Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft
File:                     Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft (raw, json)
Hash identifier:          Vbi21e/SEhG1dzC+FDrh1wB1mr+h8AlbqI2fzxCuVAk=
Subject key identifier:   4A:ED:94:92:F3:64:95:EC:15:40:FA:4A:F9:A2:6C:A8:FF:F9:75:07
Authority key identifier: 46:8E:CB:A1:0E:75:99:A0:30:AA:61:30:88:68:8A:6C:26:D6:2D:75
Certificate issuer:       /CN=468ecba10e7599a030aa613088688a6c26d62d75
Certificate serial:       01901D4641EC100BD0DDE2B9AFE13C258ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ro7LoQ51maAwqmEwiGiKbCbWLXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft
Manifest number:          0E56
Signing time:             Sat 15 Jun 2024 19:01:01 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:01 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:01 +0000
Files and hashes:         1: Ro7LoQ51maAwqmEwiGiKbCbWLXU.crl (hash: pXo9C7weaZVMTN1Q6cZkUrmCZ9wzvnjoCs97i98+Z4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ro7LoQ51maAwqmEwiGiKbCbWLXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:41:ec:10:0b:d0:dd:e2:b9:af:e1:3c:25:8e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468ecba10e7599a030aa613088688a6c26d62d75
        Validity
            Not Before: Jun 15 19:01:01 2024 GMT
            Not After : Jun 16 19:01:01 2024 GMT
        Subject: CN=4aed9492f36495ec1540fa4af9a26ca8fff97507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3c:cf:4b:5e:94:93:ec:92:fd:10:e2:28:31:
                    77:e3:c9:66:9a:67:f4:21:ad:83:6d:24:19:c3:d7:
                    4d:32:64:62:a2:fe:21:6d:a1:82:9c:04:bb:5c:6e:
                    08:65:b1:b0:b6:13:c1:68:99:27:e6:a3:38:d2:91:
                    89:88:7f:69:1b:36:b6:d9:eb:b9:86:2d:6d:cb:bf:
                    eb:63:18:ad:78:d7:f0:36:f1:9c:53:5d:41:07:c0:
                    ea:a5:96:de:8b:5e:05:3b:6d:8f:fb:9e:2b:00:ae:
                    a1:52:ab:0f:b3:1c:72:dc:3d:45:f9:8d:c2:4d:50:
                    6e:84:80:33:59:cd:18:ef:22:55:c7:5f:d1:a1:ef:
                    43:a9:0f:a2:8d:6e:4f:60:8c:fd:44:fd:b0:af:07:
                    dc:e4:c6:a1:0a:87:6e:72:8e:fc:0e:5a:31:f5:f7:
                    9e:35:35:3d:b5:72:71:c1:21:aa:ad:75:28:52:ca:
                    ed:ee:9e:23:fe:21:8a:1c:7d:67:45:8b:87:15:fc:
                    12:8d:04:b0:84:ee:14:0d:8f:77:05:ec:56:57:cd:
                    de:47:84:6a:04:c7:b5:4c:30:61:39:b6:cb:8e:17:
                    71:58:9b:29:60:25:c3:fc:1f:9b:50:3e:cc:58:78:
                    fb:ba:b5:57:59:11:95:b3:af:3e:af:39:4f:f8:39:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:ED:94:92:F3:64:95:EC:15:40:FA:4A:F9:A2:6C:A8:FF:F9:75:07
            X509v3 Authority Key Identifier:
                keyid:46:8E:CB:A1:0E:75:99:A0:30:AA:61:30:88:68:8A:6C:26:D6:2D:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ro7LoQ51maAwqmEwiGiKbCbWLXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1ea50-4e05-4abd-8927-df7e0bd6f816/1/Ro7LoQ51maAwqmEwiGiKbCbWLXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:25:38:a9:ad:67:ad:63:7a:08:56:fa:2d:fe:09:98:d0:63:
         cc:f8:4e:d7:02:1a:1b:2a:01:a1:36:d7:5e:ac:4e:2f:39:86:
         7b:f0:3b:4f:d2:69:9a:ec:07:26:c6:78:40:61:04:6b:cb:42:
         5d:20:0d:c0:e6:bf:e2:d3:ea:db:1e:63:7e:1c:25:17:dc:0a:
         ff:cf:e4:2f:c8:b9:8f:18:bf:ac:36:6a:d9:54:0e:91:ef:86:
         dc:e5:c2:af:1f:4b:c6:df:7a:05:4f:e7:29:52:b8:4c:95:ab:
         0b:4c:c4:89:07:18:12:99:1b:33:d8:41:37:0e:fc:87:31:4e:
         18:ca:75:0b:71:c4:a8:92:94:c9:ae:26:2f:f5:d4:e7:36:db:
         96:24:95:72:c0:97:c2:e7:a4:fa:30:8c:16:f5:3a:dd:b5:fa:
         83:28:b0:ce:d5:95:2c:8a:de:ed:20:60:00:76:05:dc:66:ec:
         48:5b:d9:61:c3:37:f9:2b:2c:a0:65:b9:83:fa:fa:ee:94:60:
         02:1f:df:9e:6d:82:b0:7a:57:8c:4c:2a:36:3c:45:a7:ab:f0:
         a9:7b:2e:40:a0:07:3f:4b:e7:bb:73:20:fd:23:e8:df:6f:c9:
         32:b0:a3:74:aa:40:28:ee:fa:15:ab:69:73:3d:95:42:00:e5:
         4b:0a:61:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRkHsEAvQ3eK5r+E8JY7OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGVjYmExMGU3NTk5YTAzMGFhNjEzMDg4Njg4YTZjMjZk
NjJkNzUwHhcNMjQwNjE1MTkwMTAxWhcNMjQwNjE2MTkwMTAxWjAzMTEwLwYDVQQD
Eyg0YWVkOTQ5MmYzNjQ5NWVjMTU0MGZhNGFmOWEyNmNhOGZmZjk3NTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TzPS16Uk+yS/RDiKDF348lmmmf0
Ia2DbSQZw9dNMmRiov4hbaGCnAS7XG4IZbGwthPBaJkn5qM40pGJiH9pGza22eu5
hi1ty7/rYxiteNfwNvGcU11BB8DqpZbei14FO22P+54rAK6hUqsPsxxy3D1F+Y3C
TVBuhIAzWc0Y7yJVx1/Roe9DqQ+ijW5PYIz9RP2wrwfc5MahCoduco78Dlox9fee
NTU9tXJxwSGqrXUoUsrt7p4j/iGKHH1nRYuHFfwSjQSwhO4UDY93BexWV83eR4Rq
BMe1TDBhObbLjhdxWJspYCXD/B+bUD7MWHj7urVXWRGVs68+rzlP+Dn8dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErtlJLzZJXsFUD6SvmibKj/+XUHMB8GA1UdIwQY
MBaAFEaOy6EOdZmgMKphMIhoimwm1i11MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm83TG9RNTFtYUF3cW1Fd2lHaUtiQ2JXTFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMWVhNTAtNGUwNS00YWJkLTg5Mjct
ZGY3ZTBiZDZmODE2LzEvUm83TG9RNTFtYUF3cW1Fd2lHaUtiQ2JXTFhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mMWVhNTAtNGUwNS00YWJkLTg5MjctZGY3ZTBiZDZmODE2
LzEvUm83TG9RNTFtYUF3cW1Fd2lHaUtiQ2JXTFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCU4qa1n
rWN6CFb6Lf4JmNBjzPhO1wIaGyoBoTbXXqxOLzmGe/A7T9JpmuwHJsZ4QGEEa8tC
XSANwOa/4tPq2x5jfhwlF9wK/8/kL8i5jxi/rDZq2VQOke+G3OXCrx9Lxt96BU/n
KVK4TJWrC0zEiQcYEpkbM9hBNw78hzFOGMp1C3HEqJKUya4mL/XU5zbbliSVcsCX
wuek+jCMFvU63bX6gyiwztWVLIre7SBgAHYF3GbsSFvZYcM3+SssoGW5g/r67pRg
Ah/fnm2CsHpXjEwqNjxFp6vwqXsuQKAHP0vnu3Mg/SPo32/JMrCjdKpAKO76Fatp
cz2VQgDlSwphCQ==
-----END CERTIFICATE-----