Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/55aadb-f455-4e8d-bc13-388ee81929fb/1/j_B9YnZbSz5iYh4OYYHt-QKm-o4.mft
File:                     j_B9YnZbSz5iYh4OYYHt-QKm-o4.mft (raw, json)
Hash identifier:          KjKkQEv5h76X7Xe4ogVB69+2ODxt6XFis3EwqDrSxJI=
Subject key identifier:   F1:80:3D:A7:C1:DF:0D:28:7C:1C:A4:96:1C:C5:31:0B:29:02:AB:CF
Authority key identifier: 8F:F0:7D:62:76:5B:4B:3E:62:62:1E:0E:61:81:ED:F9:02:A6:FA:8E
Certificate issuer:       /CN=8ff07d62765b4b3e62621e0e6181edf902a6fa8e
Certificate serial:       018F8823EB32E6DD565B5A131781A58D2A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j_B9YnZbSz5iYh4OYYHt-QKm-o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/55aadb-f455-4e8d-bc13-388ee81929fb/1/j_B9YnZbSz5iYh4OYYHt-QKm-o4.mft
Manifest number:          03D9
Signing time:             Fri 17 May 2024 20:00:06 +0000
Manifest this update:     Fri 17 May 2024 20:00:06 +0000
Manifest next update:     Sat 18 May 2024 20:00:06 +0000
Files and hashes:         1: j_B9YnZbSz5iYh4OYYHt-QKm-o4.crl (hash: KicMy62/3QUNJraXXg7e35mM7rfvKGVOulyJavBdkoU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/55aadb-f455-4e8d-bc13-388ee81929fb/1/j_B9YnZbSz5iYh4OYYHt-QKm-o4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/55aadb-f455-4e8d-bc13-388ee81929fb/1/j_B9YnZbSz5iYh4OYYHt-QKm-o4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j_B9YnZbSz5iYh4OYYHt-QKm-o4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:eb:32:e6:dd:56:5b:5a:13:17:81:a5:8d:2a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ff07d62765b4b3e62621e0e6181edf902a6fa8e
        Validity
            Not Before: May 17 20:00:06 2024 GMT
            Not After : May 18 20:00:06 2024 GMT
        Subject: CN=f1803da7c1df0d287c1ca4961cc5310b2902abcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:42:06:a2:69:ed:69:c2:81:ba:ad:f9:1d:1d:
                    5c:18:01:5c:df:ed:ea:d2:53:e8:91:46:92:05:f0:
                    31:d1:c2:f7:16:7f:88:6f:42:6a:a8:d4:6e:1e:39:
                    15:87:8a:72:20:3e:92:13:6e:60:aa:b3:85:8d:5f:
                    a0:64:e3:e5:9d:0a:94:e3:be:76:03:51:d0:22:63:
                    9c:d9:96:b8:f2:10:0a:0b:e7:de:56:9e:2a:b8:43:
                    a6:8c:c5:8b:bb:6f:8d:00:6f:3b:ff:ac:24:f2:b4:
                    1f:5f:fa:8f:97:5a:0c:24:59:15:33:4f:91:22:0f:
                    01:9d:d6:6b:f3:86:23:7f:8e:f1:e9:95:ca:05:60:
                    45:d3:c3:ea:17:16:ac:0b:bd:3f:b6:6b:78:67:bf:
                    36:79:fb:89:6a:17:87:5f:ae:91:b5:14:33:4a:a4:
                    a5:12:a6:cf:ed:3b:8f:4f:e7:be:c5:62:54:ba:79:
                    5c:42:08:8c:79:5a:66:7e:cf:c7:19:20:a9:33:5f:
                    af:eb:51:c8:74:08:85:4b:ef:38:a1:27:40:6f:69:
                    d2:bc:8b:39:5a:62:68:f9:ad:51:cc:0e:f2:b8:0c:
                    16:85:e0:37:08:6a:65:2f:48:48:52:7b:ab:e4:e8:
                    f9:55:3b:d7:21:92:21:13:d0:29:50:85:26:6a:13:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:80:3D:A7:C1:DF:0D:28:7C:1C:A4:96:1C:C5:31:0B:29:02:AB:CF
            X509v3 Authority Key Identifier:
                keyid:8F:F0:7D:62:76:5B:4B:3E:62:62:1E:0E:61:81:ED:F9:02:A6:FA:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_B9YnZbSz5iYh4OYYHt-QKm-o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/55aadb-f455-4e8d-bc13-388ee81929fb/1/j_B9YnZbSz5iYh4OYYHt-QKm-o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/55aadb-f455-4e8d-bc13-388ee81929fb/1/j_B9YnZbSz5iYh4OYYHt-QKm-o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0a:18:42:9d:e8:c4:86:0d:ef:f4:9f:ae:fa:96:dd:2a:d6:
         56:ae:68:74:35:ff:db:d4:d6:10:4a:d8:43:81:bc:96:97:a2:
         cf:86:89:5f:5c:dc:62:c8:4d:7d:e6:f4:e1:b7:ca:16:43:81:
         49:4a:80:d8:22:cb:25:7d:ca:f5:00:a4:b0:0b:5a:b1:34:a7:
         01:64:4a:b3:a9:db:69:dc:72:7d:c9:c0:60:d6:1f:33:3d:84:
         4f:74:8f:b0:28:c2:c2:25:dd:ac:09:2d:96:a9:0d:7f:2f:54:
         bd:a2:f0:f7:3c:64:c9:1b:03:dc:60:2b:a5:4f:d0:f3:5a:eb:
         cd:8b:3a:cc:04:b5:aa:fe:bf:0a:c7:fd:cb:fa:20:72:13:cb:
         56:13:ae:bf:b2:7b:cf:7f:47:f3:4f:e1:1f:e2:2c:8b:1b:d3:
         5a:c4:29:32:49:82:08:a5:88:a9:0b:17:a4:07:47:41:91:9c:
         1a:22:7c:5a:3f:2d:f7:5e:e8:04:d2:4c:76:c8:e2:6b:a9:9d:
         9e:bd:7c:26:4b:7c:ad:3c:65:11:95:34:42:ad:e4:bd:f0:df:
         6e:e4:2a:db:3a:85:2b:46:8c:c2:df:45:6a:c9:49:5a:11:9d:
         10:8f:c1:5c:ce:49:11:10:25:20:ac:00:b7:4c:c6:99:68:9e:
         e9:ca:6e:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+II+sy5t1WW1oTF4GljSpCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZjA3ZDYyNzY1YjRiM2U2MjYyMWUwZTYxODFlZGY5MDJh
NmZhOGUwHhcNMjQwNTE3MjAwMDA2WhcNMjQwNTE4MjAwMDA2WjAzMTEwLwYDVQQD
EyhmMTgwM2RhN2MxZGYwZDI4N2MxY2E0OTYxY2M1MzEwYjI5MDJhYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UIGomntacKBuq35HR1cGAFc3+3q
0lPokUaSBfAx0cL3Fn+Ib0JqqNRuHjkVh4pyID6SE25gqrOFjV+gZOPlnQqU4752
A1HQImOc2Za48hAKC+feVp4quEOmjMWLu2+NAG87/6wk8rQfX/qPl1oMJFkVM0+R
Ig8BndZr84Yjf47x6ZXKBWBF08PqFxasC70/tmt4Z782efuJaheHX66RtRQzSqSl
EqbP7TuPT+e+xWJUunlcQgiMeVpmfs/HGSCpM1+v61HIdAiFS+84oSdAb2nSvIs5
WmJo+a1RzA7yuAwWheA3CGplL0hIUnur5Oj5VTvXIZIhE9ApUIUmahNVPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGAPafB3w0ofByklhzFMQspAqvPMB8GA1UdIwQY
MBaAFI/wfWJ2W0s+YmIeDmGB7fkCpvqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQval9COVluWmJTejVpWWg0T1lZSHQtUUttLW80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81NWFhZGItZjQ1NS00ZThkLWJjMTMt
Mzg4ZWU4MTkyOWZiLzEval9COVluWmJTejVpWWg0T1lZSHQtUUttLW80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC81NWFhZGItZjQ1NS00ZThkLWJjMTMtMzg4ZWU4MTkyOWZi
LzEval9COVluWmJTejVpWWg0T1lZSHQtUUttLW80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQoYQp3o
xIYN7/SfrvqW3SrWVq5odDX/29TWEErYQ4G8lpeiz4aJX1zcYshNfeb04bfKFkOB
SUqA2CLLJX3K9QCksAtasTSnAWRKs6nbadxyfcnAYNYfMz2ET3SPsCjCwiXdrAkt
lqkNfy9UvaLw9zxkyRsD3GArpU/Q81rrzYs6zAS1qv6/Csf9y/ogchPLVhOuv7J7
z39H80/hH+IsixvTWsQpMkmCCKWIqQsXpAdHQZGcGiJ8Wj8t917oBNJMdsjia6md
nr18Jkt8rTxlEZU0Qq3kvfDfbuQq2zqFK0aMwt9FaslJWhGdEI/BXM5JERAlIKwA
t0zGmWie6cpuyA==
-----END CERTIFICATE-----