Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
File:                     RK4A_ueCEKsEi0QODLKn9AyduMw.mft (raw, json)
Hash identifier:          YK/+5at+z1Dyy7qgfJVHZd9SK7cgiIWosoKyr2mLPAk=
Subject key identifier:   62:02:6F:BB:23:E9:B9:BA:76:02:7A:24:58:4E:EA:B9:16:53:7B:8C
Authority key identifier: 44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC
Certificate issuer:       /CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
Certificate serial:       019049B0BE5B6770875D02CDD0898C1CC160
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
Manifest number:          0606
Signing time:             Mon 24 Jun 2024 10:00:38 +0000
Manifest this update:     Mon 24 Jun 2024 10:00:38 +0000
Manifest next update:     Tue 25 Jun 2024 10:00:38 +0000
Files and hashes:         1: RK4A_ueCEKsEi0QODLKn9AyduMw.crl (hash: t5jWSr+vvaWIIVWOFmGYCJ/GAboEfIQBoIJpqSFn9iw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:49:b0:be:5b:67:70:87:5d:02:cd:d0:89:8c:1c:c1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ae00fee78210ab048b440e0cb2a7f40c9db8cc
        Validity
            Not Before: Jun 24 10:00:38 2024 GMT
            Not After : Jun 25 10:00:38 2024 GMT
        Subject: CN=62026fbb23e9b9ba76027a24584eeab916537b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:99:ee:33:38:74:9a:b2:67:ab:03:2b:72:b4:
                    82:e4:b0:34:1d:d2:3b:29:e4:b0:67:cc:e1:23:27:
                    12:12:58:d5:74:d6:c7:c9:20:64:7d:a5:b4:5f:91:
                    7c:6d:f0:43:9e:96:b0:b5:f5:59:61:28:19:4e:34:
                    e5:5b:87:9f:18:63:37:7f:d3:3c:e1:e3:be:47:78:
                    ce:01:0b:03:50:3a:c8:bd:fa:ef:49:5f:fc:6f:22:
                    d8:ea:fd:a8:c6:e9:f8:d7:01:4a:d9:86:e7:5c:56:
                    07:4b:d0:37:e7:ec:1c:39:9d:73:8a:dc:6e:d3:4f:
                    0f:14:c8:fc:bc:8a:13:e4:5a:3c:67:fc:db:56:11:
                    3a:1a:0f:fd:ec:8c:2f:2e:a4:2d:7e:53:a9:15:67:
                    24:7b:ea:dc:44:1b:e0:92:4f:22:85:0a:bd:b5:f1:
                    6d:b8:7c:b7:8a:26:f6:9d:c6:86:19:19:5a:7c:17:
                    33:c4:0b:d5:f0:63:e8:79:eb:47:ac:d2:50:c2:e5:
                    af:fa:83:69:36:a8:a1:f1:13:c1:1c:92:c4:74:e6:
                    d8:98:45:cb:94:24:df:2d:8c:8d:a4:a3:30:c4:2d:
                    14:c9:29:9b:29:79:a4:f6:6b:57:93:04:3a:b1:c8:
                    f0:86:70:2d:cf:cc:18:8a:be:72:c6:dd:d3:94:50:
                    88:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:02:6F:BB:23:E9:B9:BA:76:02:7A:24:58:4E:EA:B9:16:53:7B:8C
            X509v3 Authority Key Identifier:
                keyid:44:AE:00:FE:E7:82:10:AB:04:8B:44:0E:0C:B2:A7:F4:0C:9D:B8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK4A_ueCEKsEi0QODLKn9AyduMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/415e39-6cca-44e3-bbb9-6fc9a5718706/1/RK4A_ueCEKsEi0QODLKn9AyduMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:56:ed:76:a8:dc:f8:72:86:fd:45:7b:73:7e:46:6e:41:94:
         a5:16:a9:93:5a:23:14:dd:ef:ab:ec:1d:e4:7d:6f:cf:f0:67:
         1d:5a:f2:be:d0:43:30:2a:3e:48:43:09:3e:fe:2a:19:ba:53:
         e3:ed:05:51:a8:35:2d:89:ac:87:82:ed:c3:23:0e:b2:34:ed:
         46:68:a9:12:33:9e:0f:45:92:43:fe:80:4c:41:f9:e6:7b:06:
         ec:c9:2e:98:53:5e:30:66:06:a0:90:e8:6c:d3:f2:55:65:7e:
         67:ca:c3:df:9d:d2:c9:72:de:b5:e7:61:12:67:1b:9f:37:ae:
         27:35:a2:88:17:3c:d3:48:df:0e:a7:a9:b1:5f:bf:86:93:9c:
         aa:8a:2f:07:82:e9:33:50:24:2c:38:cd:f3:76:1a:eb:eb:eb:
         f1:7e:3b:eb:0d:f0:12:19:51:c5:49:6b:e2:fd:f2:06:34:56:
         82:bd:34:c0:26:3d:07:c1:88:07:14:f0:d3:52:1c:03:e9:ef:
         0a:0d:2b:9f:ad:b3:72:70:ab:69:83:1a:87:2e:56:e9:59:8b:
         3c:c5:0d:85:8f:6a:69:f5:7d:2c:5c:d7:4c:b1:dd:d2:b0:06:
         91:b5:95:1e:39:68:3b:22:87:5d:5a:18:90:36:75:46:7f:39:
         3d:ba:05:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBJsL5bZ3CHXQLN0ImMHMFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWUwMGZlZTc4MjEwYWIwNDhiNDQwZTBjYjJhN2Y0MGM5
ZGI4Y2MwHhcNMjQwNjI0MTAwMDM4WhcNMjQwNjI1MTAwMDM4WjAzMTEwLwYDVQQD
Eyg2MjAyNmZiYjIzZTliOWJhNzYwMjdhMjQ1ODRlZWFiOTE2NTM3YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJnuMzh0mrJnqwMrcrSC5LA0HdI7
KeSwZ8zhIycSEljVdNbHySBkfaW0X5F8bfBDnpawtfVZYSgZTjTlW4efGGM3f9M8
4eO+R3jOAQsDUDrIvfrvSV/8byLY6v2oxun41wFK2YbnXFYHS9A35+wcOZ1zitxu
008PFMj8vIoT5Fo8Z/zbVhE6Gg/97IwvLqQtflOpFWcke+rcRBvgkk8ihQq9tfFt
uHy3iib2ncaGGRlafBczxAvV8GPoeetHrNJQwuWv+oNpNqih8RPBHJLEdObYmEXL
lCTfLYyNpKMwxC0UySmbKXmk9mtXkwQ6scjwhnAtz8wYir5yxt3TlFCIhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGICb7sj6bm6dgJ6JFhO6rkWU3uMMB8GA1UdIwQY
MBaAFESuAP7nghCrBItEDgyyp/QMnbjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi80MTVlMzktNmNjYS00NGUzLWJiYjkt
NmZjOWE1NzE4NzA2LzEvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi80MTVlMzktNmNjYS00NGUzLWJiYjktNmZjOWE1NzE4NzA2
LzEvUks0QV91ZUNFS3NFaTBRT0RMS245QXlkdU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1btdqjc
+HKG/UV7c35GbkGUpRapk1ojFN3vq+wd5H1vz/BnHVryvtBDMCo+SEMJPv4qGbpT
4+0FUag1LYmsh4LtwyMOsjTtRmipEjOeD0WSQ/6ATEH55nsG7MkumFNeMGYGoJDo
bNPyVWV+Z8rD353SyXLetedhEmcbnzeuJzWiiBc800jfDqepsV+/hpOcqoovB4Lp
M1AkLDjN83Ya6+vr8X476w3wEhlRxUlr4v3yBjRWgr00wCY9B8GIBxTw01IcA+nv
Cg0rn62zcnCraYMahy5W6VmLPMUNhY9qafV9LFzXTLHd0rAGkbWVHjloOyKHXVoY
kDZ1Rn85PboFrg==
-----END CERTIFICATE-----