Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File:                     QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier:          xArd4mRqcED6cbhaK3qNbR4JxqI2dZQld3Zl6QIbavE=
Subject key identifier:   3F:C9:F5:F1:03:8B:CA:C9:70:34:C5:3B:87:7E:17:46:4F:87:C4:33
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer:       /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial:       0193572DA1F8BE3B3089E29025AF28B8577E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number:          03E2
Signing time:             Sat 23 Nov 2024 04:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:28 +0000
Files and hashes:         1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: qY2kZ780Xw7o778VVNe21I2VXuMTTBBk/bI2V54bTx0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:a1:f8:be:3b:30:89:e2:90:25:af:28:b8:57:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
        Validity
            Not Before: Nov 23 04:00:28 2024 GMT
            Not After : Nov 24 04:00:28 2024 GMT
        Subject: CN=3fc9f5f1038bcac97034c53b877e17464f87c433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:a6:c8:77:10:7d:30:04:66:28:a4:08:14:75:
                    db:48:64:29:0f:07:36:6c:0a:8d:b2:ed:b5:f9:ed:
                    ca:81:2c:75:4d:14:db:49:e3:38:18:95:83:de:60:
                    57:19:64:bc:2f:2c:68:18:de:70:16:a8:51:3c:51:
                    1f:d4:3c:38:46:79:9b:54:0f:99:85:c2:42:9f:22:
                    d0:70:f4:60:45:cb:14:7d:bf:5e:98:a4:78:9a:cb:
                    1b:70:4a:30:36:e2:bc:45:ab:5d:38:32:e3:2a:87:
                    b5:fb:cc:33:79:4f:b0:f6:3d:07:73:71:7b:ab:ae:
                    6e:3e:32:57:5f:f8:09:3b:81:11:24:7e:18:49:ab:
                    b7:7c:20:71:89:2b:38:2a:9f:d2:31:3b:e7:22:25:
                    70:5d:28:71:19:51:59:0a:99:9f:c0:99:40:9b:1d:
                    b8:6a:f0:63:47:b3:b7:0c:66:b9:65:45:63:d2:20:
                    c7:e0:14:a2:26:3f:b2:be:bc:b5:75:0a:0c:b2:dc:
                    43:8b:56:12:50:aa:55:ea:1b:4f:6a:d2:05:fe:28:
                    fc:e1:0d:de:87:bc:a2:3a:bf:39:d2:71:98:b8:08:
                    ab:a4:a3:30:c5:39:43:74:e3:9a:50:cc:67:dc:79:
                    42:16:ce:a0:92:c0:dc:12:fd:05:53:7e:94:62:4e:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C9:F5:F1:03:8B:CA:C9:70:34:C5:3B:87:7E:17:46:4F:87:C4:33
            X509v3 Authority Key Identifier:
                keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0c:b9:8a:af:78:3b:7a:a6:29:04:90:32:28:f4:0f:49:2b:
         74:64:27:4a:d8:15:dc:da:4d:c7:b9:4d:28:ab:97:d1:73:37:
         1e:a8:d0:fc:f4:dc:36:fd:2e:fa:78:42:de:93:46:f3:ce:f5:
         a5:8b:f7:46:d8:e3:d5:a2:3b:36:97:b1:a1:a6:bb:9d:75:b5:
         98:26:7b:b9:99:74:51:32:a4:e2:ba:42:ac:68:b9:92:87:7c:
         8a:e6:f6:37:70:56:df:84:f4:c7:0f:dc:99:e0:57:f3:23:6b:
         99:f6:33:f0:7a:e8:79:9e:55:a5:9a:ed:f1:60:d0:3f:0c:aa:
         31:2d:a3:63:86:2b:7e:8e:1f:35:a2:25:aa:64:bb:cc:ef:b1:
         32:9b:9f:c1:b4:97:5f:c3:a0:9d:48:32:1c:ff:30:c8:5c:e4:
         4f:5c:53:b3:06:79:fc:36:7e:ec:e1:a7:d8:1e:29:f1:db:28:
         c8:e6:6e:da:9b:4a:a7:87:91:7b:a6:93:c1:58:b7:40:ac:bf:
         9c:e7:12:28:d9:8b:c6:db:90:be:06:7c:8e:2a:1c:61:9d:47:
         e6:ab:02:41:73:39:6a:bf:bc:50:dc:98:3f:ad:2a:69:67:3c:
         14:f5:ae:cd:a2:75:fb:95:32:e8:e5:61:2f:ad:48:98:20:7d:
         09:6c:7d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLaH4vjswieKQJa8ouFd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZWFlOTY4OTc4MjljMGRlMTUzNzJiYTE4YzQ0MGY2ODc5
YWIxOTMwHhcNMjQxMTIzMDQwMDI4WhcNMjQxMTI0MDQwMDI4WjAzMTEwLwYDVQQD
EygzZmM5ZjVmMTAzOGJjYWM5NzAzNGM1M2I4NzdlMTc0NjRmODdjNDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qbIdxB9MARmKKQIFHXbSGQpDwc2
bAqNsu21+e3KgSx1TRTbSeM4GJWD3mBXGWS8LyxoGN5wFqhRPFEf1Dw4RnmbVA+Z
hcJCnyLQcPRgRcsUfb9emKR4mssbcEowNuK8RatdODLjKoe1+8wzeU+w9j0Hc3F7
q65uPjJXX/gJO4ERJH4YSau3fCBxiSs4Kp/SMTvnIiVwXShxGVFZCpmfwJlAmx24
avBjR7O3DGa5ZUVj0iDH4BSiJj+yvry1dQoMstxDi1YSUKpV6htPatIF/ij84Q3e
h7yiOr850nGYuAirpKMwxTlDdOOaUMxn3HlCFs6gksDcEv0FU36UYk5ByQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/J9fEDi8rJcDTFO4d+F0ZPh8QzMB8GA1UdIwQY
MBaAFELq6WiXgpwN4VNyuhjEQPaHmrGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMt
NWIzMDE4NTZlNGIzLzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMtNWIzMDE4NTZlNGIz
LzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwy5iq94
O3qmKQSQMij0D0krdGQnStgV3NpNx7lNKKuX0XM3HqjQ/PTcNv0u+nhC3pNG8871
pYv3Rtjj1aI7Npexoaa7nXW1mCZ7uZl0UTKk4rpCrGi5kod8iub2N3BW34T0xw/c
meBX8yNrmfYz8HroeZ5VpZrt8WDQPwyqMS2jY4Yrfo4fNaIlqmS7zO+xMpufwbSX
X8OgnUgyHP8wyFzkT1xTswZ5/DZ+7OGn2B4p8dsoyOZu2ptKp4eRe6aTwVi3QKy/
nOcSKNmLxtuQvgZ8jiocYZ1H5qsCQXM5ar+8UNyYP60qaWc8FPWuzaJ1+5Uy6OVh
L61ImCB9CWx9RQ==
-----END CERTIFICATE-----