Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File:                     DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier:          UL/Yx1/HWjl0g6IZ3Uer9+Gexm4OuVJdzWZAPS68ctM=
Subject key identifier:   96:1A:D0:25:0B:F0:3D:95:C1:B2:C9:BA:57:92:56:BB:6B:24:C4:59
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer:       /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial:       019369DB1CDD757A59DEA5D4669F6C1F04CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 19:03:07 +0000
Manifest this update:     Tue 26 Nov 2024 19:03:07 +0000
Manifest next update:     Wed 27 Nov 2024 19:03:07 +0000
Files and hashes:         1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: nnYagMPgOqSkzUac7woNSVLaIZwvCl2q4n4laCW5pWM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:db:1c:dd:75:7a:59:de:a5:d4:66:9f:6c:1f:04:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
        Validity
            Not Before: Nov 26 19:03:07 2024 GMT
            Not After : Nov 27 19:03:07 2024 GMT
        Subject: CN=961ad0250bf03d95c1b2c9ba579256bb6b24c459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:05:b7:27:f9:95:a2:19:05:02:f1:76:bd:c1:
                    0b:ec:29:dc:73:5e:7a:55:a2:6a:ed:32:f8:78:5f:
                    63:d2:3d:e6:79:cd:48:72:90:e7:20:bf:a9:7c:d6:
                    b6:8f:47:66:74:e8:69:55:b8:8a:f7:8f:ce:02:a9:
                    de:e9:97:4a:80:4c:50:28:a4:26:60:d9:37:21:5a:
                    92:bd:46:42:18:b4:57:13:a3:9d:db:31:90:1a:56:
                    62:f3:f7:fc:82:2c:a0:4e:fc:91:33:cf:8f:53:61:
                    39:6e:f9:fb:da:c9:5f:74:91:11:aa:e7:cc:f2:55:
                    c6:33:82:04:78:6c:a1:aa:98:0b:8b:1f:fb:d7:ab:
                    b4:65:24:d2:8c:e0:af:2a:37:24:ff:c3:10:c2:4f:
                    aa:cc:3b:58:a4:d6:68:d4:e2:cd:9b:da:db:85:fe:
                    29:92:51:9f:0f:15:39:90:76:9d:66:7f:8d:22:bb:
                    fa:b4:c1:23:bd:33:7c:ef:0c:b0:bf:3c:b8:27:c1:
                    af:c5:1b:8c:e6:cc:c0:3b:2d:02:94:1d:fb:71:a9:
                    5b:05:17:a3:a8:21:af:d3:8a:6e:3f:e5:2a:7f:58:
                    d6:1b:fd:f8:09:f5:f4:1f:51:a6:2b:fd:21:1a:1d:
                    d6:4f:96:5c:13:f8:91:b3:69:f4:d8:d0:c5:6b:23:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1A:D0:25:0B:F0:3D:95:C1:B2:C9:BA:57:92:56:BB:6B:24:C4:59
            X509v3 Authority Key Identifier:
                keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:62:b2:c2:ef:2e:09:2a:f4:c2:d7:54:38:79:fa:ed:e3:85:
         0c:86:d2:c3:1a:ab:72:11:e9:86:98:5a:75:fe:78:b8:ea:39:
         e7:2f:27:5b:bb:89:53:ab:84:f5:46:30:47:a1:ab:39:8e:23:
         52:1e:58:82:29:43:3b:fe:c9:4b:d2:55:d1:7a:f1:49:d3:b9:
         6f:93:25:2f:5d:fd:c8:ae:6c:ec:07:f2:7c:05:e7:33:5a:e9:
         d6:e8:83:7a:15:37:38:64:5f:55:3c:55:13:e2:11:88:41:af:
         44:e6:f4:7b:55:28:f9:46:bb:cd:86:6d:dd:03:db:fb:fc:17:
         7f:ca:f2:3f:48:db:53:6a:ed:52:a7:d7:ce:62:38:2e:8b:38:
         19:ce:b4:c9:30:35:d7:fb:c2:87:cb:7a:11:a2:f0:8d:35:11:
         3a:e0:12:7b:4a:6f:3a:39:f3:06:84:6b:a7:d9:9d:1e:0c:18:
         35:c8:c2:e1:10:f4:10:96:dc:77:e7:13:f9:79:3e:80:49:48:
         1c:f0:ff:a2:a3:1e:ae:cd:6b:da:cb:9b:55:34:d3:f5:b1:d9:
         34:7f:2c:0c:04:f7:84:15:65:29:82:27:50:fc:01:50:2d:b6:
         ce:7f:e0:41:4c:2b:87:90:41:b8:b7:b4:4f:97:4d:95:58:38:
         db:d3:25:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2xzddXpZ3qXUZp9sHwTKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMGM1Mjk0ZmRiOWMyYjFmNzQzMTY0ZmM5NjBjMDA3ZTZi
ZmU2MDEwHhcNMjQxMTI2MTkwMzA3WhcNMjQxMTI3MTkwMzA3WjAzMTEwLwYDVQQD
Eyg5NjFhZDAyNTBiZjAzZDk1YzFiMmM5YmE1NzkyNTZiYjZiMjRjNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwW3J/mVohkFAvF2vcEL7Cncc156
VaJq7TL4eF9j0j3mec1IcpDnIL+pfNa2j0dmdOhpVbiK94/OAqne6ZdKgExQKKQm
YNk3IVqSvUZCGLRXE6Od2zGQGlZi8/f8giygTvyRM8+PU2E5bvn72slfdJERqufM
8lXGM4IEeGyhqpgLix/716u0ZSTSjOCvKjck/8MQwk+qzDtYpNZo1OLNm9rbhf4p
klGfDxU5kHadZn+NIrv6tMEjvTN87wywvzy4J8GvxRuM5szAOy0ClB37calbBRej
qCGv04puP+Uqf1jWG/34CfX0H1GmK/0hGh3WT5ZcE/iRs2n02NDFayP3owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYa0CUL8D2VwbLJuleSVrtrJMRZMB8GA1UdIwQY
MBaAFA8MUpT9ucKx90MWT8lgwAfmv+YBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQt
MjRlZDQwYzlmMzg5LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQtMjRlZDQwYzlmMzg5
LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGKywu8u
CSr0wtdUOHn67eOFDIbSwxqrchHphphadf54uOo55y8nW7uJU6uE9UYwR6GrOY4j
Uh5YgilDO/7JS9JV0XrxSdO5b5MlL139yK5s7AfyfAXnM1rp1uiDehU3OGRfVTxV
E+IRiEGvROb0e1Uo+Ua7zYZt3QPb+/wXf8ryP0jbU2rtUqfXzmI4Los4Gc60yTA1
1/vCh8t6EaLwjTUROuASe0pvOjnzBoRrp9mdHgwYNcjC4RD0EJbcd+cT+Xk+gElI
HPD/oqMers1r2subVTTT9bHZNH8sDAT3hBVlKYInUPwBUC22zn/gQUwrh5BBuLe0
T5dNlVg429MllQ==
-----END CERTIFICATE-----