Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
File:                     KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft (raw, json)
Hash identifier:          C85TSR3gInTn4Pg7/knN7Mb2cQUYMrJop4PIPMC6xe0=
Subject key identifier:   ED:7F:8D:57:F8:CB:19:E1:66:26:58:BC:D0:2F:74:14:53:94:E1:1D
Authority key identifier: 28:1A:7F:07:BE:5C:31:38:CB:43:C2:C1:8B:29:AA:54:68:54:4B:A6
Certificate issuer:       /CN=281a7f07be5c3138cb43c2c18b29aa5468544ba6
Certificate serial:       019358092FFF3CBF4E336A15190DCCEA3DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
Manifest number:          0704
Signing time:             Sat 23 Nov 2024 08:00:17 +0000
Manifest this update:     Sat 23 Nov 2024 08:00:17 +0000
Manifest next update:     Sun 24 Nov 2024 08:00:17 +0000
Files and hashes:         1: KBp_B75cMTjLQ8LBiymqVGhUS6Y.crl (hash: 1FOVRgudVHO+0AfpFmDEHobnKLL2SVlnPN4Dn3PJ8hE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:09:2f:ff:3c:bf:4e:33:6a:15:19:0d:cc:ea:3d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=281a7f07be5c3138cb43c2c18b29aa5468544ba6
        Validity
            Not Before: Nov 23 08:00:17 2024 GMT
            Not After : Nov 24 08:00:17 2024 GMT
        Subject: CN=ed7f8d57f8cb19e1662658bcd02f74145394e11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:68:2d:00:d0:9f:a8:76:5d:f6:22:5c:f9:
                    37:be:2e:2b:4e:16:38:c8:38:42:99:9c:d6:5f:fa:
                    55:02:4a:de:26:22:9c:58:3e:86:dd:6d:d9:54:67:
                    aa:ba:ee:1d:33:59:cd:6f:d4:33:79:e3:5c:c3:b8:
                    18:08:c7:c6:7a:8d:87:91:c6:96:f7:17:b0:49:4b:
                    e8:15:9d:9f:d9:03:56:b4:57:26:9c:32:76:d1:68:
                    8b:71:52:42:cb:3f:39:96:2f:da:75:69:48:88:f8:
                    0a:b7:84:ab:2c:55:5d:fc:0d:87:02:56:af:a6:02:
                    92:fe:fa:a6:3a:39:60:0e:e9:fc:48:2e:25:ee:62:
                    ae:bd:28:b3:a1:25:04:dc:0c:37:56:ec:c3:da:27:
                    19:bc:3e:7e:38:06:65:77:7b:3b:87:13:2a:a5:33:
                    3b:2a:ea:e7:05:ef:b3:1b:88:05:bb:9b:0b:78:3e:
                    7a:30:d4:f5:c5:af:c9:47:03:c0:a9:fb:ed:be:81:
                    7a:45:d3:46:33:15:7c:8b:f5:28:1b:85:ef:41:5b:
                    4d:0c:e8:af:dd:e9:09:0f:1d:22:f1:04:2d:8e:9b:
                    18:5b:a7:fa:a8:be:77:d4:51:cd:46:80:22:9d:82:
                    88:43:44:d1:d0:bb:36:0b:e0:c7:2d:46:6f:3a:46:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:7F:8D:57:F8:CB:19:E1:66:26:58:BC:D0:2F:74:14:53:94:E1:1D
            X509v3 Authority Key Identifier:
                keyid:28:1A:7F:07:BE:5C:31:38:CB:43:C2:C1:8B:29:AA:54:68:54:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBp_B75cMTjLQ8LBiymqVGhUS6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aca44e-8449-471f-8ebd-52ccf65bd67b/1/KBp_B75cMTjLQ8LBiymqVGhUS6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:75:b3:8f:50:8f:f9:81:ad:dd:2f:32:c3:22:69:be:ac:a7:
         1b:83:b5:16:a8:1a:b9:d2:49:ca:06:ba:b1:5e:38:a0:4d:12:
         db:80:6a:33:79:e0:7d:16:1b:b2:7d:2e:e3:ea:14:92:46:18:
         bd:f0:75:ed:c4:a6:73:c4:4b:41:03:28:f8:21:99:e2:64:a5:
         fb:fa:a5:25:fc:21:9f:34:fc:9a:7c:4b:35:11:31:1d:10:3b:
         d1:ff:10:13:b2:e9:0f:7b:0a:c2:90:ed:84:34:c8:32:bc:d7:
         7f:02:56:58:52:98:51:22:9a:6a:ed:f0:e0:c7:7a:3e:70:30:
         00:51:ac:f7:b3:4e:d8:75:11:2b:0d:a3:fc:53:c3:b9:4a:1b:
         04:6b:b2:44:6a:8c:6d:58:51:4a:f8:5a:c4:04:17:ee:dc:ae:
         bc:1c:90:9e:d5:91:2d:64:09:36:53:2a:96:03:9d:9a:c3:38:
         4e:56:72:c5:62:06:12:db:61:e8:b8:c7:c4:85:76:f6:cf:30:
         92:56:1c:33:25:ad:5a:e5:d9:3b:33:0b:dd:64:54:53:36:03:
         2e:fd:e0:24:d9:7c:92:59:c2:ce:57:fd:20:84:b2:4c:da:98:
         41:8e:fd:29:ec:4b:c9:8e:ee:fc:80:fb:00:a8:7c:72:b6:0c:
         0a:4e:2b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----