Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.mft
File:                     Nir0h5VMm5am51wljQQ3o4RJupA.mft (raw, json)
Hash identifier:          i4g6mw2O+kGrJGRkjac07lQSRmvwmcrzd6XLXR4duJo=
Subject key identifier:   3D:C6:55:CA:98:EF:E1:10:BA:EF:7B:28:3B:02:0D:E1:14:D7:A7:47
Authority key identifier: 36:2A:F4:87:95:4C:9B:96:A6:E7:5C:25:8D:04:37:A3:84:49:BA:90
Certificate issuer:       /CN=362af487954c9b96a6e75c258d0437a38449ba90
Certificate serial:       019356F6B7AC96B1B30A814A71CABBB7A94F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nir0h5VMm5am51wljQQ3o4RJupA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.mft
Manifest number:          121D
Signing time:             Sat 23 Nov 2024 03:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:29 +0000
Files and hashes:         1: Nir0h5VMm5am51wljQQ3o4RJupA.crl (hash: jRRez5yoVpccM0keH/wQ8LPL4q2Ol6KVKFTAEmonntQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nir0h5VMm5am51wljQQ3o4RJupA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:b7:ac:96:b1:b3:0a:81:4a:71:ca:bb:b7:a9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=362af487954c9b96a6e75c258d0437a38449ba90
        Validity
            Not Before: Nov 23 03:00:29 2024 GMT
            Not After : Nov 24 03:00:29 2024 GMT
        Subject: CN=3dc655ca98efe110baef7b283b020de114d7a747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6e:25:50:c1:b8:30:74:e4:eb:04:5a:df:4d:
                    b8:5e:d2:ea:1d:eb:2e:85:c4:5b:96:b7:8f:82:b0:
                    28:b6:da:09:1b:9a:2f:e9:a0:26:5c:d4:b2:79:0a:
                    4a:82:39:94:52:e7:58:f6:8c:b3:66:e3:6f:2f:da:
                    0c:95:85:c6:b0:1c:1a:84:13:ae:74:05:81:d4:6b:
                    ce:3c:a9:f5:25:2c:ea:ca:40:e6:e3:32:35:8d:30:
                    26:86:a0:9e:f6:0d:92:3c:28:66:d1:8c:a9:d9:36:
                    f7:60:d9:3a:c8:63:56:cd:6e:db:21:98:10:6a:e7:
                    e4:61:88:99:61:d5:b9:29:ed:c7:d0:b1:4f:70:0b:
                    a9:b9:1f:87:31:e7:21:59:d4:4e:ea:8c:84:2e:a7:
                    bb:b5:53:91:cb:e4:16:2b:8a:ff:cf:25:3e:00:4e:
                    11:b0:23:84:0f:d0:2f:d8:c0:22:f9:19:24:76:6a:
                    67:b6:71:d9:e1:6f:a4:1f:be:20:0b:e3:31:d9:97:
                    67:16:f7:49:aa:d9:53:9a:9f:bf:4d:60:a8:aa:f5:
                    5e:f4:94:32:6e:0b:dc:61:f8:2c:2b:1e:32:73:0e:
                    bb:b8:e1:33:91:65:b0:68:69:83:de:34:64:8d:e1:
                    25:b8:d8:5f:f9:cb:f1:f0:d4:84:4f:3c:f4:23:af:
                    21:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C6:55:CA:98:EF:E1:10:BA:EF:7B:28:3B:02:0D:E1:14:D7:A7:47
            X509v3 Authority Key Identifier:
                keyid:36:2A:F4:87:95:4C:9B:96:A6:E7:5C:25:8D:04:37:A3:84:49:BA:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nir0h5VMm5am51wljQQ3o4RJupA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ba20ed-e70f-4733-9545-5113b7429f86/1/Nir0h5VMm5am51wljQQ3o4RJupA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:43:2b:d0:da:39:03:92:35:03:42:59:4f:61:2f:3c:fb:97:
         94:a0:ff:f6:d8:63:31:62:24:dd:d6:6e:0c:18:95:0b:c9:ec:
         3a:8b:d1:ee:33:33:51:9e:cb:08:c4:ca:01:14:13:8b:91:0a:
         cd:e4:25:73:a5:6e:40:0d:20:ca:b1:29:79:20:c8:ac:fb:3b:
         e4:6d:8a:65:4e:7c:97:f5:bb:9d:ae:c2:ad:b4:23:19:8d:05:
         a8:8b:60:8b:95:f5:14:d6:81:a3:7a:b3:7d:73:54:19:a7:85:
         a9:f9:06:2b:73:19:aa:94:a0:d9:49:d7:c2:6d:71:71:59:14:
         12:a5:c8:52:a8:a7:17:bf:3d:50:11:e7:a6:ad:e7:5d:94:67:
         b7:3f:64:ef:73:11:a1:2b:79:d9:15:cb:a2:61:02:8a:3f:ec:
         1f:a6:b5:04:c1:79:cc:fc:28:4c:9d:09:3b:25:ae:c0:59:8b:
         46:81:55:0b:8b:97:9c:f7:4f:3e:de:3e:d9:da:65:fb:18:d5:
         94:02:46:7e:d9:7c:ae:9a:37:de:06:9b:27:dd:5b:8a:2a:57:
         b2:47:3f:f8:cf:ad:72:3d:ae:75:5a:f5:03:e5:3a:f2:f3:4a:
         35:76:81:72:65:87:1a:77:05:49:b7:75:09:10:82:aa:ad:b0:
         32:59:f2:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9reslrGzCoFKccq7t6lPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MmFmNDg3OTU0YzliOTZhNmU3NWMyNThkMDQzN2EzODQ0
OWJhOTAwHhcNMjQxMTIzMDMwMDI5WhcNMjQxMTI0MDMwMDI5WjAzMTEwLwYDVQQD
EygzZGM2NTVjYTk4ZWZlMTEwYmFlZjdiMjgzYjAyMGRlMTE0ZDdhNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA024lUMG4MHTk6wRa3024XtLqHesu
hcRblrePgrAottoJG5ov6aAmXNSyeQpKgjmUUudY9oyzZuNvL9oMlYXGsBwahBOu
dAWB1GvOPKn1JSzqykDm4zI1jTAmhqCe9g2SPChm0Yyp2Tb3YNk6yGNWzW7bIZgQ
aufkYYiZYdW5Ke3H0LFPcAupuR+HMechWdRO6oyELqe7tVORy+QWK4r/zyU+AE4R
sCOED9Av2MAi+RkkdmpntnHZ4W+kH74gC+Mx2ZdnFvdJqtlTmp+/TWCoqvVe9JQy
bgvcYfgsKx4ycw67uOEzkWWwaGmD3jRkjeEluNhf+cvx8NSETzz0I68h6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3GVcqY7+EQuu97KDsCDeEU16dHMB8GA1UdIwQY
MBaAFDYq9IeVTJuWpudcJY0EN6OESbqQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlyMGg1Vk1tNWFtNTF3bGpRUTNvNFJKdXBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9iYTIwZWQtZTcwZi00NzMzLTk1NDUt
NTExM2I3NDI5Zjg2LzEvTmlyMGg1Vk1tNWFtNTF3bGpRUTNvNFJKdXBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9iYTIwZWQtZTcwZi00NzMzLTk1NDUtNTExM2I3NDI5Zjg2
LzEvTmlyMGg1Vk1tNWFtNTF3bGpRUTNvNFJKdXBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikMr0No5
A5I1A0JZT2EvPPuXlKD/9thjMWIk3dZuDBiVC8nsOovR7jMzUZ7LCMTKARQTi5EK
zeQlc6VuQA0gyrEpeSDIrPs75G2KZU58l/W7na7CrbQjGY0FqItgi5X1FNaBo3qz
fXNUGaeFqfkGK3MZqpSg2UnXwm1xcVkUEqXIUqinF789UBHnpq3nXZRntz9k73MR
oSt52RXLomECij/sH6a1BMF5zPwoTJ0JOyWuwFmLRoFVC4uXnPdPPt4+2dpl+xjV
lAJGftl8rpo33gabJ91biipXskc/+M+tcj2udVr1A+U68vNKNXaBcmWHGncFSbd1
CRCCqq2wMlnyXg==
-----END CERTIFICATE-----