Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
File:                     SwcV24gEJUTjiTGbXtwp0OFWxb4.mft (raw, json)
Hash identifier:          88Z/qM5jKX2/s4k1r94TgmrzxzpJ3LD1+bhx8OeeuOQ=
Subject key identifier:   10:AB:8C:F4:8C:8F:34:91:33:46:CA:BC:89:74:4F:D4:DB:5F:BC:EF
Authority key identifier: 4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE
Certificate issuer:       /CN=4b0715db88042544e389319b5edc29d0e156c5be
Certificate serial:       0191FA7E0D0722DE84C35074BD8EC56069BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
Manifest number:          0139
Signing time:             Mon 16 Sep 2024 11:00:50 +0000
Manifest this update:     Mon 16 Sep 2024 11:00:50 +0000
Manifest next update:     Tue 17 Sep 2024 11:00:50 +0000
Files and hashes:         1: SwcV24gEJUTjiTGbXtwp0OFWxb4.crl (hash: 1JuwwvmlsF+7C2EQF3GSKLV4qLM64RjEKa43bOy1Kb4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:7e:0d:07:22:de:84:c3:50:74:bd:8e:c5:60:69:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0715db88042544e389319b5edc29d0e156c5be
        Validity
            Not Before: Sep 16 11:00:50 2024 GMT
            Not After : Sep 17 11:00:50 2024 GMT
        Subject: CN=10ab8cf48c8f34913346cabc89744fd4db5fbcef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:9b:77:f8:0d:f3:0a:a8:88:99:e9:80:92:
                    3b:fd:3a:3a:46:71:6d:35:be:75:b9:6f:4f:1e:cf:
                    b2:ec:57:aa:72:1c:cf:9b:13:5f:86:b3:7f:f8:d8:
                    b9:1a:03:30:10:79:4f:30:61:7e:84:ef:01:da:da:
                    76:c5:ff:51:97:97:ba:a9:03:0a:62:2f:03:98:56:
                    02:72:04:80:15:bc:0c:ed:b5:02:60:27:7c:5d:14:
                    3a:68:93:b8:df:bf:d4:50:9e:7c:ca:74:11:10:e6:
                    b1:d9:23:d3:2d:63:70:83:0f:bf:da:b1:b2:1e:53:
                    b6:95:35:99:5b:5f:0e:07:60:e0:4c:30:bb:e9:ce:
                    72:01:e6:91:0c:dc:47:69:54:6b:37:95:df:84:ff:
                    df:56:d7:6d:60:a7:40:04:0d:a0:25:75:38:fc:0b:
                    30:ba:f2:22:33:d8:6f:07:0c:00:e2:c3:e9:17:39:
                    e7:e3:8b:77:da:b2:04:2d:4a:c4:f3:d5:ab:0a:3f:
                    0a:2a:2c:31:ed:1f:cf:90:a2:68:6f:ed:44:f5:1c:
                    1b:b2:02:b3:ec:c6:52:d2:7e:3b:e1:70:25:69:e8:
                    fc:86:40:b9:42:96:65:25:79:7f:80:c5:db:90:1d:
                    40:eb:76:8f:59:f7:fa:97:f7:67:e4:10:4c:8c:88:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AB:8C:F4:8C:8F:34:91:33:46:CA:BC:89:74:4F:D4:DB:5F:BC:EF
            X509v3 Authority Key Identifier:
                keyid:4B:07:15:DB:88:04:25:44:E3:89:31:9B:5E:DC:29:D0:E1:56:C5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwcV24gEJUTjiTGbXtwp0OFWxb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/91670e-8c2e-4038-ab79-bb3d99b98a9e/1/SwcV24gEJUTjiTGbXtwp0OFWxb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a7:9d:64:5b:44:c7:0a:97:eb:9a:a4:fe:a5:5e:d1:9c:81:
         52:0c:29:cf:f5:3e:9e:cc:02:90:bb:da:4b:8e:7c:77:dc:71:
         75:bb:b4:88:c9:2d:80:a8:6f:82:d0:c3:22:98:1b:98:7b:94:
         f1:8c:80:cc:bf:59:96:06:5c:fd:0d:d8:fc:02:14:ae:a7:fa:
         92:a1:dd:ea:95:2c:f7:90:59:0b:8c:10:88:9a:e8:af:97:d9:
         15:b8:a3:8a:88:0b:6a:17:d7:22:0a:be:24:d9:e4:f5:59:70:
         b7:25:40:2f:c4:cf:68:4a:b1:3a:fb:68:ff:5d:d4:6f:f2:d3:
         51:00:0e:25:e4:c1:e3:ea:b1:c8:88:25:81:31:c8:ae:ba:36:
         b0:33:fc:dd:74:b9:85:ed:11:8b:e7:86:e0:95:64:d1:9e:0d:
         a8:1a:69:f6:df:f7:ee:df:e4:9a:67:8c:ee:6b:0f:27:b2:44:
         69:82:ec:3c:a2:57:88:2a:ab:d6:e0:00:83:e7:b0:2e:c9:c6:
         2d:8f:b1:82:9e:73:da:92:aa:a6:ad:df:b7:9e:cb:f1:5e:6d:
         a9:10:94:89:13:61:34:30:d5:05:b9:36:73:bb:b7:e7:79:31:
         c2:eb:81:74:23:fb:42:cd:06:d3:0a:76:01:b2:46:74:d8:79:
         43:b3:cc:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6fg0HIt6Ew1B0vY7FYGm9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMDcxNWRiODgwNDI1NDRlMzg5MzE5YjVlZGMyOWQwZTE1
NmM1YmUwHhcNMjQwOTE2MTEwMDUwWhcNMjQwOTE3MTEwMDUwWjAzMTEwLwYDVQQD
EygxMGFiOGNmNDhjOGYzNDkxMzM0NmNhYmM4OTc0NGZkNGRiNWZiY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYGbd/gN8wqoiJnpgJI7/To6RnFt
Nb51uW9PHs+y7FeqchzPmxNfhrN/+Ni5GgMwEHlPMGF+hO8B2tp2xf9Rl5e6qQMK
Yi8DmFYCcgSAFbwM7bUCYCd8XRQ6aJO437/UUJ58ynQREOax2SPTLWNwgw+/2rGy
HlO2lTWZW18OB2DgTDC76c5yAeaRDNxHaVRrN5XfhP/fVtdtYKdABA2gJXU4/Asw
uvIiM9hvBwwA4sPpFznn44t32rIELUrE89WrCj8KKiwx7R/PkKJob+1E9RwbsgKz
7MZS0n474XAlaej8hkC5QpZlJXl/gMXbkB1A63aPWff6l/dn5BBMjIjBKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCrjPSMjzSRM0bKvIl0T9TbX7zvMB8GA1UdIwQY
MBaAFEsHFduIBCVE44kxm17cKdDhVsW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC85MTY3MGUtOGMyZS00MDM4LWFiNzkt
YmIzZDk5Yjk4YTllLzEvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC85MTY3MGUtOGMyZS00MDM4LWFiNzktYmIzZDk5Yjk4YTll
LzEvU3djVjI0Z0VKVVRqaVRHYlh0d3AwT0ZXeGI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPaedZFtE
xwqX65qk/qVe0ZyBUgwpz/U+nswCkLvaS458d9xxdbu0iMktgKhvgtDDIpgbmHuU
8YyAzL9ZlgZc/Q3Y/AIUrqf6kqHd6pUs95BZC4wQiJror5fZFbijiogLahfXIgq+
JNnk9VlwtyVAL8TPaEqxOvto/13Ub/LTUQAOJeTB4+qxyIglgTHIrro2sDP83XS5
he0Ri+eG4JVk0Z4NqBpp9t/37t/kmmeM7msPJ7JEaYLsPKJXiCqr1uAAg+ewLsnG
LY+xgp5z2pKqpq3ft57L8V5tqRCUiRNhNDDVBbk2c7u353kxwuuBdCP7Qs0G0wp2
AbJGdNh5Q7PM1A==
-----END CERTIFICATE-----