Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File:                     kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier:          9BbN/EvShIMeAcekqHGT/qJ2Gays7WXmqmtd2Z7Bseo=
Subject key identifier:   D0:FA:56:B7:05:1D:D9:D4:D3:27:4D:98:2D:2B:20:ED:62:D7:A7:E7
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer:       /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial:       018F94CFADDDF6D11FA50521FAE243BEBCB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number:          0D2A
Signing time:             Mon 20 May 2024 07:03:09 +0000
Manifest this update:     Mon 20 May 2024 07:03:09 +0000
Manifest next update:     Tue 21 May 2024 07:03:09 +0000
Files and hashes:         1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: k/otJMXUJd0OARkIBDwuWzhMKGlniHA0OnEgwz7Bnk4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:03:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:94:cf:ad:dd:f6:d1:1f:a5:05:21:fa:e2:43:be:bc:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
        Validity
            Not Before: May 20 07:03:09 2024 GMT
            Not After : May 21 07:03:09 2024 GMT
        Subject: CN=d0fa56b7051dd9d4d3274d982d2b20ed62d7a7e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:9b:5d:99:3a:40:8f:9a:1e:c3:11:b7:9d:
                    e2:d1:b2:f9:01:a7:a2:02:b3:2c:d7:b1:db:1b:5c:
                    0d:30:fb:f9:5d:9a:99:e8:c7:e9:34:7a:fe:32:9b:
                    9f:e7:d8:c2:53:b1:f9:4e:39:5f:4a:cb:bf:b8:a4:
                    e7:53:d0:6a:c4:a1:bf:a7:75:ce:5d:7c:6a:eb:14:
                    5a:66:2a:3c:63:bb:81:7e:1f:9e:a5:b3:d4:04:7c:
                    ac:54:21:7e:af:b6:fb:82:2e:57:d5:2f:2b:f7:12:
                    0b:1f:1c:9e:31:46:15:fb:e4:93:66:2f:e9:99:7d:
                    5f:d4:cf:e0:8f:8b:a9:85:51:cd:f0:d3:3f:46:a3:
                    5e:58:1c:e8:85:85:06:2c:b2:16:7c:09:9a:1f:62:
                    b6:75:4e:af:c2:2d:e9:88:76:dc:ea:b5:cc:af:08:
                    b9:2d:55:5e:e2:95:aa:35:a6:67:f0:42:5a:e2:3d:
                    46:46:a3:b4:79:66:af:99:5f:32:cf:6e:61:f8:5a:
                    20:60:a4:7d:6e:30:92:93:4e:06:1d:55:20:d2:c8:
                    bc:c0:31:1c:fd:be:47:9e:b9:24:0f:d4:2d:a3:05:
                    2c:0d:57:3b:6d:ac:50:14:f1:9b:8c:c2:04:c3:a6:
                    9b:ad:32:ce:11:e5:71:06:fe:6c:e9:ea:8e:0d:d1:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FA:56:B7:05:1D:D9:D4:D3:27:4D:98:2D:2B:20:ED:62:D7:A7:E7
            X509v3 Authority Key Identifier:
                keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a9:bc:13:5a:47:33:45:a0:7c:bc:a3:70:cd:91:e6:95:88:
         83:58:5f:e0:b7:b7:39:53:21:77:12:a4:ef:a0:57:3a:d8:8b:
         42:5c:ac:2e:ef:f8:2d:90:25:dd:ce:f0:17:88:39:30:e7:f1:
         ef:d8:5a:0b:6a:f4:16:3b:93:28:b6:09:9b:3b:5e:ae:e5:7c:
         6b:96:26:a1:b4:95:4c:89:41:5a:e9:ac:a2:2a:0f:f7:09:13:
         9c:b0:d9:2f:8e:fe:d0:a3:a4:b8:99:b4:5b:59:d6:54:14:07:
         e1:62:78:b2:2e:5d:4d:6c:e3:00:75:4f:fd:e1:c4:5e:4b:81:
         a8:ae:ff:dc:f6:d1:1c:1e:ed:64:6b:8e:70:bc:1d:69:29:d9:
         d3:22:e1:0e:77:7a:5e:bc:4e:a5:c0:dc:b5:09:3e:78:5e:10:
         12:ee:6b:5d:7c:51:7f:ce:41:84:5d:e5:bc:5b:29:94:7a:c1:
         41:32:89:4a:38:4a:08:b0:51:a9:8c:24:66:25:be:18:a1:ac:
         d8:75:1f:27:9d:cd:8f:c1:b5:79:e2:09:3d:50:ca:f8:02:7b:
         d7:01:5e:6e:d5:1b:78:14:8b:95:03:17:b6:fb:32:26:de:37:
         f2:9e:73:01:9b:c1:d0:5f:6a:bc:e4:56:4f:d0:d2:59:09:20:
         92:78:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----