Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
File:                     z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json)
Hash identifier:          jBl1o+gGrkxQvvszjvQBmtqB9RpbsE83C4o5EwuZN9g=
Subject key identifier:   B1:43:32:A1:F6:7B:63:48:A9:29:F0:6A:E5:BD:FA:9B:49:61:40:EA
Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40
Certificate issuer:       /CN=cf7da43118588225a376ec2149c7336c46336440
Certificate serial:       019369D9CE801647A5A4246EC5C45233DD0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
Manifest number:          0B99
Signing time:             Tue 26 Nov 2024 19:01:42 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:42 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:42 +0000
Files and hashes:         1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: QqkF5YRS9k46Uc0RmyB0Z5CMUZLVflHz+wPYpIuGMW0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:ce:80:16:47:a5:a4:24:6e:c5:c4:52:33:dd:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf7da43118588225a376ec2149c7336c46336440
        Validity
            Not Before: Nov 26 19:01:42 2024 GMT
            Not After : Nov 27 19:01:42 2024 GMT
        Subject: CN=b14332a1f67b6348a929f06ae5bdfa9b496140ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b6:95:52:ff:26:d8:f9:a5:3a:0c:e1:20:3e:
                    1d:46:8d:a7:36:7f:40:a2:40:fa:1e:a0:10:87:9e:
                    4a:94:bd:31:cf:49:2d:8d:cf:7c:0c:f4:5d:cb:49:
                    66:8f:e3:4a:7f:11:f1:a1:74:7b:11:46:aa:a7:96:
                    16:38:80:6c:d0:bc:c7:13:04:f0:1f:5b:aa:9d:4b:
                    d5:71:05:56:61:df:de:5e:8b:56:c9:ec:6b:60:62:
                    db:3c:0b:4c:73:b1:1b:29:d3:f6:03:31:fb:ea:dd:
                    2e:ce:a8:d4:b4:f5:d8:27:f7:bc:fd:d5:e5:ec:7d:
                    b4:2c:3b:6a:32:fd:c7:5f:7f:ca:ca:3e:14:45:cc:
                    95:a2:4a:0f:0a:79:5d:0c:f2:38:8b:5a:e7:ee:14:
                    1a:32:3d:10:92:09:27:95:a8:69:2c:e6:4c:d7:1b:
                    1c:9f:2e:91:bc:c1:b6:c3:8d:84:ad:b0:6c:19:9a:
                    41:19:5d:de:45:5d:a4:a0:a9:bd:d8:7b:df:f3:e7:
                    59:42:5b:e1:9e:b8:04:7f:26:d0:b3:a4:07:b2:d8:
                    10:cb:ce:93:49:16:42:c1:6b:13:b3:78:f0:d8:0f:
                    12:24:3e:c8:01:0d:ce:0e:f8:e6:82:e7:a8:67:6e:
                    19:19:d1:ee:fa:da:b3:48:e5:3e:fb:f5:75:87:8a:
                    4c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:43:32:A1:F6:7B:63:48:A9:29:F0:6A:E5:BD:FA:9B:49:61:40:EA
            X509v3 Authority Key Identifier:
                keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ee:7e:5e:9b:79:82:e8:49:1f:09:aa:e5:79:e2:29:be:8e:
         77:d0:5b:3f:8e:d4:4c:16:50:b5:d0:f4:c0:6c:54:fd:45:d8:
         e9:47:31:04:69:22:8c:58:fc:86:10:e4:e8:a3:68:58:82:ab:
         2a:8e:5b:3b:6b:48:a8:6d:18:f2:7e:1f:dd:93:ed:75:09:fe:
         1c:5c:04:3a:81:6d:2b:3a:db:cb:50:c0:42:f5:ed:ff:91:ca:
         08:5c:03:43:33:e0:3c:eb:82:1a:33:39:ac:05:6d:14:ef:43:
         d0:a4:54:91:59:dd:67:f9:99:a0:01:23:de:f0:f2:04:ed:1d:
         a1:d0:1d:64:c6:02:fa:70:03:a8:50:e5:bc:06:0b:eb:00:52:
         db:bf:8a:b3:8a:e0:23:b7:5f:1c:d5:22:7d:48:1c:08:6e:8e:
         00:23:65:18:fa:72:9f:8e:ee:bb:d4:a4:30:f7:ab:24:62:21:
         36:69:9a:a0:2a:fe:7c:70:af:15:d4:81:2e:06:be:56:dc:e4:
         e8:91:91:86:f7:13:cd:f2:3b:ca:69:14:4f:7f:c5:9a:86:21:
         d4:73:5b:b2:74:96:4d:05:5f:80:2e:96:8e:3b:c8:28:c8:76:
         b1:5e:5f:ac:e3:06:87:73:41:95:8c:a8:f0:0f:26:99:d9:eb:
         ae:48:43:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2c6AFkelpCRuxcRSM90LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmN2RhNDMxMTg1ODgyMjVhMzc2ZWMyMTQ5YzczMzZjNDYz
MzY0NDAwHhcNMjQxMTI2MTkwMTQyWhcNMjQxMTI3MTkwMTQyWjAzMTEwLwYDVQQD
EyhiMTQzMzJhMWY2N2I2MzQ4YTkyOWYwNmFlNWJkZmE5YjQ5NjE0MGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLaVUv8m2PmlOgzhID4dRo2nNn9A
okD6HqAQh55KlL0xz0ktjc98DPRdy0lmj+NKfxHxoXR7EUaqp5YWOIBs0LzHEwTw
H1uqnUvVcQVWYd/eXotWyexrYGLbPAtMc7EbKdP2AzH76t0uzqjUtPXYJ/e8/dXl
7H20LDtqMv3HX3/Kyj4URcyVokoPCnldDPI4i1rn7hQaMj0QkgknlahpLOZM1xsc
ny6RvMG2w42ErbBsGZpBGV3eRV2koKm92Hvf8+dZQlvhnrgEfybQs6QHstgQy86T
SRZCwWsTs3jw2A8SJD7IAQ3ODvjmgueoZ24ZGdHu+tqzSOU++/V1h4pMpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFDMqH2e2NIqSnwauW9+ptJYUDqMB8GA1UdIwQY
MBaAFM99pDEYWIIlo3bsIUnHM2xGM2RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wZTRhNzUtY2I1OC00NGFhLTlkZDUt
YzVmMTdlYWI0MWQ1LzEvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wZTRhNzUtY2I1OC00NGFhLTlkZDUtYzVmMTdlYWI0MWQ1
LzEvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApu5+Xpt5
guhJHwmq5XniKb6Od9BbP47UTBZQtdD0wGxU/UXY6UcxBGkijFj8hhDk6KNoWIKr
Ko5bO2tIqG0Y8n4f3ZPtdQn+HFwEOoFtKzrby1DAQvXt/5HKCFwDQzPgPOuCGjM5
rAVtFO9D0KRUkVndZ/mZoAEj3vDyBO0dodAdZMYC+nADqFDlvAYL6wBS27+Ks4rg
I7dfHNUifUgcCG6OACNlGPpyn47uu9SkMPerJGIhNmmaoCr+fHCvFdSBLga+Vtzk
6JGRhvcTzfI7ymkUT3/FmoYh1HNbsnSWTQVfgC6WjjvIKMh2sV5frOMGh3NBlYyo
8A8mmdnrrkhDbg==
-----END CERTIFICATE-----