Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File:                     pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier:          CImJctV5jGoTVfHaNmtJJ5vIX14/v554bFbaMJ/OdMQ=
Subject key identifier:   41:74:1B:8B:7F:08:56:FB:7C:04:38:E5:9E:F3:39:CE:71:9E:FE:CA
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer:       /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial:       019369D9B54FBA6AD8EE2213D7794BB246AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 19:01:35 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:35 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:35 +0000
Files and hashes:         1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: uA56LW94+RC0sN2dUIR7NTN8SlQdMTD1s4yl1YUxrCo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:b5:4f:ba:6a:d8:ee:22:13:d7:79:4b:b2:46:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
        Validity
            Not Before: Nov 26 19:01:35 2024 GMT
            Not After : Nov 27 19:01:35 2024 GMT
        Subject: CN=41741b8b7f0856fb7c0438e59ef339ce719efeca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:86:00:33:cb:68:8f:d7:6a:ce:41:86:88:0a:
                    c3:6a:3f:bc:39:6e:42:3e:9a:9e:21:c2:61:f4:e5:
                    be:11:bf:b3:fc:5e:d4:bc:cb:60:35:dc:f8:43:f2:
                    23:ec:99:59:ba:fe:67:a8:6d:f6:0a:59:c6:73:58:
                    de:f9:d2:8a:87:6a:96:27:8c:69:45:70:21:82:ae:
                    0c:f4:1c:52:06:ab:f4:7f:16:02:a1:4d:79:67:43:
                    9a:64:e1:78:63:3a:84:1b:5c:79:a4:6e:b3:dd:14:
                    5a:16:ce:20:fd:9e:92:cc:a3:bc:0b:19:6c:bc:df:
                    7a:8a:5f:09:92:0e:d3:55:89:28:32:59:ac:45:9f:
                    ed:db:6d:54:48:85:d6:af:70:40:7a:a1:12:b3:9a:
                    ec:5c:0e:cb:7d:77:5d:63:bd:7d:0d:38:5f:fd:5b:
                    00:16:51:b6:dd:da:8b:7e:e6:f9:84:8e:22:d2:9a:
                    3d:ee:0b:20:c5:69:7e:18:27:2b:2e:18:23:52:9d:
                    75:10:3d:1d:95:d9:75:b4:00:1e:ab:02:7e:85:f4:
                    95:80:03:0b:97:87:04:3b:56:1e:ad:c9:da:c9:77:
                    0e:d3:30:9f:c3:4a:3f:7c:57:62:ae:48:38:d8:c7:
                    97:0d:49:a7:19:5f:cf:d3:6b:23:a6:1b:8c:b7:1e:
                    cd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:74:1B:8B:7F:08:56:FB:7C:04:38:E5:9E:F3:39:CE:71:9E:FE:CA
            X509v3 Authority Key Identifier:
                keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3c:38:00:15:4e:2c:cd:34:98:4d:f7:a7:65:9f:8c:f6:33:
         80:91:54:25:3b:a3:19:4f:7a:09:62:5f:8d:da:22:1c:aa:e4:
         3a:23:20:1e:73:a1:f3:24:e4:68:a8:ef:a0:78:9b:8f:f3:68:
         e2:db:d8:a5:d1:b6:88:8a:0c:b0:01:0c:9b:42:df:a2:fe:da:
         82:8e:ae:53:12:9a:70:fd:9a:bb:e1:c2:f9:97:5f:81:e7:5b:
         04:2d:ef:aa:bf:39:30:83:aa:6a:48:cb:d3:77:47:2f:4a:bb:
         35:67:69:13:99:c6:f0:d3:01:f9:76:05:1d:d4:1f:35:a1:b6:
         4b:24:f3:b4:8a:1e:b8:fd:6c:40:79:98:aa:85:08:af:35:dd:
         a0:fe:ab:61:d1:12:b3:e0:77:d3:df:5e:61:bc:83:e5:67:fe:
         00:06:90:c3:26:65:e9:a2:f7:15:f5:44:eb:0d:77:e4:b2:42:
         38:2f:44:4f:29:7b:aa:2c:8a:5c:68:90:30:85:29:71:4a:f2:
         5c:bd:61:fd:76:ec:28:91:7e:21:2c:f0:15:e7:f5:d0:dc:3b:
         ec:c4:84:a6:b0:ea:03:54:7e:dc:9c:14:04:a7:f8:43:2a:8b:
         67:e4:5b:35:ab:d3:a9:10:49:f2:bc:72:a4:05:8c:26:fd:e6:
         78:a0:b0:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2bVPumrY7iIT13lLskavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZWM3ZmZkNjAzZGExNDg5MjI4MGIxODM3YzNhMDM3NzYz
NTJkNTQwHhcNMjQxMTI2MTkwMTM1WhcNMjQxMTI3MTkwMTM1WjAzMTEwLwYDVQQD
Eyg0MTc0MWI4YjdmMDg1NmZiN2MwNDM4ZTU5ZWYzMzljZTcxOWVmZWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIYAM8toj9dqzkGGiArDaj+8OW5C
PpqeIcJh9OW+Eb+z/F7UvMtgNdz4Q/Ij7JlZuv5nqG32ClnGc1je+dKKh2qWJ4xp
RXAhgq4M9BxSBqv0fxYCoU15Z0OaZOF4YzqEG1x5pG6z3RRaFs4g/Z6SzKO8Cxls
vN96il8Jkg7TVYkoMlmsRZ/t221USIXWr3BAeqESs5rsXA7LfXddY719DThf/VsA
FlG23dqLfub5hI4i0po97gsgxWl+GCcrLhgjUp11ED0dldl1tAAeqwJ+hfSVgAML
l4cEO1YercnayXcO0zCfw0o/fFdirkg42MeXDUmnGV/P02sjphuMtx7NrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEF0G4t/CFb7fAQ45Z7zOc5xnv7KMB8GA1UdIwQY
MBaAFKXsf/1gPaFIkigLGDfDoDd2NS1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUt
N2RiMjBlNmZjMTFkLzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUtN2RiMjBlNmZjMTFk
LzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDw4ABVO
LM00mE33p2WfjPYzgJFUJTujGU96CWJfjdoiHKrkOiMgHnOh8yTkaKjvoHibj/No
4tvYpdG2iIoMsAEMm0Lfov7ago6uUxKacP2au+HC+ZdfgedbBC3vqr85MIOqakjL
03dHL0q7NWdpE5nG8NMB+XYFHdQfNaG2SyTztIoeuP1sQHmYqoUIrzXdoP6rYdES
s+B3099eYbyD5Wf+AAaQwyZl6aL3FfVE6w135LJCOC9ETyl7qiyKXGiQMIUpcUry
XL1h/XbsKJF+ISzwFef10Nw77MSEprDqA1R+3JwUBKf4QyqLZ+RbNavTqRBJ8rxy
pAWMJv3meKCwVg==
-----END CERTIFICATE-----