Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
File:                     CoRnuQcocepoG1eg2AHdo4xr_3U.mft (raw, json)
Hash identifier:          XHHiHOKtvE1sNkadDXY1XcFQB6vN6H/7MHalbLUBbXQ=
Subject key identifier:   79:FB:7E:23:7C:9B:44:D4:6B:C0:6A:21:AA:2C:A0:47:A9:07:8D:E3
Authority key identifier: 0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75
Certificate issuer:       /CN=0a8467b9072871ea681b57a0d801dda38c6bff75
Certificate serial:       019369DA0316516503A184C7BDD8B6EFB654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
Manifest number:          03AA
Signing time:             Tue 26 Nov 2024 19:01:55 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:55 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:55 +0000
Files and hashes:         1: CoRnuQcocepoG1eg2AHdo4xr_3U.crl (hash: RrOkEO33D4vhfyZbS3wyQf/hatC1wO4dfw8EIbhl0gU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:03:16:51:65:03:a1:84:c7:bd:d8:b6:ef:b6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a8467b9072871ea681b57a0d801dda38c6bff75
        Validity
            Not Before: Nov 26 19:01:55 2024 GMT
            Not After : Nov 27 19:01:55 2024 GMT
        Subject: CN=79fb7e237c9b44d46bc06a21aa2ca047a9078de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:0b:f1:6b:88:38:50:b8:25:b0:0a:63:bd:
                    35:ab:a4:0c:3d:bd:30:13:b2:13:ee:32:23:a0:2c:
                    ac:f0:18:d4:96:be:17:3e:d3:a3:bb:88:f5:a9:50:
                    5e:77:fb:c9:ba:c0:79:27:26:d0:7d:ea:f5:e2:23:
                    aa:54:8a:1e:11:1c:08:04:32:a4:25:1a:8e:d8:40:
                    01:34:e0:03:ad:d1:2c:cf:18:64:dd:61:39:05:38:
                    ba:11:2b:ae:9b:51:23:58:1d:98:21:ef:74:c9:7e:
                    50:5c:da:7a:08:d7:6b:fb:dd:fc:85:7b:5a:bd:13:
                    05:85:60:10:5d:65:66:91:aa:99:47:24:dc:04:87:
                    dc:f7:4d:00:37:44:6b:e8:2c:e5:70:87:cc:62:bf:
                    b6:04:dd:8d:cf:dc:ca:2e:bf:df:dc:db:f7:c5:5b:
                    f9:45:22:f9:e8:ad:f2:c5:e8:1a:ee:7d:59:b8:7a:
                    13:db:e6:5b:80:ab:bd:0b:63:90:6c:a1:94:7d:f2:
                    fa:ca:1b:5c:86:90:7e:b6:a4:7c:73:12:5e:81:30:
                    9e:ea:78:bd:d4:7a:1d:1d:51:d4:6a:b2:48:a7:46:
                    e9:92:1f:76:97:f5:4d:09:e0:56:6a:4a:4a:54:17:
                    3b:d1:02:32:58:68:9d:ae:ca:bd:84:0d:fd:2c:a3:
                    7a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FB:7E:23:7C:9B:44:D4:6B:C0:6A:21:AA:2C:A0:47:A9:07:8D:E3
            X509v3 Authority Key Identifier:
                keyid:0A:84:67:B9:07:28:71:EA:68:1B:57:A0:D8:01:DD:A3:8C:6B:FF:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoRnuQcocepoG1eg2AHdo4xr_3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db5301-c163-47a9-b298-ada2df715a1f/1/CoRnuQcocepoG1eg2AHdo4xr_3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:d4:b5:20:90:ab:0f:42:6b:b0:58:dc:0c:77:a4:8f:27:f3:
         23:d3:89:75:28:da:bd:43:12:84:44:24:4e:4b:7d:46:20:71:
         3b:6a:7b:2d:ad:42:e0:a4:ac:28:71:bd:5e:57:6e:68:ad:3f:
         bb:28:a7:1b:9a:cc:2f:5f:b9:f7:29:a3:c0:e3:03:0b:18:62:
         a1:53:f9:6b:fc:6f:f5:cb:7d:2e:2f:7d:0a:51:10:e4:3b:16:
         64:e0:60:1e:53:9b:f3:35:52:61:3c:66:73:c5:09:7a:8e:4d:
         96:7e:45:c3:2f:5a:8d:df:db:25:bb:fb:49:97:45:42:9a:ed:
         2b:9b:cd:91:2d:ae:ad:07:cc:f4:44:09:57:ee:d6:c9:d3:a0:
         49:be:e5:6b:1b:a5:7f:b5:01:99:ee:af:12:42:08:25:4c:9d:
         2a:c2:8a:7a:7a:d4:fc:7d:28:83:08:fc:7e:7e:ee:75:cd:01:
         f0:c7:2f:ee:f8:ef:b9:42:37:e6:24:16:39:e3:c7:bf:74:aa:
         85:d7:24:99:29:e1:82:7a:69:48:83:66:d6:5f:b7:66:59:7d:
         e0:2b:67:51:88:b3:92:2d:48:59:ec:e5:5d:5d:6e:b6:e1:17:
         e9:ca:0a:23:2d:83:8c:bb:7a:0d:5f:76:78:76:1e:14:de:3c:
         8a:66:a2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----