Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
File:                     3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft (raw, json)
Hash identifier:          nfsQJtlRtR/gIh2PRrqeti2wf9IeseyC3JTeTQI7XVs=
Subject key identifier:   C0:8D:76:BA:4E:FD:50:D2:0E:49:3A:C5:22:14:21:2E:E3:A1:D1:3F
Authority key identifier: DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46
Certificate issuer:       /CN=dc09b20cf023c7302fefea49c8149a1cb0ab2246
Certificate serial:       018F23B88EE2ACD7425E4C35153BE38F5727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
Manifest number:          04C1
Signing time:             Sun 28 Apr 2024 08:00:48 +0000
Manifest this update:     Sun 28 Apr 2024 08:00:48 +0000
Manifest next update:     Mon 29 Apr 2024 08:00:48 +0000
Files and hashes:         1: 3AmyDPAjxzAv7-pJyBSaHLCrIkY.crl (hash: 2nunRn1sSfkT8/6wXAFGfy7ZHl/D+HwnrMspyzSKWow=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:23:b8:8e:e2:ac:d7:42:5e:4c:35:15:3b:e3:8f:57:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc09b20cf023c7302fefea49c8149a1cb0ab2246
        Validity
            Not Before: Apr 28 08:00:48 2024 GMT
            Not After : Apr 29 08:00:48 2024 GMT
        Subject: CN=c08d76ba4efd50d20e493ac52214212ee3a1d13f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:a4:1c:7a:27:ee:02:03:49:52:72:37:b9:
                    5e:76:3a:29:ae:57:98:51:40:4a:d8:3a:34:26:2f:
                    36:75:8f:dd:7b:68:9a:93:4d:f0:ae:c3:d7:60:6f:
                    a9:67:5a:89:7f:0c:58:9b:d7:15:cb:d2:ee:a7:1a:
                    d1:29:f3:14:3b:4a:50:89:39:89:37:fe:bd:ba:ee:
                    e5:7b:87:c8:10:21:4b:20:e1:89:65:12:98:49:38:
                    e7:ff:f4:7c:43:0f:0d:c6:e3:4e:2c:ca:81:05:cd:
                    75:91:21:c2:3b:14:a1:8c:83:3f:28:86:92:90:3e:
                    e6:fa:27:09:0d:6c:81:01:a8:36:f9:7f:89:2c:0a:
                    89:a0:d9:1b:df:5b:8f:39:87:c6:f9:9f:e9:c8:6b:
                    58:04:b3:57:d2:47:16:58:33:38:55:8a:db:8a:05:
                    7a:40:75:a5:06:c9:19:e9:f9:db:3b:3b:f8:f8:80:
                    e4:92:8b:cc:8f:7d:52:ca:ba:dc:10:99:10:17:a7:
                    ef:e5:5c:5f:41:d6:cd:78:7d:0b:25:8d:bf:90:f7:
                    53:1a:24:c7:7e:7a:da:65:9d:2c:23:89:77:16:78:
                    40:d2:48:35:ef:b8:96:4c:6f:b2:ee:ae:93:fd:f9:
                    57:01:b5:c4:84:38:f2:4c:bf:c7:51:ae:99:de:aa:
                    cf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8D:76:BA:4E:FD:50:D2:0E:49:3A:C5:22:14:21:2E:E3:A1:D1:3F
            X509v3 Authority Key Identifier:
                keyid:DC:09:B2:0C:F0:23:C7:30:2F:EF:EA:49:C8:14:9A:1C:B0:AB:22:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AmyDPAjxzAv7-pJyBSaHLCrIkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2c9973-e174-4928-a572-5ecba33fc3b8/1/3AmyDPAjxzAv7-pJyBSaHLCrIkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:11:2f:75:4b:df:09:3d:64:1e:4a:17:a2:ad:c9:7a:9e:ba:
         27:a2:8a:99:9c:36:d2:27:27:c1:07:ba:f8:91:d6:49:b8:a9:
         42:af:cb:16:3d:02:b5:07:a4:88:2d:34:43:5e:c3:7c:74:21:
         8c:cd:2b:e1:61:af:1f:f8:c2:15:4e:59:3a:fb:01:6f:7c:06:
         3c:9b:7a:be:b2:ea:7d:36:0a:c9:24:d9:e1:a3:58:5a:8c:89:
         c5:21:9a:cf:59:86:48:a7:69:1a:30:99:c7:03:a5:33:4a:06:
         fb:59:a7:72:b7:88:b6:e3:c8:73:5c:91:06:0d:e7:86:9c:7e:
         8b:6e:ae:29:bc:f3:45:35:11:d9:fa:e3:c8:4d:28:b0:c6:61:
         77:71:83:e3:aa:c8:a0:42:6a:e3:9e:cc:06:bf:28:a2:aa:eb:
         f4:d0:f1:bf:73:b3:a5:24:f8:c8:63:c5:77:f3:97:0b:eb:cd:
         7d:77:01:51:9a:91:6a:fc:8b:38:fb:a3:29:b7:e7:16:51:19:
         f4:15:68:53:1e:42:70:59:fb:ea:66:9c:52:4a:b5:10:8e:a4:
         e2:58:16:2d:b1:f6:9b:e8:4f:d7:99:92:d1:29:11:6e:c2:7a:
         4b:ca:d8:af:fe:32:cf:8d:c9:61:52:4e:bd:12:a9:5c:d0:6a:
         e9:17:71:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8juI7irNdCXkw1FTvjj1cnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDliMjBjZjAyM2M3MzAyZmVmZWE0OWM4MTQ5YTFjYjBh
YjIyNDYwHhcNMjQwNDI4MDgwMDQ4WhcNMjQwNDI5MDgwMDQ4WjAzMTEwLwYDVQQD
EyhjMDhkNzZiYTRlZmQ1MGQyMGU0OTNhYzUyMjE0MjEyZWUzYTFkMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxikHHon7gIDSVJyN7ledjoprleY
UUBK2Do0Ji82dY/de2iak03wrsPXYG+pZ1qJfwxYm9cVy9LupxrRKfMUO0pQiTmJ
N/69uu7le4fIECFLIOGJZRKYSTjn//R8Qw8NxuNOLMqBBc11kSHCOxShjIM/KIaS
kD7m+icJDWyBAag2+X+JLAqJoNkb31uPOYfG+Z/pyGtYBLNX0kcWWDM4VYrbigV6
QHWlBskZ6fnbOzv4+IDkkovMj31SyrrcEJkQF6fv5VxfQdbNeH0LJY2/kPdTGiTH
fnraZZ0sI4l3FnhA0kg177iWTG+y7q6T/flXAbXEhDjyTL/HUa6Z3qrPrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCNdrpO/VDSDkk6xSIUIS7jodE/MB8GA1UdIwQY
MBaAFNwJsgzwI8cwL+/qScgUmhywqyJGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FteURQQWp4ekF2Ny1wSnlCU2FITENySWtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yYzk5NzMtZTE3NC00OTI4LWE1NzIt
NWVjYmEzM2ZjM2I4LzEvM0FteURQQWp4ekF2Ny1wSnlCU2FITENySWtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yYzk5NzMtZTE3NC00OTI4LWE1NzItNWVjYmEzM2ZjM2I4
LzEvM0FteURQQWp4ekF2Ny1wSnlCU2FITENySWtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxEvdUvf
CT1kHkoXoq3Jep66J6KKmZw20icnwQe6+JHWSbipQq/LFj0CtQekiC00Q17DfHQh
jM0r4WGvH/jCFU5ZOvsBb3wGPJt6vrLqfTYKySTZ4aNYWoyJxSGaz1mGSKdpGjCZ
xwOlM0oG+1mncreItuPIc1yRBg3nhpx+i26uKbzzRTUR2frjyE0osMZhd3GD46rI
oEJq457MBr8ooqrr9NDxv3OzpST4yGPFd/OXC+vNfXcBUZqRavyLOPujKbfnFlEZ
9BVoUx5CcFn76macUkq1EI6k4lgWLbH2m+hP15mS0SkRbsJ6S8rYr/4yz43JYVJO
vRKpXNBq6Rdx3w==
-----END CERTIFICATE-----