Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
File:                     pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft (raw, json)
Hash identifier:          8Ks6pnFLpzywpLGpIxEN/ZdjOxELoZmjkG6t8zlMuLU=
Subject key identifier:   0F:10:4D:10:FC:C5:FB:3F:B6:F6:18:AF:B5:E2:B9:3A:D2:BC:33:51
Authority key identifier: A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2
Certificate issuer:       /CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
Certificate serial:       018F88922448A4CD19F12439820336B300D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
Manifest number:          05D7
Signing time:             Fri 17 May 2024 22:00:29 +0000
Manifest this update:     Fri 17 May 2024 22:00:29 +0000
Manifest next update:     Sat 18 May 2024 22:00:29 +0000
Files and hashes:         1: pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl (hash: SDi/U58HCKr52v4zkRNkgx9+s9yMNMSDG/JLzUMV+qs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:24:48:a4:cd:19:f1:24:39:82:03:36:b3:00:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58d4983c9c63bd8a158003c585f43d994c12dc2
        Validity
            Not Before: May 17 22:00:29 2024 GMT
            Not After : May 18 22:00:29 2024 GMT
        Subject: CN=0f104d10fcc5fb3fb6f618afb5e2b93ad2bc3351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:be:d9:e9:3f:cf:bc:37:82:4f:19:6b:b1:
                    47:0a:4b:59:30:c6:ae:a6:66:28:50:c5:f2:4d:32:
                    c9:09:c5:7d:b6:94:b8:d0:a8:b3:f7:a9:27:a6:f2:
                    c4:b2:53:99:97:3a:bb:c2:00:c6:0b:46:2f:1c:2f:
                    2f:9b:ae:39:93:d1:26:cd:5d:b0:28:31:24:f3:99:
                    fb:38:eb:d2:c4:20:0a:ec:3c:72:c9:49:26:f1:8a:
                    b3:97:2a:c6:08:64:2e:c7:5b:b8:0f:81:e7:f1:23:
                    4c:e3:cc:2c:f4:a7:3f:be:90:d1:b1:c1:bb:68:63:
                    01:74:7a:17:68:b2:2f:66:90:7f:7b:19:b6:f8:96:
                    47:f4:ce:ba:b6:e6:99:34:00:c4:3b:51:09:34:02:
                    db:dd:44:ab:2e:a8:25:1e:71:67:fd:31:d6:ec:60:
                    1d:32:cf:d7:6d:19:74:19:63:89:90:b1:7e:a3:a0:
                    1e:4e:54:6e:1b:4b:1f:d6:0f:89:00:51:58:bb:29:
                    03:37:3d:44:63:b3:44:83:b6:af:1f:d7:b2:79:d6:
                    3c:12:4a:da:a9:2e:3d:4a:de:48:8a:86:85:e9:1e:
                    08:c2:10:f2:2d:35:14:bc:72:e1:07:b9:18:0e:5c:
                    ba:ec:d2:8f:97:14:76:a9:a6:cf:73:f7:89:51:67:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:10:4D:10:FC:C5:FB:3F:B6:F6:18:AF:B5:E2:B9:3A:D2:BC:33:51
            X509v3 Authority Key Identifier:
                keyid:A5:8D:49:83:C9:C6:3B:D8:A1:58:00:3C:58:5F:43:D9:94:C1:2D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c3a343-da82-427a-98c6-ce30d4a398e0/1/pY1Jg8nGO9ihWAA8WF9D2ZTBLcI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c8:51:d0:75:02:dd:15:72:13:c2:1d:ec:62:c8:c8:b0:56:
         b6:5e:b5:0e:81:5b:ff:3c:ee:2e:49:10:f0:6e:07:1c:ab:4f:
         60:a4:96:eb:90:6b:0e:89:55:67:38:e0:93:69:1f:dd:ec:f7:
         71:f8:09:c3:54:1a:f9:57:d4:77:8f:f7:62:0d:3d:23:54:34:
         0c:0d:d3:20:98:03:e6:28:f8:4f:f1:59:0b:11:85:e4:08:62:
         fc:01:d5:c8:58:eb:09:97:e4:53:c7:81:e8:4f:25:72:a5:97:
         d2:6b:fc:ba:7c:0d:1e:5c:08:d4:a6:d9:4e:4f:83:30:05:cc:
         9d:dd:ca:28:bf:1f:d8:1d:31:ad:29:8b:ca:31:0d:ee:8e:4e:
         01:44:6c:3d:d5:0d:f9:6a:f9:19:fe:90:34:a0:a5:5f:4d:b8:
         0f:60:04:e8:b0:b8:d1:f1:70:9a:a2:d0:86:14:c9:dc:91:01:
         74:f0:92:47:a9:d4:50:56:de:b3:03:a5:5e:b1:d8:6b:9d:ed:
         c8:bf:b1:99:ec:08:13:07:e5:69:b6:eb:b4:2c:e0:f1:87:50:
         7f:4f:80:6a:ad:d3:70:47:3c:5e:2b:a2:cb:28:61:1b:ea:99:
         ce:e2:83:f2:5f:9b:71:93:05:ba:08:6b:be:bf:ec:20:14:e1:
         c6:1c:bc:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IkiRIpM0Z8SQ5ggM2swDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1OGQ0OTgzYzljNjNiZDhhMTU4MDAzYzU4NWY0M2Q5OTRj
MTJkYzIwHhcNMjQwNTE3MjIwMDI5WhcNMjQwNTE4MjIwMDI5WjAzMTEwLwYDVQQD
EygwZjEwNGQxMGZjYzVmYjNmYjZmNjE4YWZiNWUyYjkzYWQyYmMzMzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeW+2ek/z7w3gk8Za7FHCktZMMau
pmYoUMXyTTLJCcV9tpS40Kiz96knpvLEslOZlzq7wgDGC0YvHC8vm645k9EmzV2w
KDEk85n7OOvSxCAK7DxyyUkm8YqzlyrGCGQux1u4D4Hn8SNM48ws9Kc/vpDRscG7
aGMBdHoXaLIvZpB/exm2+JZH9M66tuaZNADEO1EJNALb3USrLqglHnFn/THW7GAd
Ms/XbRl0GWOJkLF+o6AeTlRuG0sf1g+JAFFYuykDNz1EY7NEg7avH9eyedY8Ekra
qS49St5IioaF6R4IwhDyLTUUvHLhB7kYDly67NKPlxR2qabPc/eJUWe8vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA8QTRD8xfs/tvYYr7XiuTrSvDNRMB8GA1UdIwQY
MBaAFKWNSYPJxjvYoVgAPFhfQ9mUwS3CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jM2EzNDMtZGE4Mi00MjdhLTk4YzYt
Y2UzMGQ0YTM5OGUwLzEvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jM2EzNDMtZGE4Mi00MjdhLTk4YzYtY2UzMGQ0YTM5OGUw
LzEvcFkxSmc4bkdPOWloV0FBOFdGOUQyWlRCTGNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAochR0HUC
3RVyE8Id7GLIyLBWtl61DoFb/zzuLkkQ8G4HHKtPYKSW65BrDolVZzjgk2kf3ez3
cfgJw1Qa+VfUd4/3Yg09I1Q0DA3TIJgD5ij4T/FZCxGF5Ahi/AHVyFjrCZfkU8eB
6E8lcqWX0mv8unwNHlwI1KbZTk+DMAXMnd3KKL8f2B0xrSmLyjEN7o5OAURsPdUN
+Wr5Gf6QNKClX024D2AE6LC40fFwmqLQhhTJ3JEBdPCSR6nUUFbeswOlXrHYa53t
yL+xmewIEwflabbrtCzg8YdQf0+Aaq3TcEc8XiuiyyhhG+qZzuKD8l+bcZMFughr
vr/sIBThxhy8YQ==
-----END CERTIFICATE-----