Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
File:                     K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft (raw, json)
Hash identifier:          8mIu53i4nwHgVv/xUj0MI8cVHL+mTNSXKdMQNLohpp8=
Subject key identifier:   C6:EE:A4:C9:09:92:96:F9:C5:E6:92:EF:50:97:55:5C:44:F7:76:AC
Authority key identifier: 2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC
Certificate issuer:       /CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
Certificate serial:       019356F6F8B3D0FD04DB998251F1D4900D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
Manifest number:          03A9
Signing time:             Sat 23 Nov 2024 03:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:46 +0000
Files and hashes:         1: K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl (hash: D6Lt5iO7aVXAa6qO5wx3xeM82B6VdLeA4WXkgYhftjQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:f8:b3:d0:fd:04:db:99:82:51:f1:d4:90:0d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b61e2d932756f01e3c6b73ac82689461d0f61cc
        Validity
            Not Before: Nov 23 03:00:46 2024 GMT
            Not After : Nov 24 03:00:46 2024 GMT
        Subject: CN=c6eea4c9099296f9c5e692ef5097555c44f776ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:80:5f:fd:8d:1a:5e:27:c8:fe:f5:57:63:84:
                    ca:c0:b8:f7:36:c0:5d:a7:81:2b:f0:d5:2a:bf:44:
                    1f:2e:0a:a2:96:95:4a:fb:2f:95:65:cb:14:73:4a:
                    02:5d:bf:b3:2f:5d:fb:db:aa:9e:5c:2e:f3:71:ee:
                    84:6c:35:01:89:8b:cd:68:34:33:02:88:94:25:6c:
                    5b:84:f2:cc:5f:a8:44:1f:5a:25:c3:15:5b:1a:77:
                    c2:f1:41:ec:dc:d7:32:4e:c2:78:a7:14:e9:85:92:
                    86:12:0c:fa:b0:86:a3:74:70:de:33:d6:1b:fa:b3:
                    ee:65:bd:16:7b:f0:40:6d:a2:32:fd:35:19:c0:40:
                    17:26:30:66:2b:87:10:d3:ed:3b:62:90:10:c9:0c:
                    5a:fa:95:2e:ff:b7:7c:5d:22:1c:df:8c:a0:74:fb:
                    13:2d:62:c5:a0:e3:42:6a:d1:a7:3b:ba:40:d1:41:
                    01:03:27:53:ac:43:62:8b:e9:d9:ac:82:e5:bf:70:
                    a6:5e:70:80:04:f2:dd:ff:76:54:1d:6f:c6:89:a2:
                    9e:63:96:1a:01:57:ce:c6:2c:61:af:ab:6d:6e:b4:
                    c1:88:a2:6d:9b:99:87:af:1e:ee:4a:6e:93:11:f7:
                    f6:20:4d:2c:21:5f:6a:e9:c8:3a:f0:a2:15:0f:e4:
                    5d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:EE:A4:C9:09:92:96:F9:C5:E6:92:EF:50:97:55:5C:44:F7:76:AC
            X509v3 Authority Key Identifier:
                keyid:2B:61:E2:D9:32:75:6F:01:E3:C6:B7:3A:C8:26:89:46:1D:0F:61:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e03319-1617-42b9-b4a9-3f2bd0aefcb0/1/K2Hi2TJ1bwHjxrc6yCaJRh0PYcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:57:d6:f6:d6:20:21:09:eb:39:03:62:74:57:6d:d6:ba:f7:
         b8:c3:9c:42:a2:9b:e6:f1:b4:64:85:e1:d4:a3:77:8a:61:a6:
         c0:f1:44:61:a8:89:08:e2:8e:e4:d6:24:00:ae:55:2a:be:0b:
         77:9d:28:1e:63:ee:91:43:54:b6:c6:6c:77:33:d2:b4:ae:b1:
         a8:78:de:48:15:56:54:61:37:c5:ea:0c:b1:05:3a:b7:c8:cd:
         0e:e7:b2:d5:d5:7e:4e:17:0d:b8:d3:de:2f:d4:82:2d:c7:99:
         1f:2b:3a:be:91:a5:e1:af:ff:8d:3a:99:2a:60:a4:1e:31:4e:
         f5:2b:fb:e6:89:dc:e0:aa:29:00:62:16:3c:bb:7c:c1:2e:ec:
         ce:7f:ea:fa:96:1f:b4:17:b0:f5:58:af:84:05:4c:2b:fd:3c:
         5b:a7:44:3c:7d:2d:24:60:31:61:89:9a:11:97:79:30:a2:d5:
         6d:90:95:d8:40:94:91:cb:55:c8:d7:a2:54:04:56:de:ae:ca:
         6e:6e:d4:e6:68:9a:30:08:08:5a:82:b0:6e:7e:de:4d:be:74:
         27:3c:4c:e7:8f:7b:66:cd:2b:61:98:16:e1:1e:bf:05:92:0a:
         6c:88:69:97:d4:fb:6f:8b:bf:0d:2a:82:20:a9:04:f8:2e:ce:
         d5:eb:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----