Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
File:                     03o_Gc-XFmpEQiB-Em8qA7bL65g.mft (raw, json)
Hash identifier:          XCbNDVWcFMUPYBEwUnKcKY+wpjnCges49ci6POJoMJQ=
Subject key identifier:   CC:5F:98:D2:12:80:31:3C:66:68:F9:11:28:B8:51:E3:54:3E:D3:01
Authority key identifier: D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98
Certificate issuer:       /CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
Certificate serial:       0191FAEDDEDC319361454BE26C19C91F1ECD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
Manifest number:          12BA
Signing time:             Mon 16 Sep 2024 13:02:58 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:58 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:58 +0000
Files and hashes:         1: 03o_Gc-XFmpEQiB-Em8qA7bL65g.crl (hash: tsbdQSW+Hq8H4zCajQGgPJcBVBjQmz9iEno+gPJRxu4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:de:dc:31:93:61:45:4b:e2:6c:19:c9:1f:1e:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d37a3f19cf97166a4442207e126f2a03b6cbeb98
        Validity
            Not Before: Sep 16 13:02:58 2024 GMT
            Not After : Sep 17 13:02:58 2024 GMT
        Subject: CN=cc5f98d21280313c6668f91128b851e3543ed301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:46:19:79:d3:85:50:0b:9a:10:f5:83:4d:
                    00:9d:a1:06:e6:29:ad:dd:0c:e5:d8:cc:d8:07:03:
                    dc:4e:66:35:77:1b:9c:7b:7c:81:b3:fc:47:21:24:
                    6b:6b:24:95:de:7f:38:8f:a9:42:b1:46:6b:e7:29:
                    4a:5a:bf:90:45:0e:d0:8b:59:3a:ac:41:f7:e7:0c:
                    d3:f5:d4:61:44:a3:ea:8c:a5:92:92:f7:32:a3:b4:
                    80:9d:9f:73:9c:03:e0:50:ef:66:a9:ae:3b:f9:65:
                    1a:ec:aa:44:44:1a:01:e6:6e:22:fb:31:f5:8d:bb:
                    13:91:83:95:5f:d6:e0:af:a3:48:dc:0e:04:3d:96:
                    00:f8:15:25:ae:f2:02:c1:5c:9a:3a:fe:52:e7:cf:
                    86:e7:df:27:ea:1e:48:e4:d9:5e:60:9a:8b:fb:36:
                    a1:21:7c:3d:01:79:9a:bf:30:1f:8b:20:bc:e3:37:
                    ee:99:a1:bb:32:f8:f1:5c:cb:51:22:86:60:b9:da:
                    8a:09:3d:9b:af:4d:af:ea:10:db:00:be:32:ec:a3:
                    35:74:b0:b7:98:83:0c:e3:fe:5a:a5:db:3a:0c:86:
                    e4:13:20:87:84:7e:87:c6:48:1b:55:cf:1b:e6:61:
                    f8:cf:c9:99:b3:87:ad:1e:59:11:1e:35:70:a3:68:
                    b2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5F:98:D2:12:80:31:3C:66:68:F9:11:28:B8:51:E3:54:3E:D3:01
            X509v3 Authority Key Identifier:
                keyid:D3:7A:3F:19:CF:97:16:6A:44:42:20:7E:12:6F:2A:03:B6:CB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03o_Gc-XFmpEQiB-Em8qA7bL65g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/121537-4c2f-4248-ad33-26a77660cc27/1/03o_Gc-XFmpEQiB-Em8qA7bL65g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:b1:0d:8c:90:4b:26:02:67:e7:95:2a:77:34:76:38:df:8b:
         cf:25:2e:70:f6:8d:71:50:2e:3f:59:d3:68:ba:6c:8d:8d:0f:
         09:4b:b0:6e:12:88:6f:43:cb:36:d2:03:b5:da:5c:c5:9e:2a:
         7b:c0:9e:07:98:a1:d4:5d:78:07:60:2d:35:a0:32:30:ce:43:
         38:6b:52:0f:8e:29:50:06:ca:45:45:99:fa:55:f9:00:57:2d:
         98:3f:8a:2a:23:3e:0c:05:2c:13:f3:5a:65:ef:90:4f:42:0c:
         d3:70:4b:61:46:13:ce:eb:22:b1:24:82:cd:38:44:71:8a:bf:
         56:69:ea:10:c8:f2:ff:60:35:80:ab:2a:70:43:f5:cc:10:55:
         67:0e:8a:1a:6d:c2:89:75:5b:8e:de:c3:d9:5a:cd:ac:1a:b7:
         f4:7c:89:8f:d6:eb:b9:4c:86:ea:a7:ca:f6:cf:a2:14:86:f2:
         ca:69:7a:92:25:c5:94:32:04:92:68:38:bd:5b:62:4b:f8:ec:
         77:7c:a9:ad:db:34:3c:69:c9:bc:75:1e:8c:bc:70:11:2d:f9:
         54:f3:33:3e:6f:6f:19:12:6d:83:28:c7:3c:54:e6:db:e1:91:
         ef:1d:e4:45:b8:ce:04:cb:a2:e6:d4:57:9a:11:30:29:63:41:
         10:35:da:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH67d7cMZNhRUvibBnJHx7NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzN2EzZjE5Y2Y5NzE2NmE0NDQyMjA3ZTEyNmYyYTAzYjZj
YmViOTgwHhcNMjQwOTE2MTMwMjU4WhcNMjQwOTE3MTMwMjU4WjAzMTEwLwYDVQQD
EyhjYzVmOThkMjEyODAzMTNjNjY2OGY5MTEyOGI4NTFlMzU0M2VkMzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp91GGXnThVALmhD1g00AnaEG5imt
3Qzl2MzYBwPcTmY1dxuce3yBs/xHISRraySV3n84j6lCsUZr5ylKWr+QRQ7Qi1k6
rEH35wzT9dRhRKPqjKWSkvcyo7SAnZ9znAPgUO9mqa47+WUa7KpERBoB5m4i+zH1
jbsTkYOVX9bgr6NI3A4EPZYA+BUlrvICwVyaOv5S58+G598n6h5I5NleYJqL+zah
IXw9AXmavzAfiyC84zfumaG7MvjxXMtRIoZgudqKCT2br02v6hDbAL4y7KM1dLC3
mIMM4/5apds6DIbkEyCHhH6HxkgbVc8b5mH4z8mZs4etHlkRHjVwo2iyVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxfmNISgDE8Zmj5ESi4UeNUPtMBMB8GA1UdIwQY
MBaAFNN6PxnPlxZqREIgfhJvKgO2y+uYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xMjE1MzctNGMyZi00MjQ4LWFkMzMt
MjZhNzc2NjBjYzI3LzEvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8xMjE1MzctNGMyZi00MjQ4LWFkMzMtMjZhNzc2NjBjYzI3
LzEvMDNvX0djLVhGbXBFUWlCLUVtOHFBN2JMNjVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7ENjJBL
JgJn55UqdzR2ON+LzyUucPaNcVAuP1nTaLpsjY0PCUuwbhKIb0PLNtIDtdpcxZ4q
e8CeB5ih1F14B2AtNaAyMM5DOGtSD44pUAbKRUWZ+lX5AFctmD+KKiM+DAUsE/Na
Ze+QT0IM03BLYUYTzusisSSCzThEcYq/VmnqEMjy/2A1gKsqcEP1zBBVZw6KGm3C
iXVbjt7D2VrNrBq39HyJj9bruUyG6qfK9s+iFIbyyml6kiXFlDIEkmg4vVtiS/js
d3yprds0PGnJvHUejLxwES35VPMzPm9vGRJtgyjHPFTm2+GR7x3kRbjOBMui5tRX
mhEwKWNBEDXaLA==
-----END CERTIFICATE-----