Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
File:                     9rpgBVyyum_cmnX99hk3GwBVk84.mft (raw, json)
Hash identifier:          6SS3v3eeV12frmqu4o63/ZOr2as/1hb9XqHHFkaouRA=
Subject key identifier:   2D:97:8F:9D:96:3E:9C:89:6C:CC:CB:8A:67:A8:FD:A9:50:02:A4:DE
Authority key identifier: F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE
Certificate issuer:       /CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
Certificate serial:       019369D8BF3E28D004F7382ED6B7DCA9A73F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
Manifest number:          0482
Signing time:             Tue 26 Nov 2024 19:00:32 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:32 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:32 +0000
Files and hashes:         1: 9rpgBVyyum_cmnX99hk3GwBVk84.crl (hash: UPmMdq8xHB97nEKown6rtFCjAI6JgKNEHNTZH1pHvPA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:bf:3e:28:d0:04:f7:38:2e:d6:b7:dc:a9:a7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
        Validity
            Not Before: Nov 26 19:00:32 2024 GMT
            Not After : Nov 27 19:00:32 2024 GMT
        Subject: CN=2d978f9d963e9c896ccccb8a67a8fda95002a4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5d:0d:50:83:1b:a4:cb:ce:3b:60:8d:4d:12:
                    c3:b6:e0:25:20:d0:cf:b4:60:24:00:b0:f5:67:18:
                    84:11:92:cf:52:47:f4:f2:c4:19:4b:b9:1c:9c:48:
                    93:d3:2c:e2:77:3c:63:f9:25:e6:3b:fe:7f:c0:cc:
                    32:43:54:46:c0:e8:92:77:97:37:69:a5:65:d3:8e:
                    0f:be:2c:db:7e:d6:3b:ea:98:ba:6a:96:14:c4:69:
                    32:64:e4:7f:0d:d8:21:d2:09:fb:94:54:b7:39:7d:
                    ac:13:12:2e:11:50:1a:79:ca:6d:45:5e:dc:7d:dd:
                    fd:b4:9c:9a:3c:f7:1c:de:18:c5:1e:5a:f9:31:e7:
                    27:83:a7:9f:84:b5:9f:d3:bb:a8:1f:f4:d3:b5:27:
                    97:5f:7e:75:71:f7:01:e8:86:34:a4:ea:44:4f:50:
                    a2:f9:1a:f6:de:da:46:24:4b:b6:23:56:ef:00:a4:
                    34:64:0d:f2:45:26:9f:18:17:7d:aa:73:8e:30:6e:
                    87:e5:68:5d:35:d0:36:7d:8b:50:eb:63:0f:55:4e:
                    40:8f:f5:3b:e0:1c:6c:29:a8:35:d4:95:78:ac:70:
                    36:31:09:0f:64:e8:01:0b:d0:cb:f6:28:78:a5:69:
                    ba:30:62:d9:76:8b:e2:b9:44:a3:e8:db:ea:63:e8:
                    2a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:97:8F:9D:96:3E:9C:89:6C:CC:CB:8A:67:A8:FD:A9:50:02:A4:DE
            X509v3 Authority Key Identifier:
                keyid:F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:b7:49:36:3b:7b:9b:d0:64:1e:fa:0e:57:de:68:7c:ce:64:
         9c:f2:72:c4:e9:b1:04:0d:0a:cf:a0:9a:d8:36:a7:39:58:41:
         a5:ca:08:70:84:74:2f:c1:b3:c2:ac:49:37:8e:2c:85:53:46:
         9e:01:d6:97:cf:5e:64:8a:1c:b0:07:a3:be:1b:ac:26:b6:97:
         bf:26:06:19:a1:55:f4:5e:a1:fe:e3:c0:66:a3:ec:0b:d4:15:
         3f:41:f8:a4:08:7e:bc:05:d4:0c:cf:db:40:5e:45:42:56:9c:
         ad:91:68:5f:ee:30:a2:9a:fa:ed:e3:2d:2b:5a:9b:0b:0a:53:
         83:f0:fc:0b:7d:8c:b5:7b:16:10:bf:aa:3a:4b:6b:3f:62:1b:
         75:8f:39:6d:0d:59:c0:a7:2d:42:00:65:3a:42:ab:a2:c9:2c:
         db:7e:9b:f7:bc:fc:08:f7:b0:23:d5:57:02:01:ef:0d:85:f8:
         54:d8:04:91:f9:5d:74:3e:98:94:66:a6:8e:0a:76:f7:e9:d8:
         47:e4:58:b8:6e:19:0d:78:51:4e:6b:97:f5:96:e8:c6:22:53:
         c5:87:be:83:6a:d6:ac:7b:33:b6:5c:a4:a7:1e:3f:21:4d:5d:
         f3:95:2c:af:02:ef:17:70:1d:9f:66:d7:e2:43:af:11:fa:77:
         3e:2a:73:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2L8+KNAE9zgu1rfcqac/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmE2MDA1NWNiMmJhNmZkYzlhNzVmZGY2MTkzNzFiMDA1
NTkzY2UwHhcNMjQxMTI2MTkwMDMyWhcNMjQxMTI3MTkwMDMyWjAzMTEwLwYDVQQD
EygyZDk3OGY5ZDk2M2U5Yzg5NmNjY2NiOGE2N2E4ZmRhOTUwMDJhNGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF0NUIMbpMvOO2CNTRLDtuAlINDP
tGAkALD1ZxiEEZLPUkf08sQZS7kcnEiT0yzidzxj+SXmO/5/wMwyQ1RGwOiSd5c3
aaVl044PvizbftY76pi6apYUxGkyZOR/Ddgh0gn7lFS3OX2sExIuEVAaecptRV7c
fd39tJyaPPcc3hjFHlr5Mecng6efhLWf07uoH/TTtSeXX351cfcB6IY0pOpET1Ci
+Rr23tpGJEu2I1bvAKQ0ZA3yRSafGBd9qnOOMG6H5WhdNdA2fYtQ62MPVU5Aj/U7
4BxsKag11JV4rHA2MQkPZOgBC9DL9ih4pWm6MGLZdoviuUSj6NvqY+gqBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2Xj52WPpyJbMzLimeo/alQAqTeMB8GA1UdIwQY
MBaAFPa6YAVcsrpv3Jp1/fYZNxsAVZPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82YTY0NTktMjMyMC00NTM0LWE5MjYt
NGY5ZDk4OGJkMWQzLzEvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS82YTY0NTktMjMyMC00NTM0LWE5MjYtNGY5ZDk4OGJkMWQz
LzEvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7dJNjt7
m9BkHvoOV95ofM5knPJyxOmxBA0Kz6Ca2DanOVhBpcoIcIR0L8GzwqxJN44shVNG
ngHWl89eZIocsAejvhusJraXvyYGGaFV9F6h/uPAZqPsC9QVP0H4pAh+vAXUDM/b
QF5FQlacrZFoX+4wopr67eMtK1qbCwpTg/D8C32MtXsWEL+qOktrP2IbdY85bQ1Z
wKctQgBlOkKrosks236b97z8CPewI9VXAgHvDYX4VNgEkflddD6YlGamjgp29+nY
R+RYuG4ZDXhRTmuX9ZboxiJTxYe+g2rWrHsztlykpx4/IU1d85UsrwLvF3Adn2bX
4kOvEfp3Pipzmw==
-----END CERTIFICATE-----