Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
File:                     z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json)
Hash identifier:          PaEEJ+EGt4gqVeglt2fg10+1um+JfatnCf/zQ0jq8J8=
Subject key identifier:   B7:7F:BB:17:B4:EC:0B:4A:BC:F7:FF:B8:1C:7B:27:38:FE:2B:A4:57
Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12
Certificate issuer:       /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
Certificate serial:       01901C6AA0E0C2D76F1E48B83C72224A5153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
Manifest number:          11C1
Signing time:             Sat 15 Jun 2024 15:01:08 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:08 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:08 +0000
Files and hashes:         1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: g0dRiCo1Hoh4BddU7e2SwpNVHN0SO63Pdrq6N4n8hC4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:a0:e0:c2:d7:6f:1e:48:b8:3c:72:22:4a:51:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12
        Validity
            Not Before: Jun 15 15:01:08 2024 GMT
            Not After : Jun 16 15:01:08 2024 GMT
        Subject: CN=b77fbb17b4ec0b4abcf7ffb81c7b2738fe2ba457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:6a:5a:5f:76:f2:b4:c2:7a:14:50:a9:e4:
                    08:73:ec:af:5f:fe:6e:49:31:39:a0:b4:bd:96:e4:
                    da:f8:00:83:32:77:5c:7e:04:60:ea:94:62:67:54:
                    54:c3:ed:d9:2f:94:90:4e:ce:89:78:be:4a:82:98:
                    aa:42:63:0d:80:1e:b9:a4:36:69:f9:32:2b:ad:84:
                    37:4a:8d:46:3f:60:31:ea:46:36:37:42:38:14:aa:
                    df:c9:3d:cd:8f:bf:79:fb:48:c6:3f:53:4a:df:d1:
                    32:19:fa:0e:dd:a1:1f:3c:25:f2:c4:8c:3b:2f:23:
                    47:55:f8:28:e1:ab:48:31:76:8a:9d:e9:34:71:82:
                    3b:61:76:86:19:99:ce:11:b5:ea:2a:32:4f:38:11:
                    fe:88:69:99:54:5f:39:3a:4f:20:f1:de:cd:6b:77:
                    ec:ab:5c:c1:64:e2:17:2a:3e:16:17:65:f7:d3:af:
                    40:b5:ec:69:fd:02:1a:75:cb:9e:ae:67:f3:b3:b9:
                    2c:62:c0:04:d8:b2:3e:77:65:7d:a7:87:1f:0e:79:
                    05:9d:95:2c:ed:b9:ef:b7:e7:53:d0:58:95:f9:cd:
                    3d:54:ff:15:f7:fd:81:ce:68:b3:65:87:6f:3e:30:
                    ec:6a:7a:48:82:99:fc:b9:38:25:18:a7:1e:69:3d:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7F:BB:17:B4:EC:0B:4A:BC:F7:FF:B8:1C:7B:27:38:FE:2B:A4:57
            X509v3 Authority Key Identifier:
                keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:23:ca:34:c2:49:61:9b:bc:c4:33:0f:a4:f0:f4:81:85:c8:
         a2:41:a4:90:aa:4a:64:ea:e6:e6:2c:18:e7:78:e0:5b:4b:08:
         e9:b5:eb:f3:74:3b:f0:e9:24:9d:0d:b3:1e:43:26:91:91:d5:
         85:46:21:60:0c:b4:51:ec:14:bb:4f:10:bb:b0:0e:00:58:bd:
         8c:1e:c5:ee:19:d1:13:7f:2e:35:e7:1e:b8:cd:0c:ba:8d:13:
         89:cb:00:69:b8:42:4f:c2:f8:b8:b8:d8:b4:5d:01:06:80:b0:
         d3:4f:be:e8:32:9f:8e:f8:50:81:58:8e:ca:65:d7:a6:00:0e:
         e3:a3:a7:b4:bb:51:69:b0:0c:ea:2a:0b:a1:17:d0:39:1d:fb:
         e0:b0:44:e3:5b:85:f5:7a:3d:11:d9:5e:95:c0:95:15:14:24:
         3b:4c:b9:b8:e7:1c:0a:31:30:f5:1c:7c:79:44:02:6d:f3:b5:
         2a:bd:df:b5:b9:0a:bf:bf:ba:c0:79:cb:b9:d7:73:ff:f2:7b:
         32:50:6d:37:47:f9:fa:aa:36:36:84:94:b9:19:70:6e:af:01:
         1e:29:73:7a:fc:b4:e9:a0:46:a7:cd:d6:7a:39:9d:a6:42:f3:
         5b:18:72:05:9e:a0:12:4c:f2:e7:be:06:16:e6:9a:94:14:6b:
         02:d8:97:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcaqDgwtdvHki4PHIiSlFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNmIxZGNlMjJlZGNjOGQxYjEzNzMzOGYyYjdlMjkwNWM0
YThiMTIwHhcNMjQwNjE1MTUwMTA4WhcNMjQwNjE2MTUwMTA4WjAzMTEwLwYDVQQD
EyhiNzdmYmIxN2I0ZWMwYjRhYmNmN2ZmYjgxYzdiMjczOGZlMmJhNDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndhqWl928rTCehRQqeQIc+yvX/5u
STE5oLS9luTa+ACDMndcfgRg6pRiZ1RUw+3ZL5SQTs6JeL5KgpiqQmMNgB65pDZp
+TIrrYQ3So1GP2Ax6kY2N0I4FKrfyT3Nj795+0jGP1NK39EyGfoO3aEfPCXyxIw7
LyNHVfgo4atIMXaKnek0cYI7YXaGGZnOEbXqKjJPOBH+iGmZVF85Ok8g8d7Na3fs
q1zBZOIXKj4WF2X3069Atexp/QIadcuermfzs7ksYsAE2LI+d2V9p4cfDnkFnZUs
7bnvt+dT0FiV+c09VP8V9/2BzmizZYdvPjDsanpIgpn8uTglGKceaT0YOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLd/uxe07AtKvPf/uBx7Jzj+K6RXMB8GA1UdIwQY
MBaAFM9rHc4i7cyNGxNzOPK34pBcSosSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMt
NmE5OWM0Njg3OWNlLzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMtNmE5OWM0Njg3OWNl
LzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqyPKNMJJ
YZu8xDMPpPD0gYXIokGkkKpKZOrm5iwY53jgW0sI6bXr83Q78OkknQ2zHkMmkZHV
hUYhYAy0UewUu08Qu7AOAFi9jB7F7hnRE38uNeceuM0Muo0TicsAabhCT8L4uLjY
tF0BBoCw00++6DKfjvhQgViOymXXpgAO46OntLtRabAM6ioLoRfQOR374LBE41uF
9Xo9EdlelcCVFRQkO0y5uOccCjEw9Rx8eUQCbfO1Kr3ftbkKv7+6wHnLuddz//J7
MlBtN0f5+qo2NoSUuRlwbq8BHilzevy06aBGp83WejmdpkLzWxhyBZ6gEkzy574G
FuaalBRrAtiXwQ==
-----END CERTIFICATE-----