Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
File:                     gRsX62FjiTMhtH5K9_pWsBxfN7U.mft (raw, json)
Hash identifier:          vvGeHkfcLcHdOnW5i6kfkaqw70uct05TOYgsr8AEOGA=
Subject key identifier:   20:13:52:E7:D5:E2:10:B2:F7:89:C6:AC:9F:AD:6B:3D:0B:AA:20:15
Authority key identifier: 81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5
Certificate issuer:       /CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
Certificate serial:       01935764F39004F4B80E21C66195C2F08A06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 05:00:53 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:53 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:53 +0000
Files and hashes:         1: gRsX62FjiTMhtH5K9_pWsBxfN7U.crl (hash: ygegLr0pZGEaRCyRvvJotQrZZ0TJH+ceZqe6BQ9g6uY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:f3:90:04:f4:b8:0e:21:c6:61:95:c2:f0:8a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=811b17eb6163893321b47e4af7fa56b01c5f37b5
        Validity
            Not Before: Nov 23 05:00:53 2024 GMT
            Not After : Nov 24 05:00:53 2024 GMT
        Subject: CN=201352e7d5e210b2f789c6ac9fad6b3d0baa2015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:9a:bc:76:d9:75:41:71:56:2e:ea:26:c3:
                    57:e8:72:14:26:40:68:41:65:55:b8:77:65:f8:c2:
                    80:ed:3d:9b:ec:ed:38:a4:0d:89:82:fe:44:28:11:
                    c1:dc:85:ee:a7:17:bf:6b:b1:da:d3:4c:9a:df:1b:
                    12:65:4c:25:79:d6:bd:6e:70:38:5a:39:88:44:bb:
                    5b:f4:76:fe:a8:94:7d:c4:34:7c:ff:8d:b6:28:57:
                    d0:34:54:1b:fd:bc:f5:c0:b9:92:bf:86:21:b2:e2:
                    4f:35:e6:c6:03:dd:6b:7e:03:8d:10:6e:5b:49:67:
                    bc:a7:99:50:8b:ff:69:1f:e2:4d:c9:1f:ab:0f:69:
                    24:d3:83:79:1b:8a:d3:c1:00:6f:c4:00:1c:ba:14:
                    89:6c:d1:52:41:1d:da:b4:7e:b9:66:75:4d:44:9e:
                    a3:73:5e:ff:a2:da:9c:d6:95:01:f2:aa:b3:77:17:
                    4b:bf:0d:60:14:2a:72:db:c0:fe:ef:8f:4d:e5:50:
                    2b:ab:8f:6b:39:25:ff:19:84:48:f6:6c:58:9c:39:
                    ae:50:ae:82:03:88:c5:0f:54:1d:2e:83:23:4a:47:
                    88:04:31:72:87:9a:b9:9e:66:e6:c4:b7:a9:95:a0:
                    dc:f6:a9:8f:0c:75:33:c1:dd:79:e2:c3:9b:20:f4:
                    1a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:52:E7:D5:E2:10:B2:F7:89:C6:AC:9F:AD:6B:3D:0B:AA:20:15
            X509v3 Authority Key Identifier:
                keyid:81:1B:17:EB:61:63:89:33:21:B4:7E:4A:F7:FA:56:B0:1C:5F:37:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRsX62FjiTMhtH5K9_pWsBxfN7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e1c57-f400-4613-aa59-d4a7ba660cee/1/gRsX62FjiTMhtH5K9_pWsBxfN7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:9d:65:51:a9:32:ad:8e:a3:0f:9c:04:c2:d2:d5:32:bf:9b:
         25:d1:5a:2e:e8:09:e0:e1:24:ac:15:c5:a8:1b:32:bd:c6:51:
         23:b1:50:4b:aa:01:55:c8:93:14:b9:9f:a8:1a:73:a6:8a:b7:
         ca:75:0c:bb:46:1d:15:60:54:ab:d6:da:fa:2e:7c:74:4d:8b:
         32:56:7d:39:d2:8a:d5:c7:b3:c6:2a:f4:77:c4:a0:ac:97:25:
         e6:fd:98:e2:07:42:5d:9e:6f:2c:e8:3f:49:fc:56:9b:02:8a:
         f9:aa:07:3f:d2:c8:59:52:b5:c1:a8:1f:76:9e:a5:6f:77:f8:
         2a:9b:56:17:f6:e8:2f:b0:a1:23:e6:7f:f8:ea:3a:e4:a3:f8:
         c3:4c:56:7f:a8:e9:a0:b1:aa:0d:25:b4:39:93:b4:f4:0f:a6:
         1e:cc:14:1d:01:dc:64:c9:75:1b:63:3d:2b:b8:a1:f3:5f:f8:
         fe:7b:56:ce:79:75:3b:b3:b4:c8:db:76:e7:d0:51:5b:8e:50:
         a8:70:9d:5d:c5:68:44:17:a5:9d:fb:69:bb:03:a2:82:e3:44:
         8c:53:65:b8:93:45:4d:32:46:db:96:a7:40:53:e2:e8:40:a4:
         cf:1a:1c:f7:4e:47:ee:22:84:b9:a6:08:36:4b:a0:69:46:30:
         53:bf:38:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZPOQBPS4DiHGYZXC8IoGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMWIxN2ViNjE2Mzg5MzMyMWI0N2U0YWY3ZmE1NmIwMWM1
ZjM3YjUwHhcNMjQxMTIzMDUwMDUzWhcNMjQxMTI0MDUwMDUzWjAzMTEwLwYDVQQD
EygyMDEzNTJlN2Q1ZTIxMGIyZjc4OWM2YWM5ZmFkNmIzZDBiYWEyMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl+avHbZdUFxVi7qJsNX6HIUJkBo
QWVVuHdl+MKA7T2b7O04pA2Jgv5EKBHB3IXupxe/a7Ha00ya3xsSZUwleda9bnA4
WjmIRLtb9Hb+qJR9xDR8/422KFfQNFQb/bz1wLmSv4YhsuJPNebGA91rfgONEG5b
SWe8p5lQi/9pH+JNyR+rD2kk04N5G4rTwQBvxAAcuhSJbNFSQR3atH65ZnVNRJ6j
c17/otqc1pUB8qqzdxdLvw1gFCpy28D+749N5VArq49rOSX/GYRI9mxYnDmuUK6C
A4jFD1QdLoMjSkeIBDFyh5q5nmbmxLeplaDc9qmPDHUzwd154sObIPQa4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCATUufV4hCy94nGrJ+taz0LqiAVMB8GA1UdIwQY
MBaAFIEbF+thY4kzIbR+Svf6VrAcXze1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTFjNTctZjQwMC00NjEzLWFhNTkt
ZDRhN2JhNjYwY2VlLzEvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTFjNTctZjQwMC00NjEzLWFhNTktZDRhN2JhNjYwY2Vl
LzEvZ1JzWDYyRmppVE1odEg1SzlfcFdzQnhmTjdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW51lUaky
rY6jD5wEwtLVMr+bJdFaLugJ4OEkrBXFqBsyvcZRI7FQS6oBVciTFLmfqBpzpoq3
ynUMu0YdFWBUq9ba+i58dE2LMlZ9OdKK1cezxir0d8SgrJcl5v2Y4gdCXZ5vLOg/
SfxWmwKK+aoHP9LIWVK1wagfdp6lb3f4KptWF/boL7ChI+Z/+Oo65KP4w0xWf6jp
oLGqDSW0OZO09A+mHswUHQHcZMl1G2M9K7ih81/4/ntWznl1O7O0yNt259BRW45Q
qHCdXcVoRBelnftpuwOiguNEjFNluJNFTTJG25anQFPi6ECkzxoc905H7iKEuaYI
NkugaUYwU784Mg==
-----END CERTIFICATE-----