Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
File:                     NxYpWi0WQ853rHom4CJke8R5Awc.mft (raw, json)
Hash identifier:          K+86r2hTfKANEu1Y2pOLAzjS1yPi3EDTHtHFL/EZQWU=
Subject key identifier:   62:A2:8F:45:A8:10:54:08:E7:69:71:33:72:FD:1F:2F:EB:56:B9:CD
Authority key identifier: 37:16:29:5A:2D:16:43:CE:77:AC:7A:26:E0:22:64:7B:C4:79:03:07
Certificate issuer:       /CN=3716295a2d1643ce77ac7a26e022647bc4790307
Certificate serial:       019369D8FAC1ED84C537DB705FF6020FACB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
Manifest number:          06F5
Signing time:             Tue 26 Nov 2024 19:00:47 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:47 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:47 +0000
Files and hashes:         1: NxYpWi0WQ853rHom4CJke8R5Awc.crl (hash: wbxUQNSm8qIcSMOMfvDh9XKdjCqqFbpQAdB4uPE2w3w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:fa:c1:ed:84:c5:37:db:70:5f:f6:02:0f:ac:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3716295a2d1643ce77ac7a26e022647bc4790307
        Validity
            Not Before: Nov 26 19:00:47 2024 GMT
            Not After : Nov 27 19:00:47 2024 GMT
        Subject: CN=62a28f45a8105408e769713372fd1f2feb56b9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:e7:64:17:46:2b:2d:8a:7e:ef:3b:fd:32:
                    a8:6e:24:e7:a5:b0:bc:c5:94:8d:97:2b:ad:0c:0e:
                    36:20:7c:82:70:37:d4:09:c4:8b:01:1c:6f:71:b6:
                    2e:4b:79:cd:ab:2d:e9:eb:f9:a3:9d:37:59:51:25:
                    fd:1e:8e:71:f7:a3:e3:62:48:28:13:c0:0a:72:8c:
                    23:94:7b:9a:84:48:74:d6:09:52:5e:4a:e1:5a:2f:
                    a3:66:a9:39:1f:2c:12:33:80:02:eb:60:c2:64:23:
                    c7:e5:04:1c:49:a4:c2:90:c2:3c:cc:3c:cd:ca:59:
                    1e:3e:e6:14:c6:ad:e5:fe:9f:56:3d:c9:49:90:d6:
                    85:2a:30:84:ae:f7:16:aa:32:88:72:6b:74:6a:98:
                    01:97:34:b2:d8:58:cd:db:ee:18:fd:a4:9f:a2:6a:
                    18:46:61:7f:de:a9:6b:5b:6e:22:dd:26:ba:75:2e:
                    84:a4:7a:9a:15:34:11:3e:26:bf:9b:94:ae:74:8c:
                    68:0d:8e:4d:2b:9e:cb:6c:08:50:63:8f:0c:66:ff:
                    4b:09:11:fc:73:1f:83:4b:1f:49:e0:f5:91:56:ff:
                    02:f5:be:18:e6:a2:3e:91:9d:ef:2f:ec:ae:17:24:
                    52:f9:c1:a9:b1:e5:ca:24:5d:ca:4a:0d:90:b4:34:
                    2d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A2:8F:45:A8:10:54:08:E7:69:71:33:72:FD:1F:2F:EB:56:B9:CD
            X509v3 Authority Key Identifier:
                keyid:37:16:29:5A:2D:16:43:CE:77:AC:7A:26:E0:22:64:7B:C4:79:03:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxYpWi0WQ853rHom4CJke8R5Awc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/627e0c-fe27-4f1c-aab6-ce252b9eebab/1/NxYpWi0WQ853rHom4CJke8R5Awc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1f:48:a1:95:e7:88:13:38:e6:33:3a:a7:3d:93:d7:7d:05:
         2c:f4:da:4e:11:12:ae:22:56:5d:63:db:87:53:bd:12:40:c3:
         02:f1:60:ed:83:4d:e2:0b:e8:a2:8e:d8:7b:12:dd:f9:8c:ee:
         7f:c3:ad:f4:dd:4a:f5:d8:c5:74:58:99:26:ea:60:e8:f3:27:
         c5:ac:cf:af:d6:05:22:07:e6:68:af:f5:ab:63:fa:46:f4:05:
         2b:f0:ec:f5:dc:82:09:e4:a9:cd:29:cc:80:86:e0:12:52:1a:
         00:30:70:9c:2b:0a:a7:df:61:9c:ee:6f:08:96:38:7e:32:ed:
         a3:87:f0:24:ff:f9:2c:d1:96:4c:9b:5b:b5:ad:db:84:61:e4:
         14:e8:93:79:52:22:ab:5d:4e:14:96:cf:02:77:d2:cf:d0:4a:
         18:3d:b0:84:7d:9e:68:76:cd:69:be:88:07:08:2e:72:3f:07:
         2a:df:ab:8e:22:21:0d:d4:4c:72:42:7c:a0:b4:8c:c7:0f:85:
         26:d9:81:94:89:22:3c:16:4b:28:6e:79:33:36:bf:ec:a8:0c:
         54:e7:aa:6a:5c:23:eb:da:a5:43:a5:af:73:07:15:90:58:00:
         55:79:1d:2d:a9:62:36:59:c9:0a:81:03:ef:26:01:57:71:80:
         25:b3:3b:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2PrB7YTFN9twX/YCD6y4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MTYyOTVhMmQxNjQzY2U3N2FjN2EyNmUwMjI2NDdiYzQ3
OTAzMDcwHhcNMjQxMTI2MTkwMDQ3WhcNMjQxMTI3MTkwMDQ3WjAzMTEwLwYDVQQD
Eyg2MmEyOGY0NWE4MTA1NDA4ZTc2OTcxMzM3MmZkMWYyZmViNTZiOWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMPnZBdGKy2Kfu87/TKobiTnpbC8
xZSNlyutDA42IHyCcDfUCcSLARxvcbYuS3nNqy3p6/mjnTdZUSX9Ho5x96PjYkgo
E8AKcowjlHuahEh01glSXkrhWi+jZqk5HywSM4AC62DCZCPH5QQcSaTCkMI8zDzN
ylkePuYUxq3l/p9WPclJkNaFKjCErvcWqjKIcmt0apgBlzSy2FjN2+4Y/aSfomoY
RmF/3qlrW24i3Sa6dS6EpHqaFTQRPia/m5SudIxoDY5NK57LbAhQY48MZv9LCRH8
cx+DSx9J4PWRVv8C9b4Y5qI+kZ3vL+yuFyRS+cGpseXKJF3KSg2QtDQttQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKij0WoEFQI52lxM3L9Hy/rVrnNMB8GA1UdIwQY
MBaAFDcWKVotFkPOd6x6JuAiZHvEeQMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhZcFdpMFdRODUzckhvbTRDSmtlOFI1QXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy82MjdlMGMtZmUyNy00ZjFjLWFhYjYt
Y2UyNTJiOWVlYmFiLzEvTnhZcFdpMFdRODUzckhvbTRDSmtlOFI1QXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy82MjdlMGMtZmUyNy00ZjFjLWFhYjYtY2UyNTJiOWVlYmFi
LzEvTnhZcFdpMFdRODUzckhvbTRDSmtlOFI1QXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUh9IoZXn
iBM45jM6pz2T130FLPTaThESriJWXWPbh1O9EkDDAvFg7YNN4gvooo7YexLd+Yzu
f8Ot9N1K9djFdFiZJupg6PMnxazPr9YFIgfmaK/1q2P6RvQFK/Ds9dyCCeSpzSnM
gIbgElIaADBwnCsKp99hnO5vCJY4fjLto4fwJP/5LNGWTJtbta3bhGHkFOiTeVIi
q11OFJbPAnfSz9BKGD2whH2eaHbNab6IBwgucj8HKt+rjiIhDdRMckJ8oLSMxw+F
JtmBlIkiPBZLKG55Mza/7KgMVOeqalwj69qlQ6WvcwcVkFgAVXkdLaliNlnJCoED
7yYBV3GAJbM7Og==
-----END CERTIFICATE-----