Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File:                     RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier:          Bg90C6dxHtxBp1evTY1WRZCTGQEJ/B1xLXaBwlkBNhM=
Subject key identifier:   9C:60:4C:78:BB:E1:7E:F9:55:DF:DE:70:B6:F4:3A:32:D7:4F:27:F0
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer:       /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial:       019369DAF789BA1FFF9999F4126F3B013149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number:          1376
Signing time:             Tue 26 Nov 2024 19:02:58 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:58 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:58 +0000
Files and hashes:         1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: 1jYJBLOwX6ADewRXCA1hgEud2IjN/vP7ihwoyqF68YE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:f7:89:ba:1f:ff:99:99:f4:12:6f:3b:01:31:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
        Validity
            Not Before: Nov 26 19:02:58 2024 GMT
            Not After : Nov 27 19:02:58 2024 GMT
        Subject: CN=9c604c78bbe17ef955dfde70b6f43a32d74f27f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:a7:1e:f8:11:2d:18:c3:74:2c:fd:c7:df:
                    1b:4b:08:38:b2:03:7b:33:e9:6e:0c:f3:e6:93:5c:
                    c2:2d:51:29:54:d8:b2:16:c9:da:0d:56:ae:85:7d:
                    04:78:5e:c6:21:44:5f:1e:6d:e0:97:be:59:71:48:
                    8d:be:1d:11:cc:37:dd:61:83:ca:a1:5a:a1:4c:b4:
                    d4:9c:27:92:a0:8c:03:3e:84:b0:e5:d8:a9:36:58:
                    c7:16:40:9c:02:41:0d:19:84:9f:c3:df:80:15:58:
                    8a:38:39:ae:bf:3f:a7:15:1d:36:b3:45:25:68:7b:
                    9b:a4:9b:95:1b:2d:ef:7a:59:1f:a6:96:74:87:bc:
                    a8:7e:64:cf:13:bc:5c:61:2d:63:50:e5:ad:e1:9f:
                    c8:1e:47:81:95:a2:aa:5b:14:de:a9:3d:26:5f:b7:
                    92:91:e0:3a:30:4f:e9:a6:1c:26:15:4b:33:ca:5e:
                    c0:6a:62:a4:7b:3c:a1:8e:da:2f:a4:46:20:58:a8:
                    c1:cb:94:2b:d6:ef:bf:90:a9:fc:2f:ab:b6:ec:f3:
                    2e:ae:bf:e9:d1:33:b7:0b:b0:15:8d:f6:ac:39:da:
                    50:3c:75:a6:d5:b1:41:0e:08:7d:85:ac:ab:d2:55:
                    b8:16:fe:7d:b3:df:89:4e:c9:99:75:72:36:22:65:
                    66:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:60:4C:78:BB:E1:7E:F9:55:DF:DE:70:B6:F4:3A:32:D7:4F:27:F0
            X509v3 Authority Key Identifier:
                keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5e:8d:24:86:fc:b8:10:75:83:a1:37:c6:4a:04:a0:a3:d2:
         da:94:66:5b:10:50:90:58:49:f9:6e:7e:66:1f:bc:67:20:3f:
         da:ef:fe:d8:80:c6:83:23:40:ba:94:63:89:ca:15:85:f1:e8:
         17:31:19:00:c9:fc:7f:e1:37:dc:74:99:9f:df:94:b2:05:e7:
         a8:07:b9:3a:90:d0:d9:bf:85:da:73:05:8f:73:9d:fd:f4:f6:
         0d:08:61:c2:fe:1e:e1:7a:ff:fa:3c:d2:5a:1d:13:3a:24:df:
         e5:27:1b:ca:04:ca:3a:40:e4:58:3b:9e:f0:3e:ba:20:a9:a2:
         a9:52:8b:f3:9c:88:42:6b:c3:c9:27:c7:98:98:5e:25:92:56:
         35:93:6b:d6:17:6c:9e:fc:a5:06:51:2f:16:b2:d4:36:ef:8d:
         bf:22:10:e7:71:b7:15:fb:5f:3d:95:c6:9b:53:85:73:1f:e7:
         95:8e:46:bb:4e:47:15:2c:0f:24:f3:5f:3f:54:9b:4e:36:54:
         ae:e1:99:02:8c:a1:cc:c2:22:d9:7c:29:3c:e1:42:5a:4a:49:
         28:da:9b:6b:e1:37:44:59:24:00:50:c1:a2:80:b2:fc:76:e9:
         2c:2f:dc:d4:3c:8e:13:a4:80:0f:e9:48:2b:46:b2:86:54:c8:
         52:dd:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----