Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
File:                     fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json)
Hash identifier:          2cPgJWHYtPo8uC5E0FqPjX7cffcPsmFq/uuUUDXLBT4=
Subject key identifier:   F8:CC:9F:8A:8C:34:69:21:5E:B3:4F:E9:E3:76:79:2E:65:B8:6F:C2
Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Certificate issuer:       /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Certificate serial:       01901DEB18B50C35E66F9406465AA59BE5B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
Manifest number:          02CD
Signing time:             Sat 15 Jun 2024 22:01:04 +0000
Manifest this update:     Sat 15 Jun 2024 22:01:04 +0000
Manifest next update:     Sun 16 Jun 2024 22:01:04 +0000
Files and hashes:         1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: 8fu43DuCbR+uVrB4c/hvMuaGBIzTRclg/3foul5tA1M=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 22:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:eb:18:b5:0c:35:e6:6f:94:06:46:5a:a5:9b:e5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
        Validity
            Not Before: Jun 15 22:01:04 2024 GMT
            Not After : Jun 16 22:01:04 2024 GMT
        Subject: CN=f8cc9f8a8c3469215eb34fe9e376792e65b86fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:29:89:0f:1d:da:ba:3a:45:25:8c:03:6f:3e:
                    3f:97:09:c7:fd:11:55:df:93:6d:74:73:1e:6c:5f:
                    2c:34:fc:2c:41:aa:73:83:a8:b7:b4:fd:71:30:c4:
                    50:dc:83:3a:80:33:4f:71:8a:95:83:d7:38:ef:75:
                    cb:d3:3c:19:77:66:fc:e3:ad:f7:10:d9:98:b0:5d:
                    9f:f0:f8:07:bb:0e:d0:ae:6e:7c:89:b3:4d:a8:e8:
                    2d:1e:56:d0:b2:d6:46:ff:37:d2:95:be:bd:ef:31:
                    77:01:49:50:64:ed:53:af:49:e5:4a:31:a8:d1:f0:
                    3e:66:b6:b1:cb:09:96:82:ee:fd:68:b2:23:24:a7:
                    a8:d3:30:9e:30:88:03:f7:8c:d2:ba:36:d3:54:e1:
                    d8:9c:35:a1:f7:18:a5:f6:4a:cb:dc:66:31:63:98:
                    2a:fc:b4:00:a7:06:90:38:6b:d9:2d:57:44:24:22:
                    aa:22:16:c5:5a:18:9e:07:d9:0d:74:6d:8d:31:74:
                    ae:b0:f7:ec:86:a8:86:6b:29:1f:9e:6e:10:1e:ac:
                    da:a1:d2:fc:d0:43:32:83:a2:b0:c4:8f:e6:d4:3b:
                    5f:9d:41:f6:0c:f7:e1:cb:e7:b5:31:c8:f3:02:f0:
                    c7:69:ea:83:78:2c:43:f7:f6:7a:2a:4b:54:22:83:
                    89:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CC:9F:8A:8C:34:69:21:5E:B3:4F:E9:E3:76:79:2E:65:B8:6F:C2
            X509v3 Authority Key Identifier:
                keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c4:fd:22:af:37:32:bd:ae:af:23:c6:1a:df:b6:34:96:5c:
         0d:bc:67:69:79:f0:25:72:e9:69:13:6c:d7:8e:4c:9e:0a:3a:
         78:7a:9c:06:a4:df:b0:47:c2:a9:39:b0:b3:4d:f6:df:fd:fe:
         85:b7:f8:ed:cd:7f:37:73:3e:3a:f1:ef:9c:eb:6c:c1:bf:1c:
         8a:d9:8b:54:86:78:d4:b4:12:b8:3e:dc:4d:ca:87:f0:19:fe:
         cb:ac:b7:a7:32:9b:29:d6:f8:ac:46:30:5b:71:4b:b4:cb:b7:
         53:4f:f6:75:1f:d1:e7:7f:25:df:1b:d8:a7:99:c1:39:00:cb:
         18:fd:4c:56:ac:d8:59:f6:73:17:b4:db:fc:6e:3f:15:2c:8b:
         37:31:61:37:4c:23:56:f9:da:56:3e:85:b2:32:c3:5a:b7:a6:
         b1:0e:5b:70:22:db:e4:1e:2e:09:27:d8:ba:11:96:18:25:8e:
         e6:3c:64:80:7f:42:be:41:ca:a3:cf:d5:fa:ca:64:21:85:4d:
         05:3b:f9:62:29:3f:8c:db:28:8e:d0:2f:bf:90:f2:7c:95:95:
         ce:d9:2d:0a:b6:f3:dc:21:f6:7f:6a:77:2b:d7:9c:19:16:a5:
         a3:78:b7:08:f6:53:dc:57:7a:bd:de:e4:66:39:6d:d2:a6:ac:
         bb:da:63:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd6xi1DDXmb5QGRlqlm+W1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNjVlYzhlZTc5MmJiNWQwYTNjYzcwOWFkY2FlOWI2ODVh
OWRlNWIwHhcNMjQwNjE1MjIwMTA0WhcNMjQwNjE2MjIwMTA0WjAzMTEwLwYDVQQD
EyhmOGNjOWY4YThjMzQ2OTIxNWViMzRmZTllMzc2NzkyZTY1Yjg2ZmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ymJDx3aujpFJYwDbz4/lwnH/RFV
35NtdHMebF8sNPwsQapzg6i3tP1xMMRQ3IM6gDNPcYqVg9c473XL0zwZd2b84633
ENmYsF2f8PgHuw7Qrm58ibNNqOgtHlbQstZG/zfSlb697zF3AUlQZO1Tr0nlSjGo
0fA+ZraxywmWgu79aLIjJKeo0zCeMIgD94zSujbTVOHYnDWh9xil9krL3GYxY5gq
/LQApwaQOGvZLVdEJCKqIhbFWhieB9kNdG2NMXSusPfshqiGaykfnm4QHqzaodL8
0EMyg6KwxI/m1DtfnUH2DPfhy+e1McjzAvDHaeqDeCxD9/Z6KktUIoOJCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPjMn4qMNGkhXrNP6eN2eS5luG/CMB8GA1UdIwQY
MBaAFHxl7I7nkrtdCjzHCa3K6baFqd5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NzNlNjktNTUwZS00NGE5LWEwY2Yt
NjNiOTUwYWEzZTFkLzEvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NzNlNjktNTUwZS00NGE5LWEwY2YtNjNiOTUwYWEzZTFk
LzEvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMT9Iq83
Mr2uryPGGt+2NJZcDbxnaXnwJXLpaRNs145Mngo6eHqcBqTfsEfCqTmws0323/3+
hbf47c1/N3M+OvHvnOtswb8citmLVIZ41LQSuD7cTcqH8Bn+y6y3pzKbKdb4rEYw
W3FLtMu3U0/2dR/R538l3xvYp5nBOQDLGP1MVqzYWfZzF7Tb/G4/FSyLNzFhN0wj
VvnaVj6FsjLDWremsQ5bcCLb5B4uCSfYuhGWGCWO5jxkgH9CvkHKo8/V+spkIYVN
BTv5Yik/jNsojtAvv5DyfJWVztktCrbz3CH2f2p3K9ecGRalo3i3CPZT3Fd6vd7k
Zjlt0qasu9pjWw==
-----END CERTIFICATE-----