Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
File:                     o6_aacqxv_Ujyj71dLh8oTD96iw.mft (raw, json)
Hash identifier:          TGb/mzZ1vmiXj1ys1SqB5pLpH5O1bOy7wzs8dR8Nzkc=
Subject key identifier:   9A:DE:A6:63:E8:75:43:16:19:7F:AA:DE:24:B4:73:B7:D2:44:53:99
Authority key identifier: A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C
Certificate issuer:       /CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
Certificate serial:       018F8749655551466FB1AF70E5EA13C3F4EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
Manifest number:          0A6D
Signing time:             Fri 17 May 2024 16:01:25 +0000
Manifest this update:     Fri 17 May 2024 16:01:25 +0000
Manifest next update:     Sat 18 May 2024 16:01:25 +0000
Files and hashes:         1: o6_aacqxv_Ujyj71dLh8oTD96iw.crl (hash: XTORzFOqySuF6mcACPWAlKU6EXCLdsAnRBcXXehvZio=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:65:55:51:46:6f:b1:af:70:e5:ea:13:c3:f4:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3afda69cab1bff523ca3ef574b87ca130fdea2c
        Validity
            Not Before: May 17 16:01:25 2024 GMT
            Not After : May 18 16:01:25 2024 GMT
        Subject: CN=9adea663e8754316197faade24b473b7d2445399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ff:bc:91:6d:a9:ff:09:ec:71:a0:79:2f:a7:
                    a9:56:35:b4:8b:15:b5:6e:a7:cf:69:84:2a:c6:2d:
                    cd:ee:83:ba:fd:e8:2a:c5:f4:8b:85:a3:c0:a5:34:
                    53:31:9f:c9:8a:db:43:45:4d:b2:0e:e9:90:9e:c6:
                    00:19:97:28:7d:ed:1e:19:85:47:ad:ef:02:47:dd:
                    d9:94:a2:c3:40:8f:82:1b:0d:0f:af:b0:3b:ed:43:
                    ee:83:22:ec:b6:ba:b3:3e:48:01:e0:df:f5:67:95:
                    80:ae:99:8c:f3:82:94:0b:15:e3:13:54:a1:89:93:
                    bb:23:6a:ea:20:ec:1f:1c:da:65:97:2d:37:fa:35:
                    b2:7c:80:97:c6:8a:a0:69:a4:e5:f5:4c:36:34:3d:
                    cd:4a:df:3b:2f:f8:39:8a:26:15:f2:d4:fc:a8:43:
                    91:82:73:2e:f5:96:de:ee:3c:89:36:81:39:81:5d:
                    37:35:d6:d8:cd:af:d5:99:29:22:7b:19:f1:31:3f:
                    26:4d:6f:42:1d:27:12:76:1b:28:3e:b8:5d:84:9f:
                    9b:77:3a:4b:64:59:8e:2c:28:4e:10:2f:e2:8e:13:
                    51:71:26:9f:34:1c:fd:4a:e8:7e:d2:a2:ac:ea:1c:
                    cd:67:ed:b7:7c:d2:f1:30:c4:59:f6:22:b4:e1:b9:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DE:A6:63:E8:75:43:16:19:7F:AA:DE:24:B4:73:B7:D2:44:53:99
            X509v3 Authority Key Identifier:
                keyid:A3:AF:DA:69:CA:B1:BF:F5:23:CA:3E:F5:74:B8:7C:A1:30:FD:EA:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6_aacqxv_Ujyj71dLh8oTD96iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e58db-8b02-4ed5-aa6c-ecd61bd02b46/1/o6_aacqxv_Ujyj71dLh8oTD96iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1f:ea:1b:96:12:cb:71:43:b2:de:9b:ed:be:e1:9f:08:5f:
         1c:54:3c:13:4a:fa:36:29:16:6e:fe:16:a5:6a:65:59:f0:79:
         7e:0a:42:a1:98:90:e6:21:87:59:b4:3d:b5:be:af:f2:d2:a6:
         11:5e:75:9b:59:2d:0d:89:f9:8d:a5:1e:25:23:1c:96:c7:a8:
         f2:ca:d6:4f:10:f0:a3:0d:f0:35:f0:1b:2c:89:82:98:83:46:
         84:b9:ce:d2:6f:a6:cb:c6:d5:f7:56:d8:6f:43:06:6a:46:ae:
         20:64:b1:88:48:ca:32:d3:96:b7:d6:31:e0:16:42:7f:88:9f:
         e5:32:a9:78:60:db:be:b7:4f:73:88:22:5b:1d:ee:c5:cb:76:
         af:78:e8:9f:d5:aa:5d:5c:9b:d0:f3:9a:59:c6:56:1a:99:84:
         d3:97:e1:0d:09:c2:5c:96:ba:99:7c:87:37:90:3a:16:c2:08:
         5d:71:c2:a1:cc:ac:48:c9:eb:cb:ee:36:c7:45:db:87:58:b2:
         4d:93:69:3d:61:a1:88:de:37:d6:fc:bb:fe:49:b0:b9:1b:78:
         ba:2b:19:c7:7a:d2:d3:40:ea:f9:ec:ee:f4:18:21:c6:6e:ec:
         53:4a:28:0c:4b:ca:09:02:dc:e4:ff:47:00:5c:8a:b6:c3:85:
         9a:d3:9c:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSWVVUUZvsa9w5eoTw/TrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWZkYTY5Y2FiMWJmZjUyM2NhM2VmNTc0Yjg3Y2ExMzBm
ZGVhMmMwHhcNMjQwNTE3MTYwMTI1WhcNMjQwNTE4MTYwMTI1WjAzMTEwLwYDVQQD
Eyg5YWRlYTY2M2U4NzU0MzE2MTk3ZmFhZGUyNGI0NzNiN2QyNDQ1Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3P+8kW2p/wnscaB5L6epVjW0ixW1
bqfPaYQqxi3N7oO6/egqxfSLhaPApTRTMZ/JittDRU2yDumQnsYAGZcofe0eGYVH
re8CR93ZlKLDQI+CGw0Pr7A77UPugyLstrqzPkgB4N/1Z5WArpmM84KUCxXjE1Sh
iZO7I2rqIOwfHNplly03+jWyfICXxoqgaaTl9Uw2ND3NSt87L/g5iiYV8tT8qEOR
gnMu9Zbe7jyJNoE5gV03NdbYza/VmSkiexnxMT8mTW9CHScSdhsoPrhdhJ+bdzpL
ZFmOLChOEC/ijhNRcSafNBz9Suh+0qKs6hzNZ+23fNLxMMRZ9iK04blKYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrepmPodUMWGX+q3iS0c7fSRFOZMB8GA1UdIwQY
MBaAFKOv2mnKsb/1I8o+9XS4fKEw/eosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZfYWFjcXh2X1VqeWo3MWRMaDhvVEQ5Nml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTU4ZGItOGIwMi00ZWQ1LWFhNmMt
ZWNkNjFiZDAyYjQ2LzEvbzZfYWFjcXh2X1VqeWo3MWRMaDhvVEQ5Nml3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZTU4ZGItOGIwMi00ZWQ1LWFhNmMtZWNkNjFiZDAyYjQ2
LzEvbzZfYWFjcXh2X1VqeWo3MWRMaDhvVEQ5Nml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjB/qG5YS
y3FDst6b7b7hnwhfHFQ8E0r6NikWbv4WpWplWfB5fgpCoZiQ5iGHWbQ9tb6v8tKm
EV51m1ktDYn5jaUeJSMclseo8srWTxDwow3wNfAbLImCmINGhLnO0m+my8bV91bY
b0MGakauIGSxiEjKMtOWt9Yx4BZCf4if5TKpeGDbvrdPc4giWx3uxct2r3jon9Wq
XVyb0POaWcZWGpmE05fhDQnCXJa6mXyHN5A6FsIIXXHCocysSMnry+42x0Xbh1iy
TZNpPWGhiN431vy7/kmwuRt4uisZx3rS00Dq+ezu9Bghxm7sU0ooDEvKCQLc5P9H
AFyKtsOFmtOcvQ==
-----END CERTIFICATE-----