Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
File:                     wkDtrImIu1blLeEopdZaj07z8Tg.mft (raw, json)
Hash identifier:          CNzebaYpRTOdIz1uhrvncCke5cB1H9X8Ef/b57TRrGM=
Subject key identifier:   C1:D3:DD:BF:6C:B8:2C:EC:8E:FE:37:DD:C5:1D:BC:4E:0E:30:9A:BC
Authority key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38
Certificate issuer:       /CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
Certificate serial:       01936AB4B39AFF1ECD546EF455EB19292BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
Manifest number:          09E6
Signing time:             Tue 26 Nov 2024 23:00:47 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:47 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:47 +0000
Files and hashes:         1: wkDtrImIu1blLeEopdZaj07z8Tg.crl (hash: 8Qs1V/Rkv3TD5KqcA723cATNSqZpifB1dT59W5egxnU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:b3:9a:ff:1e:cd:54:6e:f4:55:eb:19:29:2b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138
        Validity
            Not Before: Nov 26 23:00:47 2024 GMT
            Not After : Nov 27 23:00:47 2024 GMT
        Subject: CN=c1d3ddbf6cb82cec8efe37ddc51dbc4e0e309abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:9b:5f:89:6a:e6:b8:09:bc:4d:dc:aa:d5:61:
                    19:8e:69:ac:8c:9e:65:d8:88:c2:d4:34:fc:64:15:
                    ed:97:3b:f8:e2:fe:4b:b7:46:f4:61:4e:9a:a3:3d:
                    7b:12:59:13:4b:6f:b5:7f:b5:4a:fc:a3:59:8d:3f:
                    6c:be:ba:57:a2:59:db:6a:9a:55:53:b9:f9:4f:23:
                    8f:ce:e4:d6:a3:76:ad:c0:0a:08:a7:8a:66:09:82:
                    7a:e5:0e:ad:4e:c7:ae:31:20:9e:cb:d2:ef:38:5a:
                    f1:8e:24:a2:68:c0:d2:a9:10:ea:c8:b0:30:50:51:
                    96:03:1c:79:5b:29:5d:70:df:67:79:ff:2a:66:c6:
                    94:93:52:1f:d6:fb:32:3d:8f:57:14:0e:3f:14:1d:
                    6f:fb:99:c1:e9:40:e3:9b:44:3d:fe:b6:9d:b0:2b:
                    15:1d:62:90:94:dc:41:3f:67:57:38:f9:9e:86:27:
                    3b:91:1f:22:35:42:ff:e3:c7:8d:89:6c:9b:ca:00:
                    08:ed:10:33:c1:22:7e:0b:bc:b4:cb:e9:69:20:e1:
                    9d:bb:5c:ee:68:7a:2b:37:4b:8d:f5:11:05:39:cd:
                    a3:17:14:b6:35:91:d1:f8:73:ff:c8:58:45:e5:df:
                    d1:36:7f:53:10:01:a1:81:8e:4d:05:11:bc:8c:e6:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D3:DD:BF:6C:B8:2C:EC:8E:FE:37:DD:C5:1D:BC:4E:0E:30:9A:BC
            X509v3 Authority Key Identifier:
                keyid:C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b4:45:4a:5f:ca:ca:34:91:40:5e:cb:df:ec:5a:ef:06:69:
         87:02:c6:1e:d1:76:40:e6:78:84:78:db:ab:07:76:4c:ed:68:
         3e:6c:96:b8:ba:26:00:01:c7:ea:1d:f9:7b:54:87:b4:47:1e:
         4d:7e:f7:f2:17:c5:f0:03:7e:44:19:e4:4b:84:0f:d4:e7:7c:
         40:b3:64:84:af:3b:76:5d:29:54:88:e2:4a:6c:49:d7:bf:49:
         1a:c0:a4:c0:4b:31:bf:fc:6f:92:f2:54:b7:d7:2c:ca:63:e9:
         14:4d:7c:ef:5b:7e:5d:39:e6:54:b6:38:de:d0:ef:8e:25:98:
         7e:f2:7f:6c:14:7d:1a:dd:ae:c8:0d:9e:ee:cb:78:87:d0:9d:
         38:fc:c1:8e:8a:22:74:76:71:09:6e:63:1d:18:d6:7b:5a:c2:
         b7:a9:b6:8d:70:9d:8e:2b:c5:c5:68:de:06:13:a6:5f:94:c6:
         03:8a:12:a0:39:40:ad:c6:34:36:8b:a6:0f:f5:ae:03:dc:50:
         90:b6:41:0d:11:4b:fa:d7:40:a0:5b:1e:6b:0b:09:a8:ac:a3:
         5c:6e:05:91:b6:dd:74:ee:b3:91:bc:88:3e:fb:e4:ee:20:23:
         c7:3e:64:8b:54:6d:dc:c4:3e:a6:d0:a7:6e:59:61:74:b0:95:
         c0:23:5e:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtLOa/x7NVG70VesZKSvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNDBlZGFjODk4OGJiNTZlNTJkZTEyOGE1ZDY1YThmNGVm
M2YxMzgwHhcNMjQxMTI2MjMwMDQ3WhcNMjQxMTI3MjMwMDQ3WjAzMTEwLwYDVQQD
EyhjMWQzZGRiZjZjYjgyY2VjOGVmZTM3ZGRjNTFkYmM0ZTBlMzA5YWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZtfiWrmuAm8Tdyq1WEZjmmsjJ5l
2IjC1DT8ZBXtlzv44v5Lt0b0YU6aoz17ElkTS2+1f7VK/KNZjT9svrpXolnbappV
U7n5TyOPzuTWo3atwAoIp4pmCYJ65Q6tTseuMSCey9LvOFrxjiSiaMDSqRDqyLAw
UFGWAxx5WyldcN9nef8qZsaUk1If1vsyPY9XFA4/FB1v+5nB6UDjm0Q9/radsCsV
HWKQlNxBP2dXOPmehic7kR8iNUL/48eNiWybygAI7RAzwSJ+C7y0y+lpIOGdu1zu
aHorN0uN9REFOc2jFxS2NZHR+HP/yFhF5d/RNn9TEAGhgY5NBRG8jOaqXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHT3b9suCzsjv433cUdvE4OMJq8MB8GA1UdIwQY
MBaAFMJA7ayJiLtW5S3hKKXWWo9O8/E4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lNTM0YjAtNzAyMy00ZTcxLWEyNjQt
YTcxNDk3ZjE2OGUxLzEvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9lNTM0YjAtNzAyMy00ZTcxLWEyNjQtYTcxNDk3ZjE2OGUx
LzEvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLRFSl/K
yjSRQF7L3+xa7wZphwLGHtF2QOZ4hHjbqwd2TO1oPmyWuLomAAHH6h35e1SHtEce
TX738hfF8AN+RBnkS4QP1Od8QLNkhK87dl0pVIjiSmxJ179JGsCkwEsxv/xvkvJU
t9csymPpFE1871t+XTnmVLY43tDvjiWYfvJ/bBR9Gt2uyA2e7st4h9CdOPzBjooi
dHZxCW5jHRjWe1rCt6m2jXCdjivFxWjeBhOmX5TGA4oSoDlArcY0NoumD/WuA9xQ
kLZBDRFL+tdAoFseawsJqKyjXG4FkbbddO6zkbyIPvvk7iAjxz5ki1Rt3MQ+ptCn
bllhdLCVwCNekw==
-----END CERTIFICATE-----