Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
File:                     e2deJTtiz5WANl7XPaod1lnU1mI.mft (raw, json)
Hash identifier:          DpaylDF2V/JptlHUcjejU76JUwLVg6VjgocsqOTGjYA=
Subject key identifier:   04:E7:C0:2A:50:C2:50:33:B6:97:8A:F4:D0:1E:33:DF:E0:AC:4C:5A
Authority key identifier: 7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62
Certificate issuer:       /CN=7b675e253b62cf9580365ed73daa1dd659d4d662
Certificate serial:       019356F70D1CE64784474549FF4961B9772B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
Manifest number:          136F
Signing time:             Sat 23 Nov 2024 03:00:51 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:51 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:51 +0000
Files and hashes:         1: e2deJTtiz5WANl7XPaod1lnU1mI.crl (hash: 1/9natRAib18GUXNByg7Va533wANvrQm7TXdC6l4Irg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f7:0d:1c:e6:47:84:47:45:49:ff:49:61:b9:77:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b675e253b62cf9580365ed73daa1dd659d4d662
        Validity
            Not Before: Nov 23 03:00:51 2024 GMT
            Not After : Nov 24 03:00:51 2024 GMT
        Subject: CN=04e7c02a50c25033b6978af4d01e33dfe0ac4c5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:b4:15:48:18:58:91:0e:0b:1c:ae:13:3e:
                    90:2c:17:f7:40:22:5a:0d:5c:2a:30:ed:d6:10:e3:
                    27:50:de:58:2c:42:06:6d:9e:8d:e1:41:94:e5:80:
                    79:78:2b:20:5f:68:41:7c:e7:f1:fd:ff:de:fa:4c:
                    07:50:9d:e1:e4:97:b7:a7:a8:13:66:c6:fd:75:4a:
                    46:34:fe:04:0d:04:dc:6c:6e:4e:63:79:e3:13:48:
                    3e:40:bf:04:21:a6:f3:1a:80:d7:68:5a:49:4c:4d:
                    70:a9:83:9f:00:11:0e:e0:96:16:89:ba:a7:19:07:
                    3d:b4:00:53:75:87:b0:bf:aa:03:be:74:94:39:4f:
                    f5:09:80:1e:e8:cf:e2:55:7a:4d:fe:8c:db:ce:d0:
                    4a:de:9f:4d:19:3f:a9:07:6b:f7:4d:66:0a:95:41:
                    c1:ed:d5:21:68:99:4a:97:8c:91:a1:a3:f8:be:3e:
                    56:7d:79:b2:1d:8a:1b:af:81:bf:53:e6:1c:06:d9:
                    69:8f:5c:4f:3e:e4:83:4c:6c:2d:5d:37:28:45:68:
                    3a:99:2c:de:01:20:45:18:cd:13:e6:41:1e:5b:fa:
                    1c:44:c5:4d:39:1c:d9:ee:e5:f2:bf:ed:18:ff:17:
                    43:6f:61:85:ee:88:18:fe:09:a3:a9:74:92:7a:54:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E7:C0:2A:50:C2:50:33:B6:97:8A:F4:D0:1E:33:DF:E0:AC:4C:5A
            X509v3 Authority Key Identifier:
                keyid:7B:67:5E:25:3B:62:CF:95:80:36:5E:D7:3D:AA:1D:D6:59:D4:D6:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2deJTtiz5WANl7XPaod1lnU1mI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a184f2-ba51-4977-aeff-66c75429a88a/1/e2deJTtiz5WANl7XPaod1lnU1mI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:dd:0e:38:8f:31:f6:9c:96:b6:72:af:a4:77:c3:07:6e:ba:
         10:c9:8e:21:2e:2a:db:a3:5a:da:f7:73:3d:29:ad:e9:11:f8:
         d2:4a:a8:ab:09:05:40:95:52:cd:43:f2:04:f1:6c:62:65:bf:
         c2:7b:e8:e6:8a:eb:62:6c:8b:07:22:10:23:1f:22:fc:fb:ff:
         0a:7c:2c:d8:d3:68:32:f3:7f:02:76:36:d9:f4:89:06:a1:00:
         fd:ce:7e:06:47:18:10:4b:10:ad:e1:80:29:bb:01:72:be:b4:
         ee:33:9b:7c:94:69:62:84:b0:50:b6:cd:eb:d0:ed:dc:2a:db:
         4c:78:ab:4d:7f:87:39:7f:bb:21:43:e4:5e:de:0d:3e:ec:7a:
         3f:b5:24:ff:d9:69:dd:57:3e:b7:b2:a8:40:38:fa:6e:37:2b:
         83:3c:4c:d6:6c:2a:b1:8e:76:9e:ce:3e:59:ec:90:3e:44:db:
         db:ca:b9:3f:02:f5:e9:ca:84:25:00:4d:41:05:c5:24:b4:cb:
         a9:5a:2b:af:81:87:8e:94:1e:13:67:c1:68:2f:28:0f:e5:bf:
         90:37:62:7e:6d:01:3c:82:9f:6d:46:f5:1e:2a:31:35:b9:c7:
         29:07:45:5b:fe:d9:d2:36:bf:3a:89:e3:3b:38:ca:f4:de:6c:
         a3:67:86:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9w0c5keER0VJ/0lhuXcrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNjc1ZTI1M2I2MmNmOTU4MDM2NWVkNzNkYWExZGQ2NTlk
NGQ2NjIwHhcNMjQxMTIzMDMwMDUxWhcNMjQxMTI0MDMwMDUxWjAzMTEwLwYDVQQD
EygwNGU3YzAyYTUwYzI1MDMzYjY5NzhhZjRkMDFlMzNkZmUwYWM0YzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcu0FUgYWJEOCxyuEz6QLBf3QCJa
DVwqMO3WEOMnUN5YLEIGbZ6N4UGU5YB5eCsgX2hBfOfx/f/e+kwHUJ3h5Je3p6gT
Zsb9dUpGNP4EDQTcbG5OY3njE0g+QL8EIabzGoDXaFpJTE1wqYOfABEO4JYWibqn
GQc9tABTdYewv6oDvnSUOU/1CYAe6M/iVXpN/ozbztBK3p9NGT+pB2v3TWYKlUHB
7dUhaJlKl4yRoaP4vj5WfXmyHYobr4G/U+YcBtlpj1xPPuSDTGwtXTcoRWg6mSze
ASBFGM0T5kEeW/ocRMVNORzZ7uXyv+0Y/xdDb2GF7ogY/gmjqXSSelTM6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATnwCpQwlAztpeK9NAeM9/grExaMB8GA1UdIwQY
MBaAFHtnXiU7Ys+VgDZe1z2qHdZZ1NZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTJkZUpUdGl6NVdBTmw3WFBhb2QxbG5VMW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hMTg0ZjItYmE1MS00OTc3LWFlZmYt
NjZjNzU0MjlhODhhLzEvZTJkZUpUdGl6NVdBTmw3WFBhb2QxbG5VMW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hMTg0ZjItYmE1MS00OTc3LWFlZmYtNjZjNzU0MjlhODhh
LzEvZTJkZUpUdGl6NVdBTmw3WFBhb2QxbG5VMW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC90OOI8x
9pyWtnKvpHfDB266EMmOIS4q26Na2vdzPSmt6RH40kqoqwkFQJVSzUPyBPFsYmW/
wnvo5orrYmyLByIQIx8i/Pv/Cnws2NNoMvN/AnY22fSJBqEA/c5+BkcYEEsQreGA
KbsBcr607jObfJRpYoSwULbN69Dt3CrbTHirTX+HOX+7IUPkXt4NPux6P7Uk/9lp
3Vc+t7KoQDj6bjcrgzxM1mwqsY52ns4+WeyQPkTb28q5PwL16cqEJQBNQQXFJLTL
qVorr4GHjpQeE2fBaC8oD+W/kDdifm0BPIKfbUb1HioxNbnHKQdFW/7Z0ja/Oonj
OzjK9N5so2eG+g==
-----END CERTIFICATE-----