Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
File:                     aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json)
Hash identifier:          mdTXnc8XZG1FLe7xp0Zni3+mljioziPH3O5859+LbQA=
Subject key identifier:   50:88:2B:44:A8:4C:10:28:AF:E6:B0:8B:9B:96:83:57:18:5B:DE:9D
Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
Certificate issuer:       /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Certificate serial:       01936A4686F913C818758BC7C989EA89BF5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
Manifest number:          04E5
Signing time:             Tue 26 Nov 2024 21:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:27 +0000
Files and hashes:         1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: S58fDPGhnmlxP69GnwuyySR4y3Kr3rFAGxopG7a3Up4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:86:f9:13:c8:18:75:8b:c7:c9:89:ea:89:bf:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
        Validity
            Not Before: Nov 26 21:00:27 2024 GMT
            Not After : Nov 27 21:00:27 2024 GMT
        Subject: CN=50882b44a84c1028afe6b08b9b968357185bde9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:76:98:a7:27:c6:61:cb:ec:54:06:c0:2e:
                    77:4d:52:88:46:a2:ef:67:e5:7f:e0:65:a7:b8:4f:
                    a1:26:c6:2d:11:15:87:b7:66:cf:fd:bf:93:8d:68:
                    95:49:f3:3d:62:d5:94:8e:9f:92:23:0d:e2:1d:91:
                    8e:6f:bb:77:da:9d:ba:e6:66:a1:0a:1c:7b:0e:f0:
                    a2:9a:87:b5:1c:21:8d:55:f3:09:fd:c4:11:be:9e:
                    6f:cb:20:fa:f6:50:07:be:4d:02:ae:25:28:56:89:
                    61:d2:92:f8:a5:41:3f:95:31:e1:7b:29:68:ce:d4:
                    91:70:13:71:79:19:a8:a6:9a:13:27:c7:aa:23:76:
                    27:a3:a5:41:99:53:21:a7:cd:ae:a6:11:91:45:49:
                    f0:75:56:c7:89:db:92:d3:4b:3f:a4:05:37:68:e1:
                    b1:58:35:43:41:ac:24:04:4e:12:89:60:0f:b0:98:
                    68:ba:a4:2e:d0:d4:04:7c:0b:af:04:19:f9:d1:a9:
                    72:d5:70:d8:c6:a9:be:d2:a1:6e:12:68:89:39:94:
                    e0:af:e1:63:29:91:87:0d:57:99:4b:da:e6:2c:d0:
                    c7:6d:be:25:bb:37:d0:1a:74:41:61:6e:52:96:57:
                    d0:bd:78:cf:92:75:0e:66:6a:e7:4c:19:f2:bc:da:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:88:2B:44:A8:4C:10:28:AF:E6:B0:8B:9B:96:83:57:18:5B:DE:9D
            X509v3 Authority Key Identifier:
                keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:cc:82:32:03:5d:28:f4:05:b5:f7:1b:0b:a3:f6:9e:d3:77:
         e4:76:b1:ae:c1:f3:a2:ab:82:a2:76:f2:73:cb:18:35:e9:89:
         26:0c:97:c9:d9:50:c1:98:71:1b:52:13:be:e3:a0:15:c5:9d:
         ba:04:b9:40:36:62:cb:ae:9d:aa:14:39:89:f6:ac:5e:42:7c:
         a0:03:4c:4b:e4:35:52:7c:7e:52:0c:08:23:61:a4:7d:de:2f:
         cd:b6:66:e7:9e:32:90:71:e6:2c:a9:bd:5b:95:fc:37:18:82:
         f6:ee:4c:58:ff:2f:56:a0:60:59:c4:22:60:e4:84:42:19:73:
         4d:b5:24:be:cc:ba:d1:e1:90:b9:b5:c1:10:ae:cf:02:fc:24:
         38:6c:ba:19:da:48:03:f8:a2:b6:d7:8b:84:77:7b:56:15:f1:
         5e:5f:94:4e:4a:1f:86:63:55:6e:14:8f:26:1c:41:83:f0:72:
         b3:a6:f7:6f:4c:e2:c6:e7:00:4c:97:f5:92:85:ae:da:68:a6:
         7f:0a:16:62:d8:e7:4b:ee:ca:ad:b6:c6:cd:97:17:74:1a:0f:
         e8:cc:c8:15:9a:02:3c:8a:61:5a:9d:91:06:56:4a:1d:76:6b:
         19:6e:1d:20:ae:a8:c7:43:e3:68:ea:55:b8:1a:de:87:79:51:
         92:b3:aa:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----