Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
File:                     G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft (raw, json)
Hash identifier:          BEteMHWRWVOuM4wE9q6By56gVet78MrCu544gRM5cPs=
Subject key identifier:   A8:1D:F3:FE:06:0C:DD:B2:DB:F9:B3:23:A8:D0:85:78:1D:05:7F:64
Authority key identifier: 1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3
Certificate issuer:       /CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
Certificate serial:       0193568A90EA95314469F060A2C69DCB4124
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
Manifest number:          0836
Signing time:             Sat 23 Nov 2024 01:02:21 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:21 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:21 +0000
Files and hashes:         1: G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl (hash: dbXWuuT3g6ZzeTbOscJxX2RIcfA/DbRTbC+6qx1s4YY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:90:ea:95:31:44:69:f0:60:a2:c6:9d:cb:41:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9136326809f0687f7d7d4dc1a81b7b99a3d7d3
        Validity
            Not Before: Nov 23 01:02:21 2024 GMT
            Not After : Nov 24 01:02:21 2024 GMT
        Subject: CN=a81df3fe060cddb2dbf9b323a8d085781d057f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:c3:a0:6b:71:2a:83:24:4a:bd:dd:92:76:
                    7f:33:d0:1e:62:06:d9:45:9c:88:61:ed:06:60:7e:
                    69:26:10:7f:ea:44:2c:fc:2e:7b:d7:04:bb:39:d0:
                    6e:69:cd:44:0c:45:ef:d3:6e:29:f3:ac:5b:7b:5b:
                    3f:0a:5e:45:cc:fd:b8:8b:7c:73:2a:c4:ef:d0:fb:
                    01:f4:84:07:f4:88:5f:9f:55:89:1f:5f:9f:af:cc:
                    29:b7:44:1e:80:03:01:48:0c:76:25:f2:81:a6:5b:
                    63:dc:99:ac:03:e3:df:d7:b1:00:bb:8a:ce:88:1f:
                    ec:6d:0f:c7:33:ec:30:d8:4d:fa:9e:f2:13:9f:1f:
                    0b:ad:f3:ea:8a:e9:c3:25:a2:60:d4:8c:9a:77:ea:
                    19:93:04:14:47:8c:23:1d:32:67:66:5e:ed:14:bc:
                    4d:6d:33:b2:8b:6e:0d:ed:5e:f8:32:a2:5c:81:8d:
                    bf:76:96:ce:01:12:29:1f:a9:0a:e4:13:60:8c:52:
                    10:f9:16:1a:94:2f:fe:de:0b:46:f0:38:04:40:07:
                    b7:23:ed:d1:fa:87:49:d4:ac:f5:61:a6:d0:63:31:
                    24:b2:b9:63:5c:2e:48:9d:54:f8:ec:88:ce:9c:95:
                    5c:41:5f:0f:4f:dd:82:e1:e4:da:3f:54:a6:9d:96:
                    fc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:1D:F3:FE:06:0C:DD:B2:DB:F9:B3:23:A8:D0:85:78:1D:05:7F:64
            X509v3 Authority Key Identifier:
                keyid:1B:91:36:32:68:09:F0:68:7F:7D:7D:4D:C1:A8:1B:7B:99:A3:D7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7f0c82-6330-4971-98c0-59b53b3a6da1/1/G5E2MmgJ8Gh_fX1Nwagbe5mj19M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e3:b2:8d:83:2c:86:97:de:92:9f:82:fc:73:4e:f5:6d:b1:
         ef:99:42:3b:8e:47:eb:50:61:86:86:50:f0:81:4d:26:fd:d1:
         51:80:3e:d4:b3:13:c1:08:1d:c2:9a:28:06:3e:d8:9b:4b:37:
         5c:3a:7e:40:26:fc:ba:82:74:5e:f2:50:8a:96:ad:cc:ef:77:
         e6:cf:a1:94:d6:e0:a8:a9:17:ac:61:39:23:37:cd:1b:fe:85:
         96:d7:84:05:48:12:a9:67:89:13:0c:47:ee:96:fb:ba:a3:db:
         3b:1c:50:4b:65:09:5b:36:47:0e:2c:a0:4b:b7:ee:1c:90:f4:
         d8:c0:d1:0c:ba:e4:ef:ca:c8:ae:98:61:1f:6e:48:99:27:d8:
         28:4c:81:8b:cc:96:e0:03:02:17:21:fa:42:85:9d:bf:5c:67:
         4d:c3:d0:2c:44:f1:74:75:39:70:07:72:32:3f:5e:d7:c8:1e:
         96:b7:45:e2:dc:ab:ec:94:61:35:4d:bc:71:6a:fa:06:e3:50:
         91:1f:46:a7:03:12:b8:e0:36:de:f3:0f:39:be:16:52:32:c8:
         09:9a:df:ad:43:11:6d:9e:90:b0:8f:28:d3:d0:d4:6c:65:03:
         4d:77:85:23:47:af:5f:4d:19:68:6c:5a:fd:ee:f8:86:72:53:
         91:50:d0:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWipDqlTFEafBgosady0EkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTEzNjMyNjgwOWYwNjg3ZjdkN2Q0ZGMxYTgxYjdiOTlh
M2Q3ZDMwHhcNMjQxMTIzMDEwMjIxWhcNMjQxMTI0MDEwMjIxWjAzMTEwLwYDVQQD
EyhhODFkZjNmZTA2MGNkZGIyZGJmOWIzMjNhOGQwODU3ODFkMDU3ZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N7DoGtxKoMkSr3dknZ/M9AeYgbZ
RZyIYe0GYH5pJhB/6kQs/C571wS7OdBuac1EDEXv024p86xbe1s/Cl5FzP24i3xz
KsTv0PsB9IQH9Ihfn1WJH1+fr8wpt0QegAMBSAx2JfKBpltj3JmsA+Pf17EAu4rO
iB/sbQ/HM+ww2E36nvITnx8LrfPqiunDJaJg1Iyad+oZkwQUR4wjHTJnZl7tFLxN
bTOyi24N7V74MqJcgY2/dpbOARIpH6kK5BNgjFIQ+RYalC/+3gtG8DgEQAe3I+3R
+odJ1Kz1YabQYzEksrljXC5InVT47IjOnJVcQV8PT92C4eTaP1SmnZb87QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgd8/4GDN2y2/mzI6jQhXgdBX9kMB8GA1UdIwQY
MBaAFBuRNjJoCfBof319TcGoG3uZo9fTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZjBjODItNjMzMC00OTcxLTk4YzAt
NTliNTNiM2E2ZGExLzEvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZjBjODItNjMzMC00OTcxLTk4YzAtNTliNTNiM2E2ZGEx
LzEvRzVFMk1tZ0o4R2hfZlgxTndhZ2JlNW1qMTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+OyjYMs
hpfekp+C/HNO9W2x75lCO45H61BhhoZQ8IFNJv3RUYA+1LMTwQgdwpooBj7Ym0s3
XDp+QCb8uoJ0XvJQipatzO935s+hlNbgqKkXrGE5IzfNG/6FlteEBUgSqWeJEwxH
7pb7uqPbOxxQS2UJWzZHDiygS7fuHJD02MDRDLrk78rIrphhH25ImSfYKEyBi8yW
4AMCFyH6QoWdv1xnTcPQLETxdHU5cAdyMj9e18gelrdF4tyr7JRhNU28cWr6BuNQ
kR9GpwMSuOA23vMPOb4WUjLICZrfrUMRbZ6QsI8o09DUbGUDTXeFI0evX00ZaGxa
/e74hnJTkVDQuw==
-----END CERTIFICATE-----