Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft
File:                     PrOh--ecES1TfhORHCeAviHzFVA.mft (raw, json)
Hash identifier:          T8xE8eUgyu2AxqAANjNM2IKI/Ktg1uBse39ZTJVsKho=
Subject key identifier:   D0:2B:A7:CE:5C:ED:00:3A:96:91:C1:1E:71:8C:B1:02:C1:81:07:11
Authority key identifier: 3E:B3:A1:FB:E7:9C:11:2D:53:7E:13:91:1C:27:80:BE:21:F3:15:50
Certificate issuer:       /CN=3eb3a1fbe79c112d537e13911c2780be21f31550
Certificate serial:       01901E900C89F3AD842EB8F87D104B2FD7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrOh--ecES1TfhORHCeAviHzFVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft
Manifest number:          0448
Signing time:             Sun 16 Jun 2024 01:01:15 +0000
Manifest this update:     Sun 16 Jun 2024 01:01:15 +0000
Manifest next update:     Mon 17 Jun 2024 01:01:15 +0000
Files and hashes:         1: PrOh--ecES1TfhORHCeAviHzFVA.crl (hash: r2eY+x2ME9FQAOkMm8liiwiC3oX/FYjEz6EhSnFKbL8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PrOh--ecES1TfhORHCeAviHzFVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:90:0c:89:f3:ad:84:2e:b8:f8:7d:10:4b:2f:d7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb3a1fbe79c112d537e13911c2780be21f31550
        Validity
            Not Before: Jun 16 01:01:15 2024 GMT
            Not After : Jun 17 01:01:15 2024 GMT
        Subject: CN=d02ba7ce5ced003a9691c11e718cb102c1810711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f5:9f:b3:1e:92:12:de:6f:d2:99:83:ea:e8:
                    c2:ae:91:3d:1f:d1:c6:c2:36:b1:21:d4:f1:e0:e1:
                    05:56:34:c9:03:79:3e:7c:ac:31:61:09:b6:ae:c0:
                    6b:4b:2b:db:05:9f:3f:01:31:8d:d4:e4:b7:9b:d9:
                    2d:ad:0e:4a:4e:08:f5:4f:96:9f:0e:9c:49:7c:1f:
                    3e:c5:71:56:51:17:a2:ef:a3:e4:9b:a4:90:c4:82:
                    5f:f7:94:94:ce:b7:55:96:d2:22:24:4e:b5:3a:17:
                    0c:33:01:a4:83:ff:2b:7f:49:00:6e:ba:eb:3d:9d:
                    e0:24:02:10:82:af:aa:23:4d:67:e5:50:55:ad:b6:
                    35:fb:39:dd:b0:a8:21:e1:2f:71:c0:c2:0d:c0:26:
                    bb:69:a1:86:77:55:80:ae:bd:e0:ee:5c:01:13:66:
                    b1:42:cb:5e:d7:46:ac:83:d2:d1:6e:cb:20:51:85:
                    85:a7:29:47:79:c3:f2:8b:a1:3f:4f:53:bc:7b:31:
                    6f:3e:06:2a:32:be:9d:73:e8:8c:9f:25:84:be:33:
                    b9:05:35:69:d1:3f:ee:0f:8d:cb:18:1f:ee:f9:fe:
                    03:c0:74:71:dd:00:e3:64:d8:58:93:34:6b:68:77:
                    89:c3:80:c8:6b:05:59:8d:49:c4:92:19:7c:1e:75:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2B:A7:CE:5C:ED:00:3A:96:91:C1:1E:71:8C:B1:02:C1:81:07:11
            X509v3 Authority Key Identifier:
                keyid:3E:B3:A1:FB:E7:9C:11:2D:53:7E:13:91:1C:27:80:BE:21:F3:15:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrOh--ecES1TfhORHCeAviHzFVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/17ce9f-4d69-4422-bd9c-23efd8dbb425/1/PrOh--ecES1TfhORHCeAviHzFVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:80:36:c9:a1:c0:2f:37:a6:d9:ca:2b:a5:b0:68:47:37:ad:
         31:8b:d5:94:65:86:73:80:2e:82:17:9f:df:48:fd:b0:c3:54:
         a5:6d:c5:b2:db:4d:5a:8a:22:21:85:c4:9d:04:64:b5:b6:47:
         dc:c0:79:8d:13:05:e0:fb:58:99:d8:dd:02:85:a7:77:ba:c8:
         7c:bb:a9:e5:22:0b:8f:9d:2f:b8:4b:e2:8a:3b:55:90:9b:a8:
         2e:b8:00:25:a8:6a:91:1b:54:7e:6d:88:4c:66:07:c0:e4:4b:
         87:51:f2:4f:2c:39:d2:26:bb:02:a9:a0:ac:58:fa:98:ba:5b:
         b6:c5:74:67:5b:e3:c3:30:25:c4:5d:f5:73:bd:ad:aa:f1:3d:
         48:cb:00:10:a1:f6:b3:43:2b:95:46:ee:11:dd:39:3f:1b:62:
         c7:67:d1:75:a3:10:8c:75:88:d8:31:18:99:da:13:69:9f:48:
         29:b1:43:7d:d5:ee:16:2e:5b:9d:39:f3:b0:84:db:48:da:ea:
         b8:d6:e7:49:ab:d8:26:9c:9c:18:22:4b:26:76:2d:e2:70:f0:
         71:7b:f0:ab:9e:33:b2:69:62:18:64:92:02:3d:31:9b:89:3b:
         aa:a1:2a:b1:e0:6e:1e:e6:5b:37:6d:ce:63:05:c1:cb:66:e4:
         c4:19:9a:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAekAyJ862ELrj4fRBLL9fzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYjNhMWZiZTc5YzExMmQ1MzdlMTM5MTFjMjc4MGJlMjFm
MzE1NTAwHhcNMjQwNjE2MDEwMTE1WhcNMjQwNjE3MDEwMTE1WjAzMTEwLwYDVQQD
EyhkMDJiYTdjZTVjZWQwMDNhOTY5MWMxMWU3MThjYjEwMmMxODEwNzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvWfsx6SEt5v0pmD6ujCrpE9H9HG
wjaxIdTx4OEFVjTJA3k+fKwxYQm2rsBrSyvbBZ8/ATGN1OS3m9ktrQ5KTgj1T5af
DpxJfB8+xXFWURei76Pkm6SQxIJf95SUzrdVltIiJE61OhcMMwGkg/8rf0kAbrrr
PZ3gJAIQgq+qI01n5VBVrbY1+zndsKgh4S9xwMINwCa7aaGGd1WArr3g7lwBE2ax
Qste10asg9LRbssgUYWFpylHecPyi6E/T1O8ezFvPgYqMr6dc+iMnyWEvjO5BTVp
0T/uD43LGB/u+f4DwHRx3QDjZNhYkzRraHeJw4DIawVZjUnEkhl8HnXLXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNArp85c7QA6lpHBHnGMsQLBgQcRMB8GA1UdIwQY
MBaAFD6zofvnnBEtU34TkRwngL4h8xVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJPaC0tZWNFUzFUZmhPUkhDZUF2aUh6RlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xN2NlOWYtNGQ2OS00NDIyLWJkOWMt
MjNlZmQ4ZGJiNDI1LzEvUHJPaC0tZWNFUzFUZmhPUkhDZUF2aUh6RlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xN2NlOWYtNGQ2OS00NDIyLWJkOWMtMjNlZmQ4ZGJiNDI1
LzEvUHJPaC0tZWNFUzFUZmhPUkhDZUF2aUh6RlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwoA2yaHA
Lzem2corpbBoRzetMYvVlGWGc4Aughef30j9sMNUpW3FsttNWooiIYXEnQRktbZH
3MB5jRMF4PtYmdjdAoWnd7rIfLup5SILj50vuEviijtVkJuoLrgAJahqkRtUfm2I
TGYHwORLh1HyTyw50ia7AqmgrFj6mLpbtsV0Z1vjwzAlxF31c72tqvE9SMsAEKH2
s0MrlUbuEd05Pxtix2fRdaMQjHWI2DEYmdoTaZ9IKbFDfdXuFi5bnTnzsITbSNrq
uNbnSavYJpycGCJLJnYt4nDwcXvwq54zsmliGGSSAj0xm4k7qqEqseBuHuZbN23O
YwXBy2bkxBma6Q==
-----END CERTIFICATE-----