Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
File:                     BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json)
Hash identifier:          VMTHwr9Z29JxpuuUnwbRPQfMcpzFYWqPmCAULio5UxU=
Subject key identifier:   77:84:EE:EC:E2:6C:1C:E6:AB:CF:1F:7E:02:9B:5C:E4:1B:ED:7C:41
Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3
Certificate issuer:       /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
Certificate serial:       018F87ED3C232C3C474818027849BF580AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
Manifest number:          01FF
Signing time:             Fri 17 May 2024 19:00:22 +0000
Manifest this update:     Fri 17 May 2024 19:00:22 +0000
Manifest next update:     Sat 18 May 2024 19:00:22 +0000
Files and hashes:         1: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: SOuhitERn7W1OOsJNBgmJQCf5TS4/EuyCQ7zdGc/sQY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:ed:3c:23:2c:3c:47:48:18:02:78:49:bf:58:0a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3
        Validity
            Not Before: May 17 19:00:22 2024 GMT
            Not After : May 18 19:00:22 2024 GMT
        Subject: CN=7784eeece26c1ce6abcf1f7e029b5ce41bed7c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5e:10:fa:c7:f9:81:87:b1:23:2f:2b:35:45:
                    9e:2c:63:bc:c5:ee:00:3a:bd:6e:20:59:d3:1d:b8:
                    1c:4b:3e:d9:22:a3:f8:2f:f0:76:e4:83:67:18:a1:
                    8a:a7:c8:71:6e:18:36:52:7e:8d:29:23:5c:55:d3:
                    ab:dc:3c:80:a0:80:77:14:1f:7e:76:63:79:38:57:
                    27:74:df:11:1b:7e:b0:f8:cd:dc:c2:74:00:c4:f9:
                    48:56:56:18:98:88:cf:b2:dd:5e:f9:8d:8f:1f:9f:
                    b6:01:e5:81:84:bc:7d:a1:9a:72:2c:c7:31:29:f6:
                    43:d4:1d:ce:95:0f:f8:23:b4:bc:91:51:51:be:ba:
                    2c:85:44:7a:40:71:4f:19:fa:1d:05:5d:9b:6f:d6:
                    b9:8d:d2:99:2e:b3:4f:a1:94:f9:b6:60:f4:8a:64:
                    d8:17:80:e0:27:90:ab:1a:be:2b:a6:49:82:10:b8:
                    ae:18:56:bf:8b:e9:c5:23:dc:1c:36:34:0a:9a:a8:
                    77:bf:9d:c7:f1:e9:0a:dd:26:07:75:f1:a7:ad:6d:
                    91:1f:8f:4d:93:5f:a3:e6:b6:15:71:7b:bd:25:c6:
                    48:4d:fa:e8:2b:a4:07:2d:62:7d:cf:97:f9:a0:74:
                    b9:66:9f:cd:69:a2:4c:16:5d:96:cf:b7:e6:1d:8f:
                    a1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:84:EE:EC:E2:6C:1C:E6:AB:CF:1F:7E:02:9B:5C:E4:1B:ED:7C:41
            X509v3 Authority Key Identifier:
                keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:fa:54:e7:61:dc:9d:b1:08:39:55:06:8b:50:a9:6d:01:9c:
         4f:af:8e:e3:8c:bb:24:0b:13:de:ab:c4:67:b2:e1:9a:49:0c:
         c9:8a:82:b9:5c:ee:b4:09:4a:42:ce:d8:cd:27:f8:49:77:18:
         70:7e:c3:5a:59:75:5b:68:a7:25:e9:15:99:b7:cf:00:82:4f:
         7e:21:ae:bd:9a:45:e7:bf:be:37:61:1c:fc:d6:c5:5a:fc:80:
         b8:38:3c:eb:c4:31:af:b0:cc:a5:7e:22:f7:c2:a3:cd:24:80:
         19:e9:ec:c6:7a:1a:94:76:ab:49:d5:16:00:0f:d9:02:e7:34:
         4e:85:97:cc:03:59:6c:07:6e:84:45:a8:61:69:82:5f:58:04:
         62:28:0a:b7:0a:f5:ec:57:12:80:f7:cf:8a:5b:63:39:3e:b2:
         27:01:df:61:b3:38:ed:f9:17:fd:36:de:6e:7a:f3:22:b7:f2:
         f7:ee:21:ee:5f:af:07:c4:9d:41:b6:56:cd:a6:a1:27:fd:36:
         e0:26:79:e5:89:d2:1a:46:d6:12:14:cf:7a:d3:fd:4d:37:15:
         47:41:58:0f:f6:e5:20:2a:b3:c7:2a:d4:91:84:fc:be:2d:71:
         c8:14:fa:2d:59:09:a9:9f:70:01:82:91:e9:6b:e0:ab:e3:bd:
         9a:83:1a:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+H7TwjLDxHSBgCeEm/WAqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzExNTMyMTUwY2U3Yzk3YTdlYTQ4YzBkNzdhNDJlNmYw
ZDVmYzMwHhcNMjQwNTE3MTkwMDIyWhcNMjQwNTE4MTkwMDIyWjAzMTEwLwYDVQQD
Eyg3Nzg0ZWVlY2UyNmMxY2U2YWJjZjFmN2UwMjliNWNlNDFiZWQ3YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl4Q+sf5gYexIy8rNUWeLGO8xe4A
Or1uIFnTHbgcSz7ZIqP4L/B25INnGKGKp8hxbhg2Un6NKSNcVdOr3DyAoIB3FB9+
dmN5OFcndN8RG36w+M3cwnQAxPlIVlYYmIjPst1e+Y2PH5+2AeWBhLx9oZpyLMcx
KfZD1B3OlQ/4I7S8kVFRvroshUR6QHFPGfodBV2bb9a5jdKZLrNPoZT5tmD0imTY
F4DgJ5CrGr4rpkmCELiuGFa/i+nFI9wcNjQKmqh3v53H8ekK3SYHdfGnrW2RH49N
k1+j5rYVcXu9JcZITfroK6QHLWJ9z5f5oHS5Zp/NaaJMFl2Wz7fmHY+hdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeE7uzibBzmq88ffgKbXOQb7XxBMB8GA1UdIwQY
MBaAFAVxFTIVDOfJen6kjA13pC5vDV/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODIt
N2JjZmQ2NGUwMjg4LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODItN2JjZmQ2NGUwMjg4
LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPpU52Hc
nbEIOVUGi1CpbQGcT6+O44y7JAsT3qvEZ7LhmkkMyYqCuVzutAlKQs7YzSf4SXcY
cH7DWll1W2inJekVmbfPAIJPfiGuvZpF57++N2Ec/NbFWvyAuDg868Qxr7DMpX4i
98KjzSSAGensxnoalHarSdUWAA/ZAuc0ToWXzANZbAduhEWoYWmCX1gEYigKtwr1
7FcSgPfPiltjOT6yJwHfYbM47fkX/TbebnrzIrfy9+4h7l+vB8SdQbZWzaahJ/02
4CZ55YnSGkbWEhTPetP9TTcVR0FYD/blICqzxyrUkYT8vi1xyBT6LVkJqZ9wAYKR
6Wvgq+O9moMasA==
-----END CERTIFICATE-----