Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.mft
File:                     9twfThiB7UwA6fyUYYP4lAg914M.mft (raw, json)
Hash identifier:          g3/kVhFvKu+4PeZymPI2AuLhmrzBpdwEGc9zg7poeSo=
Subject key identifier:   16:3B:33:F0:FE:8F:FF:14:F0:FD:4B:A8:BE:D8:48:8F:75:06:22:FB
Authority key identifier: F6:DC:1F:4E:18:81:ED:4C:00:E9:FC:94:61:83:F8:94:08:3D:D7:83
Certificate issuer:       /CN=f6dc1f4e1881ed4c00e9fc946183f894083dd783
Certificate serial:       0193568961DC69D7AD7CB65E7382181A0594
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9twfThiB7UwA6fyUYYP4lAg914M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.mft
Manifest number:          0508
Signing time:             Sat 23 Nov 2024 01:01:04 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:04 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:04 +0000
Files and hashes:         1: 9twfThiB7UwA6fyUYYP4lAg914M.crl (hash: /7E1YdfmYR6FzlQNeQjdZALLcqAu5+aooyAvj0qub/8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9twfThiB7UwA6fyUYYP4lAg914M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:61:dc:69:d7:ad:7c:b6:5e:73:82:18:1a:05:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6dc1f4e1881ed4c00e9fc946183f894083dd783
        Validity
            Not Before: Nov 23 01:01:04 2024 GMT
            Not After : Nov 24 01:01:04 2024 GMT
        Subject: CN=163b33f0fe8fff14f0fd4ba8bed8488f750622fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:9e:48:9c:eb:47:9b:9f:ca:e8:b7:19:02:
                    ec:42:ae:45:7e:d4:a1:df:89:9c:83:61:79:65:03:
                    8c:5b:ea:84:b7:d0:18:0c:45:d6:e9:d1:12:bf:19:
                    52:da:91:a1:1c:27:0b:a6:f3:10:fb:69:31:dc:09:
                    80:24:b3:3a:db:29:6c:56:a1:87:fc:dd:8f:1c:12:
                    fd:67:77:57:60:64:8a:d7:76:89:d2:1e:a3:2f:1f:
                    6a:28:8a:d1:98:d4:4d:6a:39:65:9c:32:68:4f:1d:
                    7a:71:f9:b8:a5:ba:2e:0a:23:d6:d6:62:41:38:e9:
                    dd:50:3e:28:c7:34:3d:41:d3:f0:06:0d:7c:31:17:
                    96:57:01:56:22:25:47:6d:61:50:c3:ce:15:b6:65:
                    c2:dd:79:c7:b0:29:0d:5a:48:91:12:e4:ca:11:7c:
                    29:c6:7e:da:16:17:b3:73:b7:80:9a:06:1b:d9:cb:
                    a7:46:1c:53:f7:6a:e0:d8:ab:89:96:b4:1d:f6:58:
                    68:5b:67:e7:7f:47:a8:2a:6f:c7:3a:28:8c:7e:d5:
                    b7:2f:db:ef:8e:f0:64:f8:68:ec:8d:f5:8e:4d:80:
                    7d:ab:5a:07:ba:45:53:c1:3c:98:84:26:b1:aa:05:
                    47:34:a3:ee:75:d6:0e:dc:b9:38:35:d9:3e:2a:fa:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3B:33:F0:FE:8F:FF:14:F0:FD:4B:A8:BE:D8:48:8F:75:06:22:FB
            X509v3 Authority Key Identifier:
                keyid:F6:DC:1F:4E:18:81:ED:4C:00:E9:FC:94:61:83:F8:94:08:3D:D7:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9twfThiB7UwA6fyUYYP4lAg914M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/987c09-bd70-4c61-ac90-beb8dbe0a442/1/9twfThiB7UwA6fyUYYP4lAg914M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:39:24:02:28:f4:81:4f:2a:f2:80:f4:cb:02:67:3a:f6:32:
         52:f3:b0:ed:1e:00:61:78:3f:ec:2b:74:06:48:01:0a:56:88:
         95:46:93:cc:f0:00:c8:5f:0e:2e:54:0a:dd:ca:4b:a2:3b:50:
         8c:fc:1e:b5:d9:ea:47:76:52:ac:ea:73:ae:72:aa:b8:d2:d8:
         6f:b3:94:a8:4c:bb:dd:6f:66:43:e1:87:8b:b4:9a:9b:f3:b9:
         81:96:5e:a5:d2:bd:5c:75:ab:7d:88:4a:6a:e8:4f:5e:76:c9:
         86:77:b0:29:f9:04:f6:5d:c3:05:ef:05:00:c0:74:30:8b:fe:
         04:51:5f:3b:d6:bd:29:b4:a0:14:0d:3f:2e:03:d4:49:a7:74:
         59:b7:c4:b3:6e:53:75:8b:56:17:f9:78:23:45:22:55:31:34:
         e2:7e:d6:a3:bc:2a:34:6e:69:e4:1d:96:16:87:a8:35:f4:57:
         35:53:87:dc:8d:0d:24:0c:0c:b3:cf:49:2d:cd:58:bb:c6:64:
         c5:d0:51:58:7c:0c:42:e5:5d:02:8e:b8:aa:b1:50:e9:be:41:
         0a:68:5a:0a:c5:5b:53:27:1e:d7:20:cc:9a:08:0f:0c:c1:ff:
         d9:dd:a2:ef:4b:1f:0d:56:54:95:48:f9:18:20:a6:f0:d3:41:
         0d:53:b0:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiWHcadetfLZec4IYGgWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZGMxZjRlMTg4MWVkNGMwMGU5ZmM5NDYxODNmODk0MDgz
ZGQ3ODMwHhcNMjQxMTIzMDEwMTA0WhcNMjQxMTI0MDEwMTA0WjAzMTEwLwYDVQQD
EygxNjNiMzNmMGZlOGZmZjE0ZjBmZDRiYThiZWQ4NDg4Zjc1MDYyMmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5WeSJzrR5ufyui3GQLsQq5FftSh
34mcg2F5ZQOMW+qEt9AYDEXW6dESvxlS2pGhHCcLpvMQ+2kx3AmAJLM62ylsVqGH
/N2PHBL9Z3dXYGSK13aJ0h6jLx9qKIrRmNRNajllnDJoTx16cfm4pbouCiPW1mJB
OOndUD4oxzQ9QdPwBg18MReWVwFWIiVHbWFQw84VtmXC3XnHsCkNWkiREuTKEXwp
xn7aFhezc7eAmgYb2cunRhxT92rg2KuJlrQd9lhoW2fnf0eoKm/HOiiMftW3L9vv
jvBk+GjsjfWOTYB9q1oHukVTwTyYhCaxqgVHNKPuddYO3Lk4Ndk+KvrdQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBY7M/D+j/8U8P1LqL7YSI91BiL7MB8GA1UdIwQY
MBaAFPbcH04Yge1MAOn8lGGD+JQIPdeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXR3ZlRoaUI3VXdBNmZ5VVlZUDRsQWc5MTRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi85ODdjMDktYmQ3MC00YzYxLWFjOTAt
YmViOGRiZTBhNDQyLzEvOXR3ZlRoaUI3VXdBNmZ5VVlZUDRsQWc5MTRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi85ODdjMDktYmQ3MC00YzYxLWFjOTAtYmViOGRiZTBhNDQy
LzEvOXR3ZlRoaUI3VXdBNmZ5VVlZUDRsQWc5MTRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDkkAij0
gU8q8oD0ywJnOvYyUvOw7R4AYXg/7Ct0BkgBClaIlUaTzPAAyF8OLlQK3cpLojtQ
jPwetdnqR3ZSrOpzrnKquNLYb7OUqEy73W9mQ+GHi7Sam/O5gZZepdK9XHWrfYhK
auhPXnbJhnewKfkE9l3DBe8FAMB0MIv+BFFfO9a9KbSgFA0/LgPUSad0WbfEs25T
dYtWF/l4I0UiVTE04n7Wo7wqNG5p5B2WFoeoNfRXNVOH3I0NJAwMs89JLc1Yu8Zk
xdBRWHwMQuVdAo64qrFQ6b5BCmhaCsVbUyce1yDMmggPDMH/2d2i70sfDVZUlUj5
GCCm8NNBDVOwXw==
-----END CERTIFICATE-----