Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
File:                     kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft (raw, json)
Hash identifier:          zIHExmzbfgER30tiqwOkfLjS/UkpGihVL5zdbYXRgUc=
Subject key identifier:   D6:30:64:69:1A:1C:60:06:0F:C1:5A:31:62:68:E0:37:0F:F1:48:1E
Authority key identifier: 90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D
Certificate issuer:       /CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d
Certificate serial:       019234DC44A6CAF9AAA59A4481EDF5F48ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
Manifest number:          042B
Signing time:             Fri 27 Sep 2024 19:01:43 +0000
Manifest this update:     Fri 27 Sep 2024 19:01:43 +0000
Manifest next update:     Sat 28 Sep 2024 19:01:43 +0000
Files and hashes:         1: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl (hash: zje8BpvNan30Se2fsf2mMSgFYC4Qz/kYbhTllsN9BUI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:dc:44:a6:ca:f9:aa:a5:9a:44:81:ed:f5:f4:8e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d
        Validity
            Not Before: Sep 27 19:01:43 2024 GMT
            Not After : Sep 28 19:01:43 2024 GMT
        Subject: CN=d63064691a1c60060fc15a316268e0370ff1481e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:b3:8c:0c:35:e7:30:b6:99:4a:4b:be:8d:
                    ef:f7:26:d0:23:a9:06:6f:be:7b:70:f5:09:11:37:
                    d2:d3:3a:e3:bf:c8:2a:4d:dd:05:d9:cc:a4:0f:60:
                    1d:d7:d1:0a:d7:f6:9c:8e:ac:ab:6c:5a:0c:24:9c:
                    d5:1a:01:32:e3:de:fc:19:92:e3:0b:a0:b9:af:1f:
                    8d:cf:78:e6:2c:20:f4:08:41:b6:7f:52:fc:90:51:
                    3f:0f:f8:f9:d3:13:13:bb:6d:bf:e4:fe:e9:ed:bd:
                    c2:77:7c:84:7d:c6:8e:9d:00:0b:5a:7c:fa:a5:a2:
                    40:5a:08:ff:ea:5a:32:84:d0:4e:aa:82:b9:32:6b:
                    16:d7:9f:1a:2e:43:3c:27:e1:38:90:44:11:ba:88:
                    9f:45:04:2d:8c:d5:c6:d7:6d:c6:d6:67:87:ee:33:
                    a8:17:c1:21:30:4c:c8:43:d8:e0:db:09:77:d2:aa:
                    b5:61:5b:f2:ea:8b:26:a2:3d:3b:7b:2b:5e:c0:a5:
                    1a:9c:16:4c:a5:6d:54:17:44:b0:03:d6:40:cb:1c:
                    9b:36:4c:7d:32:37:58:20:18:79:2d:64:11:9b:34:
                    fe:29:4b:a9:91:39:a1:62:01:03:2b:73:9b:f3:d3:
                    9a:d5:80:3b:a5:65:f8:37:5a:aa:81:24:a2:ae:08:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:30:64:69:1A:1C:60:06:0F:C1:5A:31:62:68:E0:37:0F:F1:48:1E
            X509v3 Authority Key Identifier:
                keyid:90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a3:8c:2e:07:0a:e8:a3:cb:f6:b7:8f:59:c4:60:f4:1b:7f:
         68:e9:79:2b:fc:fe:58:4c:86:2f:bf:74:e6:80:f8:5d:11:43:
         d9:e0:a8:bb:02:6a:df:7d:4a:72:44:b9:6a:5b:48:90:82:0a:
         a2:7e:9e:e0:c6:ac:83:98:7f:a0:25:f3:8e:41:70:a7:b1:d2:
         58:3d:ce:e8:b8:92:e5:16:01:13:eb:92:1e:5a:86:88:b0:3b:
         b0:45:76:84:9d:c1:28:48:c7:79:56:bc:fd:8c:b9:f2:2e:09:
         71:98:fc:34:2e:29:4c:29:ed:11:86:bc:e1:f2:f1:e6:6d:54:
         3d:c4:42:6f:69:f8:ab:0e:ea:81:43:28:cc:3b:ba:65:f8:dc:
         4e:b7:24:49:49:6c:e9:2d:8a:1c:44:2e:d6:57:fd:b9:a7:f7:
         e2:d5:ab:cc:12:9a:5b:c1:98:74:10:cd:6f:26:2a:5a:62:4b:
         8b:d6:a0:a1:52:b9:57:54:d3:81:54:ea:f6:89:b3:47:fb:a8:
         e0:59:66:fb:27:29:2f:fb:c9:7b:3c:07:9b:3d:14:13:6f:0c:
         83:35:5e:d6:59:5f:2a:b1:76:7e:e3:03:34:dc:d2:b9:cc:a8:
         a1:a5:08:28:8c:6b:4a:ea:4e:df:43:af:09:d3:9a:3c:cd:54:
         3f:78:ef:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----