Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.mft
File:                     ERj-69BkeThUQfbPGUVyd0r0JB8.mft (raw, json)
Hash identifier:          T7M7/ynqjZJh6879j2PSqwIqBYMw4WmhETNseNmVTRg=
Subject key identifier:   5B:CA:35:B2:76:EA:6A:68:2E:11:32:A9:EC:C7:7D:83:64:12:59:C1
Authority key identifier: 11:18:FE:EB:D0:64:79:38:54:41:F6:CF:19:45:72:77:4A:F4:24:1F
Certificate issuer:       /CN=1118feebd06479385441f6cf194572774af4241f
Certificate serial:       019369D960E34CF7448A0D0C135250F2F246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ERj-69BkeThUQfbPGUVyd0r0JB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.mft
Manifest number:          0EBB
Signing time:             Tue 26 Nov 2024 19:01:13 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:13 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:13 +0000
Files and hashes:         1: ERj-69BkeThUQfbPGUVyd0r0JB8.crl (hash: Vjhfto8RW1PsGqdVIH3uFj5LTm6dRdSpxKYEMxm7bvY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ERj-69BkeThUQfbPGUVyd0r0JB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:60:e3:4c:f7:44:8a:0d:0c:13:52:50:f2:f2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1118feebd06479385441f6cf194572774af4241f
        Validity
            Not Before: Nov 26 19:01:13 2024 GMT
            Not After : Nov 27 19:01:13 2024 GMT
        Subject: CN=5bca35b276ea6a682e1132a9ecc77d83641259c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:ab:6e:10:3a:d8:79:a3:92:53:15:33:d4:
                    50:0b:d7:d8:d5:19:d5:04:9c:2c:b9:6a:5b:3d:16:
                    03:10:8c:e8:b6:a6:7e:78:94:f4:9f:e9:d1:e0:9a:
                    76:6d:ef:48:6f:31:93:37:08:dd:a4:1a:95:54:78:
                    21:4f:47:38:55:5c:4c:c2:71:17:c1:e0:64:3b:7f:
                    a7:52:5b:ff:1a:fa:3e:2f:43:c7:35:31:35:88:67:
                    6d:84:bf:23:61:ad:ac:d8:10:fa:ca:93:79:2d:22:
                    60:74:4a:1a:39:ff:c3:b9:07:92:87:ca:83:a8:06:
                    34:57:07:49:61:08:25:4c:9e:f3:55:4b:fe:74:8f:
                    e7:8f:d9:4d:21:38:88:fa:06:bd:c5:f8:df:f7:20:
                    b8:5a:2f:87:48:74:d2:49:cd:1a:6d:9d:f1:ff:69:
                    c4:3a:b0:51:f7:be:0a:c0:e2:e3:ec:02:b8:87:64:
                    39:f2:44:5d:73:02:1e:b2:63:44:6b:e3:40:f2:65:
                    00:2d:e7:5e:18:7d:1e:3c:61:97:91:95:57:50:e7:
                    28:26:dc:3c:93:4f:dd:6d:f1:2c:1b:e2:7b:13:19:
                    16:68:c3:8e:ea:1e:a6:d6:19:cb:11:43:5e:ed:f2:
                    77:65:54:0d:52:fa:66:93:5d:e5:af:64:cf:a3:99:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CA:35:B2:76:EA:6A:68:2E:11:32:A9:EC:C7:7D:83:64:12:59:C1
            X509v3 Authority Key Identifier:
                keyid:11:18:FE:EB:D0:64:79:38:54:41:F6:CF:19:45:72:77:4A:F4:24:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERj-69BkeThUQfbPGUVyd0r0JB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/02c9d5-06e5-46e3-b763-cda0c44150de/1/ERj-69BkeThUQfbPGUVyd0r0JB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c4:73:67:c2:b2:17:d0:16:b7:89:7b:9b:2c:2c:e4:95:84:
         9f:a8:09:c3:a6:5f:c8:47:61:b2:fb:38:71:f6:53:fe:f4:64:
         49:2a:46:c3:1d:23:10:ad:58:f4:2b:e2:70:38:2c:2f:57:44:
         e6:68:85:6f:dd:50:b8:3b:c2:20:94:bf:12:2c:f7:68:ff:a1:
         cf:75:87:b8:29:a5:7c:73:bd:7a:40:ec:7f:9a:eb:bd:c2:5f:
         79:eb:9f:71:03:57:d6:a4:8e:79:e2:47:93:6c:04:8d:70:52:
         56:63:8d:0d:78:f7:3e:b1:76:b2:74:8d:aa:03:76:dd:d3:5d:
         3c:6b:9a:a7:39:a5:9f:01:6a:bf:e0:0d:96:93:c3:00:53:7c:
         cd:2f:9c:7b:c0:44:4f:3d:db:03:83:a6:02:95:84:99:a9:61:
         49:05:78:49:48:fa:0f:95:ea:dc:e6:e0:37:98:5c:cb:7b:6f:
         a0:6e:ea:22:d1:48:1a:fc:87:1c:72:05:c3:8a:59:db:72:1c:
         2e:55:5d:c0:11:e7:b7:33:96:2a:b8:33:91:4c:d7:0d:bb:56:
         aa:b3:ff:7d:c5:91:af:46:3a:0a:45:61:cc:84:17:3e:bf:48:
         70:7d:dc:e1:6d:8f:ff:0f:0e:47:87:11:87:8c:2d:55:08:63:
         64:3a:7d:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2WDjTPdEig0ME1JQ8vJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMThmZWViZDA2NDc5Mzg1NDQxZjZjZjE5NDU3Mjc3NGFm
NDI0MWYwHhcNMjQxMTI2MTkwMTEzWhcNMjQxMTI3MTkwMTEzWjAzMTEwLwYDVQQD
Eyg1YmNhMzViMjc2ZWE2YTY4MmUxMTMyYTllY2M3N2Q4MzY0MTI1OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEmrbhA62HmjklMVM9RQC9fY1RnV
BJwsuWpbPRYDEIzotqZ+eJT0n+nR4Jp2be9IbzGTNwjdpBqVVHghT0c4VVxMwnEX
weBkO3+nUlv/Gvo+L0PHNTE1iGdthL8jYa2s2BD6ypN5LSJgdEoaOf/DuQeSh8qD
qAY0VwdJYQglTJ7zVUv+dI/nj9lNITiI+ga9xfjf9yC4Wi+HSHTSSc0abZ3x/2nE
OrBR974KwOLj7AK4h2Q58kRdcwIesmNEa+NA8mUALedeGH0ePGGXkZVXUOcoJtw8
k0/dbfEsG+J7ExkWaMOO6h6m1hnLEUNe7fJ3ZVQNUvpmk13lr2TPo5kEoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvKNbJ26mpoLhEyqezHfYNkElnBMB8GA1UdIwQY
MBaAFBEY/uvQZHk4VEH2zxlFcndK9CQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJqLTY5QmtlVGhVUWZiUEdVVnlkMHIwSkI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wMmM5ZDUtMDZlNS00NmUzLWI3NjMt
Y2RhMGM0NDE1MGRlLzEvRVJqLTY5QmtlVGhVUWZiUEdVVnlkMHIwSkI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8wMmM5ZDUtMDZlNS00NmUzLWI3NjMtY2RhMGM0NDE1MGRl
LzEvRVJqLTY5QmtlVGhVUWZiUEdVVnlkMHIwSkI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsRzZ8Ky
F9AWt4l7myws5JWEn6gJw6ZfyEdhsvs4cfZT/vRkSSpGwx0jEK1Y9CvicDgsL1dE
5miFb91QuDvCIJS/Eiz3aP+hz3WHuCmlfHO9ekDsf5rrvcJfeeufcQNX1qSOeeJH
k2wEjXBSVmONDXj3PrF2snSNqgN23dNdPGuapzmlnwFqv+ANlpPDAFN8zS+ce8BE
Tz3bA4OmApWEmalhSQV4SUj6D5Xq3ObgN5hcy3tvoG7qItFIGvyHHHIFw4pZ23Ic
LlVdwBHntzOWKrgzkUzXDbtWqrP/fcWRr0Y6CkVhzIQXPr9IcH3c4W2P/w8OR4cR
h4wtVQhjZDp9Fw==
-----END CERTIFICATE-----