Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
File:                     Kwprx2i2FVjqweWekEUR_F3Yu8E.mft (raw, json)
Hash identifier:          s15cOTh9YFz9cOGNUpTZVMjzFOhU5Sn4BmLQV305oN0=
Subject key identifier:   52:60:2C:61:60:E8:85:0A:A9:C0:37:11:40:87:53:87:72:B4:F5:50
Authority key identifier: 2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1
Certificate issuer:       /CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
Certificate serial:       0193568A1EE970D98E880EB2F4CC5CCBB13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
Manifest number:          035D
Signing time:             Sat 23 Nov 2024 01:01:52 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:52 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:52 +0000
Files and hashes:         1: Kwprx2i2FVjqweWekEUR_F3Yu8E.crl (hash: dnsLRuniZ0ROXd94J4QLd/QNllfvOvoB9iIOXT0a9Rw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:1e:e9:70:d9:8e:88:0e:b2:f4:cc:5c:cb:b1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b0a6bc768b61558eac1e59e904511fc5dd8bbc1
        Validity
            Not Before: Nov 23 01:01:52 2024 GMT
            Not After : Nov 24 01:01:52 2024 GMT
        Subject: CN=52602c6160e8850aa9c037114087538772b4f550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fa:72:f7:d6:61:aa:7c:1e:3d:2f:91:a7:21:
                    d6:22:a7:6c:88:8c:0e:11:09:a2:bc:fa:92:5f:b3:
                    91:83:9c:79:78:67:d8:19:df:e0:0d:5b:20:1e:05:
                    c9:be:fe:5e:6f:87:a0:50:1d:07:c4:bd:a8:f1:37:
                    fd:d9:52:93:8a:5c:67:b4:e1:43:5a:94:98:17:dc:
                    a2:c3:1d:a8:c4:86:c8:6c:74:be:50:6f:f0:dc:27:
                    c5:af:2d:2a:fd:ab:c0:42:dd:c8:db:57:18:09:d4:
                    c1:47:f4:9f:2e:bd:c5:d3:8b:4f:51:be:39:d7:87:
                    e6:b7:61:72:08:8e:ec:65:2b:0b:92:79:7d:22:47:
                    8e:6f:b8:ad:bf:41:c7:8f:4e:a9:64:19:8b:27:0f:
                    17:98:93:26:f9:8e:a8:55:50:9e:bb:dd:29:dc:5b:
                    61:c1:72:d5:e2:48:2d:67:66:ad:06:c9:87:b5:40:
                    bf:1c:81:09:da:6e:0c:fb:76:82:64:1a:ea:aa:f3:
                    72:09:61:3c:cb:64:48:7e:12:d2:b8:33:5d:d4:de:
                    cf:2c:f3:b7:f8:9e:54:d6:9d:58:12:e4:63:0b:b8:
                    70:ed:a6:23:7f:47:f9:22:db:33:67:08:31:3e:e7:
                    4f:56:d7:6c:70:05:f3:dd:ec:5a:f4:b5:c2:04:b8:
                    56:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:60:2C:61:60:E8:85:0A:A9:C0:37:11:40:87:53:87:72:B4:F5:50
            X509v3 Authority Key Identifier:
                keyid:2B:0A:6B:C7:68:B6:15:58:EA:C1:E5:9E:90:45:11:FC:5D:D8:BB:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kwprx2i2FVjqweWekEUR_F3Yu8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/66c025-53a2-4219-9f39-f18d0c1b8bee/1/Kwprx2i2FVjqweWekEUR_F3Yu8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:46:3b:5e:68:2f:44:90:88:d3:7b:ba:c7:a9:a2:48:39:3f:
         23:3a:6c:7c:b0:ff:67:df:db:b0:04:14:0f:b6:18:fa:1e:30:
         b8:b6:62:e6:fa:40:75:95:fe:84:4f:32:3f:1a:22:55:67:90:
         18:01:65:21:f9:91:ae:be:a9:fd:66:90:6b:3f:a2:a8:20:f5:
         93:f4:c8:c0:1b:22:7b:d9:08:67:7f:4d:d8:ba:df:9d:3b:f1:
         5f:29:45:a7:2c:8a:2f:22:60:72:66:50:7d:77:ef:33:11:a7:
         5e:a3:79:3b:82:fc:08:fe:68:1e:0e:44:e7:5b:d9:f1:79:d6:
         22:71:e9:6c:29:77:1a:ea:6a:91:08:a2:00:07:49:cc:67:cb:
         6d:6e:29:5c:a0:fc:51:a4:75:a9:96:4a:b5:03:71:b2:99:67:
         3c:23:a3:f6:42:62:64:1f:4d:15:dc:96:4d:05:1a:da:b9:50:
         b4:43:ad:b0:fc:c0:40:44:ac:eb:c6:57:75:3e:2e:3c:cf:79:
         de:9c:20:ab:fe:45:2b:58:5e:a8:1f:8b:00:ce:7b:ac:a4:f4:
         03:1d:23:10:52:b9:af:86:a6:72:d3:cd:e2:fb:df:2f:c8:21:
         8c:6b:72:a5:a7:15:8c:3f:74:bf:cd:fa:e1:ed:e2:92:41:c6:
         ab:01:ee:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----