Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
File:                     L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft (raw, json)
Hash identifier:          gzGd/MgMkn0jq1vB9Ti0sjX2zgNdgsApIjCd82LuanM=
Subject key identifier:   A2:73:8C:B9:D9:DE:BD:EF:96:61:50:B8:ED:4D:AD:81:B4:0C:C9:F0
Authority key identifier: 2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD
Certificate issuer:       /CN=2f70532664343cb3d2897023a127f60ba917a5dd
Certificate serial:       01936A46E8291BFBBA56829217AB32B47350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
Manifest number:          096D
Signing time:             Tue 26 Nov 2024 21:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:52 +0000
Files and hashes:         1: L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl (hash: OTpmDwzPIIw81CdC/WZB4sK6ZEvy6siGXgHRlQq0cWo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:e8:29:1b:fb:ba:56:82:92:17:ab:32:b4:73:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f70532664343cb3d2897023a127f60ba917a5dd
        Validity
            Not Before: Nov 26 21:00:52 2024 GMT
            Not After : Nov 27 21:00:52 2024 GMT
        Subject: CN=a2738cb9d9debdef966150b8ed4dad81b40cc9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4a:ca:13:32:33:81:02:c7:17:4e:9f:d7:79:
                    85:97:5d:65:6f:ca:5c:d7:c0:6d:bd:e7:78:53:78:
                    e3:14:54:7d:64:9d:54:2e:36:f0:51:69:fd:5f:d8:
                    02:d2:6b:8a:f8:96:27:ed:fb:5f:fa:ad:d0:90:e6:
                    9d:d3:48:49:3c:0e:5f:79:08:40:e0:dc:37:ce:76:
                    3b:b4:3f:df:3e:fc:89:88:12:36:f2:a2:89:b8:91:
                    f8:8a:35:b8:bf:21:7c:d3:94:5a:16:71:91:0c:37:
                    97:4a:dd:ad:e7:23:84:e2:5f:1b:e5:55:d7:4b:71:
                    dd:84:3b:5c:cf:36:80:12:8d:6b:d9:56:28:70:08:
                    97:af:49:36:1e:75:39:97:ae:ff:4b:5d:dc:8e:7d:
                    39:5a:86:1a:dd:b9:63:ed:7c:e1:0f:5b:62:c1:64:
                    08:25:aa:85:96:28:6c:e6:46:8a:63:26:f6:fe:02:
                    ad:75:55:f8:74:c7:36:e5:67:8f:af:6a:a4:a5:58:
                    80:2e:c9:f9:23:6f:e5:4d:4b:2d:c2:ad:5c:5c:a2:
                    07:5f:1a:c1:13:4e:aa:0f:95:b2:79:72:f5:c5:ef:
                    6b:ec:f9:43:bf:d7:82:fe:8f:da:10:db:69:9e:80:
                    a3:70:cd:dd:91:e0:64:54:e6:27:79:43:88:c9:b6:
                    14:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:73:8C:B9:D9:DE:BD:EF:96:61:50:B8:ED:4D:AD:81:B4:0C:C9:F0
            X509v3 Authority Key Identifier:
                keyid:2F:70:53:26:64:34:3C:B3:D2:89:70:23:A1:27:F6:0B:A9:17:A5:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c59c0-ecd8-4727-b1de-315a79f59e18/1/L3BTJmQ0PLPSiXAjoSf2C6kXpd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f5:4f:de:53:31:56:9b:bd:b6:77:86:01:69:db:34:bf:1c:
         f8:84:01:b7:a2:17:98:26:9a:fc:10:b9:41:cf:43:4d:9f:7f:
         d7:86:c8:98:3b:fb:07:3a:1e:e8:80:7f:c1:15:37:6c:bf:3d:
         2d:65:39:66:df:b8:d6:3c:f2:f4:2b:10:c7:56:90:85:89:40:
         8f:ab:14:42:09:0b:d4:b5:51:b1:98:9d:04:97:ec:c7:c2:fe:
         3e:17:e0:a4:1a:69:3d:05:ff:3a:3d:82:8f:c6:c2:51:03:1a:
         93:f9:11:88:3c:12:1e:9e:e0:e7:e6:99:a8:4f:f2:08:e2:72:
         4a:d6:ed:2c:71:61:0e:63:54:ab:22:c8:e0:ba:0c:cf:c6:95:
         b8:03:23:cb:38:10:cd:f8:7f:9b:ed:a2:75:f5:56:16:66:f2:
         d3:f5:38:ee:60:de:30:03:91:83:c4:e1:30:92:0a:43:91:b7:
         8e:dc:8b:42:44:8e:86:23:d7:4e:67:a2:e3:9f:83:1c:49:cb:
         58:29:4c:05:6a:a3:81:4f:0e:c1:6c:41:3b:78:1e:ca:a4:d7:
         bb:03:d6:47:02:ca:cc:00:91:11:79:22:2a:10:25:1e:ab:e7:
         87:73:0c:2f:4d:7b:b6:a8:95:00:bf:02:d7:ae:d3:04:d2:37:
         b8:22:d5:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRugpG/u6VoKSF6sytHNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzA1MzI2NjQzNDNjYjNkMjg5NzAyM2ExMjdmNjBiYTkx
N2E1ZGQwHhcNMjQxMTI2MjEwMDUyWhcNMjQxMTI3MjEwMDUyWjAzMTEwLwYDVQQD
EyhhMjczOGNiOWQ5ZGViZGVmOTY2MTUwYjhlZDRkYWQ4MWI0MGNjOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyErKEzIzgQLHF06f13mFl11lb8pc
18Btved4U3jjFFR9ZJ1ULjbwUWn9X9gC0muK+JYn7ftf+q3QkOad00hJPA5feQhA
4Nw3znY7tD/fPvyJiBI28qKJuJH4ijW4vyF805RaFnGRDDeXSt2t5yOE4l8b5VXX
S3HdhDtczzaAEo1r2VYocAiXr0k2HnU5l67/S13cjn05WoYa3blj7XzhD1tiwWQI
JaqFlihs5kaKYyb2/gKtdVX4dMc25WePr2qkpViALsn5I2/lTUstwq1cXKIHXxrB
E06qD5WyeXL1xe9r7PlDv9eC/o/aENtpnoCjcM3dkeBkVOYneUOIybYUrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJzjLnZ3r3vlmFQuO1NrYG0DMnwMB8GA1UdIwQY
MBaAFC9wUyZkNDyz0olwI6En9gupF6XdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82YzU5YzAtZWNkOC00NzI3LWIxZGUt
MzE1YTc5ZjU5ZTE4LzEvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82YzU5YzAtZWNkOC00NzI3LWIxZGUtMzE1YTc5ZjU5ZTE4
LzEvTDNCVEptUTBQTFBTaVhBam9TZjJDNmtYcGQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/VP3lMx
Vpu9tneGAWnbNL8c+IQBt6IXmCaa/BC5Qc9DTZ9/14bImDv7Bzoe6IB/wRU3bL89
LWU5Zt+41jzy9CsQx1aQhYlAj6sUQgkL1LVRsZidBJfsx8L+PhfgpBppPQX/Oj2C
j8bCUQMak/kRiDwSHp7g5+aZqE/yCOJyStbtLHFhDmNUqyLI4LoMz8aVuAMjyzgQ
zfh/m+2idfVWFmby0/U47mDeMAORg8ThMJIKQ5G3jtyLQkSOhiPXTmei45+DHEnL
WClMBWqjgU8OwWxBO3geyqTXuwPWRwLKzACREXkiKhAlHqvnh3MML017tqiVAL8C
167TBNI3uCLV2A==
-----END CERTIFICATE-----