Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
File:                     gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json)
Hash identifier:          hgwDDAPEvR0l8Bn9dDb6JdN1mSw/VElEx7qgZN2f53Q=
Subject key identifier:   FE:2F:2A:5B:FE:CD:A1:B1:19:2B:0C:B5:F6:38:DE:8A:B3:A7:5E:C8
Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Certificate issuer:       /CN=81689572b200ba4879381c8574274265592a14ab
Certificate serial:       01901DED1635DCBAB2B3B6610A1C8F98C91E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 22:03:15 +0000
Manifest this update:     Sat 15 Jun 2024 22:03:15 +0000
Manifest next update:     Sun 16 Jun 2024 22:03:15 +0000
Files and hashes:         1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: 6BAWDUKYo5zse96aDTNd8xf9h4xkphbaT6USgEK8tRQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:ed:16:35:dc:ba:b2:b3:b6:61:0a:1c:8f:98:c9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81689572b200ba4879381c8574274265592a14ab
        Validity
            Not Before: Jun 15 22:03:15 2024 GMT
            Not After : Jun 16 22:03:15 2024 GMT
        Subject: CN=fe2f2a5bfecda1b1192b0cb5f638de8ab3a75ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:f2:82:0f:49:84:cf:8f:fe:e6:84:59:94:
                    52:1d:62:c0:21:90:55:cc:67:e3:87:4d:91:ec:f2:
                    92:0c:60:1b:d0:ce:25:cc:7d:e1:02:dd:d9:9d:40:
                    56:65:e6:5a:35:fd:79:2e:bc:34:f5:14:6a:78:69:
                    7a:6d:2b:83:db:af:c7:03:78:ba:3e:a7:f2:52:dc:
                    91:5c:8f:cc:82:8b:d3:bd:d6:1d:0b:75:a0:b7:21:
                    48:0d:4f:65:ec:7e:04:43:c1:ab:da:86:9e:fe:15:
                    25:b7:f4:f9:aa:1a:b9:53:7c:32:c9:51:d9:34:37:
                    0e:b5:13:c2:97:da:41:b9:d8:29:69:8b:5b:45:f1:
                    6f:23:05:4c:18:24:f5:81:1e:80:58:f5:57:da:a7:
                    60:75:de:9d:34:8e:c7:aa:8e:b5:cd:b3:39:c1:26:
                    ad:9e:cb:d1:78:72:d0:95:8d:94:54:a3:f7:27:dd:
                    09:12:88:db:5e:a4:6f:f8:f8:32:3a:09:fe:d0:00:
                    6f:14:8c:b9:31:d0:d4:ae:99:92:b0:19:9e:b8:4a:
                    dc:e1:f9:a3:3c:02:12:27:54:95:40:7d:49:ad:d0:
                    a3:a5:f8:bc:2b:51:b6:96:d5:06:40:6a:21:b3:56:
                    ed:8a:08:7f:61:a8:b8:e0:0d:27:b1:ce:cb:57:41:
                    bb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2F:2A:5B:FE:CD:A1:B1:19:2B:0C:B5:F6:38:DE:8A:B3:A7:5E:C8
            X509v3 Authority Key Identifier:
                keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:5b:86:83:de:37:95:42:fe:6c:34:a4:20:b1:e9:cd:04:c8:
         9a:7f:54:43:a8:f7:16:bf:af:2f:9a:06:c0:3c:3a:3b:df:8b:
         fa:6e:51:7e:38:1a:e0:f3:c6:49:df:83:dc:4b:e9:f0:6e:d5:
         d2:6f:1e:09:61:ba:7c:0f:11:b5:35:2a:f8:f2:c0:c5:da:52:
         b6:db:e8:5d:4d:d8:cd:a4:99:94:23:39:32:90:94:69:f0:cf:
         4c:2f:56:ea:f5:e2:46:60:b5:9a:4e:b7:be:9d:57:76:6b:cf:
         f1:03:8e:c1:e8:b4:68:b2:ae:33:cf:bb:8a:75:a1:9d:7c:0f:
         33:50:b5:8d:88:75:3d:a2:b0:62:76:96:60:00:38:6d:65:0f:
         be:98:54:6d:af:b4:e8:16:71:42:c9:b9:c3:69:ef:02:49:b5:
         4a:1e:83:12:ed:50:76:17:14:01:17:47:4b:5d:56:09:5a:cc:
         f0:73:ba:d3:62:ae:54:13:e8:57:74:c2:a6:9e:c9:15:b9:83:
         c4:3c:27:c2:72:2e:38:ef:2e:3c:7f:2a:f1:cf:bf:40:12:6e:
         6d:3a:7d:6d:7c:6e:ed:69:02:ca:d4:d6:a0:9c:ac:96:34:af:
         ef:16:bb:df:37:07:06:a4:26:fe:96:e9:fb:e9:e0:72:06:17:
         0b:0c:67:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAd7RY13Lqys7ZhChyPmMkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjg5NTcyYjIwMGJhNDg3OTM4MWM4NTc0Mjc0MjY1NTky
YTE0YWIwHhcNMjQwNjE1MjIwMzE1WhcNMjQwNjE2MjIwMzE1WjAzMTEwLwYDVQQD
EyhmZTJmMmE1YmZlY2RhMWIxMTkyYjBjYjVmNjM4ZGU4YWIzYTc1ZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5bygg9JhM+P/uaEWZRSHWLAIZBV
zGfjh02R7PKSDGAb0M4lzH3hAt3ZnUBWZeZaNf15Lrw09RRqeGl6bSuD26/HA3i6
PqfyUtyRXI/MgovTvdYdC3WgtyFIDU9l7H4EQ8Gr2oae/hUlt/T5qhq5U3wyyVHZ
NDcOtRPCl9pBudgpaYtbRfFvIwVMGCT1gR6AWPVX2qdgdd6dNI7Hqo61zbM5wSat
nsvReHLQlY2UVKP3J90JEojbXqRv+PgyOgn+0ABvFIy5MdDUrpmSsBmeuErc4fmj
PAISJ1SVQH1JrdCjpfi8K1G2ltUGQGohs1btigh/Yai44A0nsc7LV0G7zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4vKlv+zaGxGSsMtfY43oqzp17IMB8GA1UdIwQY
MBaAFIFolXKyALpIeTgchXQnQmVZKhSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGIt
NjI0MTU5MmE5NDRiLzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGItNjI0MTU5MmE5NDRi
LzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFuGg943
lUL+bDSkILHpzQTImn9UQ6j3Fr+vL5oGwDw6O9+L+m5Rfjga4PPGSd+D3Evp8G7V
0m8eCWG6fA8RtTUq+PLAxdpSttvoXU3YzaSZlCM5MpCUafDPTC9W6vXiRmC1mk63
vp1XdmvP8QOOwei0aLKuM8+7inWhnXwPM1C1jYh1PaKwYnaWYAA4bWUPvphUba+0
6BZxQsm5w2nvAkm1Sh6DEu1QdhcUARdHS11WCVrM8HO602KuVBPoV3TCpp7JFbmD
xDwnwnIuOO8uPH8q8c+/QBJubTp9bXxu7WkCytTWoJysljSv7xa73zcHBqQm/pbp
++ngcgYXCwxnRA==
-----END CERTIFICATE-----