Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
File:                     GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft (raw, json)
Hash identifier:          TGZnGKxSixdzvAj//qsfGNhvCrybe13OTrrpL2LyYfA=
Subject key identifier:   63:DE:C0:6E:47:97:43:86:8D:56:87:7F:AD:82:1F:69:56:1A:A4:AE
Authority key identifier: 19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62
Certificate issuer:       /CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
Certificate serial:       01940758BA4D45B8A370872397F855F5DF05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
Manifest number:          021D
Signing time:             Fri 27 Dec 2024 09:00:42 +0000
Manifest this update:     Fri 27 Dec 2024 09:00:42 +0000
Manifest next update:     Sat 28 Dec 2024 09:00:42 +0000
Files and hashes:         1: GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl (hash: SMysFXql6T4UcgvVIfsnOs5QlU+D3+IT0lyTJYuTTHA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 09:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:58:ba:4d:45:b8:a3:70:87:23:97:f8:55:f5:df:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19f0cad7fc58bc84258ddc1533f4a0df2489ec62
        Validity
            Not Before: Dec 27 09:00:42 2024 GMT
            Not After : Dec 28 09:00:42 2024 GMT
        Subject: CN=63dec06e479743868d56877fad821f69561aa4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:48:70:5b:69:92:a4:ce:32:ac:94:ab:f0:a3:
                    9c:c2:71:e2:95:01:55:84:58:55:c8:2f:af:f6:c3:
                    f8:b2:f9:fe:cf:26:0a:84:4a:2d:0c:ee:d0:a7:27:
                    2d:65:d7:48:18:29:59:fe:06:f5:a5:de:f8:3e:67:
                    97:8b:44:65:21:c2:b4:3f:b7:41:c3:c8:de:ba:ef:
                    55:fe:7c:1e:56:76:5a:d5:64:42:c0:44:d9:2f:23:
                    ea:68:13:2f:00:78:80:3e:3f:15:1f:70:50:1d:24:
                    41:45:82:65:8a:c2:cd:f2:09:48:45:fe:7e:6e:cb:
                    96:1a:19:f9:fb:7d:9b:f3:9c:93:a1:73:34:3b:fd:
                    85:a0:3f:fe:aa:58:41:1d:26:6d:53:39:14:d9:43:
                    a2:93:30:cd:b2:58:91:64:76:19:dd:09:c5:d0:11:
                    98:38:63:f4:d0:ff:dd:49:be:2d:50:19:0f:b2:06:
                    67:3e:4e:00:25:16:47:5a:68:92:79:d2:9a:7a:b7:
                    d0:d1:2d:d9:1d:28:02:5b:ca:8f:e5:89:b8:29:65:
                    6e:a4:95:80:fb:06:e9:8c:00:bc:63:7a:f2:aa:86:
                    88:d5:92:63:19:ec:67:a9:bf:2e:7e:43:df:29:27:
                    2d:49:74:45:03:ad:d0:0c:e8:29:7e:24:cf:92:89:
                    1a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DE:C0:6E:47:97:43:86:8D:56:87:7F:AD:82:1F:69:56:1A:A4:AE
            X509v3 Authority Key Identifier:
                keyid:19:F0:CA:D7:FC:58:BC:84:25:8D:DC:15:33:F4:A0:DF:24:89:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4e0624-c2df-41a9-ac87-57a42df0c867/1/GfDK1_xYvIQljdwVM_Sg3ySJ7GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2b:a3:3b:a4:4c:66:df:7b:b3:ab:53:18:26:92:14:b5:08:
         55:f9:f2:0c:72:cc:df:9c:eb:c7:18:d6:e5:25:68:57:9d:ec:
         76:d3:f9:1d:fe:17:7c:03:f2:bf:ac:db:6b:8d:9e:7c:6a:72:
         3c:a7:94:a5:3e:85:f3:e3:0d:f4:77:6b:2f:ae:0f:fa:e8:b3:
         6e:90:6e:87:e0:25:f4:d0:a9:3c:86:e0:59:b5:fa:28:da:88:
         84:ee:11:dc:17:92:8c:f9:19:17:6d:73:b6:0b:57:8c:10:34:
         5f:af:4d:81:15:ce:42:07:e9:2c:cb:1e:ca:ba:74:8a:b9:45:
         6f:4f:d0:39:b1:9f:09:04:54:a6:9a:4d:35:af:a1:cf:45:7e:
         5c:b7:13:20:b0:c0:3a:e1:96:af:48:44:e7:04:cb:40:90:84:
         38:9d:1b:47:18:e6:23:88:d5:78:c9:57:46:95:ee:9e:1d:4a:
         79:97:84:54:ae:47:13:fe:ca:ef:fe:1a:15:5e:44:2c:24:8a:
         7d:d7:00:50:a0:46:c7:17:d0:af:b8:5d:bc:23:70:63:b7:3e:
         6c:e2:e3:09:b8:03:ed:db:f1:79:9e:fa:01:15:73:ca:c8:81:
         1e:13:a4:cd:c1:94:3d:16:3a:11:cb:f7:dc:7b:37:4d:a5:58:
         9c:9f:04:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQHWLpNRbijcIcjl/hV9d8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZjBjYWQ3ZmM1OGJjODQyNThkZGMxNTMzZjRhMGRmMjQ4
OWVjNjIwHhcNMjQxMjI3MDkwMDQyWhcNMjQxMjI4MDkwMDQyWjAzMTEwLwYDVQQD
Eyg2M2RlYzA2ZTQ3OTc0Mzg2OGQ1Njg3N2ZhZDgyMWY2OTU2MWFhNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEhwW2mSpM4yrJSr8KOcwnHilQFV
hFhVyC+v9sP4svn+zyYKhEotDO7QpyctZddIGClZ/gb1pd74PmeXi0RlIcK0P7dB
w8jeuu9V/nweVnZa1WRCwETZLyPqaBMvAHiAPj8VH3BQHSRBRYJlisLN8glIRf5+
bsuWGhn5+32b85yToXM0O/2FoD/+qlhBHSZtUzkU2UOikzDNsliRZHYZ3QnF0BGY
OGP00P/dSb4tUBkPsgZnPk4AJRZHWmiSedKaerfQ0S3ZHSgCW8qP5Ym4KWVupJWA
+wbpjAC8Y3ryqoaI1ZJjGexnqb8ufkPfKSctSXRFA63QDOgpfiTPkoka0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPewG5Hl0OGjVaHf62CH2lWGqSuMB8GA1UdIwQY
MBaAFBnwytf8WLyEJY3cFTP0oN8kiexiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODct
NTdhNDJkZjBjODY3LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi80ZTA2MjQtYzJkZi00MWE5LWFjODctNTdhNDJkZjBjODY3
LzEvR2ZESzFfeFl2SVFsamR3Vk1fU2czeVNKN0dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCujO6RM
Zt97s6tTGCaSFLUIVfnyDHLM35zrxxjW5SVoV53sdtP5Hf4XfAPyv6zba42efGpy
PKeUpT6F8+MN9HdrL64P+uizbpBuh+Al9NCpPIbgWbX6KNqIhO4R3BeSjPkZF21z
tgtXjBA0X69NgRXOQgfpLMseyrp0irlFb0/QObGfCQRUpppNNa+hz0V+XLcTILDA
OuGWr0hE5wTLQJCEOJ0bRxjmI4jVeMlXRpXunh1KeZeEVK5HE/7K7/4aFV5ELCSK
fdcAUKBGxxfQr7hdvCNwY7c+bOLjCbgD7dvxeZ76ARVzysiBHhOkzcGUPRY6Ecv3
3Hs3TaVYnJ8EeQ==
-----END CERTIFICATE-----