Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
File:                     y_sCefzSOo5YPzRauQRyjm0OTGI.mft (raw, json)
Hash identifier:          TpFwHGoihQadXWBURLz/uYlwfMFUX0+inSxOZN7iIkI=
Subject key identifier:   98:88:57:AD:47:7C:20:97:06:96:8E:06:99:06:E2:22:FB:C9:C9:91
Authority key identifier: CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62
Certificate issuer:       /CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
Certificate serial:       018F8635C3D1D80A88AD32760403F476AA2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
Manifest number:          01A1
Signing time:             Fri 17 May 2024 11:00:21 +0000
Manifest this update:     Fri 17 May 2024 11:00:21 +0000
Manifest next update:     Sat 18 May 2024 11:00:21 +0000
Files and hashes:         1: y_sCefzSOo5YPzRauQRyjm0OTGI.crl (hash: rJPOR74mXoDWXY1xb6ucpimBFeOjZlWpoR9G08OmJN8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:c3:d1:d8:0a:88:ad:32:76:04:03:f4:76:aa:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbfb0279fcd23a8e583f345ab904728e6d0e4c62
        Validity
            Not Before: May 17 11:00:21 2024 GMT
            Not After : May 18 11:00:21 2024 GMT
        Subject: CN=988857ad477c209706968e069906e222fbc9c991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:bf:ff:c2:90:69:ca:cb:0f:bb:0c:dc:13:
                    50:b4:75:53:c8:0c:08:53:d7:fd:4b:e9:71:78:79:
                    73:00:00:24:d6:a0:7b:36:a8:2e:7e:b7:cb:40:b3:
                    55:ba:41:d1:6e:8a:2f:66:16:f7:c3:51:23:1f:a5:
                    32:fe:df:45:f4:d9:e1:72:93:84:bd:80:3e:f2:af:
                    00:8a:b3:e5:bc:fb:33:09:a0:bd:8f:13:fa:52:ff:
                    85:66:7c:fa:97:c8:32:82:c5:99:ca:d4:38:27:fc:
                    61:38:16:09:fc:31:28:c7:e1:b3:19:cc:01:38:af:
                    7c:4e:e9:d5:d3:9f:33:2b:29:d3:a0:aa:7f:84:1b:
                    44:ea:c4:4a:95:f3:13:e7:2f:d8:be:df:14:de:cc:
                    ed:ab:d5:60:ea:b5:ed:d8:ee:dc:c9:f0:51:c4:9f:
                    3c:41:84:a3:30:67:ea:00:aa:46:48:bf:d0:21:ba:
                    93:e3:b9:e6:af:1f:c3:06:ae:45:b8:54:61:4e:e5:
                    6e:3c:7c:39:0d:77:6f:e9:d0:84:aa:d2:9a:ef:3c:
                    82:cb:f9:2c:66:ee:1a:bc:a3:32:d3:8a:f6:aa:cd:
                    79:c1:9b:d7:94:1e:31:13:41:ba:cd:0c:d6:67:6b:
                    87:7b:67:da:f3:6b:e8:c2:93:c2:f6:d2:cb:78:b1:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:57:AD:47:7C:20:97:06:96:8E:06:99:06:E2:22:FB:C9:C9:91
            X509v3 Authority Key Identifier:
                keyid:CB:FB:02:79:FC:D2:3A:8E:58:3F:34:5A:B9:04:72:8E:6D:0E:4C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y_sCefzSOo5YPzRauQRyjm0OTGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9677b1-d43e-466e-9bf8-80f8202714da/1/y_sCefzSOo5YPzRauQRyjm0OTGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c2:06:af:9b:4d:d0:95:b8:f1:23:12:f2:9a:13:a5:6a:d7:
         f5:6e:45:31:29:67:8f:c9:43:3b:fc:d3:74:9b:a8:85:ae:a6:
         e8:a5:43:c0:75:3c:85:46:aa:52:33:02:f9:72:ea:0c:99:62:
         e0:bc:63:c9:dc:3a:cb:ca:c8:38:c5:87:7e:a1:bd:b8:97:fa:
         3e:2d:5b:a4:af:c6:d5:cb:c8:4d:9a:fa:3f:2b:ab:1d:3f:ab:
         be:40:b9:71:db:b3:c6:f0:f5:a7:74:1f:49:35:28:dc:43:0c:
         c8:d6:60:85:65:db:81:d9:29:01:d2:81:6d:7b:57:11:1a:6d:
         f9:8c:5c:b5:af:c7:fa:29:47:9f:bf:29:92:eb:54:e3:b1:48:
         f1:76:81:b5:6d:34:94:a4:e8:f1:5b:2d:06:df:99:59:7a:a0:
         35:2f:d1:e6:3e:31:c4:9a:63:e5:16:a6:b2:8e:42:1a:9e:bd:
         0d:7c:1f:bf:f0:2b:5e:42:13:df:5b:65:33:7a:9d:4d:63:53:
         8f:b5:76:29:f9:13:48:ac:cd:50:b6:e5:7f:5a:45:f1:bb:df:
         44:72:b4:1e:49:71:64:80:f9:5b:09:d9:9e:73:df:b0:84:2c:
         95:36:2f:00:9e:1a:b9:6a:38:55:76:47:ce:9f:6d:b8:21:cd:
         19:01:db:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+GNcPR2AqIrTJ2BAP0dqorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZmIwMjc5ZmNkMjNhOGU1ODNmMzQ1YWI5MDQ3MjhlNmQw
ZTRjNjIwHhcNMjQwNTE3MTEwMDIxWhcNMjQwNTE4MTEwMDIxWjAzMTEwLwYDVQQD
Eyg5ODg4NTdhZDQ3N2MyMDk3MDY5NjhlMDY5OTA2ZTIyMmZiYzljOTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOG//8KQacrLD7sM3BNQtHVTyAwI
U9f9S+lxeHlzAAAk1qB7NqgufrfLQLNVukHRboovZhb3w1EjH6Uy/t9F9NnhcpOE
vYA+8q8AirPlvPszCaC9jxP6Uv+FZnz6l8gygsWZytQ4J/xhOBYJ/DEox+GzGcwB
OK98TunV058zKynToKp/hBtE6sRKlfMT5y/Yvt8U3sztq9Vg6rXt2O7cyfBRxJ88
QYSjMGfqAKpGSL/QIbqT47nmrx/DBq5FuFRhTuVuPHw5DXdv6dCEqtKa7zyCy/ks
Zu4avKMy04r2qs15wZvXlB4xE0G6zQzWZ2uHe2fa82vowpPC9tLLeLG9vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiIV61HfCCXBpaOBpkG4iL7ycmRMB8GA1UdIwQY
MBaAFMv7Ann80jqOWD80WrkEco5tDkxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgt
ODBmODIwMjcxNGRhLzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi85Njc3YjEtZDQzZS00NjZlLTliZjgtODBmODIwMjcxNGRh
LzEveV9zQ2VmelNPbzVZUHpSYXVRUnlqbTBPVEdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxsIGr5tN
0JW48SMS8poTpWrX9W5FMSlnj8lDO/zTdJuoha6m6KVDwHU8hUaqUjMC+XLqDJli
4Lxjydw6y8rIOMWHfqG9uJf6Pi1bpK/G1cvITZr6PyurHT+rvkC5cduzxvD1p3Qf
STUo3EMMyNZghWXbgdkpAdKBbXtXERpt+Yxcta/H+ilHn78pkutU47FI8XaBtW00
lKTo8VstBt+ZWXqgNS/R5j4xxJpj5Ramso5CGp69DXwfv/ArXkIT31tlM3qdTWNT
j7V2KfkTSKzNULblf1pF8bvfRHK0HklxZID5WwnZnnPfsIQslTYvAJ4auWo4VXZH
zp9tuCHNGQHbWQ==
-----END CERTIFICATE-----