Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
File:                     yigmXgq4MyeqVJI0yrsT64_2ZDc.mft (raw, json)
Hash identifier:          ah/gCDAIP2WQDinfbiv9TPxHlxPVIZqVBICSHhbdM1g=
Subject key identifier:   D0:B7:8F:86:E5:75:3D:8C:60:DB:35:B5:42:96:24:68:AE:FE:D6:B6
Authority key identifier: CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37
Certificate issuer:       /CN=ca28265e0ab83327aa549234cabb13eb8ff66437
Certificate serial:       01936AB4E7748F0AC1F8C844C5B0702CFDE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
Manifest number:          0CDC
Signing time:             Tue 26 Nov 2024 23:01:00 +0000
Manifest this update:     Tue 26 Nov 2024 23:01:00 +0000
Manifest next update:     Wed 27 Nov 2024 23:01:00 +0000
Files and hashes:         1: yigmXgq4MyeqVJI0yrsT64_2ZDc.crl (hash: n/rYK+F+P2uxke+plNO9crVu5lbFLUu/CxN8dg6bi7w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:e7:74:8f:0a:c1:f8:c8:44:c5:b0:70:2c:fd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca28265e0ab83327aa549234cabb13eb8ff66437
        Validity
            Not Before: Nov 26 23:01:00 2024 GMT
            Not After : Nov 27 23:01:00 2024 GMT
        Subject: CN=d0b78f86e5753d8c60db35b542962468aefed6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:44:94:82:82:3f:57:bb:0f:14:3d:70:6e:
                    5e:4d:3c:64:27:f3:54:ce:c2:e9:3c:ea:a9:04:a4:
                    ec:d3:92:17:14:14:00:fe:65:0e:e5:a9:df:c1:c1:
                    77:69:88:47:4c:30:13:61:39:eb:bf:9b:7d:5d:8d:
                    e6:73:00:93:19:81:b2:a5:30:64:bc:ce:07:fd:f8:
                    86:12:e3:ef:bd:f4:d0:17:cb:72:90:58:09:8b:4a:
                    d0:62:93:1e:ea:9a:c5:ab:a9:f3:cd:62:75:8a:a9:
                    92:36:4f:1c:08:44:ab:b4:37:41:69:f2:04:69:06:
                    0e:2e:5b:26:e8:7f:8c:0e:49:2f:3f:9b:46:ec:6d:
                    91:f0:f1:36:ae:bd:35:e4:dd:a4:7a:bc:81:51:43:
                    fb:6b:58:e3:8a:34:65:8d:b3:44:4d:f5:6b:c5:3c:
                    42:c9:5a:4f:9f:79:3f:8f:9d:44:fc:6a:c4:75:e0:
                    96:fa:73:47:c1:39:84:3e:48:fb:0d:21:51:f4:4c:
                    73:3a:db:cc:c1:b0:1e:ce:5c:e4:02:0b:a5:fa:e1:
                    b4:a0:5f:c7:9b:a1:b3:1b:eb:08:a0:1e:1f:ce:87:
                    0c:63:9d:20:e7:82:79:36:65:91:e0:1f:35:d4:c5:
                    53:79:39:6f:7c:24:ab:f4:55:85:cf:0e:e4:25:65:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:B7:8F:86:E5:75:3D:8C:60:DB:35:B5:42:96:24:68:AE:FE:D6:B6
            X509v3 Authority Key Identifier:
                keyid:CA:28:26:5E:0A:B8:33:27:AA:54:92:34:CA:BB:13:EB:8F:F6:64:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yigmXgq4MyeqVJI0yrsT64_2ZDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/df5c6f-bb17-42af-ab4a-12dfd5e395f9/1/yigmXgq4MyeqVJI0yrsT64_2ZDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:77:26:24:6c:47:20:af:d3:bf:62:36:f9:30:8b:da:dc:93:
         61:7e:88:63:47:72:3e:06:60:d2:2f:20:22:34:5f:5c:62:bc:
         cf:c1:77:7d:fe:90:b5:ce:42:d5:d1:91:a9:d0:d2:91:40:b4:
         06:b8:19:a7:9d:9a:8d:07:4a:f8:e0:75:da:9f:ab:6c:1d:fe:
         13:87:9d:fd:14:91:75:ef:bb:5d:3b:ca:a2:fb:f7:2c:fd:a1:
         c2:1b:00:3b:46:98:3d:d2:9e:77:a7:a6:dc:89:26:ea:f0:41:
         66:2e:e6:1e:22:25:1f:f7:35:cf:d4:49:b4:d2:bf:7b:97:e9:
         a1:14:b3:8a:c0:13:d7:98:96:cc:7a:b2:d4:87:3a:0c:b1:51:
         b5:ba:59:92:e9:af:16:9b:38:72:bd:3c:b8:28:14:79:fb:5d:
         00:39:2a:2f:a0:76:91:6f:38:eb:8e:0e:3c:29:14:52:80:64:
         36:9f:1f:17:de:27:af:c2:d8:f8:13:db:db:15:ee:f7:de:0e:
         5e:7a:31:4e:4c:08:ff:26:af:e9:b5:a2:c8:ab:b5:25:d4:5b:
         2e:2a:ba:3f:64:56:ad:47:ef:cd:c2:20:b5:74:7e:0f:ed:52:
         69:cf:38:f0:3e:b5:8d:95:fa:af:b7:f1:2a:27:99:5c:a6:5c:
         f1:ca:bf:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtOd0jwrB+MhExbBwLP3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhMjgyNjVlMGFiODMzMjdhYTU0OTIzNGNhYmIxM2ViOGZm
NjY0MzcwHhcNMjQxMTI2MjMwMTAwWhcNMjQxMTI3MjMwMTAwWjAzMTEwLwYDVQQD
EyhkMGI3OGY4NmU1NzUzZDhjNjBkYjM1YjU0Mjk2MjQ2OGFlZmVkNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf5ElIKCP1e7DxQ9cG5eTTxkJ/NU
zsLpPOqpBKTs05IXFBQA/mUO5anfwcF3aYhHTDATYTnrv5t9XY3mcwCTGYGypTBk
vM4H/fiGEuPvvfTQF8tykFgJi0rQYpMe6prFq6nzzWJ1iqmSNk8cCESrtDdBafIE
aQYOLlsm6H+MDkkvP5tG7G2R8PE2rr015N2keryBUUP7a1jjijRljbNETfVrxTxC
yVpPn3k/j51E/GrEdeCW+nNHwTmEPkj7DSFR9ExzOtvMwbAezlzkAgul+uG0oF/H
m6GzG+sIoB4fzocMY50g54J5NmWR4B811MVTeTlvfCSr9FWFzw7kJWUvzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNC3j4bldT2MYNs1tUKWJGiu/ta2MB8GA1UdIwQY
MBaAFMooJl4KuDMnqlSSNMq7E+uP9mQ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kZjVjNmYtYmIxNy00MmFmLWFiNGEt
MTJkZmQ1ZTM5NWY5LzEveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kZjVjNmYtYmIxNy00MmFmLWFiNGEtMTJkZmQ1ZTM5NWY5
LzEveWlnbVhncTRNeWVxVkpJMHlyc1Q2NF8yWkRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3cmJGxH
IK/Tv2I2+TCL2tyTYX6IY0dyPgZg0i8gIjRfXGK8z8F3ff6Qtc5C1dGRqdDSkUC0
BrgZp52ajQdK+OB12p+rbB3+E4ed/RSRde+7XTvKovv3LP2hwhsAO0aYPdKed6em
3Ikm6vBBZi7mHiIlH/c1z9RJtNK/e5fpoRSzisAT15iWzHqy1Ic6DLFRtbpZkumv
Fps4cr08uCgUeftdADkqL6B2kW84644OPCkUUoBkNp8fF94nr8LY+BPb2xXu994O
XnoxTkwI/yav6bWiyKu1JdRbLiq6P2RWrUfvzcIgtXR+D+1Sac848D61jZX6r7fx
KieZXKZc8cq/Ew==
-----END CERTIFICATE-----