Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
File:                     ycJCxtHAS-As3EJ_zwTtWJshwrw.mft (raw, json)
Hash identifier:          hPcfukiSIK3c6JqnD88iX+jRPkJfsZzMIa4YyWF4t+k=
Subject key identifier:   B4:78:53:30:B0:B2:83:E4:E0:52:C6:5C:C3:8C:BF:90:2B:D8:83:8D
Authority key identifier: C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC
Certificate issuer:       /CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
Certificate serial:       019357D2E4060E780864030FC9608851C47F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
Manifest number:          02E6
Signing time:             Sat 23 Nov 2024 07:00:58 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:58 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:58 +0000
Files and hashes:         1: ycJCxtHAS-As3EJ_zwTtWJshwrw.crl (hash: I6IBcdBn42BPB+DsquFCB/3SyUv6dfSty4UMzkLr8/o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:e4:06:0e:78:08:64:03:0f:c9:60:88:51:c4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9c242c6d1c04be02cdc427fcf04ed589b21c2bc
        Validity
            Not Before: Nov 23 07:00:58 2024 GMT
            Not After : Nov 24 07:00:58 2024 GMT
        Subject: CN=b4785330b0b283e4e052c65cc38cbf902bd8838d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c6:00:ca:cd:67:f4:24:a1:e8:86:83:33:3b:
                    ad:fe:6c:98:84:b5:0f:83:e3:12:30:2b:a1:c2:72:
                    8e:47:96:2a:2c:7f:0f:7c:d0:51:78:2b:69:0e:55:
                    53:fe:2c:9a:88:e1:bb:28:d2:b0:02:e1:fe:af:74:
                    12:24:00:79:81:7d:06:4a:98:39:80:56:b8:61:f6:
                    ed:e8:a3:2a:97:af:b6:fe:80:88:cf:07:a4:b5:81:
                    55:de:0e:80:bc:81:a9:16:29:31:5b:8a:8a:27:79:
                    22:29:c0:76:9f:26:04:a5:fe:d5:18:02:c7:3b:42:
                    04:fb:21:09:32:c6:ec:b6:f2:15:0d:fa:ca:df:b5:
                    3f:43:4d:54:0e:1f:92:34:57:b3:a2:b4:47:58:85:
                    b7:1b:d7:95:00:70:bc:a3:8a:9e:80:a2:0f:cc:a9:
                    e0:a0:68:f3:d4:a7:96:3e:4d:83:da:20:40:49:88:
                    a4:41:ca:72:3a:21:98:2f:87:9d:0f:39:9b:7e:a1:
                    7f:c1:d4:18:6b:21:76:73:5d:d1:6b:f5:4f:f7:7b:
                    43:df:40:95:86:f8:d9:54:2a:17:b7:ce:fd:51:f9:
                    fc:b6:7c:91:7d:ee:2f:70:af:86:dd:8f:31:56:72:
                    0e:8f:a8:22:4b:c9:03:81:23:ae:c9:36:90:08:14:
                    e6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:78:53:30:B0:B2:83:E4:E0:52:C6:5C:C3:8C:BF:90:2B:D8:83:8D
            X509v3 Authority Key Identifier:
                keyid:C9:C2:42:C6:D1:C0:4B:E0:2C:DC:42:7F:CF:04:ED:58:9B:21:C2:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycJCxtHAS-As3EJ_zwTtWJshwrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54bb2f-0af4-472b-82d5-9495f2753318/1/ycJCxtHAS-As3EJ_zwTtWJshwrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:9e:30:8c:f0:5b:57:76:b4:b4:c7:db:20:a3:97:e5:29:be:
         11:c0:ae:15:43:81:6a:92:85:98:57:4c:94:e9:03:2c:f6:11:
         3e:f9:19:65:f2:d6:1c:c2:bf:5f:83:88:93:32:16:09:19:8f:
         82:3e:eb:d3:43:19:3f:85:97:5e:08:cf:e1:4f:0b:8f:93:c6:
         b3:9e:e3:ac:49:8a:fd:0c:b2:15:21:2f:56:57:8c:2a:3a:c7:
         69:02:c3:bf:4b:81:4c:cd:51:4d:a1:c7:6f:48:d8:72:a7:a7:
         c4:ec:7f:33:ea:c8:76:bf:af:da:2a:cd:9d:e0:2a:26:69:86:
         6d:f7:20:a7:1f:b4:a0:ae:7b:f0:93:6c:99:b6:17:33:48:14:
         f0:70:ee:05:52:b1:7e:71:2d:f1:7f:c9:0e:bb:11:8e:17:39:
         2f:e6:c6:51:03:6c:78:3d:43:f4:92:fd:a8:ec:85:e4:cb:46:
         05:ae:c8:54:09:59:bf:e0:47:26:bb:a8:50:8d:88:70:9f:a7:
         4a:76:08:5d:31:34:47:af:6c:51:02:42:d5:b6:8f:a1:64:0b:
         be:42:1b:5d:d1:ea:ce:14:13:fe:6a:ae:01:86:36:43:4b:8f:
         16:6d:eb:e9:b2:0c:c2:b7:26:c2:3e:1b:37:be:29:0c:e4:68:
         ba:ac:b7:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0uQGDngIZAMPyWCIUcR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YzI0MmM2ZDFjMDRiZTAyY2RjNDI3ZmNmMDRlZDU4OWIy
MWMyYmMwHhcNMjQxMTIzMDcwMDU4WhcNMjQxMTI0MDcwMDU4WjAzMTEwLwYDVQQD
EyhiNDc4NTMzMGIwYjI4M2U0ZTA1MmM2NWNjMzhjYmY5MDJiZDg4MzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38YAys1n9CSh6IaDMzut/myYhLUP
g+MSMCuhwnKOR5YqLH8PfNBReCtpDlVT/iyaiOG7KNKwAuH+r3QSJAB5gX0GSpg5
gFa4Yfbt6KMql6+2/oCIzwektYFV3g6AvIGpFikxW4qKJ3kiKcB2nyYEpf7VGALH
O0IE+yEJMsbstvIVDfrK37U/Q01UDh+SNFezorRHWIW3G9eVAHC8o4qegKIPzKng
oGjz1KeWPk2D2iBASYikQcpyOiGYL4edDzmbfqF/wdQYayF2c13Ra/VP93tD30CV
hvjZVCoXt879Ufn8tnyRfe4vcK+G3Y8xVnIOj6giS8kDgSOuyTaQCBTm5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLR4UzCwsoPk4FLGXMOMv5Ar2IONMB8GA1UdIwQY
MBaAFMnCQsbRwEvgLNxCf88E7VibIcK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUt
OTQ5NWYyNzUzMzE4LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81NGJiMmYtMGFmNC00NzJiLTgyZDUtOTQ5NWYyNzUzMzE4
LzEveWNKQ3h0SEFTLUFzM0VKX3p3VHRXSnNod3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZ4wjPBb
V3a0tMfbIKOX5Sm+EcCuFUOBapKFmFdMlOkDLPYRPvkZZfLWHMK/X4OIkzIWCRmP
gj7r00MZP4WXXgjP4U8Lj5PGs57jrEmK/QyyFSEvVleMKjrHaQLDv0uBTM1RTaHH
b0jYcqenxOx/M+rIdr+v2irNneAqJmmGbfcgpx+0oK578JNsmbYXM0gU8HDuBVKx
fnEt8X/JDrsRjhc5L+bGUQNseD1D9JL9qOyF5MtGBa7IVAlZv+BHJruoUI2IcJ+n
SnYIXTE0R69sUQJC1baPoWQLvkIbXdHqzhQT/mquAYY2Q0uPFm3r6bIMwrcmwj4b
N74pDORouqy3aQ==
-----END CERTIFICATE-----