Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.mft
File:                     gq-w1o12dTGQWAttfVTLTGJnS0o.mft (raw, json)
Hash identifier:          BPK6kTD0ZZ6C0WaKghPLK2mPqKmJHJ78sVpdabe3mYo=
Subject key identifier:   9B:54:9D:29:10:68:9D:23:6F:71:9A:4C:F4:E0:CA:5A:0A:40:4A:61
Authority key identifier: 82:AF:B0:D6:8D:76:75:31:90:58:0B:6D:7D:54:CB:4C:62:67:4B:4A
Certificate issuer:       /CN=82afb0d68d76753190580b6d7d54cb4c62674b4a
Certificate serial:       019369D8CC1B75B471604418F449EA5219DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gq-w1o12dTGQWAttfVTLTGJnS0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.mft
Manifest number:          0560
Signing time:             Tue 26 Nov 2024 19:00:35 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:35 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:35 +0000
Files and hashes:         1: gq-w1o12dTGQWAttfVTLTGJnS0o.crl (hash: BTZS8WZ9YxBTv/SnFJTgiTikotHga5JTqYhIzM1vw/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gq-w1o12dTGQWAttfVTLTGJnS0o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:cc:1b:75:b4:71:60:44:18:f4:49:ea:52:19:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82afb0d68d76753190580b6d7d54cb4c62674b4a
        Validity
            Not Before: Nov 26 19:00:35 2024 GMT
            Not After : Nov 27 19:00:35 2024 GMT
        Subject: CN=9b549d2910689d236f719a4cf4e0ca5a0a404a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:4e:91:f5:4d:07:1d:c5:6d:4c:39:a2:42:
                    b8:bb:f9:c4:4f:d2:9d:96:b2:2e:d9:cf:c4:17:1f:
                    3f:ab:b2:82:fd:51:43:5a:15:e8:7c:0f:06:83:0c:
                    a7:c3:3b:a0:71:4f:b5:90:df:8d:4f:af:53:da:03:
                    c7:8f:e1:3c:87:09:c3:55:74:e0:2d:9e:bb:15:d9:
                    13:53:0a:14:bd:86:40:23:e1:82:ad:98:9d:e0:86:
                    60:77:0b:34:5d:d4:bc:5f:43:5d:cf:2b:87:53:23:
                    6f:4f:28:1e:53:4d:83:c0:43:6b:5e:62:ac:08:e5:
                    b7:b4:a4:b4:91:a1:4d:f0:33:5a:44:ec:2e:ef:60:
                    39:d3:1a:85:c9:c3:c3:42:29:bd:47:61:3a:5d:e2:
                    fa:d4:eb:5b:e0:c2:5c:82:97:35:26:0c:3c:4f:15:
                    9d:b3:91:22:f1:ba:8a:83:b8:61:92:f8:ce:c4:9b:
                    6d:25:12:9a:54:04:c4:87:cd:38:0b:d4:43:ad:ac:
                    dd:fa:52:b9:4a:9a:5f:b2:11:8e:74:91:2e:c6:25:
                    f5:89:a8:4d:83:7b:33:c3:5a:30:71:6d:68:d0:f3:
                    81:67:89:15:c7:b6:30:81:44:34:6a:59:40:be:46:
                    7a:08:ad:c0:8c:fe:a2:45:97:65:d5:b2:66:01:22:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:54:9D:29:10:68:9D:23:6F:71:9A:4C:F4:E0:CA:5A:0A:40:4A:61
            X509v3 Authority Key Identifier:
                keyid:82:AF:B0:D6:8D:76:75:31:90:58:0B:6D:7D:54:CB:4C:62:67:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gq-w1o12dTGQWAttfVTLTGJnS0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9a4fa6-3934-4f62-992c-a9dcbac96945/1/gq-w1o12dTGQWAttfVTLTGJnS0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:f6:17:6a:68:0b:58:4c:cf:30:2f:89:da:36:f8:fd:a3:af:
         6d:3c:0d:e1:43:98:75:11:5f:2e:03:6f:26:ff:89:e5:e3:6a:
         cc:f1:02:f5:dd:37:a3:a3:a0:47:b8:01:b8:c9:ec:d2:60:50:
         08:e3:33:54:b5:35:64:de:2c:04:07:73:8d:04:78:af:3c:d1:
         77:0c:bd:e7:09:0f:07:90:42:b1:6d:f0:51:0e:84:13:35:ed:
         c8:eb:89:e3:10:09:45:4b:86:f9:07:9b:c0:fd:5a:74:fe:68:
         46:4b:1d:15:98:8e:53:de:91:c2:86:9c:bf:66:cb:50:ce:15:
         2e:78:0f:90:03:e9:54:1d:f6:17:3e:b2:eb:da:da:d1:f1:71:
         46:82:df:74:58:95:e5:4e:9a:00:99:73:2e:d0:8f:ad:4b:22:
         55:3a:cb:0b:d2:e9:43:71:16:5e:6e:b8:8f:88:e0:86:d7:f3:
         0f:ae:9d:12:6b:ce:bb:e7:5a:e3:99:af:c0:52:54:af:bc:bf:
         ea:70:c7:eb:a7:9c:2a:53:ac:12:17:da:28:3c:a3:79:61:42:
         1c:78:c0:09:59:f9:f9:cb:73:79:77:58:be:71:c1:72:af:43:
         65:d5:91:2c:57:5e:1f:ea:d6:10:38:04:b5:73:f0:30:f2:90:
         78:a8:0c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----