Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
File:                     6sw7q9U8RM12FFr4fUI3Axfo0ME.mft (raw, json)
Hash identifier:          Vc1Ywd1b0qJV4tsoBBSe7gijlwAuxyRKzB63mXb0OHA=
Subject key identifier:   19:AD:32:AB:EB:B8:0D:F8:DC:F3:D5:44:1C:66:58:35:33:DE:C1:65
Authority key identifier: EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1
Certificate issuer:       /CN=eacc3babd53c44cd76145af87d42370317e8d0c1
Certificate serial:       01936A4666688559E0CF88115847ABA2A1E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
Manifest number:          0AC8
Signing time:             Tue 26 Nov 2024 21:00:18 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:18 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:18 +0000
Files and hashes:         1: 6sw7q9U8RM12FFr4fUI3Axfo0ME.crl (hash: oOSuflrQwxdGpc4hkOlpb3f+b9NPl3DGLkBwcQs1P2U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:66:68:85:59:e0:cf:88:11:58:47:ab:a2:a1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eacc3babd53c44cd76145af87d42370317e8d0c1
        Validity
            Not Before: Nov 26 21:00:18 2024 GMT
            Not After : Nov 27 21:00:18 2024 GMT
        Subject: CN=19ad32abebb80df8dcf3d5441c66583533dec165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3b:e9:ee:f3:da:5e:a4:11:2e:6e:70:7a:63:
                    60:05:2d:ef:9f:7f:11:40:80:c4:15:a5:e2:07:57:
                    17:2f:f2:5a:00:20:97:e0:da:98:e5:e4:6a:5d:eb:
                    6d:22:1d:7d:4a:06:0a:63:2d:dc:2b:64:a5:be:67:
                    ba:56:4b:8d:64:bb:c6:d8:63:23:0a:3c:dd:aa:64:
                    cc:84:51:f6:1c:16:7f:3a:93:b4:40:0f:29:f3:92:
                    8c:25:43:37:9e:f9:6d:dc:5c:8b:7f:bc:74:53:6c:
                    17:b8:72:ec:2a:68:82:8a:d1:d8:f6:f4:b2:f5:dd:
                    52:a1:52:6c:26:2f:e5:8a:8c:7c:77:4e:bd:91:9b:
                    56:4e:b8:63:7b:31:8f:dd:3f:ad:27:f0:5a:08:f2:
                    2d:fe:23:54:82:e4:2f:2d:24:bf:8f:8b:e4:c1:c4:
                    47:3d:ff:7e:b2:44:78:4f:4a:d6:08:94:42:cc:28:
                    cc:bf:e3:da:be:74:07:a8:e9:e2:f6:9b:5b:0c:70:
                    22:85:37:ff:b4:32:59:cc:de:10:75:39:4b:20:78:
                    30:be:fc:79:a0:75:d7:18:92:4e:91:90:15:c9:d1:
                    72:58:6e:28:4f:1d:ef:5c:f9:9f:4d:59:51:24:60:
                    80:06:c7:c5:47:f6:88:71:ce:46:9c:f6:47:d7:c0:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AD:32:AB:EB:B8:0D:F8:DC:F3:D5:44:1C:66:58:35:33:DE:C1:65
            X509v3 Authority Key Identifier:
                keyid:EA:CC:3B:AB:D5:3C:44:CD:76:14:5A:F8:7D:42:37:03:17:E8:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sw7q9U8RM12FFr4fUI3Axfo0ME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/20d1d5-3141-40b1-8f35-3b4c501929c5/1/6sw7q9U8RM12FFr4fUI3Axfo0ME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:35:47:3b:2f:e5:37:8e:e7:c3:00:ad:15:98:73:01:83:5f:
         26:69:03:bf:37:c8:ad:4b:d6:b6:4e:e7:65:ba:23:83:76:90:
         52:e8:3b:da:b3:56:bd:b4:86:e7:ac:8d:1a:af:fb:ab:28:16:
         1d:1f:05:3e:d2:4f:a1:f8:66:9f:15:1d:da:d5:39:d0:2c:ad:
         65:9a:e9:40:d2:7c:ca:81:9b:0b:46:2a:48:e4:68:d8:50:ed:
         58:52:12:50:34:88:25:72:76:a9:bc:bf:d0:cc:1a:df:ec:95:
         e8:96:e1:5f:c7:10:e5:2b:ce:35:15:e8:9a:9f:d2:a4:5a:0a:
         cd:12:38:cb:ec:6b:fc:62:28:61:55:78:75:54:76:cf:2e:34:
         00:09:61:3a:50:48:e4:17:75:37:61:69:fc:f9:4c:65:a4:eb:
         5d:ec:7c:e2:0f:13:70:b7:70:c6:02:23:3d:12:7b:5e:9c:0c:
         47:30:ed:e1:de:10:cf:b3:ce:cc:18:3d:e5:fb:c5:53:6e:1f:
         09:f0:3b:37:e3:6b:8e:45:85:f9:70:74:7f:cc:10:fa:57:4f:
         11:35:21:01:4e:1e:87:7a:1b:50:12:23:de:81:10:10:78:2a:
         d3:f9:35:8b:43:00:89:bb:e6:c7:61:0a:92:29:4b:2e:79:9d:
         b3:4a:fb:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRmZohVngz4gRWEeroqHkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhY2MzYmFiZDUzYzQ0Y2Q3NjE0NWFmODdkNDIzNzAzMTdl
OGQwYzEwHhcNMjQxMTI2MjEwMDE4WhcNMjQxMTI3MjEwMDE4WjAzMTEwLwYDVQQD
EygxOWFkMzJhYmViYjgwZGY4ZGNmM2Q1NDQxYzY2NTgzNTMzZGVjMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzvp7vPaXqQRLm5wemNgBS3vn38R
QIDEFaXiB1cXL/JaACCX4NqY5eRqXettIh19SgYKYy3cK2Slvme6VkuNZLvG2GMj
CjzdqmTMhFH2HBZ/OpO0QA8p85KMJUM3nvlt3FyLf7x0U2wXuHLsKmiCitHY9vSy
9d1SoVJsJi/liox8d069kZtWTrhjezGP3T+tJ/BaCPIt/iNUguQvLSS/j4vkwcRH
Pf9+skR4T0rWCJRCzCjMv+PavnQHqOni9ptbDHAihTf/tDJZzN4QdTlLIHgwvvx5
oHXXGJJOkZAVydFyWG4oTx3vXPmfTVlRJGCABsfFR/aIcc5GnPZH18BVtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmtMqvruA343PPVRBxmWDUz3sFlMB8GA1UdIwQY
MBaAFOrMO6vVPETNdhRa+H1CNwMX6NDBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMGQxZDUtMzE0MS00MGIxLThmMzUt
M2I0YzUwMTkyOWM1LzEvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yMGQxZDUtMzE0MS00MGIxLThmMzUtM2I0YzUwMTkyOWM1
LzEvNnN3N3E5VThSTTEyRkZyNGZVSTNBeGZvME1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzVHOy/l
N47nwwCtFZhzAYNfJmkDvzfIrUvWtk7nZbojg3aQUug72rNWvbSG56yNGq/7qygW
HR8FPtJPofhmnxUd2tU50CytZZrpQNJ8yoGbC0YqSORo2FDtWFISUDSIJXJ2qby/
0Mwa3+yV6JbhX8cQ5SvONRXomp/SpFoKzRI4y+xr/GIoYVV4dVR2zy40AAlhOlBI
5Bd1N2Fp/PlMZaTrXex84g8TcLdwxgIjPRJ7XpwMRzDt4d4Qz7POzBg95fvFU24f
CfA7N+NrjkWF+XB0f8wQ+ldPETUhAU4eh3obUBIj3oEQEHgq0/k1i0MAibvmx2EK
kilLLnmds0r7Qg==
-----END CERTIFICATE-----