Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
File:                     Uw4xZLFq4JEmhPqpDkORTeH91aU.mft (raw, json)
Hash identifier:          3G+dZ0in3fHZj/2jU/4zNjIuUWZ34Wq6rk1eJDAeils=
Subject key identifier:   09:FB:23:DA:C2:5E:D5:F1:E9:FC:A7:9B:E2:6E:CD:0F:1C:80:27:C9
Authority key identifier: 53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5
Certificate issuer:       /CN=530e3164b16ae0912684faa90e43914de1fdd5a5
Certificate serial:       01935689A5B83DC436B3308A00C330F73BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
Manifest number:          0C24
Signing time:             Sat 23 Nov 2024 01:01:21 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:21 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:21 +0000
Files and hashes:         1: Uw4xZLFq4JEmhPqpDkORTeH91aU.crl (hash: oD7pBt9wEmxM/HBeDaV9JJ4KlQ5uVZ7nR4Oo8mts/h8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:a5:b8:3d:c4:36:b3:30:8a:00:c3:30:f7:3b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530e3164b16ae0912684faa90e43914de1fdd5a5
        Validity
            Not Before: Nov 23 01:01:21 2024 GMT
            Not After : Nov 24 01:01:21 2024 GMT
        Subject: CN=09fb23dac25ed5f1e9fca79be26ecd0f1c8027c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:84:cd:1b:98:a5:b7:f0:9a:bb:4c:c6:b1:
                    49:53:86:e8:d8:3c:b6:4a:9e:3e:ed:a8:84:d8:21:
                    da:78:bf:3d:89:df:6d:60:fb:84:74:6f:f8:5c:40:
                    63:90:b2:96:64:c8:8b:d8:e8:f0:59:e3:be:ac:87:
                    e8:78:96:93:44:c4:0a:cf:0a:07:88:26:c0:95:0e:
                    60:93:c7:41:da:7b:57:a6:af:42:ad:df:8b:95:be:
                    c1:4a:44:87:af:4a:e7:a9:95:f4:60:3b:6e:00:20:
                    61:f3:d2:28:99:64:d4:6d:f3:88:09:26:9b:53:d4:
                    9c:ae:2d:1f:d3:4b:9b:55:b2:25:48:e3:4b:70:12:
                    59:55:1c:4e:fb:28:fe:5c:a1:64:0a:07:49:59:1a:
                    e1:52:4a:2f:1f:81:88:2e:2b:41:5c:94:6e:b5:b2:
                    a2:05:80:a0:67:6d:31:00:2f:32:03:81:4e:bc:a7:
                    05:c5:24:20:50:1f:e5:d1:e1:24:03:43:1f:25:7f:
                    d1:ee:f4:29:18:fe:2e:d2:51:b2:09:04:67:da:dd:
                    ee:59:35:8f:8a:b7:8f:36:29:99:ff:97:67:91:6b:
                    3f:b3:4b:99:b4:c0:c8:0a:ec:9d:cb:3a:38:73:48:
                    95:18:ee:04:9c:95:0a:59:d9:10:42:29:28:51:a2:
                    2a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FB:23:DA:C2:5E:D5:F1:E9:FC:A7:9B:E2:6E:CD:0F:1C:80:27:C9
            X509v3 Authority Key Identifier:
                keyid:53:0E:31:64:B1:6A:E0:91:26:84:FA:A9:0E:43:91:4D:E1:FD:D5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uw4xZLFq4JEmhPqpDkORTeH91aU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ab60b5-e720-480b-9a90-049cbbe2f767/1/Uw4xZLFq4JEmhPqpDkORTeH91aU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:e1:d2:03:a5:0d:96:6a:fe:9a:59:49:cd:47:b7:c4:e2:d2:
         ac:bb:52:bd:d9:71:ef:18:7c:d2:34:79:c8:02:82:63:e7:a6:
         2b:4c:47:ac:3f:f2:d4:cd:a5:38:52:64:bd:72:00:1a:cd:04:
         a6:61:6f:b1:92:b2:2c:99:f7:1b:9e:a4:56:35:d0:f4:86:87:
         05:4b:f9:2b:67:9c:19:91:3d:71:3c:2f:60:bb:09:8b:06:3e:
         05:04:66:67:41:cc:7e:3e:97:8d:f9:ac:08:b7:f8:c3:8c:9c:
         8b:36:20:d1:55:42:a4:77:53:d9:5d:1c:52:1e:43:12:31:8a:
         52:90:7f:12:b9:9e:21:12:4d:e3:9a:b8:73:0c:88:33:b6:a9:
         7f:b3:bc:b6:07:e9:dc:eb:b8:d8:ea:7a:b3:8d:65:36:67:ad:
         6b:e5:6f:03:06:f1:cf:83:56:59:74:e4:6e:9a:a8:c3:b6:71:
         8d:6b:1e:f9:dc:66:32:e1:8a:f1:7c:6f:a2:81:ce:89:ee:fc:
         7a:96:ea:50:12:3c:48:7d:2f:c1:fc:ce:66:f5:60:b3:c4:6d:
         c0:49:8b:c5:81:5a:42:9a:9f:29:de:21:ab:b0:19:e0:ff:17:
         c0:0a:33:28:27:45:3b:11:72:35:7a:8d:fe:a4:74:69:7d:36:
         0e:4c:1f:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiaW4PcQ2szCKAMMw9zvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMGUzMTY0YjE2YWUwOTEyNjg0ZmFhOTBlNDM5MTRkZTFm
ZGQ1YTUwHhcNMjQxMTIzMDEwMTIxWhcNMjQxMTI0MDEwMTIxWjAzMTEwLwYDVQQD
EygwOWZiMjNkYWMyNWVkNWYxZTlmY2E3OWJlMjZlY2QwZjFjODAyN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC6EzRuYpbfwmrtMxrFJU4bo2Dy2
Sp4+7aiE2CHaeL89id9tYPuEdG/4XEBjkLKWZMiL2OjwWeO+rIfoeJaTRMQKzwoH
iCbAlQ5gk8dB2ntXpq9Crd+Llb7BSkSHr0rnqZX0YDtuACBh89IomWTUbfOICSab
U9Scri0f00ubVbIlSONLcBJZVRxO+yj+XKFkCgdJWRrhUkovH4GILitBXJRutbKi
BYCgZ20xAC8yA4FOvKcFxSQgUB/l0eEkA0MfJX/R7vQpGP4u0lGyCQRn2t3uWTWP
irePNimZ/5dnkWs/s0uZtMDICuydyzo4c0iVGO4EnJUKWdkQQikoUaIqgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn7I9rCXtXx6fynm+JuzQ8cgCfJMB8GA1UdIwQY
MBaAFFMOMWSxauCRJoT6qQ5DkU3h/dWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAt
MDQ5Y2JiZTJmNzY3LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9hYjYwYjUtZTcyMC00ODBiLTlhOTAtMDQ5Y2JiZTJmNzY3
LzEvVXc0eFpMRnE0SkVtaFBxcERrT1JUZUg5MWFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+HSA6UN
lmr+mllJzUe3xOLSrLtSvdlx7xh80jR5yAKCY+emK0xHrD/y1M2lOFJkvXIAGs0E
pmFvsZKyLJn3G56kVjXQ9IaHBUv5K2ecGZE9cTwvYLsJiwY+BQRmZ0HMfj6Xjfms
CLf4w4ycizYg0VVCpHdT2V0cUh5DEjGKUpB/ErmeIRJN45q4cwyIM7apf7O8tgfp
3Ou42Op6s41lNmeta+VvAwbxz4NWWXTkbpqow7ZxjWse+dxmMuGK8XxvooHOie78
epbqUBI8SH0vwfzOZvVgs8RtwEmLxYFaQpqfKd4hq7AZ4P8XwAozKCdFOxFyNXqN
/qR0aX02DkwfIQ==
-----END CERTIFICATE-----