Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
File:                     YA09DkcUJu84PjkRODpJg78idkQ.mft (raw, json)
Hash identifier:          FJO2KIMndKi9XQo1Kl8QjghFnZj4O4Ec1VrsHleQpxs=
Subject key identifier:   E6:23:BF:6D:90:FF:07:DD:C4:AF:3A:94:40:30:05:FC:E6:83:C0:DB
Authority key identifier: 60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44
Certificate issuer:       /CN=600d3d0e471426ef383e3911383a4983bf227644
Certificate serial:       019369A1951DF9BABFFBC630F0D3F366D898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
Manifest number:          4C
Signing time:             Tue 26 Nov 2024 18:00:17 +0000
Manifest this update:     Tue 26 Nov 2024 18:00:17 +0000
Manifest next update:     Wed 27 Nov 2024 18:00:17 +0000
Files and hashes:         1: YA09DkcUJu84PjkRODpJg78idkQ.crl (hash: O8zahFBpD6y+beDFLk64DTmh/42gtoWGhGvB0J0mgQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:a1:95:1d:f9:ba:bf:fb:c6:30:f0:d3:f3:66:d8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600d3d0e471426ef383e3911383a4983bf227644
        Validity
            Not Before: Nov 26 18:00:17 2024 GMT
            Not After : Nov 27 18:00:17 2024 GMT
        Subject: CN=e623bf6d90ff07ddc4af3a94403005fce683c0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:08:4a:14:33:4c:9f:ed:61:8c:44:08:f0:
                    12:76:19:87:b9:11:6c:f7:aa:88:f1:e7:e3:c8:af:
                    43:2e:4b:da:b7:2b:0f:7f:4d:7f:ff:00:63:f0:f4:
                    92:48:63:cf:46:cc:77:0c:2c:f8:d6:3e:be:3b:86:
                    7f:bc:5c:07:68:1e:cb:91:72:54:a4:df:94:bb:da:
                    ff:76:ad:86:4b:b7:86:25:48:7d:42:31:dd:cb:1c:
                    e7:d1:c1:6f:ec:72:00:0f:51:4f:e3:e5:64:14:78:
                    5c:d2:20:c4:8a:da:38:d4:c7:1d:e7:60:ef:96:99:
                    c1:91:82:f5:5a:65:04:6f:9b:43:ea:62:42:a8:7b:
                    cb:e6:ae:95:17:88:0e:3b:4a:b9:34:09:c4:67:2c:
                    62:77:91:d4:10:90:d9:78:4f:33:0c:5a:d8:cd:b4:
                    6f:63:57:e6:db:27:74:4d:6f:10:ef:d4:02:22:8e:
                    66:54:2c:49:05:9a:23:b3:32:ae:b7:f5:ee:66:0d:
                    30:a0:30:5d:c7:e1:24:0d:6f:c9:b2:9b:0d:7d:91:
                    8a:a7:71:a2:6a:9b:09:77:3b:99:3a:4e:0a:28:d3:
                    c2:c0:fb:bd:27:00:bc:c0:87:6c:b8:a8:3a:38:45:
                    28:79:42:dd:e2:72:0e:e2:c9:00:4b:ae:70:ec:27:
                    87:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:BF:6D:90:FF:07:DD:C4:AF:3A:94:40:30:05:FC:E6:83:C0:DB
            X509v3 Authority Key Identifier:
                keyid:60:0D:3D:0E:47:14:26:EF:38:3E:39:11:38:3A:49:83:BF:22:76:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA09DkcUJu84PjkRODpJg78idkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1af51b-7b17-4980-98c7-3c2fa8aaf031/1/YA09DkcUJu84PjkRODpJg78idkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:53:98:c3:06:52:16:46:2b:b0:ff:42:d0:ec:b3:c8:be:b9:
         8d:b4:1f:a3:2f:df:6b:49:b8:b8:33:6e:32:2e:3a:4c:8a:2b:
         4e:77:d2:4a:c7:8b:32:7f:dc:82:fc:ab:81:a3:20:d9:33:1e:
         a1:ee:6c:2b:28:05:c8:55:f5:a9:99:e9:ef:68:9e:57:82:c2:
         09:1c:22:62:e3:6d:ed:e7:14:75:7a:6c:f6:79:ae:b2:75:52:
         52:1e:f1:39:3e:71:3d:05:5d:48:2c:85:a7:6a:14:6b:e6:52:
         3f:c0:ae:be:b3:9c:31:34:e9:ca:e4:b4:4e:58:f3:bb:bd:03:
         14:25:36:a5:25:0f:ff:73:7c:81:3b:16:d4:70:9d:37:3b:9b:
         2e:8c:07:45:9f:2b:a7:d4:9c:80:67:93:53:1e:fd:a7:47:3e:
         7b:6f:50:22:7a:fa:97:a9:4c:80:32:34:fd:0e:48:6a:f4:7a:
         f7:72:af:77:84:d8:32:ca:4f:8e:ab:7d:aa:0d:0d:c5:dd:44:
         66:27:f5:e7:91:c3:1e:70:f2:21:b5:86:37:54:96:38:3e:64:
         22:e6:18:e0:03:3d:4b:30:69:11:23:00:35:8b:82:fa:b9:dd:
         85:3e:f2:72:88:d6:93:e2:fd:22:b0:5c:74:ef:6e:2e:2c:85:
         ca:37:d2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNpoZUd+bq/+8Yw8NPzZtiYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwMGQzZDBlNDcxNDI2ZWYzODNlMzkxMTM4M2E0OTgzYmYy
Mjc2NDQwHhcNMjQxMTI2MTgwMDE3WhcNMjQxMTI3MTgwMDE3WjAzMTEwLwYDVQQD
EyhlNjIzYmY2ZDkwZmYwN2RkYzRhZjNhOTQ0MDMwMDVmY2U2ODNjMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNgIShQzTJ/tYYxECPASdhmHuRFs
96qI8efjyK9DLkvatysPf01//wBj8PSSSGPPRsx3DCz41j6+O4Z/vFwHaB7LkXJU
pN+Uu9r/dq2GS7eGJUh9QjHdyxzn0cFv7HIAD1FP4+VkFHhc0iDEito41Mcd52Dv
lpnBkYL1WmUEb5tD6mJCqHvL5q6VF4gOO0q5NAnEZyxid5HUEJDZeE8zDFrYzbRv
Y1fm2yd0TW8Q79QCIo5mVCxJBZojszKut/XuZg0woDBdx+EkDW/JspsNfZGKp3Gi
apsJdzuZOk4KKNPCwPu9JwC8wIdsuKg6OEUoeULd4nIO4skAS65w7CeHDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYjv22Q/wfdxK86lEAwBfzmg8DbMB8GA1UdIwQY
MBaAFGANPQ5HFCbvOD45ETg6SYO/InZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xYWY1MWItN2IxNy00OTgwLTk4Yzct
M2MyZmE4YWFmMDMxLzEvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xYWY1MWItN2IxNy00OTgwLTk4YzctM2MyZmE4YWFmMDMx
LzEvWUEwOURrY1VKdTg0UGprUk9EcEpnNzhpZGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1OYwwZS
FkYrsP9C0OyzyL65jbQfoy/fa0m4uDNuMi46TIorTnfSSseLMn/cgvyrgaMg2TMe
oe5sKygFyFX1qZnp72ieV4LCCRwiYuNt7ecUdXps9nmusnVSUh7xOT5xPQVdSCyF
p2oUa+ZSP8CuvrOcMTTpyuS0Tljzu70DFCU2pSUP/3N8gTsW1HCdNzubLowHRZ8r
p9ScgGeTUx79p0c+e29QInr6l6lMgDI0/Q5IavR693Kvd4TYMspPjqt9qg0Nxd1E
Zif155HDHnDyIbWGN1SWOD5kIuYY4AM9SzBpESMANYuC+rndhT7ycojWk+L9IrBc
dO9uLiyFyjfS4g==
-----END CERTIFICATE-----