Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File:                     18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier:          9DRTYNsgx0wtqGXLyusZxQERkUG6spP2D5Zdxjq2w5Q=
Subject key identifier:   76:C4:5F:F1:33:2B:D6:1C:22:58:D2:35:2D:64:6C:5D:4F:F1:82:87
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer:       /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial:       01936A46CB3835AF5FA65A2BB3E60C60F6BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 21:00:44 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:44 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:44 +0000
Files and hashes:         1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: yimbk8o/c5teS85RwpVidPNareywHyl/PWbcM4s/w4s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:cb:38:35:af:5f:a6:5a:2b:b3:e6:0c:60:f6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
        Validity
            Not Before: Nov 26 21:00:44 2024 GMT
            Not After : Nov 27 21:00:44 2024 GMT
        Subject: CN=76c45ff1332bd61c2258d2352d646c5d4ff18287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bd:e6:7f:25:9b:64:83:94:65:b6:fb:52:58:
                    38:20:c4:fb:fd:3b:86:6c:93:75:b0:1f:b7:00:5a:
                    75:fc:b6:27:c0:c7:3f:b4:06:0b:f2:1a:c8:08:ab:
                    de:6f:d6:9a:85:dc:a9:c6:0a:4a:f3:98:35:69:ba:
                    ae:0e:4d:30:82:8d:23:d6:0f:e1:b6:52:5c:08:9c:
                    f1:63:c3:40:ae:19:ad:44:67:6f:02:24:ab:01:77:
                    0e:d4:a2:43:37:64:7c:79:fa:4f:62:96:f8:aa:46:
                    19:e2:58:c4:b6:b0:a0:80:75:23:40:0f:4f:a0:88:
                    97:0f:8d:15:8f:39:f5:32:61:25:e6:94:43:3c:c7:
                    b3:dc:12:cf:bf:65:45:0e:36:e4:30:0a:4a:00:ec:
                    04:10:4e:52:c6:2a:8b:35:5a:3d:9d:b2:12:a3:87:
                    62:85:f8:aa:c6:d5:a5:1c:28:e3:a1:88:12:ff:b0:
                    b6:9f:cf:8c:d9:cd:66:49:67:ae:53:cb:2e:53:2e:
                    f9:4f:1a:d8:4e:28:9d:09:6f:32:12:71:4c:83:95:
                    c7:23:9b:ff:97:65:49:1f:dd:b8:a5:67:ad:1f:b4:
                    1e:d0:79:a3:19:f8:79:5a:06:bf:0c:0a:01:24:f0:
                    b8:bc:e9:28:ec:54:a8:b9:49:e2:21:9f:0d:78:e5:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C4:5F:F1:33:2B:D6:1C:22:58:D2:35:2D:64:6C:5D:4F:F1:82:87
            X509v3 Authority Key Identifier:
                keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:63:a8:9e:d5:c6:d3:61:90:15:ee:64:24:d8:a9:a1:4f:cd:
         0b:ae:ba:99:42:f4:5a:9e:fb:c4:95:57:7a:66:4d:da:28:55:
         d4:6f:5a:68:5f:52:99:c3:88:42:71:d3:9d:8a:82:96:b9:06:
         5c:7c:29:1c:8e:32:3b:ef:eb:ad:eb:22:1a:e6:bb:b5:b3:d0:
         58:b6:43:e3:b4:b5:78:b9:29:dd:2e:9a:57:b2:92:c6:86:3a:
         8a:ea:c0:ee:03:8d:74:ed:1d:87:b4:70:3c:3c:f4:fd:2f:a1:
         4e:f7:ca:82:d4:a7:8a:48:b2:48:52:ee:96:0e:65:c3:60:39:
         8e:ed:52:74:b2:c2:8f:8d:14:43:6c:2c:4c:cb:5c:c2:ea:9e:
         6e:ee:09:81:82:ec:ca:ea:be:2b:a6:d9:6a:fe:96:33:d9:a3:
         ce:ff:2a:e7:ff:e3:8e:0e:dc:9e:a4:e3:80:d1:6f:65:10:09:
         a0:df:11:17:43:bc:97:30:8b:1a:ca:22:15:a7:42:70:39:94:
         7a:ea:15:2c:aa:36:78:19:60:87:4e:2a:d7:32:53:3e:d2:bc:
         21:de:52:4b:f6:f6:1d:b7:1d:70:52:cd:91:21:cc:d9:12:f9:
         db:20:77:a5:09:85:28:bf:a5:5e:36:e3:ab:57:f0:fb:e8:ae:
         f7:b6:53:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----