Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File:                     p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier:          jMHGLx4WoaKl8CIYlagjQPJnN7OFmO6VkiSnujwBJhs=
Subject key identifier:   F3:10:E6:5C:30:F0:F9:CC:3C:F7:D9:83:C2:EC:EC:34:C8:4E:B6:32
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer:       /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial:       018F87B63BDDB95CEA4C22F09A31F6684F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number:          061B
Signing time:             Fri 17 May 2024 18:00:18 +0000
Manifest this update:     Fri 17 May 2024 18:00:18 +0000
Manifest next update:     Sat 18 May 2024 18:00:18 +0000
Files and hashes:         1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: v97qfhcN9QeNQjUQqrIZOxsEKYU+T8v8YKeKGoz3ZUY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:3b:dd:b9:5c:ea:4c:22:f0:9a:31:f6:68:4f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
        Validity
            Not Before: May 17 18:00:18 2024 GMT
            Not After : May 18 18:00:18 2024 GMT
        Subject: CN=f310e65c30f0f9cc3cf7d983c2ecec34c84eb632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:ea:9b:7c:74:0d:de:8c:04:10:b2:88:f5:
                    8b:b6:fe:5c:58:b4:8a:90:d9:90:2f:cd:33:dd:09:
                    09:20:1a:ac:e2:53:3c:51:5d:4d:46:d9:12:65:58:
                    4a:b5:7a:86:69:9e:69:b5:ac:98:18:43:98:a4:5e:
                    0e:43:75:1e:20:0d:2f:54:a6:3a:5c:0e:6f:82:28:
                    52:48:89:01:44:9c:c3:84:f5:cb:70:ac:eb:f8:c9:
                    c7:07:39:b2:92:25:cc:a7:f1:74:69:02:17:44:dc:
                    73:82:43:fb:9e:03:69:1a:88:45:9d:48:04:06:3f:
                    a2:99:54:cd:fe:b9:13:31:fa:40:33:b8:76:90:e7:
                    2c:29:36:58:55:5a:8e:85:00:9e:70:45:bf:90:36:
                    3a:35:20:5a:2b:f4:85:c3:b7:61:b9:6e:38:43:a5:
                    a3:ee:4b:64:ae:b1:82:90:7a:92:20:36:ce:33:bf:
                    3a:d3:0c:7b:be:cd:03:10:e0:80:fc:e1:a2:8b:e2:
                    79:ac:a5:05:e8:3b:0d:6e:0a:5d:65:7d:e2:1b:14:
                    0b:84:3d:ee:79:59:74:50:95:fc:17:d0:84:4b:52:
                    cd:60:66:1b:1b:aa:2c:e6:90:4d:0d:c5:22:47:69:
                    79:5d:16:ab:af:ca:19:c0:a6:f5:51:26:9e:f5:52:
                    91:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:10:E6:5C:30:F0:F9:CC:3C:F7:D9:83:C2:EC:EC:34:C8:4E:B6:32
            X509v3 Authority Key Identifier:
                keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:64:2e:a2:7c:28:a6:82:bd:7b:ec:be:46:2e:69:b0:eb:1b:
         d0:5b:8c:bc:95:e1:d7:38:a7:55:b5:1e:58:c4:ce:5d:c5:59:
         ab:d5:3b:3e:d9:5d:72:0d:28:2b:12:f1:53:6c:f8:24:ee:2b:
         8b:7f:b4:fa:1c:31:d4:9e:8b:a4:76:db:c6:3d:33:2f:f2:a4:
         14:ed:99:53:e5:c0:88:08:25:8a:ec:9c:6a:44:eb:c7:6b:0c:
         86:b6:3a:37:98:b7:c4:a7:63:a8:4a:7a:75:14:f3:46:c9:40:
         15:08:f4:e0:50:6f:3f:f3:86:3a:80:a1:9c:33:19:14:92:38:
         63:60:3a:2a:b5:e8:0b:64:4b:2a:10:f5:15:ac:c4:b9:61:2a:
         5d:a9:57:a6:ef:b7:66:5c:76:10:84:80:94:56:a6:49:c4:a3:
         57:3c:10:2d:48:eb:02:52:d8:e6:14:03:88:ab:fc:58:0c:c4:
         8c:43:37:16:90:87:3f:46:4c:a4:90:52:d6:da:d5:92:6c:84:
         68:2d:a3:de:b5:e5:37:24:7e:77:ba:31:92:a0:b0:f6:24:a2:
         f3:4a:1f:66:8c:51:66:fa:e2:c4:f4:5f:c8:76:a5:ed:c1:bf:
         73:63:56:24:30:a3:b8:d5:a2:5b:9a:ac:2d:53:b0:80:03:db:
         f4:99:e7:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtjvduVzqTCLwmjH2aE+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Nzk3OTFhNTM3MGMxY2Q1N2U0OTNkOTQ5ZjkxZWZiY2Rh
NjYxN2UwHhcNMjQwNTE3MTgwMDE4WhcNMjQwNTE4MTgwMDE4WjAzMTEwLwYDVQQD
EyhmMzEwZTY1YzMwZjBmOWNjM2NmN2Q5ODNjMmVjZWMzNGM4NGViNjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqvqm3x0Dd6MBBCyiPWLtv5cWLSK
kNmQL80z3QkJIBqs4lM8UV1NRtkSZVhKtXqGaZ5ptayYGEOYpF4OQ3UeIA0vVKY6
XA5vgihSSIkBRJzDhPXLcKzr+MnHBzmykiXMp/F0aQIXRNxzgkP7ngNpGohFnUgE
Bj+imVTN/rkTMfpAM7h2kOcsKTZYVVqOhQCecEW/kDY6NSBaK/SFw7dhuW44Q6Wj
7ktkrrGCkHqSIDbOM7860wx7vs0DEOCA/OGii+J5rKUF6DsNbgpdZX3iGxQLhD3u
eVl0UJX8F9CES1LNYGYbG6os5pBNDcUiR2l5XRarr8oZwKb1USae9VKRGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMQ5lww8PnMPPfZg8Ls7DTITrYyMB8GA1UdIwQY
MBaAFKd5eRpTcMHNV+ST2Un5HvvNpmF+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80ZWViMjktNWJkZC00OGI2LTk5NTQt
NGQ4YWNjYmE2OWRjLzEvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80ZWViMjktNWJkZC00OGI2LTk5NTQtNGQ4YWNjYmE2OWRj
LzEvcDNsNUdsTnd3YzFYNUpQWlNma2UtODJtWVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsmQuonwo
poK9e+y+Ri5psOsb0FuMvJXh1zinVbUeWMTOXcVZq9U7Ptldcg0oKxLxU2z4JO4r
i3+0+hwx1J6LpHbbxj0zL/KkFO2ZU+XAiAgliuycakTrx2sMhrY6N5i3xKdjqEp6
dRTzRslAFQj04FBvP/OGOoChnDMZFJI4Y2A6KrXoC2RLKhD1FazEuWEqXalXpu+3
Zlx2EISAlFamScSjVzwQLUjrAlLY5hQDiKv8WAzEjEM3FpCHP0ZMpJBS1trVkmyE
aC2j3rXlNyR+d7oxkqCw9iSi80ofZoxRZvrixPRfyHal7cG/c2NWJDCjuNWiW5qs
LVOwgAPb9JnnAA==
-----END CERTIFICATE-----