RPKI Manifest
Location:                 rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft (download)

Subject key identifier:   22:25:62:28:1A:58:BC:07:23:61:9B:F6:00:92:85:16:9C:EC:73:67
Authority key identifier: 2A:7D:D1:D7:87:D7:93:E4:C8:AF:56:E1:97:D4:EE:D9:2A:F6:BA:13
Manifest Number:          1388
Files:
    1: Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
	hash HpVetJTXIcJK2UuGre48UH0qlK/UHObmJoqXpswH6Tc=
    2: KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
	hash Hh52r1jc6bsNN5oH/+LzNR398MMwYg8fRE5XD8nHRk0=

--
$ test-mft -p rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290448763 (0x114fe57b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7dd1d787d793e4c8af56e197d4eed92af6ba13
        Validity
            Not Before: Jan 25 17:01:11 2022 GMT
            Not After : Jan 26 17:01:11 2022 GMT
        Subject: CN=222562281a58bc0723619bf6009285169cec7367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:2d:ea:5b:ad:9b:91:6f:52:fb:a4:5b:34:
                    95:f1:e2:a1:15:41:27:e2:ba:2a:3e:93:a0:0e:ee:
                    af:9b:27:91:12:77:1a:1f:0d:ea:80:f0:0f:81:3c:
                    b7:0c:36:e5:b3:7b:26:98:58:c0:83:4f:8e:82:dc:
                    d6:3d:e6:14:2c:6d:4a:cc:23:4b:a6:33:e3:fe:ea:
                    07:5a:04:32:18:16:2a:07:31:9f:c2:17:f8:2a:57:
                    27:c0:24:d2:fd:41:41:fb:ea:ca:11:4c:7e:6a:74:
                    06:d6:2f:03:18:9b:16:a8:4e:32:39:be:45:d9:31:
                    5d:54:43:99:4d:06:47:23:d2:6b:fc:e3:2b:7a:2b:
                    44:8a:6d:91:67:c6:13:eb:04:82:bd:ce:65:44:28:
                    8e:2a:7e:3e:ae:b6:26:a5:b3:4b:e9:34:f7:3e:fe:
                    d1:87:ce:c4:45:b8:e8:69:ec:f9:94:c7:4b:52:e4:
                    d4:df:d4:16:58:77:d5:3e:32:2e:1d:64:26:4d:fd:
                    2c:94:93:e9:49:0f:50:5b:97:6f:5a:0c:ce:2f:5d:
                    10:f2:a9:20:89:32:e7:f4:d4:cc:86:26:9f:ff:96:
                    1e:10:04:dd:2a:43:84:9c:15:bb:53:e3:86:54:b3:
                    de:cb:90:d9:bc:6c:d8:69:47:e6:b2:ad:f8:c2:c9:
                    57:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                22:25:62:28:1A:58:BC:07:23:61:9B:F6:00:92:85:16:9C:EC:73:67
            X509v3 Authority Key Identifier: 
                keyid:2A:7D:D1:D7:87:D7:93:E4:C8:AF:56:E1:97:D4:EE:D9:2A:F6:BA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:ec:e5:a9:bf:b9:2d:76:55:8e:2c:0b:a5:e9:b9:ee:e8:79:
         7d:ff:9c:a3:60:e0:4f:60:02:1c:08:a0:75:bd:af:4d:a4:a6:
         e7:27:4f:3f:8a:e0:c7:6e:60:63:73:d1:36:c2:7b:6f:2d:00:
         45:b0:a9:8c:d8:7a:7c:67:d3:1a:df:32:67:80:2a:8b:cb:c6:
         7f:ce:3a:4b:20:1a:c1:71:ea:60:d7:d3:a5:88:6e:d6:ed:5c:
         37:82:a1:35:43:5a:b3:79:8f:25:12:f3:50:28:71:c1:61:c8:
         f4:aa:19:3d:7f:8a:ab:47:e2:5c:ee:d9:5c:aa:d9:eb:98:b7:
         13:5e:5d:2e:52:5e:cf:8a:d0:bb:af:8b:05:5e:63:9c:21:42:
         25:50:c4:75:d3:35:37:88:d3:63:f1:86:cc:eb:2c:12:a1:ae:
         2f:28:8b:2b:90:3d:b1:17:8d:9a:1e:39:d5:6a:94:d7:02:54:
         02:89:3a:51:b9:ed:79:52:5e:45:3d:9d:51:26:26:e9:15:da:
         f0:0d:40:50:f9:be:3f:59:76:d5:23:8b:7a:c2:ac:8e:cb:26:
         cb:d5:2b:ef:c0:6d:06:14:68:ad:a1:7e:46:b1:3a:6a:d7:c1:
         98:40:fe:ea:5d:de:d0:32:9c:f6:49:59:46:99:35:e4:5b:84:
         97:33:e3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Jan 25 19:13:35 2022 by LibreSSL & rpki-client.