Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
File:                     KAYV5gBqhh9mz3MH0w_JNQx2994.mft (raw, json)
Hash identifier:          owGW0KdOpd0eFr9BjHtCwEWYtu8FNEZVj6AoIA11qx4=
Subject key identifier:   2F:A9:34:B6:D9:11:C1:69:55:32:10:72:4E:B1:9F:DF:D7:55:1E:34
Authority key identifier: 28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE
Certificate issuer:       /CN=280615e6006a861f66cf7307d30fc9350c76f7de
Certificate serial:       01901C6A8D26FE72C5D0ECE0D1795B7CF4D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
Manifest number:          11C2
Signing time:             Sat 15 Jun 2024 15:01:03 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:03 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:03 +0000
Files and hashes:         1: KAYV5gBqhh9mz3MH0w_JNQx2994.crl (hash: 1UyXmIFPTezXzrW04mazYqCOzj+EV6mjRFy7zImC60k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:8d:26:fe:72:c5:d0:ec:e0:d1:79:5b:7c:f4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=280615e6006a861f66cf7307d30fc9350c76f7de
        Validity
            Not Before: Jun 15 15:01:03 2024 GMT
            Not After : Jun 16 15:01:03 2024 GMT
        Subject: CN=2fa934b6d911c169553210724eb19fdfd7551e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:03:ef:cd:5d:88:b6:ee:4e:a6:c6:6f:38:
                    3d:04:3f:09:97:5e:39:86:bd:ca:ed:02:54:ce:da:
                    9e:0a:59:28:67:61:b8:9f:05:03:05:f4:6c:5a:09:
                    25:d8:c1:4e:5d:a5:35:12:d4:cf:da:d2:be:c6:72:
                    00:e7:6d:f5:c2:79:29:80:d0:a0:69:ff:06:cb:e3:
                    11:88:1e:a5:70:c7:e9:82:e9:f0:37:de:19:3f:ff:
                    ef:9b:3e:03:7f:06:e8:ce:4b:98:f8:d1:1f:0d:cd:
                    51:69:8d:ad:f8:fa:aa:db:da:8b:bb:27:01:87:46:
                    9f:94:07:f9:c7:87:6e:2d:d9:84:02:09:78:41:59:
                    4e:a3:a2:ae:2e:22:b1:7d:22:0e:7d:b3:8a:6f:42:
                    c9:9b:b3:dd:1f:12:cb:7f:7f:aa:5a:cf:b9:82:26:
                    5e:16:0d:f3:5c:85:82:a3:db:f9:17:b5:b1:17:87:
                    c3:54:f3:b4:11:e4:90:3a:f7:7f:8f:80:72:54:e7:
                    9e:0e:cf:24:dd:ac:7e:a3:46:7e:12:06:a0:d5:5c:
                    0c:a8:c2:76:ab:7e:ff:b7:73:58:67:9a:07:43:67:
                    ac:c2:ec:7d:cc:ad:80:d8:ac:af:14:9d:20:2e:84:
                    55:ca:3e:4a:3e:6c:a0:aa:93:6d:98:ac:37:dd:bc:
                    0b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A9:34:B6:D9:11:C1:69:55:32:10:72:4E:B1:9F:DF:D7:55:1E:34
            X509v3 Authority Key Identifier:
                keyid:28:06:15:E6:00:6A:86:1F:66:CF:73:07:D3:0F:C9:35:0C:76:F7:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAYV5gBqhh9mz3MH0w_JNQx2994.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/074aad-c947-4311-aff1-ae92b6ae1bfe/1/KAYV5gBqhh9mz3MH0w_JNQx2994.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:54:52:14:c5:0f:2e:be:f0:2e:6d:da:ab:95:9e:79:63:72:
         1d:11:cf:6b:38:53:5c:e3:39:85:47:b5:e1:2e:a6:f3:38:4c:
         aa:a8:de:31:d0:45:51:b4:ff:49:14:f3:4e:c8:01:21:06:0f:
         3d:0c:db:dd:99:53:70:db:6e:99:bd:e8:56:9d:91:46:9d:5a:
         33:5d:56:29:6c:ef:e0:ad:a0:21:13:ba:b2:a9:03:60:d5:15:
         d6:af:75:82:b4:e1:8a:1e:b6:62:35:1f:12:8b:c2:f9:04:ae:
         26:5f:68:4d:b3:be:48:a1:0e:36:ca:3e:21:e2:e7:f0:01:ef:
         c8:91:68:4d:6d:99:6f:d2:8e:5f:12:f6:18:16:e6:75:2d:ac:
         84:ea:1d:aa:65:71:f9:9d:43:ee:4a:ed:ee:e6:64:11:d4:53:
         e1:b7:bb:00:ac:ad:bd:9e:6a:cc:f6:b2:97:3e:37:e2:84:79:
         99:59:11:9e:52:40:f4:bf:76:e8:61:50:42:43:32:0c:3d:f4:
         57:9b:90:38:01:c6:0a:77:c5:e4:df:16:31:db:74:29:de:20:
         dd:c7:ba:a6:e9:bd:7a:d7:7e:a5:17:e1:f2:e1:04:c5:2e:ef:
         e9:f4:0a:6d:e8:bc:6a:2e:67:fc:ce:03:04:1b:7b:b7:40:7f:
         de:8e:3d:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcao0m/nLF0Ozg0XlbfPTVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MDYxNWU2MDA2YTg2MWY2NmNmNzMwN2QzMGZjOTM1MGM3
NmY3ZGUwHhcNMjQwNjE1MTUwMTAzWhcNMjQwNjE2MTUwMTAzWjAzMTEwLwYDVQQD
EygyZmE5MzRiNmQ5MTFjMTY5NTUzMjEwNzI0ZWIxOWZkZmQ3NTUxZTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxwD781diLbuTqbGbzg9BD8Jl145
hr3K7QJUztqeClkoZ2G4nwUDBfRsWgkl2MFOXaU1EtTP2tK+xnIA5231wnkpgNCg
af8Gy+MRiB6lcMfpgunwN94ZP//vmz4DfwbozkuY+NEfDc1RaY2t+Pqq29qLuycB
h0aflAf5x4duLdmEAgl4QVlOo6KuLiKxfSIOfbOKb0LJm7PdHxLLf3+qWs+5giZe
Fg3zXIWCo9v5F7WxF4fDVPO0EeSQOvd/j4ByVOeeDs8k3ax+o0Z+Egag1VwMqMJ2
q37/t3NYZ5oHQ2eswux9zK2A2KyvFJ0gLoRVyj5KPmygqpNtmKw33bwLyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+pNLbZEcFpVTIQck6xn9/XVR40MB8GA1UdIwQY
MBaAFCgGFeYAaoYfZs9zB9MPyTUMdvfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0FZVjVnQnFoaDltejNNSDB3X0pOUXgyOTk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNzRhYWQtYzk0Ny00MzExLWFmZjEt
YWU5MmI2YWUxYmZlLzEvS0FZVjVnQnFoaDltejNNSDB3X0pOUXgyOTk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNzRhYWQtYzk0Ny00MzExLWFmZjEtYWU5MmI2YWUxYmZl
LzEvS0FZVjVnQnFoaDltejNNSDB3X0pOUXgyOTk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0FRSFMUP
Lr7wLm3aq5WeeWNyHRHPazhTXOM5hUe14S6m8zhMqqjeMdBFUbT/SRTzTsgBIQYP
PQzb3ZlTcNtumb3oVp2RRp1aM11WKWzv4K2gIRO6sqkDYNUV1q91grThih62YjUf
EovC+QSuJl9oTbO+SKEONso+IeLn8AHvyJFoTW2Zb9KOXxL2GBbmdS2shOodqmVx
+Z1D7krt7uZkEdRT4be7AKytvZ5qzPaylz434oR5mVkRnlJA9L926GFQQkMyDD30
V5uQOAHGCnfF5N8WMdt0Kd4g3ce6pum9etd+pRfh8uEExS7v6fQKbei8ai5n/M4D
BBt7t0B/3o49wQ==
-----END CERTIFICATE-----