Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.mft
File:                     es_QeX4tm9NTnRlaAxJBpWoCoWo.mft (raw, json)
Hash identifier:          N24wtMgeUIUDL4h2NkRqE5PwMwLcGyGn8MNDvJOSt8c=
Subject key identifier:   09:AA:FB:E3:4A:C7:31:B7:03:00:92:8D:83:C4:67:52:2D:4B:13:6A
Authority key identifier: 7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
Certificate issuer:       /CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Certificate serial:       01901CA1481C1BF5B7ACE3AF5C5F71E3FA06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.mft
Manifest number:          0A0F
Signing time:             Sat 15 Jun 2024 16:00:49 +0000
Manifest this update:     Sat 15 Jun 2024 16:00:49 +0000
Manifest next update:     Sun 16 Jun 2024 16:00:49 +0000
Files and hashes:         1: es_QeX4tm9NTnRlaAxJBpWoCoWo.crl (hash: ZfKy59MHXuOSkGoOMLuyVmKWjntVHLVdyV4crVwNV4E=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:a1:48:1c:1b:f5:b7:ac:e3:af:5c:5f:71:e3:fa:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
        Validity
            Not Before: Jun 15 16:00:49 2024 GMT
            Not After : Jun 16 16:00:49 2024 GMT
        Subject: CN=09aafbe34ac731b70300928d83c467522d4b136a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:5a:59:f9:30:4d:41:1b:c0:c5:b2:2f:d2:
                    38:82:e6:46:22:b1:0c:37:0c:44:57:a9:bb:4d:e7:
                    69:36:42:e4:5b:ab:df:b7:cc:b2:ef:94:c8:62:35:
                    cf:90:c4:7b:06:f5:9f:d4:a3:97:69:f7:19:46:54:
                    eb:e2:ba:94:fc:00:ad:59:d3:4e:ca:4d:a2:5f:66:
                    7b:4f:3c:cf:cb:a6:af:9a:f7:0f:11:7e:0b:51:63:
                    e2:0b:a7:e3:03:79:06:2c:64:5c:8d:79:39:28:40:
                    f5:86:88:35:7e:43:e4:c2:b2:d6:b3:31:d3:f9:40:
                    b1:48:cf:f5:b7:eb:b2:e8:44:41:43:28:5e:93:95:
                    6f:20:c5:41:25:76:a2:39:09:3a:a1:93:b4:36:98:
                    4b:0d:b6:df:00:9c:d5:5b:af:67:8f:9b:fa:29:f2:
                    8d:f3:f3:04:0f:7c:db:a5:10:17:ff:e9:82:44:4a:
                    4e:ad:c3:fa:7b:05:a0:bc:04:01:9f:73:99:e1:8f:
                    a1:e5:95:4c:e3:8f:21:b1:bf:dc:17:65:cc:12:c7:
                    c4:6e:b8:d5:ba:83:4a:d8:45:38:66:a8:50:3c:e1:
                    a8:48:b9:f1:90:a6:2c:26:37:e0:7f:cc:a9:14:92:
                    1d:37:0a:ce:f0:02:7a:cf:84:88:06:6b:a8:fa:3c:
                    be:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AA:FB:E3:4A:C7:31:B7:03:00:92:8D:83:C4:67:52:2D:4B:13:6A
            X509v3 Authority Key Identifier:
                keyid:7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d1:ed:e9:ae:fd:dc:26:c5:1b:91:be:0e:a8:90:fc:71:ff:
         83:0f:02:c9:26:88:90:ba:83:0d:36:53:a9:d8:62:34:f4:8c:
         ce:14:8b:07:aa:5c:4f:f8:2c:16:5c:7d:4a:0a:53:99:fb:1c:
         3d:2b:9e:3c:73:0c:92:3f:d7:cd:ae:b4:97:42:1a:d0:f7:22:
         6e:bf:95:5d:2f:6b:b1:fb:bd:7c:0e:f7:ba:f4:c8:a6:3b:2e:
         b8:43:81:8a:4c:cd:f3:27:6d:02:52:29:e6:06:e4:d4:ae:36:
         92:06:b3:e7:ab:52:93:44:e5:f7:0a:26:b2:5e:b2:c5:08:fe:
         ba:64:e0:6e:db:5b:e1:ae:f0:77:3a:5d:7f:3a:2a:92:5b:0a:
         d2:f7:bc:d0:b1:a5:ea:8d:d7:fa:ba:b5:8d:b2:29:ec:f2:b6:
         66:65:a5:92:9d:96:f9:8c:b2:9c:df:a7:5c:e5:4b:43:82:e3:
         cf:c2:39:d2:d0:f4:be:b5:c1:6e:fb:db:dc:cf:cd:18:36:81:
         ea:89:73:41:19:65:16:3c:8f:0c:c2:d0:9f:d3:c0:23:b4:91:
         68:b7:c7:13:75:9d:47:60:15:af:a5:f7:0a:b2:23:b1:fa:ff:
         4c:f4:e8:e5:88:c8:d0:4a:8e:97:4f:de:31:02:2d:77:a9:c1:
         93:20:9e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----