Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
File:                     2lPr-vXBh42KIqk44XMqigdxTzU.mft (raw, json)
Hash identifier:          JZLwR6M4KMiOuf/VQpF/m1xZBaoMknheygfiidsSnqw=
Subject key identifier:   EE:80:EC:D2:EB:87:CC:12:54:EF:18:0E:92:24:0A:B6:1F:A1:C7:2F
Authority key identifier: DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35
Certificate issuer:       /CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
Certificate serial:       019357D28E8E174E3BAD50DF51DDB5E6E79C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 07:00:36 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:36 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:36 +0000
Files and hashes:         1: 2lPr-vXBh42KIqk44XMqigdxTzU.crl (hash: 2kTZrIBuKnK9QqfUHrbnNi4xw8NK59Lvmesvn1gvlYw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:8e:8e:17:4e:3b:ad:50:df:51:dd:b5:e6:e7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da53ebfaf5c1878d8a22a938e1732a8a07714f35
        Validity
            Not Before: Nov 23 07:00:36 2024 GMT
            Not After : Nov 24 07:00:36 2024 GMT
        Subject: CN=ee80ecd2eb87cc1254ef180e92240ab61fa1c72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:28:85:17:36:3d:57:32:87:d3:35:50:4d:
                    9b:1a:96:3f:e6:fe:62:a1:9b:3b:ab:55:33:fe:1a:
                    ca:28:82:da:0f:dd:78:91:62:cf:5d:f0:20:1b:c1:
                    bb:d2:8f:14:59:64:b8:44:3e:f9:34:e2:a2:b6:b2:
                    92:7f:aa:9f:fb:a5:cf:f8:7c:22:b6:b4:ad:b8:50:
                    5e:93:d7:3c:ba:7a:97:86:6d:eb:33:94:2e:f0:99:
                    40:ce:c8:b8:40:d2:c4:1b:e6:db:4d:47:8d:cd:d3:
                    02:ca:9f:f5:56:81:46:f5:eb:6a:7a:7e:24:56:d2:
                    48:cd:05:a5:88:41:7a:15:e0:dd:03:cb:58:70:e8:
                    7a:a7:b5:9a:cb:0c:dc:35:6c:a2:bb:a9:43:0f:37:
                    8e:5f:77:a4:0e:a6:42:bc:6f:dd:b5:aa:e2:d5:20:
                    e3:7f:8d:94:1a:17:6b:29:aa:88:1c:60:88:48:51:
                    d7:3d:35:67:e7:5e:02:01:52:89:a3:82:72:0f:2a:
                    b8:19:68:65:8e:bc:22:0e:24:f0:5d:b5:37:ac:83:
                    13:52:f0:4b:e3:d2:e5:5a:43:fb:2c:fd:e8:fb:3d:
                    ba:8c:d3:81:fb:07:ae:07:e0:65:13:b0:82:d5:6d:
                    f4:fe:75:ea:4d:48:2a:21:70:d7:e1:55:0a:e4:91:
                    40:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:80:EC:D2:EB:87:CC:12:54:EF:18:0E:92:24:0A:B6:1F:A1:C7:2F
            X509v3 Authority Key Identifier:
                keyid:DA:53:EB:FA:F5:C1:87:8D:8A:22:A9:38:E1:73:2A:8A:07:71:4F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2lPr-vXBh42KIqk44XMqigdxTzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1c7c0e-23a1-4142-bee8-93c9e6b093bc/1/2lPr-vXBh42KIqk44XMqigdxTzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:d1:0e:78:8a:80:f9:cc:1e:f6:fb:88:ba:e0:90:ab:ca:cd:
         16:e7:fb:9a:79:74:72:ac:a4:8c:8a:79:3b:4f:db:73:45:69:
         53:02:41:75:a9:11:7c:62:a9:72:8d:26:92:a5:e9:3c:b7:b8:
         ff:32:b2:74:d8:5e:ef:d8:bb:95:b7:88:44:2f:b5:f9:54:2d:
         fb:96:b2:e0:9a:9f:ea:14:a1:f1:82:ef:6b:c6:2e:4d:eb:7b:
         9a:07:65:9c:16:b6:ed:dd:01:63:d8:7e:a6:a5:53:93:0a:b0:
         70:d1:58:ef:76:c4:2d:7c:3d:15:7b:b7:06:d8:b8:97:ba:98:
         51:7e:a2:64:6c:0a:ae:5b:57:12:df:ad:f1:bf:42:49:30:00:
         00:50:61:94:54:b5:c8:e4:3f:7d:47:de:b7:8a:06:fc:ac:72:
         8c:27:7b:12:6c:5b:25:25:d2:33:6b:0b:ab:fc:a9:b2:db:72:
         60:b5:4a:78:eb:cc:89:ab:29:5e:8e:72:b1:e4:c3:c5:00:9f:
         85:e9:c6:a2:0d:bc:25:52:34:54:12:3e:8e:71:f2:50:63:bd:
         c5:26:3f:3b:f8:ff:38:29:97:7f:70:6a:e4:fb:94:f1:4a:91:
         9d:d3:26:f2:78:5b:90:13:a4:53:ec:52:12:3a:4a:29:af:b0:
         a1:c4:59:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0o6OF047rVDfUd215uecMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNTNlYmZhZjVjMTg3OGQ4YTIyYTkzOGUxNzMyYThhMDc3
MTRmMzUwHhcNMjQxMTIzMDcwMDM2WhcNMjQxMTI0MDcwMDM2WjAzMTEwLwYDVQQD
EyhlZTgwZWNkMmViODdjYzEyNTRlZjE4MGU5MjI0MGFiNjFmYTFjNzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPUohRc2PVcyh9M1UE2bGpY/5v5i
oZs7q1Uz/hrKKILaD914kWLPXfAgG8G70o8UWWS4RD75NOKitrKSf6qf+6XP+Hwi
trStuFBek9c8unqXhm3rM5Qu8JlAzsi4QNLEG+bbTUeNzdMCyp/1VoFG9etqen4k
VtJIzQWliEF6FeDdA8tYcOh6p7WaywzcNWyiu6lDDzeOX3ekDqZCvG/dtari1SDj
f42UGhdrKaqIHGCISFHXPTVn514CAVKJo4JyDyq4GWhljrwiDiTwXbU3rIMTUvBL
49LlWkP7LP3o+z26jNOB+weuB+BlE7CC1W30/nXqTUgqIXDX4VUK5JFAgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6A7NLrh8wSVO8YDpIkCrYfoccvMB8GA1UdIwQY
MBaAFNpT6/r1wYeNiiKpOOFzKooHcU81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmxQci12WEJoNDJLSXFrNDRYTXFpZ2R4VHpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xYzdjMGUtMjNhMS00MTQyLWJlZTgt
OTNjOWU2YjA5M2JjLzEvMmxQci12WEJoNDJLSXFrNDRYTXFpZ2R4VHpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xYzdjMGUtMjNhMS00MTQyLWJlZTgtOTNjOWU2YjA5M2Jj
LzEvMmxQci12WEJoNDJLSXFrNDRYTXFpZ2R4VHpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidEOeIqA
+cwe9vuIuuCQq8rNFuf7mnl0cqykjIp5O0/bc0VpUwJBdakRfGKpco0mkqXpPLe4
/zKydNhe79i7lbeIRC+1+VQt+5ay4Jqf6hSh8YLva8YuTet7mgdlnBa27d0BY9h+
pqVTkwqwcNFY73bELXw9FXu3Bti4l7qYUX6iZGwKrltXEt+t8b9CSTAAAFBhlFS1
yOQ/fUfet4oG/KxyjCd7EmxbJSXSM2sLq/ypsttyYLVKeOvMiaspXo5yseTDxQCf
henGog28JVI0VBI+jnHyUGO9xSY/O/j/OCmXf3Bq5PuU8UqRndMm8nhbkBOkU+xS
EjpKKa+wocRZCw==
-----END CERTIFICATE-----