Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
File:                     I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft (raw, json)
Hash identifier:          7nhUAelQefwkrpMSxayVH0oQEXX3LIFDBLD1yD5RHsk=
Subject key identifier:   89:98:53:6D:0E:ED:2E:E1:F3:96:72:0A:EB:5C:6A:C7:F5:98:3D:38
Authority key identifier: 23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0
Certificate issuer:       /CN=23f89f57d072849e0cab2195cd0baf2557935ea0
Certificate serial:       018F1E5B9113D7F9FD0591931C55264145A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
Manifest number:          113E
Signing time:             Sat 27 Apr 2024 07:01:08 +0000
Manifest this update:     Sat 27 Apr 2024 07:01:08 +0000
Manifest next update:     Sun 28 Apr 2024 07:01:08 +0000
Files and hashes:         1: I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl (hash: i8WXURWCrHuCyCik7KIfIwIFCP8zGFJesr60BfLovQI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:1e:5b:91:13:d7:f9:fd:05:91:93:1c:55:26:41:45:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f89f57d072849e0cab2195cd0baf2557935ea0
        Validity
            Not Before: Apr 27 07:01:08 2024 GMT
            Not After : Apr 28 07:01:08 2024 GMT
        Subject: CN=8998536d0eed2ee1f396720aeb5c6ac7f5983d38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:06:34:1b:92:77:51:3b:da:66:89:5e:5c:ad:
                    9c:03:94:63:db:90:9f:8f:70:b4:36:d4:b7:13:7f:
                    8f:40:0d:04:65:04:4e:70:4d:13:db:3a:f4:cc:50:
                    bf:73:57:8f:a5:fa:b4:79:63:c5:59:4a:73:ce:7f:
                    99:29:4e:7a:32:bd:98:6b:77:a5:87:2e:1f:72:58:
                    18:cc:a3:73:f9:75:d8:55:0f:23:d8:99:95:83:f3:
                    11:7e:0a:51:26:e6:4f:a3:9c:7c:17:1a:43:29:93:
                    13:ac:3b:c7:b3:a6:fc:b0:3f:5d:38:a5:b1:67:01:
                    6b:d2:54:11:3e:c7:3d:b2:01:17:35:68:99:ad:88:
                    b0:3e:a6:56:1a:57:8c:9a:14:7a:6e:c3:99:0f:b8:
                    f6:ff:a3:25:50:e6:1e:4b:5f:b8:e0:11:ae:03:5f:
                    a2:16:1c:8b:59:1c:81:78:a9:a5:e2:5c:48:24:dc:
                    68:19:3c:d0:ed:39:bd:a2:05:2f:94:92:0d:7c:86:
                    ca:8c:91:17:1f:0c:7e:cb:ce:01:cd:bc:f2:f2:f5:
                    1c:36:dd:49:82:c9:19:45:a5:4f:09:71:dc:66:11:
                    5d:03:d5:17:5f:f0:3b:44:d1:32:26:cb:19:13:6d:
                    1b:b9:dd:1d:3c:98:c6:20:8a:3c:9d:17:1d:14:de:
                    df:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:98:53:6D:0E:ED:2E:E1:F3:96:72:0A:EB:5C:6A:C7:F5:98:3D:38
            X509v3 Authority Key Identifier:
                keyid:23:F8:9F:57:D0:72:84:9E:0C:AB:21:95:CD:0B:AF:25:57:93:5E:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f1d439-7cc7-449f-a9e2-2ea6f5efb27f/1/I_ifV9ByhJ4MqyGVzQuvJVeTXqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:06:0b:44:7d:76:08:30:d2:f4:fa:a7:0f:0f:c0:73:d6:b3:
         15:25:26:95:a5:f9:64:58:6c:ad:fd:68:ef:d4:6e:f6:c0:8d:
         d7:f6:4d:28:d6:23:6a:c3:b0:0e:16:5f:e8:2c:df:f1:1a:df:
         ea:2a:0c:21:54:19:db:5b:6a:6c:38:81:2c:d0:cf:42:4b:4a:
         69:77:39:d7:63:cf:d9:dd:e8:b7:e0:81:24:fe:9f:10:82:49:
         30:16:89:92:3d:53:64:65:55:98:01:ff:99:6d:c7:39:0c:af:
         2d:5e:22:ae:12:d5:df:b4:63:50:60:de:dd:d1:e8:70:2f:2f:
         eb:25:bf:ab:25:5a:88:f2:99:97:08:81:a5:65:2a:09:a1:27:
         ba:ba:40:9a:c7:fc:59:26:95:18:7a:ea:d2:2b:d6:67:f9:48:
         e7:81:69:45:5d:55:e7:53:78:09:ae:55:19:a4:7d:68:60:83:
         7e:a0:9f:63:d6:fa:f6:46:6e:50:bc:0f:e9:df:d3:2e:99:f4:
         69:6f:66:57:1b:3f:8e:f1:7a:b5:9b:ea:31:9e:b6:0e:39:46:
         dc:fc:7c:45:3d:d9:93:77:1a:d7:fe:9a:9a:de:20:10:7a:eb:
         d3:05:30:5f:46:8f:4a:e5:74:f7:3b:f0:c9:d6:fb:c3:19:9d:
         d5:f8:23:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8eW5ET1/n9BZGTHFUmQUWoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzZjg5ZjU3ZDA3Mjg0OWUwY2FiMjE5NWNkMGJhZjI1NTc5
MzVlYTAwHhcNMjQwNDI3MDcwMTA4WhcNMjQwNDI4MDcwMTA4WjAzMTEwLwYDVQQD
Eyg4OTk4NTM2ZDBlZWQyZWUxZjM5NjcyMGFlYjVjNmFjN2Y1OTgzZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgY0G5J3UTvaZoleXK2cA5Rj25Cf
j3C0NtS3E3+PQA0EZQROcE0T2zr0zFC/c1ePpfq0eWPFWUpzzn+ZKU56Mr2Ya3el
hy4fclgYzKNz+XXYVQ8j2JmVg/MRfgpRJuZPo5x8FxpDKZMTrDvHs6b8sD9dOKWx
ZwFr0lQRPsc9sgEXNWiZrYiwPqZWGleMmhR6bsOZD7j2/6MlUOYeS1+44BGuA1+i
FhyLWRyBeKml4lxIJNxoGTzQ7Tm9ogUvlJINfIbKjJEXHwx+y84Bzbzy8vUcNt1J
gskZRaVPCXHcZhFdA9UXX/A7RNEyJssZE20bud0dPJjGIIo8nRcdFN7fDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImYU20O7S7h85ZyCutcasf1mD04MB8GA1UdIwQY
MBaAFCP4n1fQcoSeDKshlc0LryVXk16gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9mMWQ0MzktN2NjNy00NDlmLWE5ZTIt
MmVhNmY1ZWZiMjdmLzEvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9mMWQ0MzktN2NjNy00NDlmLWE5ZTItMmVhNmY1ZWZiMjdm
LzEvSV9pZlY5QnloSjRNcXlHVnpRdXZKVmVUWHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUgYLRH12
CDDS9PqnDw/Ac9azFSUmlaX5ZFhsrf1o79Ru9sCN1/ZNKNYjasOwDhZf6Czf8Rrf
6ioMIVQZ21tqbDiBLNDPQktKaXc512PP2d3ot+CBJP6fEIJJMBaJkj1TZGVVmAH/
mW3HOQyvLV4irhLV37RjUGDe3dHocC8v6yW/qyVaiPKZlwiBpWUqCaEnurpAmsf8
WSaVGHrq0ivWZ/lI54FpRV1V51N4Ca5VGaR9aGCDfqCfY9b69kZuULwP6d/TLpn0
aW9mVxs/jvF6tZvqMZ62DjlG3Px8RT3Zk3ca1/6amt4gEHrr0wUwX0aPSuV09zvw
ydb7wxmd1fgj2g==
-----END CERTIFICATE-----