Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
File:                     K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft (raw, json)
Hash identifier:          HQa21qwAptZPvY9mDcbPASz5+thhQ7Hpda9I1XBVcEQ=
Subject key identifier:   AD:E5:A2:D7:FE:E9:EB:23:E3:AD:D1:0E:A5:4A:FD:48:4A:A8:32:43
Authority key identifier: 2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95
Certificate issuer:       /CN=2b4989fe3caca3f30443c54a902f6912110d9195
Certificate serial:       01936A7D81AFA5152E08EF4C15DFE6A15819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
Manifest number:          05A4
Signing time:             Tue 26 Nov 2024 22:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:30 +0000
Files and hashes:         1: K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl (hash: ZdFDxD81pqm+DkzXy0lDZwU0L5ZEKnSmg4qX+dWlOg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:81:af:a5:15:2e:08:ef:4c:15:df:e6:a1:58:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4989fe3caca3f30443c54a902f6912110d9195
        Validity
            Not Before: Nov 26 22:00:30 2024 GMT
            Not After : Nov 27 22:00:30 2024 GMT
        Subject: CN=ade5a2d7fee9eb23e3add10ea54afd484aa83243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:97:e0:e4:44:8b:88:c6:98:c8:6f:63:a9:
                    ab:76:34:b8:25:d0:87:43:75:c6:d7:70:b5:fe:4c:
                    b5:33:36:1d:ee:0c:30:75:e2:bd:a7:b0:fa:ad:5d:
                    36:11:5a:29:c2:ed:9f:dd:37:4e:5d:b5:3f:9a:22:
                    09:c1:56:0f:52:40:68:0b:35:b0:61:db:9c:8d:d7:
                    bc:44:26:8f:be:02:51:44:b4:48:9d:8d:7a:3e:10:
                    ab:d8:ec:a4:4c:39:a4:be:f5:f0:dc:72:3e:04:1e:
                    5d:8e:da:63:ed:2e:75:0c:88:11:27:65:ea:e9:39:
                    4e:8b:1c:76:db:c2:83:b2:eb:04:9b:c3:b6:9a:1a:
                    ad:06:59:a7:54:82:a5:ff:08:6f:2f:2a:04:35:f9:
                    11:10:1e:b7:ac:e8:c8:c0:97:ce:0c:0d:30:fa:68:
                    2a:8c:91:b1:16:79:85:be:05:2e:d2:71:02:2e:53:
                    4f:b0:a4:f4:7c:c3:23:2d:96:a3:82:08:43:af:65:
                    84:f0:7d:26:f5:d9:23:eb:dd:fc:0d:b9:58:4f:68:
                    98:44:a6:41:13:b2:0f:fc:3e:a7:28:86:47:49:df:
                    5f:64:f6:2a:70:9f:62:63:62:d0:09:3c:7b:60:4b:
                    39:9a:d1:8b:77:28:aa:db:70:ac:54:0a:f0:f8:ee:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E5:A2:D7:FE:E9:EB:23:E3:AD:D1:0E:A5:4A:FD:48:4A:A8:32:43
            X509v3 Authority Key Identifier:
                keyid:2B:49:89:FE:3C:AC:A3:F3:04:43:C5:4A:90:2F:69:12:11:0D:91:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0mJ_jyso_MEQ8VKkC9pEhENkZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9a641f-e4a7-4cc4-acec-5c38e7fe8e81/1/K0mJ_jyso_MEQ8VKkC9pEhENkZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:b7:85:fb:56:11:67:94:77:b0:83:11:73:90:ad:e4:18:7a:
         9b:9e:1e:4a:80:29:6a:9f:16:0e:f9:db:c8:ed:5c:90:71:fe:
         7b:1b:61:2c:f2:27:ce:5f:3e:33:95:e4:1b:ef:24:86:67:c2:
         fb:db:e2:4a:5f:60:e1:9d:be:5a:78:9a:9a:3c:af:e3:91:9f:
         15:4f:92:d6:07:2f:7f:dd:85:b7:48:cd:7e:99:fd:d3:ec:1e:
         a2:0d:3c:72:4e:e6:77:ea:ad:ec:91:77:bd:b9:0f:b7:78:e6:
         da:09:74:8f:e9:0f:7e:02:98:45:11:97:39:92:2a:40:00:97:
         5e:e8:64:b1:16:07:4c:b6:d0:8b:e3:35:96:57:df:1a:6a:b6:
         92:7c:ed:22:05:0e:55:ab:d3:6d:7f:ff:df:1a:62:38:d4:2a:
         90:45:fa:9a:92:cf:13:79:02:e0:f4:01:18:d9:88:c9:db:38:
         82:a1:08:34:04:15:41:cc:73:4c:b7:3e:6f:68:06:09:02:87:
         66:d0:ec:d1:e4:43:ce:d1:f5:e7:f6:c7:1d:95:4d:95:72:a1:
         76:91:94:a3:5d:22:2b:88:6a:cc:33:98:ca:81:ba:00:7c:0a:
         ce:4c:39:98:0b:ee:19:71:93:9f:2c:8e:54:d0:bc:d0:f2:b2:
         5e:ca:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----