Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
File:                     KhQFaUht0XjbWDoKHklt8iMYXTU.mft (raw, json)
Hash identifier:          un8vzwo6Xpb87UeClRNNlVBtFIdxtRM7O2Ew0cPhhL4=
Subject key identifier:   74:8E:9E:2D:21:3B:E6:4B:6A:59:A5:94:CA:0D:94:9E:62:0E:08:B0
Authority key identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
Certificate issuer:       /CN=2a140569486dd178db583a0a1e496df223185d35
Certificate serial:       019356F6E7FAD6ABE1B71D45940CEFCC7ABA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
Manifest number:          05B7
Signing time:             Sat 23 Nov 2024 03:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:41 +0000
Files and hashes:         1: KhQFaUht0XjbWDoKHklt8iMYXTU.crl (hash: nXxdNfzyaqC9BWegD52jHySyiLssUba1+FkQqe1tHyI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:e7:fa:d6:ab:e1:b7:1d:45:94:0c:ef:cc:7a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a140569486dd178db583a0a1e496df223185d35
        Validity
            Not Before: Nov 23 03:00:41 2024 GMT
            Not After : Nov 24 03:00:41 2024 GMT
        Subject: CN=748e9e2d213be64b6a59a594ca0d949e620e08b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:3e:97:3a:67:2d:51:4e:44:dd:95:89:59:
                    66:b0:6d:41:d5:74:6f:b5:99:83:fb:92:29:22:4e:
                    71:6b:04:ad:8e:57:f6:d0:51:ff:8c:d3:3a:a8:6f:
                    83:a7:5e:92:7f:f4:4b:ef:b5:b6:21:27:e0:88:59:
                    b5:ae:76:45:53:c3:ca:3d:0c:24:fa:66:57:8d:91:
                    0b:33:ca:14:94:40:f9:e5:b2:c6:c6:ff:df:fd:45:
                    bb:e9:0f:b5:54:fc:51:d7:47:15:c9:7a:c7:49:b8:
                    70:dd:76:2c:19:69:69:ec:5e:1d:70:17:0e:0d:5e:
                    63:c0:f7:99:fa:68:58:34:45:0f:aa:26:cb:14:4b:
                    bd:64:77:55:c2:dc:34:99:01:f8:17:d2:3b:03:d4:
                    80:3c:81:69:10:7a:df:b1:28:ed:9e:ac:1f:8d:cd:
                    42:4e:13:79:e2:b3:14:34:45:a1:81:e5:c4:2d:30:
                    d8:e9:5e:f9:f8:11:87:3e:6a:7b:83:07:0f:0f:dd:
                    44:b0:b8:37:9d:fe:18:ed:c7:2a:18:35:65:fb:8c:
                    2a:b2:48:b6:d1:8c:f8:b8:16:ca:01:69:87:14:51:
                    fe:58:46:43:a3:04:21:ef:8e:bc:de:4c:be:d5:ea:
                    77:e2:9a:67:80:20:b0:ee:e6:e8:a4:c2:1a:f9:6f:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8E:9E:2D:21:3B:E6:4B:6A:59:A5:94:CA:0D:94:9E:62:0E:08:B0
            X509v3 Authority Key Identifier:
                keyid:2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b1:3b:85:8a:b0:de:71:ee:64:d5:de:2f:c0:c2:67:61:54:
         ee:a5:f4:96:bd:5b:07:5f:4f:27:ee:c1:f4:cd:aa:16:07:55:
         73:78:ee:a0:1e:3c:48:80:30:9f:2b:3b:fb:08:57:1c:cd:7d:
         60:6b:d8:43:fd:55:44:8e:5e:3d:35:3f:40:40:82:0f:00:ce:
         99:28:7e:26:c1:fc:81:9c:6c:ab:e6:17:6a:af:15:e5:f3:ac:
         c0:3c:07:90:d7:e6:6f:5a:fb:bb:e3:ed:f9:0f:bf:fa:38:81:
         f8:96:6f:5e:92:d7:b5:22:11:39:71:5b:5f:2b:c7:7d:e4:8d:
         bc:92:4d:4f:8c:63:8f:19:d2:3c:cd:d9:5f:2b:0a:c6:8c:5e:
         b2:20:94:fe:53:3e:8f:3b:b0:76:72:af:8e:89:88:84:00:95:
         2a:bc:0a:85:45:a2:bd:e6:68:2a:12:41:1e:d0:d2:4e:b4:27:
         25:d9:cd:66:b1:ad:fd:8f:8b:2e:21:82:f3:f2:c3:fb:a3:60:
         2f:21:e9:14:1a:bf:4c:4d:c7:59:78:e1:4c:b3:3e:e9:a3:97:
         b4:cf:79:3e:42:02:0d:85:85:23:19:b1:83:8d:ee:01:eb:ff:
         92:b6:c9:f9:6b:b0:74:fd:d8:f5:4d:07:8b:66:ec:7e:5d:4f:
         23:f2:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----