Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
File:                     cz2mpsToscTOPyBLtL_Z2GoPVh4.mft (raw, json)
Hash identifier:          MMqMglxe2xCEqnAd+tP2xNqmuW5x+yrnMIX3IcevsBw=
Subject key identifier:   10:15:55:56:AB:D0:43:2D:E2:C3:CE:3C:CE:69:D6:22:3F:94:46:50
Authority key identifier: 73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E
Certificate issuer:       /CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
Certificate serial:       019369D9694B59F4580E473D17B350CFFCD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
Manifest number:          0FCA
Signing time:             Tue 26 Nov 2024 19:01:16 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:16 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:16 +0000
Files and hashes:         1: cz2mpsToscTOPyBLtL_Z2GoPVh4.crl (hash: eE+AI9upQpK20OMLptnmfXEaCWgafJ3y2E9VymzCnx4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:69:4b:59:f4:58:0e:47:3d:17:b3:50:cf:fc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733da6a6c4e8b1c4ce3f204bb4bfd9d86a0f561e
        Validity
            Not Before: Nov 26 19:01:16 2024 GMT
            Not After : Nov 27 19:01:16 2024 GMT
        Subject: CN=10155556abd0432de2c3ce3cce69d6223f944650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d1:28:6c:41:d4:d8:44:82:f2:d2:99:0c:a3:
                    99:97:12:78:62:08:ca:7e:40:eb:7d:38:6e:5d:a0:
                    96:2b:11:f8:ef:f5:83:21:07:de:79:b5:98:fb:c4:
                    cb:42:a2:74:46:12:05:cb:81:3b:1e:ac:56:fb:f4:
                    7a:b7:7e:f4:75:be:fc:f3:dd:a4:70:85:33:9a:6e:
                    2c:dd:1a:6d:55:91:0e:36:02:01:94:2a:65:ec:c3:
                    23:cc:81:6f:b3:3d:6b:22:43:43:6a:0d:ca:a3:e4:
                    f6:c2:6d:83:d8:4b:b4:03:53:40:80:e7:0d:15:98:
                    24:07:5a:b9:05:2f:b4:a7:fa:cb:51:64:5c:9b:83:
                    bf:7d:b8:74:44:49:8e:37:36:57:88:55:4d:12:6c:
                    94:a8:80:e6:3d:c9:81:d8:1f:98:3a:63:82:f2:68:
                    22:f2:3e:eb:72:2e:84:34:c2:b1:4b:ae:45:d8:7d:
                    cf:69:8d:62:2b:97:e4:8d:dd:68:d1:ad:3d:4a:d4:
                    fe:a8:8f:cc:96:da:9f:73:f7:d4:03:07:e6:dd:e5:
                    bf:fd:61:8a:84:ea:d2:4a:48:72:d9:6f:02:5b:a6:
                    05:5d:7c:42:41:f4:8c:fe:d6:5c:a0:ff:7c:7b:8d:
                    21:a5:02:61:c8:d4:b9:95:2f:70:80:6f:ae:38:0c:
                    c2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:15:55:56:AB:D0:43:2D:E2:C3:CE:3C:CE:69:D6:22:3F:94:46:50
            X509v3 Authority Key Identifier:
                keyid:73:3D:A6:A6:C4:E8:B1:C4:CE:3F:20:4B:B4:BF:D9:D8:6A:0F:56:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cz2mpsToscTOPyBLtL_Z2GoPVh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d12b8-d0e8-4e46-848a-017e2b25d886/1/cz2mpsToscTOPyBLtL_Z2GoPVh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f2:ab:bc:d4:63:f1:3b:54:34:78:45:24:de:d1:54:a7:75:
         15:2c:ca:6f:49:93:10:57:15:ca:ef:1c:c0:a6:44:3a:75:d9:
         8d:42:7d:f4:5f:62:d9:da:a3:d3:1b:ed:71:bb:1c:de:1d:12:
         2c:24:6e:3d:d0:d0:c3:89:f7:2a:d0:94:9a:d8:c4:f9:9d:c5:
         3f:af:46:5f:59:b2:e3:94:04:20:3c:bb:aa:91:73:07:77:81:
         49:28:58:ba:86:14:3c:b1:9e:c3:99:c6:86:1c:e8:5c:6c:7f:
         35:cc:68:4f:a4:79:c9:44:1f:67:e6:bc:5c:30:3b:9c:46:c9:
         39:c9:65:6f:97:e8:a5:d3:df:90:9c:7f:12:33:e8:c1:4f:9f:
         78:ad:9b:ea:5e:98:51:23:d4:10:81:d4:60:88:00:11:05:b0:
         8f:b8:4b:e7:30:2d:10:3f:8d:50:37:67:c4:5b:c1:4f:5b:87:
         bc:04:8a:09:aa:1a:8a:1a:c9:89:4d:1e:2e:50:69:92:a7:67:
         ca:7c:8c:4c:8b:a8:61:ff:30:bd:87:65:56:f2:4e:f2:50:1d:
         1f:ee:e3:93:8d:e9:88:59:a0:34:d2:5e:59:b7:e6:0d:91:15:
         8b:c0:6b:ea:9a:6e:21:6f:01:ed:77:8f:07:71:3b:8e:45:70:
         76:a5:c3:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2WlLWfRYDkc9F7NQz/zVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczM2RhNmE2YzRlOGIxYzRjZTNmMjA0YmI0YmZkOWQ4NmEw
ZjU2MWUwHhcNMjQxMTI2MTkwMTE2WhcNMjQxMTI3MTkwMTE2WjAzMTEwLwYDVQQD
EygxMDE1NTU1NmFiZDA0MzJkZTJjM2NlM2NjZTY5ZDYyMjNmOTQ0NjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudEobEHU2ESC8tKZDKOZlxJ4YgjK
fkDrfThuXaCWKxH47/WDIQfeebWY+8TLQqJ0RhIFy4E7HqxW+/R6t370db78892k
cIUzmm4s3RptVZEONgIBlCpl7MMjzIFvsz1rIkNDag3Ko+T2wm2D2Eu0A1NAgOcN
FZgkB1q5BS+0p/rLUWRcm4O/fbh0REmONzZXiFVNEmyUqIDmPcmB2B+YOmOC8mgi
8j7rci6ENMKxS65F2H3PaY1iK5fkjd1o0a09StT+qI/Mltqfc/fUAwfm3eW//WGK
hOrSSkhy2W8CW6YFXXxCQfSM/tZcoP98e40hpQJhyNS5lS9wgG+uOAzCJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAVVVar0EMt4sPOPM5p1iI/lEZQMB8GA1UdIwQY
MBaAFHM9pqbE6LHEzj8gS7S/2dhqD1YeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEt
MDE3ZTJiMjVkODg2LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zZDEyYjgtZDBlOC00ZTQ2LTg0OGEtMDE3ZTJiMjVkODg2
LzEvY3oybXBzVG9zY1RPUHlCTHRMX1oyR29QVmg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/KrvNRj
8TtUNHhFJN7RVKd1FSzKb0mTEFcVyu8cwKZEOnXZjUJ99F9i2dqj0xvtcbsc3h0S
LCRuPdDQw4n3KtCUmtjE+Z3FP69GX1my45QEIDy7qpFzB3eBSShYuoYUPLGew5nG
hhzoXGx/NcxoT6R5yUQfZ+a8XDA7nEbJOcllb5fopdPfkJx/EjPowU+feK2b6l6Y
USPUEIHUYIgAEQWwj7hL5zAtED+NUDdnxFvBT1uHvASKCaoaihrJiU0eLlBpkqdn
ynyMTIuoYf8wvYdlVvJO8lAdH+7jk43piFmgNNJeWbfmDZEVi8Br6ppuIW8B7XeP
B3E7jkVwdqXDBg==
-----END CERTIFICATE-----