Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
File:                     aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json)
Hash identifier:          tb7XpNRmQGUD6EFrcAsgojWL3Nm6Xuo6TVbAqISvrb8=
Subject key identifier:   E4:29:6B:59:BD:0E:02:FC:97:21:A2:2C:03:4F:FE:77:50:D1:5D:7B
Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C
Certificate issuer:       /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
Certificate serial:       018F87B6C46551B61D23F11072EBDC74659B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
Manifest number:          02E2
Signing time:             Fri 17 May 2024 18:00:52 +0000
Manifest this update:     Fri 17 May 2024 18:00:52 +0000
Manifest next update:     Sat 18 May 2024 18:00:52 +0000
Files and hashes:         1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: clUpMMlNuEIr22EV0kQIuc5ZvspTpgPNvDOP1z28Jnc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c4:65:51:b6:1d:23:f1:10:72:eb:dc:74:65:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c
        Validity
            Not Before: May 17 18:00:52 2024 GMT
            Not After : May 18 18:00:52 2024 GMT
        Subject: CN=e4296b59bd0e02fc9721a22c034ffe7750d15d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:11:94:cf:2f:ad:22:92:2f:b9:ce:22:bf:8c:
                    ab:6f:58:3a:65:c9:c1:68:3e:36:9e:45:88:53:6a:
                    69:b8:20:e5:13:59:96:48:5b:bd:45:83:5e:bf:94:
                    7f:1b:a9:cc:6b:59:9a:88:74:78:13:31:b1:c7:f0:
                    82:e9:35:8a:6c:35:bf:b2:76:9c:f5:6e:35:7e:a5:
                    af:d4:85:b6:2d:8a:4e:66:d8:00:b9:3d:d2:d5:a6:
                    ea:e3:87:96:7a:56:e9:dc:6d:7b:72:70:25:42:3f:
                    03:db:77:b2:e4:e7:8c:04:a4:d9:be:a6:77:d2:b0:
                    13:da:c5:8f:a5:a9:53:62:12:26:a1:ce:df:15:8f:
                    fc:66:14:1b:e8:6b:9d:8a:b2:3b:9a:e3:87:e3:91:
                    a3:a7:e2:47:82:2f:1c:16:85:33:44:aa:d5:fa:4f:
                    5a:2e:e4:85:72:37:47:f6:e7:c8:85:7b:1a:dd:92:
                    89:dd:da:86:1a:f0:20:b0:f5:90:db:76:7f:31:89:
                    18:95:36:b4:b1:76:71:d6:a6:05:43:70:77:02:00:
                    db:d0:0c:d1:3e:52:1c:f7:f3:a4:21:56:c6:9c:87:
                    a9:59:c5:7c:a5:c6:13:45:0e:e4:fa:9f:18:c8:83:
                    64:70:17:e6:4e:30:23:aa:31:cf:78:d2:af:39:6a:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:29:6B:59:BD:0E:02:FC:97:21:A2:2C:03:4F:FE:77:50:D1:5D:7B
            X509v3 Authority Key Identifier:
                keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:1b:48:3e:40:ac:bf:2d:73:b8:76:cb:65:a3:5d:01:67:f8:
         31:59:e1:12:fb:72:be:8a:b5:ef:ab:b4:6c:d8:c5:d7:57:99:
         82:2d:79:cb:52:4f:67:cc:9c:2e:fe:3d:30:7a:a3:2b:f4:c3:
         41:93:3e:e0:43:23:78:86:b1:9c:dc:95:96:24:66:2e:5f:61:
         5a:5d:dd:08:2f:77:67:13:29:e0:32:6e:9d:cf:fe:13:ac:70:
         3d:14:fc:83:bc:bd:ac:7f:bc:07:ae:b6:fe:64:c8:d7:1e:73:
         04:84:33:da:64:b2:71:71:aa:c2:6a:ad:0d:5e:5f:ac:0d:01:
         5c:cd:fb:0b:fc:d5:b4:f6:97:d7:02:32:ff:f4:f6:3a:2e:09:
         f7:11:cb:f3:bc:08:b4:a8:a9:8f:89:b5:c0:69:a6:ab:2f:07:
         ba:a8:0a:48:0d:eb:07:1b:3f:65:0e:19:da:28:23:d0:0f:7f:
         11:6e:3e:ba:a5:01:95:35:38:83:3e:96:99:17:63:85:f4:2d:
         08:2e:44:04:e6:a0:de:5e:6d:9e:8f:c3:42:d2:51:56:c3:7c:
         8d:19:a2:0c:d3:2f:8a:1b:ae:c7:09:fc:61:8a:71:22:e7:46:
         25:7c:d5:de:2f:92:c9:40:ac:34:fc:19:50:51:e6:23:f5:53:
         1b:e6:a4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----