Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
File:                     HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft (raw, json)
Hash identifier:          EKEGy5nppae829UJtY+uayoCRrN8ukiZF1uIqfZD4OQ=
Subject key identifier:   26:26:E2:E2:98:3E:81:3E:1A:67:C9:0E:12:42:D6:37:09:42:CF:8B
Authority key identifier: 1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67
Certificate issuer:       /CN=1f1523928d8e8e54be467976331a0121d42a0067
Certificate serial:       0193549A438DE84368A464ACD74AB7392156
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
Manifest number:          136E
Signing time:             Fri 22 Nov 2024 16:00:16 +0000
Manifest this update:     Fri 22 Nov 2024 16:00:16 +0000
Manifest next update:     Sat 23 Nov 2024 16:00:16 +0000
Files and hashes:         1: HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl (hash: GvJoCHr7OqOj4LAR+lWhcKRGDQmpXUShhWOmsJjQfvA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9a:43:8d:e8:43:68:a4:64:ac:d7:4a:b7:39:21:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f1523928d8e8e54be467976331a0121d42a0067
        Validity
            Not Before: Nov 22 16:00:16 2024 GMT
            Not After : Nov 23 16:00:16 2024 GMT
        Subject: CN=2626e2e2983e813e1a67c90e1242d6370942cf8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:56:19:5d:37:a2:3e:15:10:ab:1f:09:d9:7d:
                    a1:a3:9f:57:7e:41:b5:bd:cd:b7:95:8c:d6:3b:9e:
                    7f:d3:69:51:2b:36:a7:eb:52:dc:0c:b3:8c:aa:90:
                    b6:29:11:9e:ce:d1:35:2c:d1:be:aa:05:f2:e7:23:
                    8a:da:ef:73:b0:00:a4:5a:e2:99:e7:02:ff:36:56:
                    8d:38:dc:6e:af:32:f7:f9:e2:22:83:19:9e:37:01:
                    d2:7c:d0:4e:aa:ec:b0:51:b3:db:c6:3b:78:92:75:
                    92:93:7b:1a:c7:6e:f1:95:6e:76:69:73:6b:8b:1f:
                    f6:22:e2:54:42:e4:c4:68:78:fe:20:fe:fb:b5:8f:
                    09:53:a9:81:42:dd:bc:0f:69:1b:a4:f6:02:9b:7f:
                    81:6e:3c:a6:36:84:1a:9d:f3:d3:b4:64:a9:96:0b:
                    8a:33:d3:75:78:07:04:d0:e3:30:e5:d4:10:38:23:
                    37:80:fa:79:59:88:11:d1:7c:4d:57:74:8a:55:cd:
                    09:f0:fe:d4:ff:b2:6a:8f:e8:77:db:88:86:14:cf:
                    64:80:54:ba:47:03:55:d8:36:1d:51:9e:5e:40:76:
                    43:f3:7a:4a:3b:49:8a:7c:e9:d9:c1:22:62:4f:d5:
                    7c:56:63:4f:99:b7:48:ea:61:fd:49:79:b8:c6:59:
                    34:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:26:E2:E2:98:3E:81:3E:1A:67:C9:0E:12:42:D6:37:09:42:CF:8B
            X509v3 Authority Key Identifier:
                keyid:1F:15:23:92:8D:8E:8E:54:BE:46:79:76:33:1A:01:21:D4:2A:00:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxUjko2OjlS-Rnl2MxoBIdQqAGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/18951b-a654-44b5-ba6b-899f9fbebb19/1/HxUjko2OjlS-Rnl2MxoBIdQqAGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:af:23:56:07:74:c3:51:b5:1f:8e:d7:15:d7:62:5c:0f:bf:
         30:b2:07:5d:ed:dc:b3:8c:0c:70:97:5d:c6:34:cf:48:9f:69:
         18:7b:eb:a4:ae:30:ee:5d:13:0d:d5:5b:f2:9b:59:2b:de:78:
         6f:7a:8f:80:b3:94:4b:5b:12:b2:bd:38:00:f8:fa:f8:a5:f1:
         18:ef:93:5a:4d:1c:15:a0:34:a5:93:ad:bf:49:64:55:8e:cd:
         f8:03:03:e1:67:5d:09:6a:73:f8:fd:2d:14:95:25:19:2a:70:
         80:f0:5b:04:2c:19:74:b8:e3:0f:8e:26:e5:f7:d3:23:df:1e:
         ac:9e:9f:04:c3:aa:b1:4c:c8:7b:f8:9f:7c:0d:b2:99:f1:7c:
         bf:23:ee:2c:76:f5:a4:c8:31:46:46:90:c4:2b:d8:f6:88:2a:
         88:8d:b9:b8:26:1c:8b:c9:c0:f1:2b:a2:7a:cf:d2:8f:71:90:
         75:c9:86:8e:26:ba:e7:5b:9e:d2:03:7b:bb:77:26:06:3c:80:
         15:3b:c4:f7:60:5b:72:0b:29:3c:c5:fa:0d:59:85:16:8c:05:
         0a:68:b4:ce:0d:d1:f0:8b:9c:1f:c3:39:09:a6:32:0d:e6:3f:
         04:0b:3c:d2:a3:58:fd:c5:99:ce:e6:cc:81:d4:d4:79:d1:39:
         8b:49:e1:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUmkON6ENopGSs10q3OSFWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTUyMzkyOGQ4ZThlNTRiZTQ2Nzk3NjMzMWEwMTIxZDQy
YTAwNjcwHhcNMjQxMTIyMTYwMDE2WhcNMjQxMTIzMTYwMDE2WjAzMTEwLwYDVQQD
EygyNjI2ZTJlMjk4M2U4MTNlMWE2N2M5MGUxMjQyZDYzNzA5NDJjZjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlYZXTeiPhUQqx8J2X2ho59XfkG1
vc23lYzWO55/02lRKzan61LcDLOMqpC2KRGeztE1LNG+qgXy5yOK2u9zsACkWuKZ
5wL/NlaNONxurzL3+eIigxmeNwHSfNBOquywUbPbxjt4knWSk3sax27xlW52aXNr
ix/2IuJUQuTEaHj+IP77tY8JU6mBQt28D2kbpPYCm3+BbjymNoQanfPTtGSplguK
M9N1eAcE0OMw5dQQOCM3gPp5WYgR0XxNV3SKVc0J8P7U/7Jqj+h324iGFM9kgFS6
RwNV2DYdUZ5eQHZD83pKO0mKfOnZwSJiT9V8VmNPmbdI6mH9SXm4xlk05wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCYm4uKYPoE+GmfJDhJC1jcJQs+LMB8GA1UdIwQY
MBaAFB8VI5KNjo5UvkZ5djMaASHUKgBnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8xODk1MWItYTY1NC00NGI1LWJhNmIt
ODk5ZjlmYmViYjE5LzEvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8xODk1MWItYTY1NC00NGI1LWJhNmItODk5ZjlmYmViYjE5
LzEvSHhVamtvMk9qbFMtUm5sMk14b0JJZFFxQUdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQK8jVgd0
w1G1H47XFddiXA+/MLIHXe3cs4wMcJddxjTPSJ9pGHvrpK4w7l0TDdVb8ptZK954
b3qPgLOUS1sSsr04APj6+KXxGO+TWk0cFaA0pZOtv0lkVY7N+AMD4WddCWpz+P0t
FJUlGSpwgPBbBCwZdLjjD44m5ffTI98erJ6fBMOqsUzIe/iffA2ymfF8vyPuLHb1
pMgxRkaQxCvY9ogqiI25uCYci8nA8Suies/Sj3GQdcmGjia651ue0gN7u3cmBjyA
FTvE92BbcgspPMX6DVmFFowFCmi0zg3R8IucH8M5CaYyDeY/BAs80qNY/cWZzubM
gdTUedE5i0nh9w==
-----END CERTIFICATE-----