Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File:                     oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier:          ecdDyOLqW21LvUsmzVkNZZaarN0+Amvoies3cuFmUi4=
Subject key identifier:   97:D4:4B:A4:2A:9E:C0:62:8C:63:05:70:7C:DB:38:52:34:7D:FF:69
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer:       /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial:       01936B228A7178EA4A1C6A86A5FF63114A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number:          0C3A
Signing time:             Wed 27 Nov 2024 01:00:45 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:45 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:45 +0000
Files and hashes:         1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: HZol9zYRkBuNrHAIC52emBLGddItdDAxLImnY7vVz/Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:8a:71:78:ea:4a:1c:6a:86:a5:ff:63:11:4a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
        Validity
            Not Before: Nov 27 01:00:45 2024 GMT
            Not After : Nov 28 01:00:45 2024 GMT
        Subject: CN=97d44ba42a9ec0628c6305707cdb3852347dff69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:99:4e:aa:23:f2:57:f0:55:95:51:f4:c3:
                    b0:e2:5d:dd:57:81:e1:ee:8d:c1:b7:e3:e4:ad:f4:
                    fb:6d:14:9c:d5:20:bd:a2:44:6c:41:d9:80:8d:f0:
                    f1:5a:f5:f0:15:53:53:1a:e5:50:2a:6d:38:de:97:
                    7d:e6:60:68:2c:7d:e4:86:94:d9:a1:29:c3:c0:5e:
                    33:d8:b1:22:79:ed:1c:88:1f:0c:1e:4c:ba:34:f4:
                    04:7b:59:91:7e:18:9c:3e:29:fc:03:f8:50:24:3c:
                    ed:65:b7:ef:5a:70:db:c4:9e:46:19:34:d7:cf:d1:
                    75:e5:bc:ea:bc:8a:44:0a:45:d8:e8:35:74:b7:11:
                    91:7a:a5:d2:14:5f:d1:3e:0e:c3:3b:3e:c2:0f:c9:
                    77:b4:4a:23:16:46:3f:47:d4:f0:e6:63:d8:b9:5c:
                    be:2d:ff:40:6b:be:03:25:b5:58:3c:f4:f4:89:79:
                    81:1a:4b:e7:df:f8:bc:d5:c1:18:00:2b:20:76:a1:
                    8f:8b:f2:a2:95:65:0c:33:21:7c:8a:50:54:41:f7:
                    1b:7a:f4:2a:02:18:26:c0:f4:da:a0:05:8f:81:70:
                    4f:40:a0:42:59:21:85:82:52:ce:f0:8a:2a:89:6b:
                    93:9f:2b:14:fa:3e:55:86:c6:11:bd:d7:39:99:13:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D4:4B:A4:2A:9E:C0:62:8C:63:05:70:7C:DB:38:52:34:7D:FF:69
            X509v3 Authority Key Identifier:
                keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:77:c3:a8:0d:3c:f5:b9:e4:dd:57:c5:a4:0a:8e:4f:e8:80:
         50:41:e3:bc:47:90:e5:af:5f:f3:23:50:3b:ef:e8:48:67:c8:
         26:ef:c1:d0:d9:9d:09:1b:89:28:2e:71:06:17:66:5f:b7:26:
         e5:73:d3:31:c7:dc:aa:50:f2:d9:2f:e1:9a:ad:d1:1e:f8:95:
         d6:b5:b5:d7:b9:19:ec:25:cf:03:fb:29:1f:de:4f:88:c9:fe:
         a7:28:51:61:0e:78:31:24:55:57:d0:10:9b:10:dd:f6:73:c9:
         27:4c:58:d0:45:90:6c:d8:8b:ec:3e:c3:2a:5b:09:b9:d8:ef:
         89:02:99:d9:d3:8f:1d:6b:90:77:62:e1:93:c7:7d:d2:08:a0:
         e5:e9:04:04:75:3c:cd:28:2d:42:c4:e4:96:df:5e:8a:be:49:
         50:e0:df:4d:36:46:c8:b4:cf:1b:47:57:f9:35:73:51:c0:18:
         d1:5e:75:53:83:e5:44:4e:46:cd:9e:82:b2:52:de:ea:e9:ff:
         ca:5d:3d:51:80:fb:e0:bf:b1:52:6c:2c:a6:1d:18:22:e6:88:
         f3:c2:3e:91:6a:b2:5d:f6:ee:f4:09:40:3b:fe:ab:82:5a:ce:
         10:f1:4c:22:a1:da:f6:0a:73:a2:c3:2d:9b:bb:3f:e9:64:18:
         c0:d4:5f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIopxeOpKHGqGpf9jEUoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODQ1NmJjNjVjYjRiMTU1YTllNmI0YjMxNmRkNTE0ZTA0
MzFiNjkwHhcNMjQxMTI3MDEwMDQ1WhcNMjQxMTI4MDEwMDQ1WjAzMTEwLwYDVQQD
Eyg5N2Q0NGJhNDJhOWVjMDYyOGM2MzA1NzA3Y2RiMzg1MjM0N2RmZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWKZTqoj8lfwVZVR9MOw4l3dV4Hh
7o3Bt+PkrfT7bRSc1SC9okRsQdmAjfDxWvXwFVNTGuVQKm043pd95mBoLH3khpTZ
oSnDwF4z2LEiee0ciB8MHky6NPQEe1mRfhicPin8A/hQJDztZbfvWnDbxJ5GGTTX
z9F15bzqvIpECkXY6DV0txGReqXSFF/RPg7DOz7CD8l3tEojFkY/R9Tw5mPYuVy+
Lf9Aa74DJbVYPPT0iXmBGkvn3/i81cEYACsgdqGPi/KilWUMMyF8ilBUQfcbevQq
AhgmwPTaoAWPgXBPQKBCWSGFglLO8IoqiWuTnysU+j5VhsYRvdc5mRPRiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfUS6QqnsBijGMFcHzbOFI0ff9pMB8GA1UdIwQY
MBaAFKCEVrxly0sVWp5rSzFt1RTgQxtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYt
ZmZlZGYwYWQwYmUzLzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYtZmZlZGYwYWQwYmUz
LzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXfDqA08
9bnk3VfFpAqOT+iAUEHjvEeQ5a9f8yNQO+/oSGfIJu/B0NmdCRuJKC5xBhdmX7cm
5XPTMcfcqlDy2S/hmq3RHviV1rW117kZ7CXPA/spH95PiMn+pyhRYQ54MSRVV9AQ
mxDd9nPJJ0xY0EWQbNiL7D7DKlsJudjviQKZ2dOPHWuQd2Lhk8d90gig5ekEBHU8
zSgtQsTklt9eir5JUODfTTZGyLTPG0dX+TVzUcAY0V51U4PlRE5GzZ6CslLe6un/
yl09UYD74L+xUmwsph0YIuaI88I+kWqyXfbu9AlAO/6rglrOEPFMIqHa9gpzosMt
m7s/6WQYwNRfYA==
-----END CERTIFICATE-----