Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.mft
File:                     Dwtr5Xhb-hruttYyBayhdrcqIxI.mft (raw, json)
Hash identifier:          ey6mAcMilZMRElg9BeEroZJsjw+46kQUFOt6ICUeXqc=
Subject key identifier:   3D:06:16:BE:4A:F9:8D:10:0C:08:E1:84:FE:AD:3F:BB:0D:C2:4E:60
Authority key identifier: 0F:0B:6B:E5:78:5B:FA:1A:EE:B6:D6:32:05:AC:A1:76:B7:2A:23:12
Certificate issuer:       /CN=0f0b6be5785bfa1aeeb6d63205aca176b72a2312
Certificate serial:       0193568AB492938E0937E415C96B0795CC6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dwtr5Xhb-hruttYyBayhdrcqIxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.mft
Manifest number:          084D
Signing time:             Sat 23 Nov 2024 01:02:30 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:30 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:30 +0000
Files and hashes:         1: Dwtr5Xhb-hruttYyBayhdrcqIxI.crl (hash: 6t+Le5q0d/oloigpASLXfeWWagHI1Wdt22ZTCi6VGx0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dwtr5Xhb-hruttYyBayhdrcqIxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:b4:92:93:8e:09:37:e4:15:c9:6b:07:95:cc:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0b6be5785bfa1aeeb6d63205aca176b72a2312
        Validity
            Not Before: Nov 23 01:02:30 2024 GMT
            Not After : Nov 24 01:02:30 2024 GMT
        Subject: CN=3d0616be4af98d100c08e184fead3fbb0dc24e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:e4:ff:e5:74:82:81:77:54:13:c9:61:4e:
                    19:71:62:37:e6:25:e7:16:02:93:96:2f:69:8d:09:
                    8d:a6:57:cf:c8:85:76:fb:91:60:3a:58:d0:a6:0f:
                    fb:e7:23:e8:d2:0c:83:fc:11:db:94:dd:0e:0c:ee:
                    26:28:8f:68:a9:0c:5e:d1:75:f0:f0:e2:9a:61:ff:
                    73:49:a1:f3:db:86:ec:53:ac:28:96:30:3a:1d:d1:
                    90:d6:b3:67:43:26:2c:ec:b0:d3:6b:0e:e7:8a:9f:
                    99:2c:b9:fc:30:aa:fe:06:39:32:36:e4:7b:8d:fd:
                    37:ff:7c:0a:bf:2a:46:fa:7a:e2:5b:1d:63:0b:8a:
                    43:65:96:1f:d4:84:87:64:0c:10:83:68:c7:ed:d8:
                    52:90:72:7b:a6:b6:59:5f:e3:8d:e6:92:c1:cb:32:
                    38:44:c5:fa:45:be:0e:ab:6b:11:33:c3:a2:d9:c9:
                    ad:a9:c7:23:a7:04:b1:41:41:2e:e6:00:9e:35:44:
                    9b:29:2e:cd:9d:3c:ca:8b:c3:79:b5:5d:c8:0c:90:
                    7d:df:a5:7b:4b:d8:d7:ac:d2:60:ce:01:b4:68:e5:
                    c2:a7:e2:22:59:a9:64:b4:b1:c4:ea:54:4b:30:79:
                    fd:16:5f:6d:67:e1:97:eb:0d:2e:b3:e8:be:9f:83:
                    2b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:06:16:BE:4A:F9:8D:10:0C:08:E1:84:FE:AD:3F:BB:0D:C2:4E:60
            X509v3 Authority Key Identifier:
                keyid:0F:0B:6B:E5:78:5B:FA:1A:EE:B6:D6:32:05:AC:A1:76:B7:2A:23:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dwtr5Xhb-hruttYyBayhdrcqIxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd07-837b-404a-8374-baaa9df517e7/1/Dwtr5Xhb-hruttYyBayhdrcqIxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:af:63:0e:7d:e1:3d:b6:ab:c2:71:c9:c4:aa:91:d6:6b:99:
         ad:00:cb:8e:02:a2:70:ab:87:f7:16:a7:97:90:9e:3b:a4:06:
         ea:1c:1a:eb:56:7d:83:48:ce:d2:d0:f8:d1:b3:67:5d:90:3d:
         70:44:2a:a1:28:15:47:a5:15:b6:52:cc:1a:cd:39:64:f0:c8:
         5b:8e:37:09:e4:5b:74:3c:80:07:bc:62:b0:d5:0a:b0:7a:bd:
         cf:af:46:1d:a7:56:80:35:62:22:29:6f:cb:f1:4e:bc:6f:a3:
         9f:a9:92:71:ce:2a:a3:a6:56:3d:59:6d:db:71:f3:5a:0e:36:
         eb:d9:01:f5:74:ba:43:70:d5:ef:12:64:c1:50:5d:27:0a:02:
         b9:5c:29:01:e1:72:92:9f:cf:44:2d:47:0d:c0:2b:6c:53:39:
         4d:5b:7a:4f:c3:49:70:f3:21:cd:8e:34:46:42:a6:14:cc:46:
         86:95:b2:4c:8c:bd:0e:e9:71:25:40:d4:48:ce:b6:dd:cc:1b:
         1f:ca:34:86:5b:50:0a:a7:b1:87:9a:17:4e:6d:c2:1c:d0:fa:
         e1:6e:bb:da:e4:a6:09:4d:86:93:e8:df:75:11:a5:28:d3:54:
         c9:f6:e8:45:2b:a3:6c:7a:50:f9:30:5b:91:26:f2:aa:19:a4:
         48:27:78:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWirSSk44JN+QVyWsHlcxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMGI2YmU1Nzg1YmZhMWFlZWI2ZDYzMjA1YWNhMTc2Yjcy
YTIzMTIwHhcNMjQxMTIzMDEwMjMwWhcNMjQxMTI0MDEwMjMwWjAzMTEwLwYDVQQD
EygzZDA2MTZiZTRhZjk4ZDEwMGMwOGUxODRmZWFkM2ZiYjBkYzI0ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktzk/+V0goF3VBPJYU4ZcWI35iXn
FgKTli9pjQmNplfPyIV2+5FgOljQpg/75yPo0gyD/BHblN0ODO4mKI9oqQxe0XXw
8OKaYf9zSaHz24bsU6woljA6HdGQ1rNnQyYs7LDTaw7nip+ZLLn8MKr+BjkyNuR7
jf03/3wKvypG+nriWx1jC4pDZZYf1ISHZAwQg2jH7dhSkHJ7prZZX+ON5pLByzI4
RMX6Rb4Oq2sRM8Oi2cmtqccjpwSxQUEu5gCeNUSbKS7NnTzKi8N5tV3IDJB936V7
S9jXrNJgzgG0aOXCp+IiWalktLHE6lRLMHn9Fl9tZ+GX6w0us+i+n4MrDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0GFr5K+Y0QDAjhhP6tP7sNwk5gMB8GA1UdIwQY
MBaAFA8La+V4W/oa7rbWMgWsoXa3KiMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHd0cjVYaGItaHJ1dHRZeUJheWhkcmNxSXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMDctODM3Yi00MDRhLTgzNzQt
YmFhYTlkZjUxN2U3LzEvRHd0cjVYaGItaHJ1dHRZeUJheWhkcmNxSXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMDctODM3Yi00MDRhLTgzNzQtYmFhYTlkZjUxN2U3
LzEvRHd0cjVYaGItaHJ1dHRZeUJheWhkcmNxSXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq9jDn3h
PbarwnHJxKqR1muZrQDLjgKicKuH9xanl5CeO6QG6hwa61Z9g0jO0tD40bNnXZA9
cEQqoSgVR6UVtlLMGs05ZPDIW443CeRbdDyAB7xisNUKsHq9z69GHadWgDViIilv
y/FOvG+jn6mScc4qo6ZWPVlt23HzWg4269kB9XS6Q3DV7xJkwVBdJwoCuVwpAeFy
kp/PRC1HDcArbFM5TVt6T8NJcPMhzY40RkKmFMxGhpWyTIy9DulxJUDUSM623cwb
H8o0hltQCqexh5oXTm3CHND64W672uSmCU2Gk+jfdRGlKNNUyfboRSujbHpQ+TBb
kSbyqhmkSCd4FQ==
-----END CERTIFICATE-----