Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File:                     k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier:          N2b8nn/1pXIyqMGaQUVL3E94gdDJWyHxFGEiUoqzMNQ=
Subject key identifier:   86:8E:CD:AC:09:98:D2:B5:11:F4:C1:49:A3:B2:D4:5F:5C:C4:42:37
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer:       /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial:       0193568A15B5B3760FB905297276354F76A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:01:50 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:50 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:50 +0000
Files and hashes:         1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: aMwkDUpOW+qpjMTQWGAjTQxxmKDjzQZ+Z6pjgbaqkHQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:15:b5:b3:76:0f:b9:05:29:72:76:35:4f:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
        Validity
            Not Before: Nov 23 01:01:50 2024 GMT
            Not After : Nov 24 01:01:50 2024 GMT
        Subject: CN=868ecdac0998d2b511f4c149a3b2d45f5cc44237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:87:d0:dc:9f:a2:0f:e2:d3:3f:be:e9:f5:
                    b4:ba:aa:35:f8:4a:33:b4:bf:ac:02:5a:b0:da:27:
                    b5:c6:38:4d:04:ff:f9:41:e9:07:dc:1b:e6:43:9f:
                    db:bd:e7:88:51:cd:98:e2:c0:5e:1e:26:41:1b:b8:
                    f7:5c:58:16:1f:e3:6b:04:f1:ff:07:07:35:7e:f5:
                    e2:40:84:03:98:2a:68:08:83:c4:6e:64:ed:72:99:
                    9c:c0:e3:f3:bd:5c:d1:02:cf:0a:2c:de:c8:82:57:
                    1e:82:70:c8:4d:9e:4f:1b:61:45:95:43:59:5f:f7:
                    fd:ce:b4:d2:32:21:a9:55:7e:26:1b:b3:f6:5c:49:
                    f0:0b:fd:65:ae:10:ac:6c:c3:90:4f:07:8a:a2:d9:
                    d4:d9:86:1b:f0:ff:bf:60:de:82:cd:ba:8b:b6:c4:
                    43:1e:54:7b:6d:4a:cd:a5:54:dc:8c:23:21:cf:66:
                    8a:c6:d7:87:96:65:6a:02:ab:8e:bb:4b:58:bf:00:
                    11:33:d5:19:8f:d7:d0:48:7d:33:48:5b:e1:21:7d:
                    73:aa:44:3f:c3:93:60:21:10:77:ae:38:9f:c1:35:
                    13:6c:54:ab:81:45:18:53:16:08:95:1e:d8:80:c9:
                    8f:0e:6a:88:92:ed:f9:18:7b:75:f4:56:c7:0a:e8:
                    76:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8E:CD:AC:09:98:D2:B5:11:F4:C1:49:A3:B2:D4:5F:5C:C4:42:37
            X509v3 Authority Key Identifier:
                keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e1:c5:43:cd:d9:41:c4:f2:01:be:c4:1e:7d:2b:c5:02:f6:
         68:a2:50:b4:e3:41:40:f0:75:04:7a:d9:62:57:86:bd:20:50:
         73:45:1e:9c:fb:68:75:f9:ad:75:22:4d:47:d6:8c:e5:20:0a:
         5e:fd:2e:fe:03:74:3c:cf:dd:6e:0b:77:4e:dc:11:97:14:c0:
         4a:6f:26:d0:f6:17:8d:13:78:74:b2:c7:43:4f:dc:72:d7:3d:
         a3:b5:d3:b6:22:05:ff:25:4b:e9:c6:ac:43:73:24:fb:c5:71:
         2c:44:8f:e2:aa:ba:34:e2:21:a5:d6:0b:90:ab:79:92:ca:9f:
         31:3a:48:22:8f:be:cd:24:cc:8f:c0:26:39:a3:73:8d:f3:86:
         7d:2b:e0:d5:63:8e:f0:61:c3:20:35:65:7a:74:92:7d:f7:0c:
         ac:5f:74:9b:5f:df:f4:ed:37:8d:f0:fd:56:96:1a:bf:18:42:
         3f:1f:01:81:69:e3:78:76:69:3c:be:9e:28:29:4a:35:dd:f1:
         da:3f:5b:c4:6c:11:dc:23:92:42:b8:10:7d:49:55:b4:17:d8:
         18:f0:6c:7c:19:0b:cb:1e:58:0d:48:b0:c6:b5:7a:ba:7b:af:
         ad:54:1d:c0:f6:a0:c4:b7:96:54:b6:ee:36:17:f4:72:fb:a0:
         ef:14:d9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----