Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
File:                     LrlwnvMbddaOIgiqvyosPD2Hb8E.mft (raw, json)
Hash identifier:          X03QovkJwHC1vQSXFJmZ9MU+ghGF1pPetlxSsgrB+fI=
Subject key identifier:   EB:9F:DE:F5:FE:C2:B2:18:6C:A5:28:B2:FC:59:C4:E0:87:E8:D8:93
Authority key identifier: 2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1
Certificate issuer:       /CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
Certificate serial:       018F9C86BC57051B1B2614103156BC273FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
Manifest number:          1180
Signing time:             Tue 21 May 2024 19:00:26 +0000
Manifest this update:     Tue 21 May 2024 19:00:26 +0000
Manifest next update:     Wed 22 May 2024 19:00:26 +0000
Files and hashes:         1: LrlwnvMbddaOIgiqvyosPD2Hb8E.crl (hash: lUfk1gB4vMXQxyy/hFdwXzijaEMRVI/DElW0jd8wCbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 14:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:9c:86:bc:57:05:1b:1b:26:14:10:31:56:bc:27:3f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2eb9709ef31b75d68e2208aabf2a2c3c3d876fc1
        Validity
            Not Before: May 21 19:00:26 2024 GMT
            Not After : May 22 19:00:26 2024 GMT
        Subject: CN=eb9fdef5fec2b2186ca528b2fc59c4e087e8d893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7f:38:94:cc:d6:24:2f:4e:82:d5:44:d4:95:
                    1f:9e:89:8a:2b:e8:93:b1:a4:43:45:b3:6c:b1:57:
                    c7:f9:4d:bb:dd:f1:2a:3e:82:b3:24:09:9c:d7:97:
                    ba:a7:df:c5:61:76:de:17:dd:9f:75:73:48:ba:4a:
                    8d:79:e0:74:e2:d9:7d:dc:2a:4f:17:d6:49:b3:84:
                    bc:97:f1:31:59:27:38:8e:c3:03:6c:82:1a:67:14:
                    f4:83:6d:11:a3:80:18:6c:57:86:08:fe:34:fd:45:
                    1f:69:fb:93:94:b0:2c:e3:ab:43:e9:c8:ff:b8:50:
                    60:aa:47:b6:d0:8a:b3:9b:92:7a:54:8a:74:48:b7:
                    2a:f6:fa:0e:d6:70:8c:20:83:91:fe:bb:a6:0a:ba:
                    21:0d:80:eb:85:79:9e:69:13:a6:6c:33:aa:1c:1d:
                    56:a6:99:73:38:89:ae:68:02:8d:bb:6a:89:32:09:
                    70:1a:d6:09:4e:86:bf:b0:fb:08:f6:a4:6d:b9:2e:
                    10:cb:f7:6c:81:7b:60:b9:39:d5:19:a2:e7:a6:68:
                    45:c2:01:6a:2a:5d:af:e7:d8:c0:a1:08:7b:1b:d6:
                    09:c0:32:64:aa:b0:02:83:61:53:71:71:df:74:83:
                    fe:26:23:ee:1b:9e:74:c4:17:0f:64:cc:f6:3b:bb:
                    57:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9F:DE:F5:FE:C2:B2:18:6C:A5:28:B2:FC:59:C4:E0:87:E8:D8:93
            X509v3 Authority Key Identifier:
                keyid:2E:B9:70:9E:F3:1B:75:D6:8E:22:08:AA:BF:2A:2C:3C:3D:87:6F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrlwnvMbddaOIgiqvyosPD2Hb8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8d3c3b-6069-4cd1-89b1-cec35c453c5e/1/LrlwnvMbddaOIgiqvyosPD2Hb8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:58:ac:7b:5c:a8:57:a0:4a:e2:6c:91:72:ba:5c:41:60:10:
         ff:83:12:bc:a7:d0:fe:6f:fc:fb:cd:9a:3d:c6:00:9c:40:a1:
         4f:91:14:7c:80:d6:78:de:5f:f3:db:d5:21:14:a5:15:06:64:
         89:4a:d7:1d:28:54:81:41:62:6d:1f:c9:a1:ee:90:4d:6b:a3:
         3b:5c:cd:30:38:da:54:a7:92:61:6c:63:9c:3e:2f:65:33:2a:
         f9:37:9a:bf:4c:25:73:27:ee:46:b8:04:cc:3e:6e:13:b5:d6:
         c9:3c:e5:c7:2e:05:9f:ca:e8:4f:ba:13:85:c0:6d:63:2d:f4:
         e6:5e:87:c7:22:eb:02:1b:58:c5:3e:af:32:71:cb:77:91:76:
         7d:23:06:db:e1:f3:ab:a1:d3:dc:08:e2:99:49:f9:ad:e1:74:
         66:c2:0f:06:bf:eb:aa:36:9b:ff:ad:12:95:df:8b:7f:a7:eb:
         92:5c:5f:fa:25:8b:80:a6:8a:fd:fc:b1:d5:b3:8c:d3:8f:de:
         8a:4c:bf:05:05:d2:9a:d8:28:31:b2:27:10:76:66:86:5f:1b:
         78:3f:e5:1e:d8:92:50:7d:2d:dd:17:58:b7:ff:f4:d3:41:ea:
         28:dc:15:1a:ba:4a:d3:30:26:1c:e1:6a:28:29:64:a9:79:e3:
         41:40:0d:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+chrxXBRsbJhQQMVa8Jz/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYjk3MDllZjMxYjc1ZDY4ZTIyMDhhYWJmMmEyYzNjM2Q4
NzZmYzEwHhcNMjQwNTIxMTkwMDI2WhcNMjQwNTIyMTkwMDI2WjAzMTEwLwYDVQQD
EyhlYjlmZGVmNWZlYzJiMjE4NmNhNTI4YjJmYzU5YzRlMDg3ZThkODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq384lMzWJC9OgtVE1JUfnomKK+iT
saRDRbNssVfH+U273fEqPoKzJAmc15e6p9/FYXbeF92fdXNIukqNeeB04tl93CpP
F9ZJs4S8l/ExWSc4jsMDbIIaZxT0g20Ro4AYbFeGCP40/UUfafuTlLAs46tD6cj/
uFBgqke20Iqzm5J6VIp0SLcq9voO1nCMIIOR/rumCrohDYDrhXmeaROmbDOqHB1W
pplzOImuaAKNu2qJMglwGtYJToa/sPsI9qRtuS4Qy/dsgXtguTnVGaLnpmhFwgFq
Kl2v59jAoQh7G9YJwDJkqrACg2FTcXHfdIP+JiPuG550xBcPZMz2O7tXzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuf3vX+wrIYbKUosvxZxOCH6NiTMB8GA1UdIwQY
MBaAFC65cJ7zG3XWjiIIqr8qLDw9h2/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEt
Y2VjMzVjNDUzYzVlLzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84ZDNjM2ItNjA2OS00Y2QxLTg5YjEtY2VjMzVjNDUzYzVl
LzEvTHJsd252TWJkZGFPSWdpcXZ5b3NQRDJIYjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlise1yo
V6BK4myRcrpcQWAQ/4MSvKfQ/m/8+82aPcYAnEChT5EUfIDWeN5f89vVIRSlFQZk
iUrXHShUgUFibR/Joe6QTWujO1zNMDjaVKeSYWxjnD4vZTMq+Teav0wlcyfuRrgE
zD5uE7XWyTzlxy4Fn8roT7oThcBtYy305l6HxyLrAhtYxT6vMnHLd5F2fSMG2+Hz
q6HT3AjimUn5reF0ZsIPBr/rqjab/60Sld+Lf6frklxf+iWLgKaK/fyx1bOM04/e
iky/BQXSmtgoMbInEHZmhl8beD/lHtiSUH0t3RdYt//000HqKNwVGrpK0zAmHOFq
KClkqXnjQUANtw==
-----END CERTIFICATE-----