Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File:                     54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier:          nGU/frSAw60EZmggYWKNsU3YIfLJCwd9hvviB0HIOpA=
Subject key identifier:   01:61:CE:B6:C5:4D:DB:03:3B:5B:47:C7:18:34:6B:D1:29:7F:1E:84
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer:       /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial:       01936AEB4AE82227FE511D1CB63188EFBCCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number:          0150
Signing time:             Wed 27 Nov 2024 00:00:25 +0000
Manifest this update:     Wed 27 Nov 2024 00:00:25 +0000
Manifest next update:     Thu 28 Nov 2024 00:00:25 +0000
Files and hashes:         1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: 8ZF3hdjJBtW4fS6w5RFJvzdYjvSi7hECYSmy9FArE+o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:eb:4a:e8:22:27:fe:51:1d:1c:b6:31:88:ef:bc:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
        Validity
            Not Before: Nov 27 00:00:25 2024 GMT
            Not After : Nov 28 00:00:25 2024 GMT
        Subject: CN=0161ceb6c54ddb033b5b47c718346bd1297f1e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:83:55:67:11:49:3a:3e:90:a4:e1:03:b5:9f:
                    0a:3e:50:c3:37:7a:37:6d:8d:2d:8d:29:0a:47:07:
                    dd:f0:56:f8:e1:7d:2b:23:38:10:de:cf:4d:0b:08:
                    b4:57:21:44:6f:a4:49:41:ad:38:52:32:82:5c:c3:
                    08:9a:6a:ad:24:67:2d:d5:c9:9b:ed:25:0b:77:02:
                    6f:e4:ab:d8:d4:40:79:87:71:a0:90:3a:40:33:57:
                    d2:92:96:64:43:c0:96:13:b1:b7:a5:44:34:f9:4e:
                    ac:95:e4:0a:37:94:98:01:8e:0e:2b:c2:f8:60:f5:
                    7e:36:ef:e2:62:5c:d5:6e:b8:83:38:b7:83:7e:fa:
                    e9:f7:a5:ca:8a:2d:ab:e6:ad:84:b3:2b:98:bf:57:
                    82:ec:f7:30:a9:24:9b:89:c5:b6:80:e5:cc:68:50:
                    4a:c6:dd:07:d8:c5:0e:fd:ac:39:e0:f8:48:97:49:
                    2b:9b:b6:d8:46:eb:a7:0e:9e:40:48:3f:9f:b7:bd:
                    09:ed:ca:d7:c1:63:fd:b9:5a:45:5a:8d:60:d3:60:
                    eb:06:77:b2:b4:b3:8d:fe:77:9f:14:54:ea:9b:17:
                    5f:da:a5:a2:b1:82:73:23:10:77:2d:0b:ca:2e:71:
                    d0:92:e4:05:b4:40:4a:8f:c1:a2:d8:61:45:f9:3f:
                    ff:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:61:CE:B6:C5:4D:DB:03:3B:5B:47:C7:18:34:6B:D1:29:7F:1E:84
            X509v3 Authority Key Identifier:
                keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:42:18:b3:1b:d2:85:a1:9c:23:23:98:77:6b:06:3d:a6:37:
         42:5a:b1:69:0f:22:ee:13:79:91:d3:d7:3e:cc:22:91:85:15:
         df:f3:2c:30:f7:15:17:cf:16:84:47:ba:51:87:aa:4c:6b:c5:
         d9:7c:05:02:98:89:04:51:3a:42:fe:f7:34:fd:d3:f8:08:e3:
         3e:5b:c6:62:75:49:63:31:f9:ac:6f:bd:38:1f:ec:51:08:6c:
         f3:b1:9a:5b:b7:92:85:80:d8:d9:f3:ac:45:7c:ac:44:eb:55:
         1c:13:8e:d9:84:f4:d9:d9:6f:60:e4:4c:39:1e:e8:d4:66:45:
         f4:f6:59:5b:ae:37:50:2a:a5:4d:df:e2:08:91:ee:bd:72:b8:
         60:d2:00:c7:3c:f1:89:bb:2c:20:82:57:fd:4b:bf:94:11:b2:
         2d:cf:be:cd:4d:5d:ac:0b:cc:be:47:ef:ad:97:da:0b:55:a4:
         82:54:46:54:84:82:a9:bb:f0:01:8d:4a:15:2d:c9:e1:ed:6d:
         e4:e7:04:c5:6e:6c:0f:bd:22:d5:5a:25:33:7e:67:6a:62:57:
         01:4b:5f:a4:12:18:44:85:7c:82:a9:f8:0b:8a:1d:b4:2b:bb:
         0c:4e:30:3d:36:5e:06:62:f9:32:df:62:f1:3c:24:c2:b7:ac:
         23:07:03:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNq60roIif+UR0ctjGI77zOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ODA5NTU1YThmMDVmMDQwYjQ1ZjlhZWM5YzNlZjU1YTFi
YTkzM2QwHhcNMjQxMTI3MDAwMDI1WhcNMjQxMTI4MDAwMDI1WjAzMTEwLwYDVQQD
EygwMTYxY2ViNmM1NGRkYjAzM2I1YjQ3YzcxODM0NmJkMTI5N2YxZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYNVZxFJOj6QpOEDtZ8KPlDDN3o3
bY0tjSkKRwfd8Fb44X0rIzgQ3s9NCwi0VyFEb6RJQa04UjKCXMMImmqtJGct1cmb
7SULdwJv5KvY1EB5h3GgkDpAM1fSkpZkQ8CWE7G3pUQ0+U6sleQKN5SYAY4OK8L4
YPV+Nu/iYlzVbriDOLeDfvrp96XKii2r5q2EsyuYv1eC7PcwqSSbicW2gOXMaFBK
xt0H2MUO/aw54PhIl0krm7bYRuunDp5ASD+ft70J7crXwWP9uVpFWo1g02DrBney
tLON/nefFFTqmxdf2qWisYJzIxB3LQvKLnHQkuQFtEBKj8Gi2GFF+T//nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFhzrbFTdsDO1tHxxg0a9Epfx6EMB8GA1UdIwQY
MBaAFOeAlVWo8F8EC0X5rsnD71WhupM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgt
Y2EwOGZlNmYzZTU3LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgtY2EwOGZlNmYzZTU3
LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEIYsxvS
haGcIyOYd2sGPaY3QlqxaQ8i7hN5kdPXPswikYUV3/MsMPcVF88WhEe6UYeqTGvF
2XwFApiJBFE6Qv73NP3T+AjjPlvGYnVJYzH5rG+9OB/sUQhs87GaW7eShYDY2fOs
RXysROtVHBOO2YT02dlvYORMOR7o1GZF9PZZW643UCqlTd/iCJHuvXK4YNIAxzzx
ibssIIJX/Uu/lBGyLc++zU1drAvMvkfvrZfaC1WkglRGVISCqbvwAY1KFS3J4e1t
5OcExW5sD70i1VolM35namJXAUtfpBIYRIV8gqn4C4odtCu7DE4wPTZeBmL5Mt9i
8TwkwresIwcDyg==
-----END CERTIFICATE-----