Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
File:                     QZV-DXwo4yonWu2yD4AjYbRb_1E.mft (raw, json)
Hash identifier:          cMgOYZbsdlVDksCT1flV2hgxq4W/IbS+7Y2VFhSAfz8=
Subject key identifier:   34:62:06:7E:62:82:FB:7C:4F:E0:C3:F0:14:4B:C2:74:D9:20:48:3A
Authority key identifier: 41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51
Certificate issuer:       /CN=41957e0d7c28e32a275aedb20f802361b45bff51
Certificate serial:       018F98AB5FC0F9D08E0CE9CFA1EA0A9B0C92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
Manifest number:          0E13
Signing time:             Tue 21 May 2024 01:01:59 +0000
Manifest this update:     Tue 21 May 2024 01:01:59 +0000
Manifest next update:     Wed 22 May 2024 01:01:59 +0000
Files and hashes:         1: QZV-DXwo4yonWu2yD4AjYbRb_1E.crl (hash: m6icLmiAVYibTMSmlh2NDSH2FcrLbO0tomGrJm1wpYs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:ab:5f:c0:f9:d0:8e:0c:e9:cf:a1:ea:0a:9b:0c:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41957e0d7c28e32a275aedb20f802361b45bff51
        Validity
            Not Before: May 21 01:01:59 2024 GMT
            Not After : May 22 01:01:59 2024 GMT
        Subject: CN=3462067e6282fb7c4fe0c3f0144bc274d920483a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:87:3c:62:4e:8f:52:91:b8:bc:ed:0c:63:
                    ef:5a:13:9e:84:f0:6f:56:87:f4:b0:4a:7a:01:03:
                    91:55:65:ef:fc:ad:0d:6e:d3:8b:08:68:e8:a3:64:
                    bd:5a:56:60:63:28:09:4c:7a:a1:e9:38:77:7a:b8:
                    14:0e:91:88:34:a7:64:13:bb:78:d6:a8:41:ba:82:
                    80:c9:2e:df:a1:ea:b3:2d:15:0d:33:5a:a2:8b:19:
                    f2:81:30:1e:63:9b:83:f8:d0:47:87:0d:5f:76:6c:
                    5c:91:45:54:64:c3:06:9e:4b:8b:64:a5:28:20:35:
                    7f:d1:bb:1e:e0:b1:f4:f8:60:45:e8:e5:e7:cb:9e:
                    94:c7:0c:1b:6e:4c:12:f9:57:c4:00:ad:e3:c1:10:
                    4d:2f:04:32:cd:a5:5b:aa:d3:e6:35:ae:74:d8:ee:
                    60:9c:17:61:ac:c1:1c:64:6e:f8:43:1a:78:2b:a7:
                    56:1f:62:34:6c:5a:f8:b4:16:62:c0:ae:8a:75:f7:
                    b2:e8:74:13:8f:53:c3:1b:c7:3b:24:9f:0d:b4:da:
                    26:0b:a9:6a:58:06:f2:66:c4:a6:ff:d7:3b:21:0c:
                    d8:a7:7a:4c:91:3d:53:ce:b3:b2:b9:6d:06:10:6c:
                    c3:f2:1b:c8:bf:b1:34:f4:6f:d3:4a:78:66:db:f9:
                    23:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:62:06:7E:62:82:FB:7C:4F:E0:C3:F0:14:4B:C2:74:D9:20:48:3A
            X509v3 Authority Key Identifier:
                keyid:41:95:7E:0D:7C:28:E3:2A:27:5A:ED:B2:0F:80:23:61:B4:5B:FF:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZV-DXwo4yonWu2yD4AjYbRb_1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7a1d45-7f3e-484d-b796-d51752bff154/1/QZV-DXwo4yonWu2yD4AjYbRb_1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f4:05:14:64:7c:0f:cc:2a:65:19:0a:4f:2f:2b:82:47:f7:
         da:46:2a:37:7b:75:28:cb:b2:d1:c1:ff:5d:bb:7c:30:c6:22:
         9a:69:f3:36:96:8b:a4:08:a5:93:82:a1:37:ee:be:18:e8:47:
         8d:a0:8c:17:d5:70:40:a3:d4:01:00:15:8e:3d:2e:8b:5e:11:
         53:be:9c:7f:8d:8a:65:22:89:50:82:1f:72:c8:75:e1:37:8b:
         8d:9c:d1:32:83:45:71:08:00:52:90:43:15:01:c0:b6:d6:08:
         fb:a0:7f:d5:db:a2:f8:75:a2:71:bf:49:9e:a5:a3:b3:cd:e8:
         73:dc:87:b5:31:32:05:7e:50:df:2b:67:ed:39:86:fa:e5:56:
         e6:38:37:d7:c7:a8:19:35:d6:0f:00:47:8a:4f:02:87:56:38:
         f9:07:5f:0f:60:88:f6:cd:56:d0:6f:23:d1:8e:ff:b7:64:a8:
         50:36:21:8d:2d:4c:94:14:b2:a0:dd:2a:7b:39:cd:86:f0:45:
         9a:15:d2:9e:dd:e7:43:4e:18:43:c9:66:75:9e:da:5e:16:56:
         28:9a:b3:11:8e:e1:e7:dc:fb:dc:b3:c6:e0:0a:b9:ff:de:47:
         b2:d2:ab:b4:9b:25:4c:cc:0f:31:64:ac:27:6f:05:b5:e6:6b:
         22:8b:52:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Yq1/A+dCODOnPoeoKmwySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxOTU3ZTBkN2MyOGUzMmEyNzVhZWRiMjBmODAyMzYxYjQ1
YmZmNTEwHhcNMjQwNTIxMDEwMTU5WhcNMjQwNTIyMDEwMTU5WjAzMTEwLwYDVQQD
EygzNDYyMDY3ZTYyODJmYjdjNGZlMGMzZjAxNDRiYzI3NGQ5MjA0ODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2smHPGJOj1KRuLztDGPvWhOehPBv
Vof0sEp6AQORVWXv/K0NbtOLCGjoo2S9WlZgYygJTHqh6Th3ergUDpGINKdkE7t4
1qhBuoKAyS7foeqzLRUNM1qiixnygTAeY5uD+NBHhw1fdmxckUVUZMMGnkuLZKUo
IDV/0bse4LH0+GBF6OXny56UxwwbbkwS+VfEAK3jwRBNLwQyzaVbqtPmNa502O5g
nBdhrMEcZG74Qxp4K6dWH2I0bFr4tBZiwK6Kdfey6HQTj1PDG8c7JJ8NtNomC6lq
WAbyZsSm/9c7IQzYp3pMkT1TzrOyuW0GEGzD8hvIv7E09G/TSnhm2/kjyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRiBn5igvt8T+DD8BRLwnTZIEg6MB8GA1UdIwQY
MBaAFEGVfg18KOMqJ1rtsg+AI2G0W/9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YTFkNDUtN2YzZS00ODRkLWI3OTYt
ZDUxNzUyYmZmMTU0LzEvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YTFkNDUtN2YzZS00ODRkLWI3OTYtZDUxNzUyYmZmMTU0
LzEvUVpWLURYd280eW9uV3UyeUQ0QWpZYlJiXzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/QFFGR8
D8wqZRkKTy8rgkf32kYqN3t1KMuy0cH/Xbt8MMYimmnzNpaLpAilk4KhN+6+GOhH
jaCMF9VwQKPUAQAVjj0ui14RU76cf42KZSKJUIIfcsh14TeLjZzRMoNFcQgAUpBD
FQHAttYI+6B/1dui+HWicb9JnqWjs83oc9yHtTEyBX5Q3ytn7TmG+uVW5jg318eo
GTXWDwBHik8Ch1Y4+QdfD2CI9s1W0G8j0Y7/t2SoUDYhjS1MlBSyoN0qeznNhvBF
mhXSnt3nQ04YQ8lmdZ7aXhZWKJqzEY7h59z73LPG4Aq5/95HstKrtJslTMwPMWSs
J28FteZrIotScA==
-----END CERTIFICATE-----