Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
File:                     jvk0jidxFMzrutie_olfUKEqgYc.mft (raw, json)
Hash identifier:          TFKSzHPPh4VN4xK/IAq7fsByIpJ8+aD3h6kH6D3i+uc=
Subject key identifier:   14:12:CF:CD:9D:A0:B0:B5:B9:B2:5F:70:A8:E5:16:F8:D2:60:BF:79
Authority key identifier: 8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87
Certificate issuer:       /CN=8ef9348e277114ccebbad89efe895f50a12a8187
Certificate serial:       01936AB43F0BE3325E12FEE1C9E3BFF411B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
Manifest number:          0AD7
Signing time:             Tue 26 Nov 2024 23:00:17 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:17 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:17 +0000
Files and hashes:         1: jvk0jidxFMzrutie_olfUKEqgYc.crl (hash: 0/Hz8uueT+toiVIC1zxs4GItuol6W56ZXei9c9OYCVY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:3f:0b:e3:32:5e:12:fe:e1:c9:e3:bf:f4:11:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ef9348e277114ccebbad89efe895f50a12a8187
        Validity
            Not Before: Nov 26 23:00:17 2024 GMT
            Not After : Nov 27 23:00:17 2024 GMT
        Subject: CN=1412cfcd9da0b0b5b9b25f70a8e516f8d260bf79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:bd:e8:e6:82:37:d2:c5:0f:87:a4:61:51:81:
                    ec:b7:77:f7:7d:69:f3:15:29:d6:a6:c1:2b:e6:44:
                    4c:16:63:54:a9:c5:75:41:e9:26:eb:55:8f:a5:7b:
                    04:c8:e2:02:80:de:1b:0b:94:f2:5f:f9:3d:28:a0:
                    e5:19:48:11:95:72:94:4a:ea:15:fe:ea:07:0e:7a:
                    5e:07:37:59:a5:c8:8a:6d:95:af:04:87:c0:4d:6b:
                    29:81:62:84:91:a5:b7:cf:34:40:ec:e0:6b:1a:5e:
                    3d:be:52:b0:7c:20:d0:9a:c0:30:04:9b:cc:2f:7d:
                    54:64:93:7b:93:e0:89:7c:6e:97:c6:d8:8b:6a:e9:
                    4d:9c:72:84:1d:3f:13:f2:14:93:b3:f1:93:60:d7:
                    4a:c0:f0:00:ad:4a:e3:5c:46:46:e5:89:12:b4:57:
                    1a:d5:d3:da:6e:ac:84:0d:54:8d:b2:d4:84:b4:05:
                    b7:50:84:03:78:ad:ed:1f:87:a5:1a:ce:9f:53:fa:
                    9d:20:0e:9d:e8:78:ea:75:c0:d6:38:47:88:ad:2a:
                    9e:8b:f1:35:5c:65:ba:b4:70:5f:de:1c:60:af:5f:
                    cb:8a:37:47:55:64:dc:28:44:55:a3:45:26:cc:13:
                    bf:7e:7d:37:5b:a0:ed:18:4e:76:1b:0d:1a:66:e5:
                    68:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:12:CF:CD:9D:A0:B0:B5:B9:B2:5F:70:A8:E5:16:F8:D2:60:BF:79
            X509v3 Authority Key Identifier:
                keyid:8E:F9:34:8E:27:71:14:CC:EB:BA:D8:9E:FE:89:5F:50:A1:2A:81:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvk0jidxFMzrutie_olfUKEqgYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/9a5c17-956e-4077-94c3-d6ff913fca12/1/jvk0jidxFMzrutie_olfUKEqgYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:36:5d:57:8e:36:66:90:23:8b:39:5c:c0:e4:89:95:9b:83:
         c0:95:f8:a6:d8:f1:bf:ab:f5:1f:33:c4:f3:fd:7f:42:e4:25:
         da:fc:28:b9:93:f5:e1:32:45:f0:3f:86:cf:9e:b2:78:dc:c9:
         b1:4e:75:ef:67:c4:a0:06:19:b3:cc:be:af:28:2c:8e:04:3c:
         68:85:aa:51:c0:0b:2c:c5:8d:b6:8f:17:a5:73:74:6d:05:d4:
         55:ba:6f:61:9f:46:ab:c8:b1:2e:38:3e:06:54:fb:59:7b:d2:
         c2:f4:a5:94:8a:08:b3:6c:3a:c7:ec:75:49:95:89:02:16:75:
         52:74:8a:57:31:87:18:01:c8:d7:50:0f:ea:1f:53:f1:87:1e:
         15:ed:ab:ce:28:41:74:69:cc:34:c3:f1:4d:52:78:9f:8b:1e:
         02:27:0e:23:82:a0:10:b9:9f:0c:14:87:54:41:40:00:3a:98:
         16:e7:94:c1:04:19:1e:71:00:e1:22:2d:89:0e:3a:ce:4d:38:
         b4:c8:2c:6a:ae:7f:aa:c9:bc:ce:5f:ac:a9:fd:a1:49:1e:77:
         ac:aa:84:6e:bb:90:f3:cf:d2:b3:01:2b:67:65:5e:76:3e:f8:
         89:3d:f3:76:f6:74:c8:12:10:8a:37:52:f7:74:16:35:c8:d4:
         b9:5d:95:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtD8L4zJeEv7hyeO/9BGwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZjkzNDhlMjc3MTE0Y2NlYmJhZDg5ZWZlODk1ZjUwYTEy
YTgxODcwHhcNMjQxMTI2MjMwMDE3WhcNMjQxMTI3MjMwMDE3WjAzMTEwLwYDVQQD
EygxNDEyY2ZjZDlkYTBiMGI1YjliMjVmNzBhOGU1MTZmOGQyNjBiZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+r3o5oI30sUPh6RhUYHst3f3fWnz
FSnWpsEr5kRMFmNUqcV1Qekm61WPpXsEyOICgN4bC5TyX/k9KKDlGUgRlXKUSuoV
/uoHDnpeBzdZpciKbZWvBIfATWspgWKEkaW3zzRA7OBrGl49vlKwfCDQmsAwBJvM
L31UZJN7k+CJfG6XxtiLaulNnHKEHT8T8hSTs/GTYNdKwPAArUrjXEZG5YkStFca
1dPabqyEDVSNstSEtAW3UIQDeK3tH4elGs6fU/qdIA6d6HjqdcDWOEeIrSqei/E1
XGW6tHBf3hxgr1/LijdHVWTcKERVo0UmzBO/fn03W6DtGE52Gw0aZuVoiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQSz82doLC1ubJfcKjlFvjSYL95MB8GA1UdIwQY
MBaAFI75NI4ncRTM67rYnv6JX1ChKoGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanZrMGppZHhGTXpydXRpZV9vbGZVS0VxZ1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My85YTVjMTctOTU2ZS00MDc3LTk0YzMt
ZDZmZjkxM2ZjYTEyLzEvanZrMGppZHhGTXpydXRpZV9vbGZVS0VxZ1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My85YTVjMTctOTU2ZS00MDc3LTk0YzMtZDZmZjkxM2ZjYTEy
LzEvanZrMGppZHhGTXpydXRpZV9vbGZVS0VxZ1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejZdV442
ZpAjizlcwOSJlZuDwJX4ptjxv6v1HzPE8/1/QuQl2vwouZP14TJF8D+Gz56yeNzJ
sU5172fEoAYZs8y+rygsjgQ8aIWqUcALLMWNto8XpXN0bQXUVbpvYZ9Gq8ixLjg+
BlT7WXvSwvSllIoIs2w6x+x1SZWJAhZ1UnSKVzGHGAHI11AP6h9T8YceFe2rzihB
dGnMNMPxTVJ4n4seAicOI4KgELmfDBSHVEFAADqYFueUwQQZHnEA4SItiQ46zk04
tMgsaq5/qsm8zl+sqf2hSR53rKqEbruQ88/SswErZ2Vedj74iT3zdvZ0yBIQijdS
93QWNcjUuV2Vxg==
-----END CERTIFICATE-----