Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/66f39f-ec5a-4a3f-83ac-0ebce7968938/1/0F56BzzDiydeClItN158mgcFCl0.mft
File:                     0F56BzzDiydeClItN158mgcFCl0.mft (raw, json)
Hash identifier:          20ctMp65dPGuTPhJxLMIjAysKFhylzcRaiiTxl33nng=
Subject key identifier:   2C:C9:97:B8:FB:D4:8B:A7:3B:E3:08:DD:81:A4:D6:C7:83:2A:C0:4B
Authority key identifier: D0:5E:7A:07:3C:C3:8B:27:5E:0A:52:2D:37:5E:7C:9A:07:05:0A:5D
Certificate issuer:       /CN=d05e7a073cc38b275e0a522d375e7c9a07050a5d
Certificate serial:       018F22DD56DE4D2B4D98EC908BDF8CDE7A97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0F56BzzDiydeClItN158mgcFCl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/66f39f-ec5a-4a3f-83ac-0ebce7968938/1/0F56BzzDiydeClItN158mgcFCl0.mft
Manifest number:          0828
Signing time:             Sun 28 Apr 2024 04:01:21 +0000
Manifest this update:     Sun 28 Apr 2024 04:01:21 +0000
Manifest next update:     Mon 29 Apr 2024 04:01:21 +0000
Files and hashes:         1: 0F56BzzDiydeClItN158mgcFCl0.crl (hash: VAatmmKdCj+/NHcGQkbmYsxbH4hAEpv8OgS7EfdkFmo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/66f39f-ec5a-4a3f-83ac-0ebce7968938/1/0F56BzzDiydeClItN158mgcFCl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/66f39f-ec5a-4a3f-83ac-0ebce7968938/1/0F56BzzDiydeClItN158mgcFCl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0F56BzzDiydeClItN158mgcFCl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:dd:56:de:4d:2b:4d:98:ec:90:8b:df:8c:de:7a:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05e7a073cc38b275e0a522d375e7c9a07050a5d
        Validity
            Not Before: Apr 28 04:01:21 2024 GMT
            Not After : Apr 29 04:01:21 2024 GMT
        Subject: CN=2cc997b8fbd48ba73be308dd81a4d6c7832ac04b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:52:68:0f:06:e8:02:88:f2:ae:64:43:71:
                    1d:2e:28:5e:a3:82:03:18:b5:37:d4:29:38:f6:5c:
                    b1:f4:52:11:18:cf:7e:23:80:82:93:3b:e8:5d:3b:
                    09:76:bd:e2:8c:65:4e:e5:1c:55:8a:69:58:5b:f1:
                    64:28:e3:24:dc:db:a5:11:6f:62:63:dc:10:c8:ee:
                    cb:df:56:06:a6:ed:b2:80:11:ec:62:63:e2:04:a8:
                    35:98:8b:ba:46:34:24:90:f8:d8:fa:2c:4c:f2:ab:
                    6e:39:cd:f4:46:ec:a2:66:61:a1:88:ba:de:64:e3:
                    86:88:04:02:3c:2f:bd:a0:2e:d5:f8:4e:d3:70:7a:
                    77:df:1e:dc:d9:02:f9:cb:70:cf:0f:1b:be:72:63:
                    0e:a8:ab:cc:a1:3c:01:8f:a7:0e:6d:a3:5d:fa:cc:
                    ec:fc:50:a3:3b:70:d8:d3:04:47:74:9e:9d:49:f7:
                    71:9d:30:6d:52:8e:7b:31:d2:53:8a:27:eb:bb:4b:
                    61:a7:16:68:18:fb:4e:d6:fb:3b:4a:fb:04:d0:7c:
                    60:9d:01:7e:6e:17:d0:56:bf:0e:a0:92:90:dc:fb:
                    2d:55:83:79:61:76:a2:7b:23:7e:69:01:23:a2:ea:
                    88:c8:8a:b0:38:90:09:36:9a:99:bd:1d:71:a5:5f:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C9:97:B8:FB:D4:8B:A7:3B:E3:08:DD:81:A4:D6:C7:83:2A:C0:4B
            X509v3 Authority Key Identifier:
                keyid:D0:5E:7A:07:3C:C3:8B:27:5E:0A:52:2D:37:5E:7C:9A:07:05:0A:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F56BzzDiydeClItN158mgcFCl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66f39f-ec5a-4a3f-83ac-0ebce7968938/1/0F56BzzDiydeClItN158mgcFCl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66f39f-ec5a-4a3f-83ac-0ebce7968938/1/0F56BzzDiydeClItN158mgcFCl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:48:48:25:68:6d:8b:4c:1a:67:e3:cf:87:b2:fb:e1:cd:90:
         57:e6:95:d3:18:5f:8d:15:40:93:99:01:05:ed:bc:8b:b1:f1:
         4a:bd:82:b6:ce:51:47:c9:bd:91:f0:6e:f1:1a:7d:30:01:f4:
         f9:08:e3:e5:63:cb:ed:08:57:a9:b7:22:a8:81:c2:fb:61:20:
         d3:45:30:26:fc:4e:a4:71:91:70:ee:1e:31:b4:70:59:db:04:
         7b:8c:7a:9c:85:9c:0e:0d:26:a7:d9:b1:7f:65:8b:d5:27:d8:
         79:9d:22:41:9f:2e:13:3d:74:25:5c:01:48:36:e3:73:47:10:
         09:44:c0:be:3d:49:60:cc:04:0b:0b:a0:0a:2c:8e:0b:c1:9e:
         ef:1e:d7:2b:11:68:5b:14:2b:bf:15:2a:25:55:62:70:01:f5:
         38:6d:77:de:70:0d:ac:61:cb:d5:7d:e6:c2:ea:7e:d7:55:a2:
         8a:be:c9:c6:44:c6:c0:56:37:d1:4b:8f:14:3c:cc:83:89:60:
         7d:d3:00:c1:f6:6b:be:3b:d0:b0:a2:d5:7f:04:bb:a4:2a:48:
         ca:29:ba:d1:25:ba:6d:8a:bb:23:9f:b6:8c:c0:39:18:8e:9c:
         4d:be:00:dd:eb:ef:84:cd:04:7b:04:94:34:f1:74:f4:20:27:
         d3:1c:0e:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8i3VbeTStNmOyQi9+M3nqXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNWU3YTA3M2NjMzhiMjc1ZTBhNTIyZDM3NWU3YzlhMDcw
NTBhNWQwHhcNMjQwNDI4MDQwMTIxWhcNMjQwNDI5MDQwMTIxWjAzMTEwLwYDVQQD
EygyY2M5OTdiOGZiZDQ4YmE3M2JlMzA4ZGQ4MWE0ZDZjNzgzMmFjMDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0BSaA8G6AKI8q5kQ3EdLiheo4ID
GLU31Ck49lyx9FIRGM9+I4CCkzvoXTsJdr3ijGVO5RxVimlYW/FkKOMk3NulEW9i
Y9wQyO7L31YGpu2ygBHsYmPiBKg1mIu6RjQkkPjY+ixM8qtuOc30RuyiZmGhiLre
ZOOGiAQCPC+9oC7V+E7TcHp33x7c2QL5y3DPDxu+cmMOqKvMoTwBj6cObaNd+szs
/FCjO3DY0wRHdJ6dSfdxnTBtUo57MdJTiifru0thpxZoGPtO1vs7SvsE0HxgnQF+
bhfQVr8OoJKQ3PstVYN5YXaieyN+aQEjouqIyIqwOJAJNpqZvR1xpV/9PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzJl7j71IunO+MI3YGk1seDKsBLMB8GA1UdIwQY
MBaAFNBeegc8w4snXgpSLTdefJoHBQpdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEY1NkJ6ekRpeWRlQ2xJdE4xNThtZ2NGQ2wwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NmYzOWYtZWM1YS00YTNmLTgzYWMt
MGViY2U3OTY4OTM4LzEvMEY1NkJ6ekRpeWRlQ2xJdE4xNThtZ2NGQ2wwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82NmYzOWYtZWM1YS00YTNmLTgzYWMtMGViY2U3OTY4OTM4
LzEvMEY1NkJ6ekRpeWRlQ2xJdE4xNThtZ2NGQ2wwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjEhIJWht
i0waZ+PPh7L74c2QV+aV0xhfjRVAk5kBBe28i7HxSr2Cts5RR8m9kfBu8Rp9MAH0
+Qjj5WPL7QhXqbciqIHC+2Eg00UwJvxOpHGRcO4eMbRwWdsEe4x6nIWcDg0mp9mx
f2WL1SfYeZ0iQZ8uEz10JVwBSDbjc0cQCUTAvj1JYMwECwugCiyOC8Ge7x7XKxFo
WxQrvxUqJVVicAH1OG133nANrGHL1X3mwup+11Wiir7JxkTGwFY30UuPFDzMg4lg
fdMAwfZrvjvQsKLVfwS7pCpIyim60SW6bYq7I5+2jMA5GI6cTb4A3evvhM0EewSU
NPF09CAn0xwO+Q==
-----END CERTIFICATE-----