Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/05d76f-dedc-4813-8fbc-bf8fb7b39bda/1/wG58T5yeENz1WfUItDiRV1zmvLU.mft
File:                     wG58T5yeENz1WfUItDiRV1zmvLU.mft (raw, json)
Hash identifier:          B5ZbWgYsltvl7dpktDbOIqngp3GK8VV5i9c595lXMF4=
Subject key identifier:   8A:04:D6:47:09:94:D1:46:FB:75:03:09:50:39:C2:77:1E:F5:CD:0E
Authority key identifier: C0:6E:7C:4F:9C:9E:10:DC:F5:59:F5:08:B4:38:91:57:5C:E6:BC:B5
Certificate issuer:       /CN=c06e7c4f9c9e10dcf559f508b43891575ce6bcb5
Certificate serial:       01936A467289D212AE19E044D6A3302C266C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wG58T5yeENz1WfUItDiRV1zmvLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/05d76f-dedc-4813-8fbc-bf8fb7b39bda/1/wG58T5yeENz1WfUItDiRV1zmvLU.mft
Manifest number:          0F7F
Signing time:             Tue 26 Nov 2024 21:00:21 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:21 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:21 +0000
Files and hashes:         1: wG58T5yeENz1WfUItDiRV1zmvLU.crl (hash: SIzs+DQ00OAJdXWsDZPu2uNs2W5qtGwqhERd3gDgPFM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/05d76f-dedc-4813-8fbc-bf8fb7b39bda/1/wG58T5yeENz1WfUItDiRV1zmvLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/05d76f-dedc-4813-8fbc-bf8fb7b39bda/1/wG58T5yeENz1WfUItDiRV1zmvLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wG58T5yeENz1WfUItDiRV1zmvLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:72:89:d2:12:ae:19:e0:44:d6:a3:30:2c:26:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c06e7c4f9c9e10dcf559f508b43891575ce6bcb5
        Validity
            Not Before: Nov 26 21:00:21 2024 GMT
            Not After : Nov 27 21:00:21 2024 GMT
        Subject: CN=8a04d6470994d146fb7503095039c2771ef5cd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:3d:bb:29:a1:b6:9b:c9:50:5b:2c:34:10:
                    82:9d:5f:19:03:6c:5f:57:84:fa:38:c9:1b:a0:52:
                    27:a1:60:64:00:84:ff:18:04:db:69:aa:c5:d1:0e:
                    5a:f9:96:d9:3b:02:f5:97:02:f7:cf:a5:6d:ed:8f:
                    12:52:e1:09:0b:eb:ec:a5:34:42:97:99:77:0a:7e:
                    10:d0:fc:f6:36:bb:93:5b:49:9f:81:4e:09:53:28:
                    32:81:aa:8b:23:46:f9:6f:ab:a6:b1:3b:60:73:f5:
                    3f:26:81:ea:51:ff:e5:da:c6:29:7a:f7:1e:a7:97:
                    b9:e9:ab:75:a9:c9:a9:ac:7d:7e:9c:8a:c9:10:a9:
                    d4:2d:13:f2:c9:77:4b:04:71:ce:f7:3f:ee:cc:dc:
                    eb:f6:44:63:12:db:42:ad:74:13:11:43:52:39:6b:
                    92:56:a3:df:f4:ac:11:79:93:b8:b8:0f:4c:74:b1:
                    10:76:4d:6e:55:ae:dc:94:1c:76:13:e4:0e:45:74:
                    db:55:9b:f7:57:59:63:21:76:ca:00:e4:aa:1f:ac:
                    af:62:28:15:1b:84:11:3b:b2:fc:4e:dc:23:c1:3c:
                    e3:0d:c9:b0:d3:61:fc:e3:55:0b:76:aa:f9:b2:25:
                    d8:f8:c2:79:ed:ef:a9:65:1b:dd:49:fc:04:2f:c7:
                    57:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:04:D6:47:09:94:D1:46:FB:75:03:09:50:39:C2:77:1E:F5:CD:0E
            X509v3 Authority Key Identifier:
                keyid:C0:6E:7C:4F:9C:9E:10:DC:F5:59:F5:08:B4:38:91:57:5C:E6:BC:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wG58T5yeENz1WfUItDiRV1zmvLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/05d76f-dedc-4813-8fbc-bf8fb7b39bda/1/wG58T5yeENz1WfUItDiRV1zmvLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/05d76f-dedc-4813-8fbc-bf8fb7b39bda/1/wG58T5yeENz1WfUItDiRV1zmvLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:d0:05:59:5e:06:27:46:0c:68:02:c3:2c:25:2b:3e:89:
         02:ad:48:66:b2:2e:e0:ea:a3:15:75:e7:20:96:14:c7:42:6d:
         8e:75:86:14:00:01:78:17:a1:04:e2:f8:bd:a1:0c:e0:29:bc:
         1f:bb:02:b6:56:63:78:7a:a7:58:c1:66:05:73:97:df:8a:e4:
         86:7f:0b:9d:6a:86:46:24:d2:9a:af:d7:5a:dd:a5:39:3f:ec:
         19:ed:60:f1:49:74:a4:46:b1:91:52:cc:6e:a8:d5:ab:f8:59:
         d4:3e:ed:51:52:a7:b2:a2:f8:be:1b:92:1a:f2:b9:90:08:25:
         e9:db:63:24:b9:5e:2d:93:08:5c:2a:76:c3:5d:95:73:ee:29:
         6d:32:80:02:a9:7c:34:8f:92:33:58:32:81:db:de:b7:a7:0a:
         e4:44:23:e9:75:77:1f:29:6a:e3:d9:d1:bf:5b:1e:93:62:27:
         4b:8a:7e:41:27:ad:05:e1:8b:cc:b8:e3:7d:ae:0b:2d:a2:4b:
         20:97:03:cc:fb:f1:64:ef:39:1b:c3:8a:e5:c6:b7:9b:b9:f6:
         40:03:b7:0a:e1:8e:10:8e:e7:ca:c7:b0:09:24:dd:26:35:06:
         1a:87:e1:27:27:e8:49:14:5c:c3:8e:fc:1e:93:42:43:91:7b:
         2b:2d:84:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRnKJ0hKuGeBE1qMwLCZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNmU3YzRmOWM5ZTEwZGNmNTU5ZjUwOGI0Mzg5MTU3NWNl
NmJjYjUwHhcNMjQxMTI2MjEwMDIxWhcNMjQxMTI3MjEwMDIxWjAzMTEwLwYDVQQD
Eyg4YTA0ZDY0NzA5OTRkMTQ2ZmI3NTAzMDk1MDM5YzI3NzFlZjVjZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3E9uymhtpvJUFssNBCCnV8ZA2xf
V4T6OMkboFInoWBkAIT/GATbaarF0Q5a+ZbZOwL1lwL3z6Vt7Y8SUuEJC+vspTRC
l5l3Cn4Q0Pz2NruTW0mfgU4JUygygaqLI0b5b6umsTtgc/U/JoHqUf/l2sYpevce
p5e56at1qcmprH1+nIrJEKnULRPyyXdLBHHO9z/uzNzr9kRjEttCrXQTEUNSOWuS
VqPf9KwReZO4uA9MdLEQdk1uVa7clBx2E+QORXTbVZv3V1ljIXbKAOSqH6yvYigV
G4QRO7L8TtwjwTzjDcmw02H841ULdqr5siXY+MJ57e+pZRvdSfwEL8dXRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoE1kcJlNFG+3UDCVA5wnce9c0OMB8GA1UdIwQY
MBaAFMBufE+cnhDc9Vn1CLQ4kVdc5ry1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0c1OFQ1eWVFTnoxV2ZVSXREaVJWMXptdkxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8wNWQ3NmYtZGVkYy00ODEzLThmYmMt
YmY4ZmI3YjM5YmRhLzEvd0c1OFQ1eWVFTnoxV2ZVSXREaVJWMXptdkxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8wNWQ3NmYtZGVkYy00ODEzLThmYmMtYmY4ZmI3YjM5YmRh
LzEvd0c1OFQ1eWVFTnoxV2ZVSXREaVJWMXptdkxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE7QBVle
BidGDGgCwywlKz6JAq1IZrIu4OqjFXXnIJYUx0JtjnWGFAABeBehBOL4vaEM4Cm8
H7sCtlZjeHqnWMFmBXOX34rkhn8LnWqGRiTSmq/XWt2lOT/sGe1g8Ul0pEaxkVLM
bqjVq/hZ1D7tUVKnsqL4vhuSGvK5kAgl6dtjJLleLZMIXCp2w12Vc+4pbTKAAql8
NI+SM1gygdvet6cK5EQj6XV3Hylq49nRv1sek2InS4p+QSetBeGLzLjjfa4LLaJL
IJcDzPvxZO85G8OK5ca3m7n2QAO3CuGOEI7nysewCSTdJjUGGofhJyfoSRRcw478
HpNCQ5F7Ky2EDQ==
-----END CERTIFICATE-----