Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
File:                     X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft (raw, json)
Hash identifier:          +wqumxJ8QERluKgPThxs14/cuQUrDusgjxvTg1qgAj0=
Subject key identifier:   AB:E8:97:06:61:C6:56:4B:43:A5:75:E5:96:16:7C:AA:61:38:A9:F9
Authority key identifier: 5F:F0:CA:C3:63:FE:0B:0A:B9:08:58:97:5D:4B:8F:68:F8:50:49:50
Certificate issuer:       /CN=5ff0cac363fe0b0ab90858975d4b8f68f8504950
Certificate serial:       018F88925ACAE0F992198B6043896B488743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
Manifest number:          0408
Signing time:             Fri 17 May 2024 22:00:43 +0000
Manifest this update:     Fri 17 May 2024 22:00:43 +0000
Manifest next update:     Sat 18 May 2024 22:00:43 +0000
Files and hashes:         1: X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl (hash: WnLahUdNCwycBLw/KFor+fP9vKGjChqsdLn1Qmda6l0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:5a:ca:e0:f9:92:19:8b:60:43:89:6b:48:87:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff0cac363fe0b0ab90858975d4b8f68f8504950
        Validity
            Not Before: May 17 22:00:43 2024 GMT
            Not After : May 18 22:00:43 2024 GMT
        Subject: CN=abe8970661c6564b43a575e596167caa6138a9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:db:91:5e:05:89:d1:26:a1:1b:1a:a7:10:95:
                    ee:5f:ec:97:26:5e:6c:ce:a7:d2:06:9e:43:d3:51:
                    44:51:47:bb:65:65:6f:0e:cb:e4:23:1e:c1:69:18:
                    ef:91:01:18:54:58:9e:91:96:72:5f:65:5a:f6:f2:
                    2c:28:e5:11:df:03:f5:6b:c2:02:07:54:aa:34:fd:
                    50:ac:07:55:11:97:45:94:f8:ff:da:d5:cb:74:8f:
                    bc:60:85:1c:b1:40:2c:b8:31:33:0b:7a:eb:6a:13:
                    be:db:61:3f:46:9f:1a:9b:ca:8c:84:62:4e:03:00:
                    7a:bf:6d:35:ae:c0:f3:da:55:35:7d:0b:cb:82:b1:
                    f1:36:3f:3b:2a:8a:8c:2b:a4:41:0a:00:92:e1:e4:
                    89:73:f3:ae:a3:d0:72:93:dc:96:fe:45:aa:89:f3:
                    d4:5e:02:df:cb:1b:2a:2c:d7:c6:17:c2:7b:44:67:
                    ef:06:a2:25:65:f1:02:7a:47:44:7b:2c:6e:ab:f3:
                    89:e0:60:c9:7e:97:bf:02:47:1f:34:d4:43:97:e5:
                    bd:fc:04:54:6f:06:cc:5f:08:4b:0e:66:7c:f1:69:
                    9e:f7:fd:84:ea:9f:0c:00:3c:64:89:37:3d:89:07:
                    7e:04:31:71:46:ee:cd:b1:d2:13:79:94:b9:d2:77:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E8:97:06:61:C6:56:4B:43:A5:75:E5:96:16:7C:AA:61:38:A9:F9
            X509v3 Authority Key Identifier:
                keyid:5F:F0:CA:C3:63:FE:0B:0A:B9:08:58:97:5D:4B:8F:68:F8:50:49:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/32df4f-5a57-4541-babe-847f5baec2e9/1/X_DKw2P-Cwq5CFiXXUuPaPhQSVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:21:31:97:06:de:c3:1a:5f:66:03:2a:3b:c0:3d:50:b6:7b:
         6d:3c:a5:b2:ec:92:07:5e:30:d4:3a:09:6b:a1:b4:00:9f:e2:
         3d:a5:3e:11:84:46:4e:40:3e:8a:4d:2d:5a:82:d8:c8:c1:5e:
         3c:3f:c2:76:87:d0:c8:f4:a7:34:f0:f4:96:95:b0:9f:b9:20:
         23:c9:59:9e:09:aa:a9:c0:7e:15:86:4a:69:56:73:62:f2:b4:
         5a:cc:61:28:44:3b:8b:3c:94:2c:22:90:b2:64:2e:7b:5f:77:
         92:5c:03:b9:37:33:ab:9f:e7:0b:e7:94:32:bd:30:98:2c:f1:
         5b:14:e5:85:5d:1d:98:64:53:ed:d1:22:ef:94:4f:65:e2:af:
         82:74:6c:a2:f2:55:6a:f1:70:ca:8a:19:4f:57:3a:9f:59:b4:
         e5:19:26:c8:54:5a:d0:c2:0a:02:0c:10:b7:d9:3d:62:3f:a2:
         05:b0:a9:eb:e6:59:6a:2f:54:32:4c:40:41:36:79:0d:f3:5a:
         9b:ff:1e:70:ee:fc:8b:51:ae:06:76:6f:dd:dd:88:21:d0:10:
         04:09:f9:7e:4f:2d:55:64:33:82:f2:aa:1a:c6:c8:fb:ac:f6:
         62:46:1e:80:4d:68:fc:dd:2f:d1:17:e1:20:b0:e1:10:0f:2f:
         9d:24:06:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IklrK4PmSGYtgQ4lrSIdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjBjYWMzNjNmZTBiMGFiOTA4NTg5NzVkNGI4ZjY4Zjg1
MDQ5NTAwHhcNMjQwNTE3MjIwMDQzWhcNMjQwNTE4MjIwMDQzWjAzMTEwLwYDVQQD
EyhhYmU4OTcwNjYxYzY1NjRiNDNhNTc1ZTU5NjE2N2NhYTYxMzhhOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttuRXgWJ0SahGxqnEJXuX+yXJl5s
zqfSBp5D01FEUUe7ZWVvDsvkIx7BaRjvkQEYVFiekZZyX2Va9vIsKOUR3wP1a8IC
B1SqNP1QrAdVEZdFlPj/2tXLdI+8YIUcsUAsuDEzC3rrahO+22E/Rp8am8qMhGJO
AwB6v201rsDz2lU1fQvLgrHxNj87KoqMK6RBCgCS4eSJc/Ouo9Byk9yW/kWqifPU
XgLfyxsqLNfGF8J7RGfvBqIlZfECekdEeyxuq/OJ4GDJfpe/AkcfNNRDl+W9/ARU
bwbMXwhLDmZ88Wme9/2E6p8MADxkiTc9iQd+BDFxRu7NsdITeZS50nczzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvolwZhxlZLQ6V15ZYWfKphOKn5MB8GA1UdIwQY
MBaAFF/wysNj/gsKuQhYl11Lj2j4UElQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9ES3cyUC1Dd3E1Q0ZpWFhVdVBhUGhRU1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMmRmNGYtNWE1Ny00NTQxLWJhYmUt
ODQ3ZjViYWVjMmU5LzEvWF9ES3cyUC1Dd3E1Q0ZpWFhVdVBhUGhRU1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zMmRmNGYtNWE1Ny00NTQxLWJhYmUtODQ3ZjViYWVjMmU5
LzEvWF9ES3cyUC1Dd3E1Q0ZpWFhVdVBhUGhRU1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvyExlwbe
wxpfZgMqO8A9ULZ7bTylsuySB14w1DoJa6G0AJ/iPaU+EYRGTkA+ik0tWoLYyMFe
PD/CdofQyPSnNPD0lpWwn7kgI8lZngmqqcB+FYZKaVZzYvK0WsxhKEQ7izyULCKQ
smQue193klwDuTczq5/nC+eUMr0wmCzxWxTlhV0dmGRT7dEi75RPZeKvgnRsovJV
avFwyooZT1c6n1m05RkmyFRa0MIKAgwQt9k9Yj+iBbCp6+ZZai9UMkxAQTZ5DfNa
m/8ecO78i1GuBnZv3d2IIdAQBAn5fk8tVWQzgvKqGsbI+6z2YkYegE1o/N0v0Rfh
ILDhEA8vnSQG5g==
-----END CERTIFICATE-----