Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
File:                     jeQsVg_CKLW7T0zwDt4t_ibGYws.mft (raw, json)
Hash identifier:          S2upQsNrl3jLJhxgpZD5WgGG1tEMphouO+tEhcg5ZfI=
Subject key identifier:   FD:7B:EE:0B:FE:BB:E1:DC:00:6C:A8:A7:C3:45:FA:29:8A:87:58:C2
Authority key identifier: 8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B
Certificate issuer:       /CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
Certificate serial:       0193568A7358E505DD9B92A4CFD0F1AD2656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 01:02:14 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:14 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:14 +0000
Files and hashes:         1: jeQsVg_CKLW7T0zwDt4t_ibGYws.crl (hash: 7PYbsMKdwxqnOzRW0cgYIVyBDw22K6C91H5owYQADSg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:73:58:e5:05:dd:9b:92:a4:cf:d0:f1:ad:26:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de42c560fc228b5bb4f4cf00ede2dfe26c6630b
        Validity
            Not Before: Nov 23 01:02:14 2024 GMT
            Not After : Nov 24 01:02:14 2024 GMT
        Subject: CN=fd7bee0bfebbe1dc006ca8a7c345fa298a8758c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:29:a3:02:a3:72:b0:d4:5a:39:75:e2:82:8f:
                    02:c4:ea:e8:d0:c9:0a:7d:e2:b0:5a:65:3e:b8:4e:
                    52:d7:50:48:41:6d:3d:35:85:6d:55:39:78:e5:67:
                    6f:05:b4:89:b2:36:c5:cf:46:6f:63:dd:44:45:51:
                    8a:31:8c:72:8c:0d:16:66:31:d6:e3:e3:a9:85:49:
                    1d:4f:2a:b5:32:0b:5a:42:e0:31:12:9b:b5:b9:a5:
                    ed:54:8a:06:1f:28:d6:a2:03:76:9c:ce:2e:44:d6:
                    7d:32:62:a0:9e:c9:7d:7e:da:6e:9e:2d:4c:13:4e:
                    ee:98:f3:e6:52:ed:11:b3:91:f3:63:cb:71:35:9c:
                    b7:d8:00:e0:59:7c:97:5f:8d:32:91:f0:28:e7:53:
                    34:88:5f:97:a1:c6:bd:c3:e7:3e:2c:6f:ba:02:25:
                    36:40:07:6f:88:94:75:c0:28:ff:84:7b:e4:69:9d:
                    e0:f9:d2:df:c0:57:4e:21:f0:31:31:2d:6d:ca:13:
                    52:1e:51:f9:f2:66:d5:a7:21:b9:d0:34:2d:45:4a:
                    1e:68:88:8b:5a:bd:70:a6:05:04:f3:0f:d3:83:dd:
                    24:0c:61:89:7f:c4:60:2e:80:05:39:8a:1e:75:7b:
                    b3:c6:98:69:7f:cc:c0:88:81:16:41:28:33:2e:da:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7B:EE:0B:FE:BB:E1:DC:00:6C:A8:A7:C3:45:FA:29:8A:87:58:C2
            X509v3 Authority Key Identifier:
                keyid:8D:E4:2C:56:0F:C2:28:B5:BB:4F:4C:F0:0E:DE:2D:FE:26:C6:63:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jeQsVg_CKLW7T0zwDt4t_ibGYws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2977cb-6d42-4fab-94dc-3bf83b7e17bc/1/jeQsVg_CKLW7T0zwDt4t_ibGYws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:8d:f3:c3:99:87:41:f3:48:c6:b4:90:88:6d:7b:42:33:f1:
         ce:1e:46:c3:9b:eb:5f:bc:d0:29:15:ec:42:13:42:ae:20:af:
         53:06:d9:4b:d7:ae:7a:bb:cb:4c:d5:30:27:4c:2a:c1:6f:7a:
         90:cd:0c:6d:94:49:c6:e5:bb:77:0e:37:47:35:e7:1d:7a:0c:
         40:da:e8:13:64:39:b6:e9:2f:71:29:af:4a:ec:71:48:90:8b:
         5e:d2:90:1e:c6:25:69:ee:62:8e:90:d1:4c:d4:c8:65:23:bb:
         47:ca:92:cb:f1:62:9a:fd:43:da:1a:32:50:86:95:db:6f:af:
         80:18:95:fc:1c:88:5f:ab:4a:f1:ec:f7:59:c6:23:df:c7:d6:
         20:ab:dc:07:45:72:e3:14:4d:17:20:0b:44:47:73:57:73:3d:
         c0:9b:8a:dd:f8:a6:42:ce:5e:33:ad:30:9b:34:08:f7:ad:b9:
         01:6f:42:f8:20:6f:b9:df:0e:3e:b7:6c:da:a9:81:c9:7b:f7:
         d4:97:21:67:b8:a1:95:09:3b:42:31:ae:6e:fe:18:33:8e:14:
         97:86:78:ab:ae:fd:0f:0c:f6:78:32:ea:ab:cc:ce:94:a8:a6:
         bd:75:32:66:1e:6e:ed:98:73:f9:79:c6:59:15:fa:ae:12:4e:
         60:38:d7:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWinNY5QXdm5Kkz9DxrSZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZTQyYzU2MGZjMjI4YjViYjRmNGNmMDBlZGUyZGZlMjZj
NjYzMGIwHhcNMjQxMTIzMDEwMjE0WhcNMjQxMTI0MDEwMjE0WjAzMTEwLwYDVQQD
EyhmZDdiZWUwYmZlYmJlMWRjMDA2Y2E4YTdjMzQ1ZmEyOThhODc1OGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCmjAqNysNRaOXXigo8CxOro0MkK
feKwWmU+uE5S11BIQW09NYVtVTl45WdvBbSJsjbFz0ZvY91ERVGKMYxyjA0WZjHW
4+OphUkdTyq1MgtaQuAxEpu1uaXtVIoGHyjWogN2nM4uRNZ9MmKgnsl9ftpuni1M
E07umPPmUu0Rs5HzY8txNZy32ADgWXyXX40ykfAo51M0iF+Xoca9w+c+LG+6AiU2
QAdviJR1wCj/hHvkaZ3g+dLfwFdOIfAxMS1tyhNSHlH58mbVpyG50DQtRUoeaIiL
Wr1wpgUE8w/Tg90kDGGJf8RgLoAFOYoedXuzxphpf8zAiIEWQSgzLtro2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP177gv+u+HcAGyop8NF+imKh1jCMB8GA1UdIwQY
MBaAFI3kLFYPwii1u09M8A7eLf4mxmMLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yOTc3Y2ItNmQ0Mi00ZmFiLTk0ZGMt
M2JmODNiN2UxN2JjLzEvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yOTc3Y2ItNmQ0Mi00ZmFiLTk0ZGMtM2JmODNiN2UxN2Jj
LzEvamVRc1ZnX0NLTFc3VDB6d0R0NHRfaWJHWXdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxo3zw5mH
QfNIxrSQiG17QjPxzh5Gw5vrX7zQKRXsQhNCriCvUwbZS9euervLTNUwJ0wqwW96
kM0MbZRJxuW7dw43RzXnHXoMQNroE2Q5tukvcSmvSuxxSJCLXtKQHsYlae5ijpDR
TNTIZSO7R8qSy/Fimv1D2hoyUIaV22+vgBiV/ByIX6tK8ez3WcYj38fWIKvcB0Vy
4xRNFyALREdzV3M9wJuK3fimQs5eM60wmzQI9625AW9C+CBvud8OPrds2qmByXv3
1JchZ7ihlQk7QjGubv4YM44Ul4Z4q679Dwz2eDLqq8zOlKimvXUyZh5u7Zhz+XnG
WRX6rhJOYDjXGQ==
-----END CERTIFICATE-----