Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
File:                     J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft (raw, json)
Hash identifier:          KglaE53MtvaIxFgz641lP3K9xCpN5BVoUjSqTZzXmUM=
Subject key identifier:   C5:FE:48:CA:65:E1:3A:55:DC:45:E5:CD:D4:93:25:A1:A9:57:2E:CF
Authority key identifier: 27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF
Certificate issuer:       /CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
Certificate serial:       0191F9A2FA965A5CEF7F1342C3A67A6B3203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
Manifest number:          011E
Signing time:             Mon 16 Sep 2024 07:01:33 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:33 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:33 +0000
Files and hashes:         1: J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl (hash: gkOtqUYtJIjglU8iUHWyVUhdt7z/fUNBb2BC82FFVNw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:fa:96:5a:5c:ef:7f:13:42:c3:a6:7a:6b:32:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27ea62f6f2319cad22d3f94be3afb2a4567805ff
        Validity
            Not Before: Sep 16 07:01:33 2024 GMT
            Not After : Sep 17 07:01:33 2024 GMT
        Subject: CN=c5fe48ca65e13a55dc45e5cdd49325a1a9572ecf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:1e:d6:aa:bb:3a:4e:b8:20:91:dc:16:9e:
                    b2:a4:31:36:f3:cd:ab:3e:29:db:2e:d0:25:5f:9d:
                    4f:11:cd:05:32:b8:4a:87:3f:46:36:13:af:9f:48:
                    7f:22:fe:f1:ad:e7:9e:1b:f3:50:14:b7:a5:85:11:
                    ff:63:09:a3:06:51:9c:56:d5:a3:54:60:9c:bb:99:
                    dc:c9:b6:49:ab:78:23:dc:35:3b:86:a3:3f:c9:d9:
                    e1:df:c8:b6:24:76:09:0e:e7:93:0f:44:fd:3a:a8:
                    7d:35:ec:d8:25:38:89:df:10:88:53:af:ca:c9:45:
                    ec:14:2e:ac:1d:d6:20:4f:13:43:db:03:77:f3:fe:
                    ae:df:ec:11:63:82:a9:20:5e:18:b8:3e:96:85:ac:
                    7e:47:9e:3f:39:12:ff:12:75:ea:76:9f:3b:eb:9e:
                    7d:e4:ab:a2:9a:68:a4:61:3e:72:99:0e:23:7b:4c:
                    1c:02:36:49:fa:db:85:06:02:3b:0c:f5:d6:49:57:
                    6b:df:4d:65:05:25:ee:32:a0:9a:3d:59:be:d6:9f:
                    d1:bb:99:4e:c1:f4:ff:fc:ab:8b:c8:e2:5f:2f:2c:
                    a6:6b:cc:0c:17:4c:1e:80:3f:ad:2e:e9:e8:02:8e:
                    c8:34:b3:21:58:ac:93:fb:bc:11:a9:96:af:b0:0c:
                    57:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FE:48:CA:65:E1:3A:55:DC:45:E5:CD:D4:93:25:A1:A9:57:2E:CF
            X509v3 Authority Key Identifier:
                keyid:27:EA:62:F6:F2:31:9C:AD:22:D3:F9:4B:E3:AF:B2:A4:56:78:05:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd0f74-af02-404c-841f-f713764f903d/1/J-pi9vIxnK0i0_lL46-ypFZ4Bf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:09:49:ac:c2:40:6c:e5:f8:bd:26:f3:23:a3:94:94:cc:c9:
         e4:08:17:29:01:55:96:d0:90:f1:2a:21:87:33:c9:e9:e7:0b:
         d9:6d:06:76:14:2b:ca:72:a7:de:7f:5f:33:8d:be:6d:5d:3d:
         e5:f4:f7:20:fa:d5:fa:ed:1b:04:63:1b:a2:7d:72:f9:3f:af:
         6b:ca:40:66:f0:f2:51:c0:5c:46:5a:bf:b2:b2:8d:23:2d:59:
         fd:18:83:41:95:f6:35:0b:61:66:34:b9:1c:1f:fe:84:02:79:
         23:eb:7d:03:a8:74:44:cf:4c:75:b4:e3:40:4c:37:ca:6d:21:
         8d:45:ab:5b:15:3a:bd:25:58:f1:e0:db:48:6f:99:7e:19:12:
         1e:31:cb:67:01:5e:d0:c0:2c:95:68:b3:00:51:e8:23:0f:7d:
         6f:22:5f:41:fe:7f:bc:63:fc:f1:66:17:fb:30:6f:c7:ff:e7:
         09:b3:b1:b9:8a:2f:2a:9b:a2:85:aa:8f:d9:b5:ac:44:9f:a6:
         d1:ce:83:c5:08:46:48:c9:81:1e:b7:80:7a:51:91:7d:2c:92:
         7c:47:b1:9b:67:0f:01:9c:0c:76:c6:bd:e2:bc:28:14:75:64:
         b6:7a:f8:f7:35:42:0c:42:d6:37:f4:a2:48:84:2a:1d:ab:46:
         89:2d:bb:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5ovqWWlzvfxNCw6Z6azIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZWE2MmY2ZjIzMTljYWQyMmQzZjk0YmUzYWZiMmE0NTY3
ODA1ZmYwHhcNMjQwOTE2MDcwMTMzWhcNMjQwOTE3MDcwMTMzWjAzMTEwLwYDVQQD
EyhjNWZlNDhjYTY1ZTEzYTU1ZGM0NWU1Y2RkNDkzMjVhMWE5NTcyZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAwe1qq7Ok64IJHcFp6ypDE2882r
PinbLtAlX51PEc0FMrhKhz9GNhOvn0h/Iv7xreeeG/NQFLelhRH/YwmjBlGcVtWj
VGCcu5ncybZJq3gj3DU7hqM/ydnh38i2JHYJDueTD0T9Oqh9NezYJTiJ3xCIU6/K
yUXsFC6sHdYgTxND2wN38/6u3+wRY4KpIF4YuD6Whax+R54/ORL/EnXqdp876559
5KuimmikYT5ymQ4je0wcAjZJ+tuFBgI7DPXWSVdr301lBSXuMqCaPVm+1p/Ru5lO
wfT//KuLyOJfLyyma8wMF0wegD+tLunoAo7INLMhWKyT+7wRqZavsAxXHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMX+SMpl4TpV3EXlzdSTJaGpVy7PMB8GA1UdIwQY
MBaAFCfqYvbyMZytItP5S+OvsqRWeAX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1waTl2SXhuSzBpMF9sTDQ2LXlwRlo0QmY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDBmNzQtYWYwMi00MDRjLTg0MWYt
ZjcxMzc2NGY5MDNkLzEvSi1waTl2SXhuSzBpMF9sTDQ2LXlwRlo0QmY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDBmNzQtYWYwMi00MDRjLTg0MWYtZjcxMzc2NGY5MDNk
LzEvSi1waTl2SXhuSzBpMF9sTDQ2LXlwRlo0QmY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwlJrMJA
bOX4vSbzI6OUlMzJ5AgXKQFVltCQ8SohhzPJ6ecL2W0GdhQrynKn3n9fM42+bV09
5fT3IPrV+u0bBGMbon1y+T+va8pAZvDyUcBcRlq/srKNIy1Z/RiDQZX2NQthZjS5
HB/+hAJ5I+t9A6h0RM9MdbTjQEw3ym0hjUWrWxU6vSVY8eDbSG+ZfhkSHjHLZwFe
0MAslWizAFHoIw99byJfQf5/vGP88WYX+zBvx//nCbOxuYovKpuihaqP2bWsRJ+m
0c6DxQhGSMmBHreAelGRfSySfEexm2cPAZwMdsa94rwoFHVktnr49zVCDELWN/Si
SIQqHatGiS27sw==
-----END CERTIFICATE-----