Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
File:                     KMWxDr1MOSkgFDB-h_prHJtCFn0.mft (raw, json)
Hash identifier:          aR1+CeR2Tq0ZTsjW+YvZQoABtBSK2Vb8brNcR4gITEg=
Subject key identifier:   F8:EF:99:F9:CC:48:88:59:12:B0:F4:F8:7C:D4:7A:68:71:40:46:2C
Authority key identifier: 28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D
Certificate issuer:       /CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d
Certificate serial:       019369DAA45126C275D19EB3C07FBAE520A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
Manifest number:          041A
Signing time:             Tue 26 Nov 2024 19:02:36 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:36 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:36 +0000
Files and hashes:         1: KMWxDr1MOSkgFDB-h_prHJtCFn0.crl (hash: YFHWSv7gYFeC7O19zs9C8qN1SMLYJY69ToVTiwpjYAg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:a4:51:26:c2:75:d1:9e:b3:c0:7f:ba:e5:20:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d
        Validity
            Not Before: Nov 26 19:02:36 2024 GMT
            Not After : Nov 27 19:02:36 2024 GMT
        Subject: CN=f8ef99f9cc48885912b0f4f87cd47a687140462c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:38:4e:37:d8:27:03:7d:ec:24:d2:ab:b6:5b:
                    89:a2:72:3c:af:2f:25:b2:b6:34:81:ce:8c:09:84:
                    61:6b:34:ca:9c:29:08:87:84:82:35:0c:b1:51:9d:
                    4f:e2:ee:0e:45:e5:df:03:c5:ca:dd:4f:32:b0:d7:
                    28:db:31:8a:9d:73:8c:a9:04:a5:a1:a2:b2:b2:a1:
                    27:63:ee:ef:64:51:0c:1b:99:23:47:b4:7d:e5:e7:
                    c5:9b:50:6a:9f:73:a9:71:ea:fe:a7:d4:75:69:64:
                    85:07:cd:9f:4e:cf:e8:e8:bf:6e:ef:1a:94:c9:49:
                    1e:01:e4:cd:c9:86:50:c3:21:5a:25:d4:d6:04:c9:
                    75:bf:77:35:f0:c7:cb:fa:84:0a:83:a7:ac:e2:35:
                    19:f4:de:5a:f7:42:7f:0a:97:6e:82:a4:c7:81:6f:
                    3f:5f:c8:15:cc:ca:2b:35:21:40:7c:5f:ee:6e:4d:
                    47:9e:e7:41:b6:4a:2c:e8:40:22:85:e7:4d:b7:df:
                    ae:a4:cd:36:aa:6d:83:81:2a:ed:be:0b:64:ba:28:
                    75:ce:7b:74:3a:5f:83:87:d9:35:0a:db:0c:b5:8f:
                    9d:ac:68:88:75:7f:c0:88:a1:36:3f:b0:2c:88:1a:
                    92:5d:ce:17:64:78:01:13:4f:05:34:92:b7:11:d9:
                    72:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EF:99:F9:CC:48:88:59:12:B0:F4:F8:7C:D4:7A:68:71:40:46:2C
            X509v3 Authority Key Identifier:
                keyid:28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:04:58:f2:20:0f:b2:c6:a9:41:4a:c2:f6:9d:9f:94:04:90:
         f5:b9:24:47:0c:b4:c3:81:97:47:b4:5d:10:b5:7a:40:ea:44:
         40:7c:d7:99:bc:04:6c:0c:1e:ff:2d:de:96:17:1f:d6:a4:d0:
         08:43:aa:70:d4:01:fc:e5:7c:1d:7b:54:29:a3:db:8f:8b:3c:
         cf:13:f3:92:c4:e9:63:fb:d2:6b:0b:f9:e6:89:74:ed:44:c7:
         4f:84:ef:7b:10:c9:c7:98:9b:c6:94:d6:cf:88:57:75:c0:c3:
         d4:89:cf:8c:43:b8:a5:4b:62:cd:57:4d:aa:2a:6c:2a:58:35:
         7d:38:5f:a7:96:92:bd:1c:b8:84:a3:4e:6c:fa:a7:63:7a:53:
         4d:fb:e4:ad:77:78:cc:aa:63:03:37:32:fe:5a:f7:4b:47:61:
         ec:38:54:b4:28:38:20:87:19:08:40:61:b3:68:7e:8a:17:4f:
         9d:d7:82:b3:33:d2:bf:9d:ec:42:be:03:a2:f0:fa:c3:02:f1:
         7d:a5:41:c8:22:e6:84:fc:fe:2d:37:47:f4:2f:0a:0c:a1:0a:
         28:f3:30:da:7e:e7:f5:f1:6c:a7:e5:b0:19:e7:de:25:f1:49:
         70:c0:bc:27:99:d0:c2:10:19:ce:4a:ea:25:36:d9:fb:0e:4b:
         d9:ad:60:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----