Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
File:                     2wOirsyosr76ba-CjI25DinPsWc.mft (raw, json)
Hash identifier:          7xgRY2r28VESvORFVY0wEVzhh9+hvBab0oQUXeE+3PQ=
Subject key identifier:   AD:39:78:C1:E9:43:7F:9E:48:64:31:A2:CA:32:B2:23:04:79:E5:A2
Authority key identifier: DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67
Certificate issuer:       /CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
Certificate serial:       019369D9D034B0B07919F12EED7F6F05EF72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
Manifest number:          03A1
Signing time:             Tue 26 Nov 2024 19:01:42 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:42 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:42 +0000
Files and hashes:         1: 2wOirsyosr76ba-CjI25DinPsWc.crl (hash: yc3h1B4mHYa1xPYodtf7CDC10MeWQ/wHR96lucfymcg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:d0:34:b0:b0:79:19:f1:2e:ed:7f:6f:05:ef:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db03a2aecca8b2befa6daf828c8db90e29cfb167
        Validity
            Not Before: Nov 26 19:01:42 2024 GMT
            Not After : Nov 27 19:01:42 2024 GMT
        Subject: CN=ad3978c1e9437f9e486431a2ca32b2230479e5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:34:b6:30:ef:a7:33:d5:8d:01:52:0c:0a:
                    db:01:4a:fc:1d:0e:66:3f:ff:1f:e1:6e:b7:5c:92:
                    f3:c8:ce:30:77:c6:25:37:77:79:92:7d:c7:22:15:
                    0e:63:33:92:ce:c6:3f:52:dd:54:95:fe:54:9f:1c:
                    9f:88:c2:36:50:a9:1f:88:46:28:73:e0:a3:1f:e2:
                    2b:17:7e:08:c3:87:fd:30:44:fe:68:c9:49:87:7e:
                    7a:5b:a8:6e:18:2a:ff:af:e7:17:60:ae:7a:d1:0b:
                    78:f3:87:66:95:5c:74:0b:2c:93:41:91:45:f1:00:
                    3f:fb:4f:44:18:c0:d8:a0:94:de:84:62:4a:3f:55:
                    7c:1a:df:90:ec:71:68:69:d3:c7:c3:51:f1:9e:3a:
                    9e:67:76:d2:4d:2f:e7:4a:10:06:1a:b4:73:f2:c2:
                    cd:26:ea:36:15:14:1e:f0:10:58:01:88:58:04:44:
                    44:8d:76:5f:92:2d:8e:19:f3:d5:3a:1b:b2:d2:3e:
                    3f:01:57:c9:04:1d:9f:c1:7a:a8:57:84:77:8e:3a:
                    48:bd:66:22:3c:8a:29:55:92:76:eb:7c:d2:ba:af:
                    1c:cf:f0:de:c0:61:bb:38:36:4f:9f:91:81:1f:65:
                    28:68:0b:38:21:73:ac:9b:84:4b:14:22:bf:40:69:
                    1e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:39:78:C1:E9:43:7F:9E:48:64:31:A2:CA:32:B2:23:04:79:E5:A2
            X509v3 Authority Key Identifier:
                keyid:DB:03:A2:AE:CC:A8:B2:BE:FA:6D:AF:82:8C:8D:B9:0E:29:CF:B1:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wOirsyosr76ba-CjI25DinPsWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/72ec27-4460-40c3-812e-f8fdf043fa47/1/2wOirsyosr76ba-CjI25DinPsWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:66:0c:87:43:6d:d8:fd:9a:c6:1b:5b:6a:85:2f:52:00:
         21:b0:4d:3f:c8:ee:ea:03:96:61:bf:55:a2:70:03:cc:db:ed:
         1c:8f:8f:e7:3d:9d:6f:8d:33:1d:d8:22:b2:65:84:28:d9:30:
         da:16:16:7a:ad:6e:d2:91:7a:e2:a4:8e:14:5a:4e:c6:9e:4f:
         e5:2d:ec:b2:a5:67:55:d7:71:52:08:30:0f:26:4a:d9:68:c4:
         6e:bd:bc:63:ca:ef:93:d7:f0:7d:dc:a9:3a:e0:dc:74:76:64:
         06:c5:b1:a7:77:c3:ea:18:e4:f2:b9:9d:04:6d:6a:f6:fd:fb:
         4b:fa:19:19:a4:dc:d0:a7:89:49:fd:23:4e:42:f6:63:1b:28:
         20:48:1b:ab:c3:a6:e6:8c:37:8d:0e:d9:8a:9c:11:00:1f:ce:
         b0:1d:4c:75:4e:de:eb:33:eb:9d:53:03:1a:e7:3a:e2:e0:b9:
         cb:2c:e4:87:e0:ee:8b:30:53:a6:75:a1:d3:7a:c6:b0:a6:44:
         f3:19:c9:4c:2b:99:3d:96:39:63:a3:e2:90:49:0e:21:1d:64:
         f3:91:b1:34:86:64:90:4a:70:0b:56:57:dd:f4:f2:c6:18:c3:
         3c:29:f2:a7:75:59:14:95:3a:42:2a:fc:e1:c3:7e:af:95:c1:
         80:ba:d5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----