Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.mft
File:                     apWJft4RUWB8CYrhC_Pdi2qXClI.mft (raw, json)
Hash identifier:          xSIulp0CAcwvNgmW0vjeRCZT5ustgcrN1sA/ZQ5qLCg=
Subject key identifier:   37:B8:FE:50:22:3F:1B:6A:6A:A5:DD:2F:3B:53:06:4D:7C:A5:B4:7C
Authority key identifier: 6A:95:89:7E:DE:11:51:60:7C:09:8A:E1:0B:F3:DD:8B:6A:97:0A:52
Certificate issuer:       /CN=6a95897ede1151607c098ae10bf3dd8b6a970a52
Certificate serial:       018F874AE857D81FFCED38D3E23F90563F2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/apWJft4RUWB8CYrhC_Pdi2qXClI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.mft
Manifest number:          093C
Signing time:             Fri 17 May 2024 16:03:04 +0000
Manifest this update:     Fri 17 May 2024 16:03:04 +0000
Manifest next update:     Sat 18 May 2024 16:03:04 +0000
Files and hashes:         1: apWJft4RUWB8CYrhC_Pdi2qXClI.crl (hash: 98TLaZSRLc30V1oCc4aVxmYClBFPW31ALzda9VgZJSw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/apWJft4RUWB8CYrhC_Pdi2qXClI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:03:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:e8:57:d8:1f:fc:ed:38:d3:e2:3f:90:56:3f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a95897ede1151607c098ae10bf3dd8b6a970a52
        Validity
            Not Before: May 17 16:03:04 2024 GMT
            Not After : May 18 16:03:04 2024 GMT
        Subject: CN=37b8fe50223f1b6a6aa5dd2f3b53064d7ca5b47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f2:f3:f8:57:4a:9b:85:bd:19:7f:34:62:77:
                    17:f6:10:73:ba:44:a3:ae:71:db:e8:13:f5:a4:78:
                    0a:68:2f:78:d5:19:29:4e:26:63:57:af:84:02:b1:
                    b2:dc:cb:c8:3e:47:e9:32:dc:1d:c4:53:c9:9c:b4:
                    bb:ab:12:19:a2:6e:43:9b:55:d2:2f:ed:12:d3:bd:
                    6d:7d:3f:4c:ef:91:61:4c:18:86:8c:25:ad:e6:ed:
                    4b:28:c7:37:49:5f:85:65:72:f0:ba:21:83:e6:a5:
                    14:30:ea:c6:72:7a:7d:fa:e6:e1:b1:bb:bb:1a:5f:
                    00:19:2c:04:87:3e:bf:b0:fb:ca:cc:72:2d:e0:3d:
                    eb:2e:22:46:48:74:67:0c:0c:b8:fc:a6:b2:b9:06:
                    f3:19:8e:8e:59:f1:66:bf:13:5a:3e:0a:b8:c6:fe:
                    b6:ef:92:56:19:fe:a0:a7:57:54:39:e4:f0:dc:b2:
                    3c:66:43:5d:b8:5e:95:c4:b9:db:ad:40:93:44:3c:
                    67:47:46:22:a5:08:29:ca:2a:de:52:66:90:8d:ca:
                    9c:bd:63:68:fe:85:5a:ee:b8:bb:5a:63:15:54:80:
                    84:f5:c7:df:d1:74:a7:bf:39:d4:18:06:e9:90:86:
                    fb:6f:70:2b:6e:f9:ae:81:06:c4:2c:eb:f1:09:b3:
                    25:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B8:FE:50:22:3F:1B:6A:6A:A5:DD:2F:3B:53:06:4D:7C:A5:B4:7C
            X509v3 Authority Key Identifier:
                keyid:6A:95:89:7E:DE:11:51:60:7C:09:8A:E1:0B:F3:DD:8B:6A:97:0A:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apWJft4RUWB8CYrhC_Pdi2qXClI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/9c11c0-0fb3-48b3-973c-637509c25f64/1/apWJft4RUWB8CYrhC_Pdi2qXClI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:42:7f:43:e2:a7:24:e6:2f:d9:1d:96:84:8b:17:0a:9a:88:
         1c:b2:97:0e:01:96:35:bb:72:86:70:93:6e:f3:f6:85:4c:c8:
         ff:17:3d:c1:cf:19:8f:9d:aa:1c:76:50:f7:74:61:69:95:1d:
         1f:61:9b:e9:2c:68:0c:41:c2:e8:8b:bc:58:9c:8d:d7:81:d2:
         19:d9:7d:e9:23:de:72:90:b8:77:8d:51:c5:e2:37:be:53:45:
         5b:4f:b4:a0:e0:bd:6d:de:c8:bd:d7:00:7c:e4:e7:1e:82:a9:
         48:6f:d3:42:cf:14:f9:c4:2a:08:b6:9e:0b:84:73:ac:d9:0c:
         c5:24:0e:99:05:4f:12:f5:20:39:86:ea:0a:dc:e6:76:14:b0:
         b2:fc:c6:9f:93:67:cc:e2:4c:48:ce:01:5d:b0:4b:a1:60:0e:
         ae:12:71:23:b8:cf:32:9e:8f:27:8b:31:81:95:b4:74:d5:58:
         a3:a4:0b:9d:73:15:da:6e:38:60:65:c5:40:17:04:c4:aa:08:
         c3:4b:6c:f4:86:fb:8d:d0:45:87:a4:a5:55:5d:d2:ce:8a:1d:
         6a:30:4e:e6:c8:15:52:21:e7:45:af:54:a9:b6:dc:43:7c:03:
         f9:c4:ea:5a:67:20:cb:07:34:27:e6:a8:22:7d:61:ef:33:2e:
         ab:09:a9:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSuhX2B/87TjT4j+QVj8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTU4OTdlZGUxMTUxNjA3YzA5OGFlMTBiZjNkZDhiNmE5
NzBhNTIwHhcNMjQwNTE3MTYwMzA0WhcNMjQwNTE4MTYwMzA0WjAzMTEwLwYDVQQD
EygzN2I4ZmU1MDIyM2YxYjZhNmFhNWRkMmYzYjUzMDY0ZDdjYTViNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/Lz+FdKm4W9GX80YncX9hBzukSj
rnHb6BP1pHgKaC941RkpTiZjV6+EArGy3MvIPkfpMtwdxFPJnLS7qxIZom5Dm1XS
L+0S071tfT9M75FhTBiGjCWt5u1LKMc3SV+FZXLwuiGD5qUUMOrGcnp9+ubhsbu7
Gl8AGSwEhz6/sPvKzHIt4D3rLiJGSHRnDAy4/KayuQbzGY6OWfFmvxNaPgq4xv62
75JWGf6gp1dUOeTw3LI8ZkNduF6VxLnbrUCTRDxnR0YipQgpyireUmaQjcqcvWNo
/oVa7ri7WmMVVICE9cff0XSnvznUGAbpkIb7b3ArbvmugQbELOvxCbMlOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDe4/lAiPxtqaqXdLztTBk18pbR8MB8GA1UdIwQY
MBaAFGqViX7eEVFgfAmK4Qvz3YtqlwpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBXSmZ0NFJVV0I4Q1lyaENfUGRpMnFYQ2xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85YzExYzAtMGZiMy00OGIzLTk3M2Mt
NjM3NTA5YzI1ZjY0LzEvYXBXSmZ0NFJVV0I4Q1lyaENfUGRpMnFYQ2xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS85YzExYzAtMGZiMy00OGIzLTk3M2MtNjM3NTA5YzI1ZjY0
LzEvYXBXSmZ0NFJVV0I4Q1lyaENfUGRpMnFYQ2xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0J/Q+Kn
JOYv2R2WhIsXCpqIHLKXDgGWNbtyhnCTbvP2hUzI/xc9wc8Zj52qHHZQ93RhaZUd
H2Gb6SxoDEHC6Iu8WJyN14HSGdl96SPecpC4d41RxeI3vlNFW0+0oOC9bd7IvdcA
fOTnHoKpSG/TQs8U+cQqCLaeC4RzrNkMxSQOmQVPEvUgOYbqCtzmdhSwsvzGn5Nn
zOJMSM4BXbBLoWAOrhJxI7jPMp6PJ4sxgZW0dNVYo6QLnXMV2m44YGXFQBcExKoI
w0ts9Ib7jdBFh6SlVV3SzoodajBO5sgVUiHnRa9UqbbcQ3wD+cTqWmcgywc0J+ao
In1h7zMuqwmpXg==
-----END CERTIFICATE-----