Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/234cfa-8336-4615-a148-157c5ccac326/1/VdqMFndw2OMbHInlF22B1YXpL0M.mft
File:                     VdqMFndw2OMbHInlF22B1YXpL0M.mft (raw, json)
Hash identifier:          rvbxQREHW31Mv8QKn1QvOOAGoVes5W6M1ocIPQWeLP0=
Subject key identifier:   8A:05:25:65:05:25:79:C5:3B:B7:DB:C8:BD:C3:84:95:5A:C4:B6:2E
Authority key identifier: 55:DA:8C:16:77:70:D8:E3:1B:1C:89:E5:17:6D:81:D5:85:E9:2F:43
Certificate issuer:       /CN=55da8c167770d8e31b1c89e5176d81d585e92f43
Certificate serial:       018F87B65433BD8D0A93E2A8A89B2A657F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdqMFndw2OMbHInlF22B1YXpL0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/234cfa-8336-4615-a148-157c5ccac326/1/VdqMFndw2OMbHInlF22B1YXpL0M.mft
Manifest number:          03DD
Signing time:             Fri 17 May 2024 18:00:24 +0000
Manifest this update:     Fri 17 May 2024 18:00:24 +0000
Manifest next update:     Sat 18 May 2024 18:00:24 +0000
Files and hashes:         1: VdqMFndw2OMbHInlF22B1YXpL0M.crl (hash: bFZEezr+KhUIFIwc6rfXhtwuaU/5VPJtuz+gmhd88z8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/234cfa-8336-4615-a148-157c5ccac326/1/VdqMFndw2OMbHInlF22B1YXpL0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/234cfa-8336-4615-a148-157c5ccac326/1/VdqMFndw2OMbHInlF22B1YXpL0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdqMFndw2OMbHInlF22B1YXpL0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:54:33:bd:8d:0a:93:e2:a8:a8:9b:2a:65:7f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55da8c167770d8e31b1c89e5176d81d585e92f43
        Validity
            Not Before: May 17 18:00:24 2024 GMT
            Not After : May 18 18:00:24 2024 GMT
        Subject: CN=8a052565052579c53bb7dbc8bdc384955ac4b62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:7e:ba:9d:f9:7c:72:d0:3f:16:16:90:87:
                    c4:de:5c:78:0c:6d:8b:1e:88:02:41:c7:8d:b0:bc:
                    b0:7f:f7:db:86:a2:e8:fc:e2:7f:93:b9:8a:fc:ea:
                    68:7d:d5:7b:f8:8f:28:7f:b6:4f:c0:7e:45:db:6e:
                    56:07:52:3a:c6:87:ab:84:16:50:e3:d3:6d:d2:fc:
                    67:c6:e8:ee:f1:cb:ac:30:19:0b:07:e2:b2:2a:c5:
                    8d:84:b0:36:35:3d:f3:18:df:4b:56:bb:a9:9d:fc:
                    98:1a:6a:90:eb:22:ef:03:7f:c8:41:93:54:36:7f:
                    04:f5:57:1d:bb:f4:88:9c:7b:ff:b6:91:a1:66:d2:
                    96:b8:c1:5b:a5:0c:e4:33:4e:19:31:08:d7:a6:34:
                    ab:b5:36:7a:86:61:33:ba:32:5c:50:58:ff:c1:e0:
                    b9:4d:d7:a9:4a:cd:19:1c:a6:09:62:e7:5b:09:fe:
                    70:78:e6:d5:49:22:4d:d2:26:9e:7c:e1:89:15:ec:
                    c4:b9:c0:02:1c:e4:0d:b9:02:ed:6a:0d:24:c2:7f:
                    e1:fa:0f:37:ff:a4:e5:8b:8e:2d:0f:ec:ef:38:c5:
                    dc:6d:d5:c1:c2:30:9e:e7:eb:73:f3:67:a5:60:b1:
                    8c:45:ed:d3:c4:e5:7e:3f:c4:34:3b:90:59:a5:be:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:05:25:65:05:25:79:C5:3B:B7:DB:C8:BD:C3:84:95:5A:C4:B6:2E
            X509v3 Authority Key Identifier:
                keyid:55:DA:8C:16:77:70:D8:E3:1B:1C:89:E5:17:6D:81:D5:85:E9:2F:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdqMFndw2OMbHInlF22B1YXpL0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/234cfa-8336-4615-a148-157c5ccac326/1/VdqMFndw2OMbHInlF22B1YXpL0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/234cfa-8336-4615-a148-157c5ccac326/1/VdqMFndw2OMbHInlF22B1YXpL0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e6:85:d5:fc:6b:39:2c:23:8d:bb:47:c4:d1:7c:66:a3:e8:
         b8:93:f0:d3:92:31:53:7c:c5:ed:ae:62:c4:1e:16:e3:0a:25:
         4f:31:50:70:c8:ed:dc:e3:c2:77:49:4a:07:63:b1:c4:75:06:
         0b:a5:8c:7c:e2:38:82:08:e8:67:6a:9b:54:be:4f:3b:74:3d:
         1c:5c:18:a1:38:3d:ce:4c:a5:9a:33:19:2b:73:63:8b:fa:7b:
         15:8c:69:60:d2:55:1c:fb:da:f3:a6:e6:44:d4:08:47:6c:37:
         08:3b:35:1a:19:b7:85:2a:a9:c2:eb:e8:09:5b:cb:ba:2e:31:
         d4:ab:7e:22:8b:1d:43:20:5a:08:c0:e9:c8:73:1a:41:89:60:
         6b:ee:d3:33:4a:a4:34:14:4f:1a:c4:03:8c:3d:16:98:c6:90:
         52:20:f5:96:e4:49:ac:a9:78:f5:11:29:cd:ec:01:6d:77:22:
         44:70:1d:15:33:f7:10:b4:dd:c0:95:71:59:e9:a6:38:66:d1:
         3f:5d:cc:72:55:1f:71:18:8c:fa:d7:61:61:0e:84:46:85:a1:
         ff:44:4b:d1:cb:65:92:75:a3:1a:e4:31:ab:8d:09:92:43:e0:
         87:23:b2:9a:54:cf:3c:9e:5c:0f:52:5d:6b:93:72:89:6a:19:
         e5:21:b9:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtlQzvY0Kk+KoqJsqZX8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZGE4YzE2Nzc3MGQ4ZTMxYjFjODllNTE3NmQ4MWQ1ODVl
OTJmNDMwHhcNMjQwNTE3MTgwMDI0WhcNMjQwNTE4MTgwMDI0WjAzMTEwLwYDVQQD
Eyg4YTA1MjU2NTA1MjU3OWM1M2JiN2RiYzhiZGMzODQ5NTVhYzRiNjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb9+up35fHLQPxYWkIfE3lx4DG2L
HogCQceNsLywf/fbhqLo/OJ/k7mK/OpofdV7+I8of7ZPwH5F225WB1I6xoerhBZQ
49Nt0vxnxuju8cusMBkLB+KyKsWNhLA2NT3zGN9LVrupnfyYGmqQ6yLvA3/IQZNU
Nn8E9Vcdu/SInHv/tpGhZtKWuMFbpQzkM04ZMQjXpjSrtTZ6hmEzujJcUFj/weC5
TdepSs0ZHKYJYudbCf5weObVSSJN0iaefOGJFezEucACHOQNuQLtag0kwn/h+g83
/6Tli44tD+zvOMXcbdXBwjCe5+tz82elYLGMRe3TxOV+P8Q0O5BZpb7/ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoFJWUFJXnFO7fbyL3DhJVaxLYuMB8GA1UdIwQY
MBaAFFXajBZ3cNjjGxyJ5RdtgdWF6S9DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmRxTUZuZHcyT01iSElubEYyMkIxWVhwTDBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yMzRjZmEtODMzNi00NjE1LWExNDgt
MTU3YzVjY2FjMzI2LzEvVmRxTUZuZHcyT01iSElubEYyMkIxWVhwTDBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8yMzRjZmEtODMzNi00NjE1LWExNDgtMTU3YzVjY2FjMzI2
LzEvVmRxTUZuZHcyT01iSElubEYyMkIxWVhwTDBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+aF1fxr
OSwjjbtHxNF8ZqPouJPw05IxU3zF7a5ixB4W4wolTzFQcMjt3OPCd0lKB2OxxHUG
C6WMfOI4ggjoZ2qbVL5PO3Q9HFwYoTg9zkylmjMZK3Nji/p7FYxpYNJVHPva86bm
RNQIR2w3CDs1Ghm3hSqpwuvoCVvLui4x1Kt+IosdQyBaCMDpyHMaQYlga+7TM0qk
NBRPGsQDjD0WmMaQUiD1luRJrKl49REpzewBbXciRHAdFTP3ELTdwJVxWemmOGbR
P13MclUfcRiM+tdhYQ6ERoWh/0RL0ctlknWjGuQxq40JkkPghyOymlTPPJ5cD1Jd
a5NyiWoZ5SG5FA==
-----END CERTIFICATE-----