Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
File:                     pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json)
Hash identifier:          E1ujRlSjnHeZ8tx02U8MdPWppttfZYt6UTQo6APbQEU=
Subject key identifier:   12:D6:7C:C8:BE:67:82:33:67:76:5F:37:89:F5:2E:DC:2D:7A:B2:CC
Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
Certificate issuer:       /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Certificate serial:       01903EC0F238CB3C4264B6D2C1CF0DBD0E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
Manifest number:          0A7B
Signing time:             Sat 22 Jun 2024 07:02:30 +0000
Manifest this update:     Sat 22 Jun 2024 07:02:30 +0000
Manifest next update:     Sun 23 Jun 2024 07:02:30 +0000
Files and hashes:         1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: 8kzby0qfVphsuKrOTdWCHM+u1lt6XqFK0vaCFT71+Xk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:c0:f2:38:cb:3c:42:64:b6:d2:c1:cf:0d:bd:0e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
        Validity
            Not Before: Jun 22 07:02:30 2024 GMT
            Not After : Jun 23 07:02:30 2024 GMT
        Subject: CN=12d67cc8be67823367765f3789f52edc2d7ab2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:87:ec:47:f3:51:dd:77:71:50:d2:c6:14:ce:
                    fc:9e:ac:5a:a9:0d:f8:29:8b:ca:7e:ca:b6:cb:fd:
                    8c:ae:46:9d:43:6a:95:e5:38:c5:4b:e3:61:42:6f:
                    a1:93:eb:e0:36:23:86:05:82:31:ff:60:53:f2:81:
                    f9:19:5c:60:67:cf:b3:5f:e8:87:be:cd:d5:e5:d2:
                    ee:98:7d:6d:b4:f3:41:91:a6:dd:2f:c8:91:54:e3:
                    87:2f:32:ec:f2:64:bc:09:5e:5b:79:d0:86:59:69:
                    7c:5c:ac:c1:61:89:83:57:bb:de:ee:fa:c0:07:aa:
                    31:04:81:00:f9:f4:03:40:48:99:06:e1:2f:e0:e3:
                    b6:38:d8:c1:59:3b:66:96:0a:5f:19:48:d1:2e:96:
                    18:d6:69:30:f7:47:92:84:c6:d0:3c:e9:b6:a8:e1:
                    5b:6a:4f:86:d6:a7:ec:50:e6:de:49:50:81:16:54:
                    12:eb:0e:6c:4a:9b:f7:88:c7:3a:8b:76:f4:f6:44:
                    ea:07:c1:24:94:c6:aa:c0:e6:c0:40:88:d0:3a:0f:
                    fe:8a:46:5e:26:63:d4:2b:de:87:33:32:b9:28:71:
                    1f:ae:da:24:74:a3:a0:87:ee:e2:7a:9c:45:25:f1:
                    f7:fc:4b:d1:f6:b7:cd:a8:78:d0:bb:1a:5d:d4:57:
                    77:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D6:7C:C8:BE:67:82:33:67:76:5F:37:89:F5:2E:DC:2D:7A:B2:CC
            X509v3 Authority Key Identifier:
                keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:af:11:06:54:cc:fc:22:dd:29:21:40:e5:c2:9f:2a:5e:62:
         59:36:7e:a7:e4:59:fd:06:a0:97:c3:2f:da:54:41:07:7b:b7:
         78:0d:27:6f:44:15:98:d8:13:b2:8e:32:df:48:7e:5e:52:4f:
         ea:e9:08:c1:fd:45:de:91:bf:bd:fb:40:50:ec:cb:62:f7:85:
         37:44:3c:d6:11:02:9b:ac:ad:91:a2:42:0e:b5:4c:b3:b8:bc:
         21:bc:5f:d6:07:b8:7a:49:61:1d:ec:46:c0:3b:24:ed:11:92:
         58:75:5e:2a:91:55:fc:bf:11:26:41:13:f0:ee:95:d1:62:b5:
         c2:43:67:6d:d5:80:6a:3d:6d:a0:65:19:c0:63:aa:41:c2:96:
         3d:2f:e3:ee:76:86:13:03:e1:13:9c:5a:24:12:ce:e9:ee:91:
         d0:ac:3f:99:fb:fe:41:8b:b6:1d:c4:53:57:e3:19:2b:26:b8:
         33:53:ca:67:64:2b:cd:2c:dc:c4:c4:04:0c:a9:ea:7d:9a:d8:
         2e:6a:a0:e9:d4:75:c2:c0:96:a5:a7:9b:cc:2e:34:b0:08:7e:
         78:43:28:6b:73:d5:d7:fc:26:30:76:ff:10:12:e9:64:f0:44:
         87:ea:c7:59:5d:d4:60:81:9a:ac:6f:31:d2:39:ef:e1:17:8e:
         09:ba:08:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA+wPI4yzxCZLbSwc8NvQ6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YTgwZDJhZjg2MWI3MGEzN2VjMDUwZTAxM2U2ZGZiYTk0
YzhiM2QwHhcNMjQwNjIyMDcwMjMwWhcNMjQwNjIzMDcwMjMwWjAzMTEwLwYDVQQD
EygxMmQ2N2NjOGJlNjc4MjMzNjc3NjVmMzc4OWY1MmVkYzJkN2FiMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoofsR/NR3XdxUNLGFM78nqxaqQ34
KYvKfsq2y/2MrkadQ2qV5TjFS+NhQm+hk+vgNiOGBYIx/2BT8oH5GVxgZ8+zX+iH
vs3V5dLumH1ttPNBkabdL8iRVOOHLzLs8mS8CV5bedCGWWl8XKzBYYmDV7ve7vrA
B6oxBIEA+fQDQEiZBuEv4OO2ONjBWTtmlgpfGUjRLpYY1mkw90eShMbQPOm2qOFb
ak+G1qfsUObeSVCBFlQS6w5sSpv3iMc6i3b09kTqB8EklMaqwObAQIjQOg/+ikZe
JmPUK96HMzK5KHEfrtokdKOgh+7iepxFJfH3/EvR9rfNqHjQuxpd1Fd3NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLWfMi+Z4IzZ3ZfN4n1LtwterLMMB8GA1UdIwQY
MBaAFKSoDSr4YbcKN+wFDgE+bfupTIs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lYzYyMjUtZDZhNy00MThhLWIwMmYt
NjIzNGVhMDllMTg2LzEvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9lYzYyMjUtZDZhNy00MThhLWIwMmYtNjIzNGVhMDllMTg2
LzEvcEtnTkt2aGh0d28zN0FVT0FUNXQtNmxNaXowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjK8RBlTM
/CLdKSFA5cKfKl5iWTZ+p+RZ/Qagl8Mv2lRBB3u3eA0nb0QVmNgTso4y30h+XlJP
6ukIwf1F3pG/vftAUOzLYveFN0Q81hECm6ytkaJCDrVMs7i8Ibxf1ge4eklhHexG
wDsk7RGSWHVeKpFV/L8RJkET8O6V0WK1wkNnbdWAaj1toGUZwGOqQcKWPS/j7naG
EwPhE5xaJBLO6e6R0Kw/mfv+QYu2HcRTV+MZKya4M1PKZ2QrzSzcxMQEDKnqfZrY
Lmqg6dR1wsCWpaebzC40sAh+eEMoa3PV1/wmMHb/EBLpZPBEh+rHWV3UYIGarG8x
0jnv4ReOCboIsg==
-----END CERTIFICATE-----