Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
File:                     K328XveedAIoXs2gg3ukvyGHYdw.mft (raw, json)
Hash identifier:          thaY5XC8ZgYcad9Begbbtx0n95Deac9Xfl1dOsSsPw4=
Subject key identifier:   CF:55:3F:0A:EF:1A:3F:BC:AD:B8:CE:94:90:CD:E6:83:08:8C:AC:B0
Authority key identifier: 2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
Certificate issuer:       /CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Certificate serial:       019355E467ADF4864C2BCA91AB841944E423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
Manifest number:          0B86
Signing time:             Fri 22 Nov 2024 22:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:52 +0000
Files and hashes:         1: K328XveedAIoXs2gg3ukvyGHYdw.crl (hash: Q3O7fsyx2BuwhYy8xBdbhbB26fE17gCdzAez6rS/7EA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:67:ad:f4:86:4c:2b:ca:91:ab:84:19:44:e4:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
        Validity
            Not Before: Nov 22 22:00:52 2024 GMT
            Not After : Nov 23 22:00:52 2024 GMT
        Subject: CN=cf553f0aef1a3fbcadb8ce9490cde683088cacb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:ab:fc:b6:5e:a0:a6:b8:69:59:3b:c8:ca:
                    ea:a1:91:08:03:b5:af:ed:00:2b:5f:ea:83:58:f7:
                    ba:ff:5e:0a:a7:22:e3:8c:e0:b8:a0:0b:c8:d9:8d:
                    41:4b:80:1a:f2:f3:7b:ee:95:b1:a6:11:b3:88:c7:
                    45:41:9e:c3:65:55:be:b6:00:cd:c3:63:c6:22:5b:
                    c3:42:bb:43:5b:7c:06:d0:5a:d6:e3:2a:f6:dd:46:
                    5f:00:e3:db:59:77:f8:a6:d4:36:68:19:54:4e:1c:
                    cf:83:09:10:86:4a:09:a8:dc:19:06:bf:42:d4:dd:
                    80:60:29:dd:d0:3f:58:11:ef:c5:d8:2b:35:96:21:
                    01:66:d6:0e:14:85:da:f3:c6:b3:0a:e0:53:a0:db:
                    34:d5:05:ef:b9:1d:a3:7d:34:a7:8a:d6:b7:7a:65:
                    13:09:6e:4e:91:6f:16:4b:ae:b1:fe:32:ce:db:50:
                    5a:41:20:d0:4c:63:c1:94:e9:4d:38:04:bb:94:34:
                    52:83:9e:4c:b8:5c:c7:5b:06:c8:d4:7a:40:7a:2b:
                    9f:4b:20:bc:c6:c2:d9:7e:a8:3e:e8:3f:5c:e1:44:
                    96:66:e6:99:ce:f7:3e:d8:c7:b2:bd:25:ca:0f:ce:
                    59:54:20:d5:62:9a:e2:55:e7:69:d4:87:a1:ab:93:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:55:3F:0A:EF:1A:3F:BC:AD:B8:CE:94:90:CD:E6:83:08:8C:AC:B0
            X509v3 Authority Key Identifier:
                keyid:2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:37:2e:7c:4b:71:8b:58:a7:df:07:cf:6c:3e:2e:f9:be:ff:
         18:58:0d:61:8d:72:13:22:59:8a:38:79:0d:13:f3:c6:ca:47:
         5a:0b:63:8f:26:3b:d8:3f:09:d4:67:11:c4:4c:e6:d4:6f:53:
         f9:9d:5b:f6:0d:91:ae:49:68:32:44:2a:2a:68:4c:73:68:bb:
         85:b2:5c:e6:78:f7:80:87:19:ae:78:90:f9:7d:c2:11:5f:ee:
         ac:a3:2d:95:4f:33:75:48:6a:5a:6d:91:4f:c6:86:93:37:6f:
         ac:ac:c2:70:c3:c9:8d:3a:f8:b0:a9:fb:1a:56:d7:4a:09:18:
         e1:b3:b4:a1:81:7a:fe:ed:94:c6:52:78:35:16:ad:6c:e7:ad:
         6c:2c:9a:26:33:e3:b6:b6:98:61:a2:1a:31:64:60:30:80:69:
         cb:e6:2a:87:14:d9:19:d8:a9:da:29:3b:25:aa:32:27:73:e6:
         42:fd:5a:df:87:bb:44:7a:2d:05:47:ae:2f:9f:5a:3a:8a:f5:
         c0:d7:ea:39:d6:0f:df:62:c6:3f:a4:38:f4:9f:60:93:fe:03:
         ae:b3:90:3b:91:84:88:4d:67:22:4b:79:44:81:15:e3:39:00:
         21:71:3b:89:e8:02:10:8e:f1:82:c9:67:a4:bd:3d:c5:7d:65:
         1b:4a:61:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----