Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File:                     793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier:          i8n/4Xc7k9D6BwuO8U/MM0lnbrn+knEkNsHISKw0WaI=
Subject key identifier:   AF:6D:FD:5D:55:BC:CD:1D:72:10:BE:12:98:91:23:47:58:CF:6B:56
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer:       /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial:       01901BFD7FC2701F8C0E90547054EA94C00D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 13:01:56 +0000
Manifest this update:     Sat 15 Jun 2024 13:01:56 +0000
Manifest next update:     Sun 16 Jun 2024 13:01:56 +0000
Files and hashes:         1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: Y2o7iUBc/VOnXWk27SWzOYMEzkkGop/g9ANm3mYFpro=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 13:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fd:7f:c2:70:1f:8c:0e:90:54:70:54:ea:94:c0:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
        Validity
            Not Before: Jun 15 13:01:56 2024 GMT
            Not After : Jun 16 13:01:56 2024 GMT
        Subject: CN=af6dfd5d55bccd1d7210be129891234758cf6b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:21:09:6a:d4:c1:ef:ee:20:70:00:4b:10:1b:
                    b7:66:f5:c3:2c:a2:6a:83:47:6d:b3:e7:92:63:7c:
                    b8:4e:2f:9d:e1:63:8d:3b:55:5c:bb:d7:fc:9c:5f:
                    80:b5:43:ba:c4:04:ff:a6:8d:77:6a:a3:d9:74:3b:
                    94:ac:98:10:9e:6c:d9:e0:bc:25:8d:5c:88:c2:51:
                    8b:f4:9e:e9:2d:16:3e:44:b2:15:e4:64:1f:66:16:
                    f3:25:ea:01:0c:49:23:2b:73:c6:cd:6c:c9:6a:4e:
                    f2:c7:c6:8a:83:e7:f0:d9:a6:33:f8:be:9d:a9:87:
                    6b:76:fa:ab:ad:3f:00:3c:8d:d8:c9:3e:e9:79:32:
                    7b:5a:5a:be:c7:d8:dc:96:9a:d5:cd:d5:8a:9b:2a:
                    c0:8a:f3:43:f9:61:37:fc:b6:4b:11:df:81:e5:f0:
                    38:cc:e6:cc:66:ef:28:93:9a:12:c3:41:d0:a1:91:
                    2f:e3:df:03:c2:f5:82:4a:56:13:db:f1:b9:e9:7e:
                    9f:cd:0e:13:87:b0:29:5b:d4:20:39:7a:77:5b:1b:
                    8d:7d:6e:ec:76:50:8c:79:18:de:f7:67:e9:66:00:
                    84:56:af:31:8e:67:11:65:9a:e2:e6:9d:51:b0:65:
                    cd:27:cc:b0:af:1b:a8:d4:2a:db:96:3d:e3:35:8d:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6D:FD:5D:55:BC:CD:1D:72:10:BE:12:98:91:23:47:58:CF:6B:56
            X509v3 Authority Key Identifier:
                keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:c6:fc:18:f3:d7:e6:69:3f:96:cf:08:cb:c4:35:8f:f1:d8:
         e9:c2:23:59:25:ad:55:f5:79:7b:5e:0d:85:a4:06:8b:bd:e2:
         f6:66:e7:b1:18:bf:b4:ab:80:7b:2d:51:3c:8c:4a:fa:fd:bf:
         13:1d:19:5e:af:12:2a:13:84:c4:10:4a:b7:01:23:79:43:07:
         72:4a:84:53:07:17:f8:6c:7f:bd:62:d7:61:01:e8:a3:26:75:
         21:9f:7c:e9:8d:91:22:56:fd:43:46:a4:60:e2:e3:85:57:5a:
         74:bb:fb:82:62:6f:fd:90:b6:46:55:27:18:c5:30:a2:61:a2:
         88:0d:22:09:d1:8e:9b:81:bc:f1:61:26:07:bd:d0:86:b1:73:
         df:7b:a5:4c:97:b8:eb:02:12:d2:8d:dd:ee:10:08:fb:70:57:
         98:56:8f:2d:b8:7e:54:a0:b1:2d:ec:02:4b:89:78:9a:40:5a:
         f3:3c:28:36:ac:ab:0f:ad:5a:0f:42:4f:3b:70:47:f5:36:b7:
         03:e0:fa:5a:f6:17:9b:9f:79:d0:41:54:6a:88:ba:0e:73:5f:
         ca:4c:88:cc:1e:43:bc:a7:9c:42:21:ac:48:c8:bc:11:fc:2c:
         15:75:ec:95:b7:73:f6:40:65:d5:f7:a5:03:d6:a6:6b:65:97:
         56:0c:32:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/X/CcB+MDpBUcFTqlMANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGRjODZiODIwMDVmZjhjN2MyNjRhMmUwNjcwMzdhNjA4
YjQ4MWYwHhcNMjQwNjE1MTMwMTU2WhcNMjQwNjE2MTMwMTU2WjAzMTEwLwYDVQQD
EyhhZjZkZmQ1ZDU1YmNjZDFkNzIxMGJlMTI5ODkxMjM0NzU4Y2Y2YjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CEJatTB7+4gcABLEBu3ZvXDLKJq
g0dts+eSY3y4Ti+d4WONO1Vcu9f8nF+AtUO6xAT/po13aqPZdDuUrJgQnmzZ4Lwl
jVyIwlGL9J7pLRY+RLIV5GQfZhbzJeoBDEkjK3PGzWzJak7yx8aKg+fw2aYz+L6d
qYdrdvqrrT8API3YyT7peTJ7Wlq+x9jclprVzdWKmyrAivND+WE3/LZLEd+B5fA4
zObMZu8ok5oSw0HQoZEv498DwvWCSlYT2/G56X6fzQ4Th7ApW9QgOXp3WxuNfW7s
dlCMeRje92fpZgCEVq8xjmcRZZri5p1RsGXNJ8ywrxuo1Crblj3jNY39SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9t/V1VvM0dchC+EpiRI0dYz2tWMB8GA1UdIwQY
MBaAFO/dyGuCAF/4x8JkouBnA3pgi0gfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMt
M2ViMTQ4OGNlOGUxLzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS83ODk4NTEtNTdjMi00YTU4LWEwNmMtM2ViMTQ4OGNlOGUx
LzEvNzkzSWE0SUFYX2pId21TaTRHY0RlbUNMU0I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8b8GPPX
5mk/ls8Iy8Q1j/HY6cIjWSWtVfV5e14NhaQGi73i9mbnsRi/tKuAey1RPIxK+v2/
Ex0ZXq8SKhOExBBKtwEjeUMHckqEUwcX+Gx/vWLXYQHooyZ1IZ986Y2RIlb9Q0ak
YOLjhVdadLv7gmJv/ZC2RlUnGMUwomGiiA0iCdGOm4G88WEmB73QhrFz33ulTJe4
6wIS0o3d7hAI+3BXmFaPLbh+VKCxLewCS4l4mkBa8zwoNqyrD61aD0JPO3BH9Ta3
A+D6WvYXm5950EFUaoi6DnNfykyIzB5DvKecQiGsSMi8EfwsFXXslbdz9kBl1fel
A9ama2WXVgwySQ==
-----END CERTIFICATE-----