:d3:
                    35:61:72:a8:47:58:90:5f:00:48:5f:37:37:89:52:
                    1d:a5:2c:c6:95:cf:76:58:fb:e5:28:86:23:c8:a7:
                    4e:ee:9d:39:17:33:5e:30:f6:ae:ca:9d:c1:aa:6c:
                    55:1f:2e:15:f2:fe:c6:12:1d:27:1a:ac:e5:dd:ec:
                    11:63:3c:be:c1:f2:fb:97:99:6b:6c:2f:5d:4a:30:
                    7c:32:1d:6e:c7:d4:33:6f:1b:74:09:6b:6b:2b:47:
                    1c:83:a0:bc:78:13:3b:7f:ee:4b:cb:b2:4d:fe:a6:
                    56:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:04:A7:78:B6:FA:FA:86:00:8D:DD:84:F5:68:D4:E5:48:8E:88:70
            X509v3 Authority Key Identifier:
                keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fd:6c:0f:04:cf:f9:7d:6d:5c:1d:f5:d2:e9:63:62:43:ae:
         84:80:14:89:f6:c4:12:57:ba:56:0c:93:0d:69:36:6a:23:e6:
         d2:03:8d:7c:d4:e9:75:30:90:ea:dc:78:58:b5:4a:94:52:de:
         7d:57:35:64:fb:2b:65:3d:77:c9:2c:87:4a:48:bd:56:0e:0b:
         b1:8e:f6:de:a5:74:67:e0:f6:f1:be:0d:cc:8e:8f:e6:ff:95:
         e9:32:4d:a4:b4:6f:77:28:2d:3f:6e:59:62:d0:07:0c:fc:c6:
         a0:bc:90:bb:59:be:d0:89:0d:da:d6:b3:36:54:d4:27:13:f9:
         40:cf:e7:f0:f5:b9:5d:ea:db:31:82:1f:5b:2d:3c:8c:b3:b9:
         e7:72:64:04:1e:5b:ec:ec:e4:ba:1d:2a:e8:9d:bc:95:30:f6:
         c8:a6:d3:51:b0:f8:67:a0:9a:7e:b5:af:ec:83:68:93:33:71:
         8e:25:7a:1f:69:30:e7:8f:fe:3f:12:2e:d3:09:4e:db:bd:b5:
         3a:31:bd:2b:57:aa:b1:1d:27:44:d4:1a:53:75:40:b3:8b:0a:
         64:e7:74:4f:e9:6d:b9:13:d2:4f:e3:62:7a:61:99:4e:df:e6:
         6b:13:f3:1e:e1:ec:56:61:bf:fc:23:6f:9e:53:39:70:5c:0e:
         e2:5f:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----