Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
File:                     5zcPsJ5SI60eRI9MDxYv6plae1Y.mft (raw, json)
Hash identifier:          TpgrLK9NRz8Iqvno5a00D91hkt8GjJgszplHH4c1dAs=
Subject key identifier:   2D:39:54:DF:8A:EC:3A:BF:FF:64:EE:E3:B1:22:99:3C:99:4A:27:9D
Authority key identifier: E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56
Certificate issuer:       /CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
Certificate serial:       019369DA1A18D0DE5A7EAF313C5991AEF819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
Manifest number:          119A
Signing time:             Tue 26 Nov 2024 19:02:01 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:01 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:01 +0000
Files and hashes:         1: 5zcPsJ5SI60eRI9MDxYv6plae1Y.crl (hash: 2bN7UrbUxjRzz+qVBefmUFIzavEVPocZLbGaDdWlIe4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:1a:18:d0:de:5a:7e:af:31:3c:59:91:ae:f8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7370fb09e5223ad1e448f4c0f162fea995a7b56
        Validity
            Not Before: Nov 26 19:02:01 2024 GMT
            Not After : Nov 27 19:02:01 2024 GMT
        Subject: CN=2d3954df8aec3abfff64eee3b122993c994a279d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:a5:11:d6:59:d2:44:82:a2:44:07:61:3c:
                    29:99:d2:3b:13:a5:96:42:dd:b7:3e:f8:92:5a:c9:
                    53:db:ec:d6:ad:31:59:1b:b3:81:58:1d:f7:dc:46:
                    06:40:d3:d9:cf:e6:24:9b:7a:dc:a2:b4:36:be:fa:
                    fa:f7:9b:96:5a:c1:ea:db:c1:81:28:45:68:8e:4e:
                    34:e1:10:97:84:ba:90:f2:d7:5b:10:84:43:b5:1f:
                    fe:68:8c:e3:c4:c7:6d:f5:9e:1b:b3:73:eb:10:42:
                    ab:cd:ff:89:c3:f6:dd:1b:94:b4:a8:9f:f8:28:ed:
                    4d:fd:9a:76:07:0f:bf:52:1c:e3:a0:83:7c:42:29:
                    b2:1d:78:d6:81:66:4d:f1:4f:5c:15:47:a3:f4:fa:
                    bc:25:da:be:29:27:7e:94:d3:dc:bc:0f:66:5d:7e:
                    d2:af:cf:9c:f9:3f:e7:38:61:55:a8:46:7e:20:2f:
                    49:d8:e7:75:63:da:d5:2c:7a:ed:fa:6d:6e:aa:29:
                    75:cd:c1:c0:95:ba:6f:3d:71:cf:86:f4:22:0d:87:
                    fe:bd:95:15:37:ce:54:bc:5b:73:f4:8d:10:b8:75:
                    1a:d6:8f:68:b4:45:d7:0f:6b:f2:33:a0:76:97:f0:
                    fd:96:aa:b8:1f:04:3d:57:2d:32:e6:b5:15:0c:55:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:39:54:DF:8A:EC:3A:BF:FF:64:EE:E3:B1:22:99:3C:99:4A:27:9D
            X509v3 Authority Key Identifier:
                keyid:E7:37:0F:B0:9E:52:23:AD:1E:44:8F:4C:0F:16:2F:EA:99:5A:7B:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zcPsJ5SI60eRI9MDxYv6plae1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/8f2293-7dba-437b-af85-97e355e51ef3/1/5zcPsJ5SI60eRI9MDxYv6plae1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:26:4b:9e:f0:a4:1e:e1:7f:89:79:9c:91:32:63:00:08:8d:
         15:60:e3:e0:30:67:78:29:c1:d3:06:7e:47:fb:2e:da:d1:ab:
         11:a7:99:c0:20:a5:31:a2:1c:3d:5d:05:23:9e:ef:cc:b3:d2:
         66:d0:96:00:98:35:01:c6:95:43:73:f5:c0:8e:92:12:5a:bf:
         0d:9d:bf:a4:46:24:cd:e0:0d:71:3b:28:6f:a1:6f:38:8f:bb:
         8a:e0:33:d1:76:a2:2d:e3:b9:a8:cd:d0:44:41:76:38:21:7d:
         08:b8:44:54:78:8a:2e:2a:81:13:35:ec:3e:84:f6:fd:db:c6:
         2b:f1:a2:a9:7a:64:85:c1:19:3c:43:41:6a:93:5d:00:05:1d:
         4b:68:00:be:ee:85:31:d8:b6:5c:a5:d6:59:3e:17:b8:ba:8f:
         d2:3d:53:65:f3:09:35:11:25:46:09:c7:98:24:cb:9d:8c:b3:
         f1:b6:c0:b5:d8:e8:e3:de:41:2d:d1:f5:a1:98:b2:a1:c7:24:
         00:c9:5f:e3:40:0c:db:60:c1:41:6b:f2:0e:a0:e5:0f:70:69:
         38:e6:b0:01:85:36:03:50:01:a2:aa:67:a2:42:91:2a:09:94:
         bd:08:d7:50:aa:be:65:d6:89:b1:ab:ce:ac:55:7c:eb:e4:c6:
         97:15:c9:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2hoY0N5afq8xPFmRrvgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzcwZmIwOWU1MjIzYWQxZTQ0OGY0YzBmMTYyZmVhOTk1
YTdiNTYwHhcNMjQxMTI2MTkwMjAxWhcNMjQxMTI3MTkwMjAxWjAzMTEwLwYDVQQD
EygyZDM5NTRkZjhhZWMzYWJmZmY2NGVlZTNiMTIyOTkzYzk5NGEyNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo66lEdZZ0kSCokQHYTwpmdI7E6WW
Qt23PviSWslT2+zWrTFZG7OBWB333EYGQNPZz+Ykm3rcorQ2vvr695uWWsHq28GB
KEVojk404RCXhLqQ8tdbEIRDtR/+aIzjxMdt9Z4bs3PrEEKrzf+Jw/bdG5S0qJ/4
KO1N/Zp2Bw+/UhzjoIN8QimyHXjWgWZN8U9cFUej9Pq8Jdq+KSd+lNPcvA9mXX7S
r8+c+T/nOGFVqEZ+IC9J2Od1Y9rVLHrt+m1uqil1zcHAlbpvPXHPhvQiDYf+vZUV
N85UvFtz9I0QuHUa1o9otEXXD2vyM6B2l/D9lqq4HwQ9Vy0y5rUVDFUH9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC05VN+K7Dq//2Tu47EimTyZSiedMB8GA1UdIwQY
MBaAFOc3D7CeUiOtHkSPTA8WL+qZWntWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84ZjIyOTMtN2RiYS00MzdiLWFmODUt
OTdlMzU1ZTUxZWYzLzEvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC84ZjIyOTMtN2RiYS00MzdiLWFmODUtOTdlMzU1ZTUxZWYz
LzEvNXpjUHNKNVNJNjBlUkk5TUR4WXY2cGxhZTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyZLnvCk
HuF/iXmckTJjAAiNFWDj4DBneCnB0wZ+R/su2tGrEaeZwCClMaIcPV0FI57vzLPS
ZtCWAJg1AcaVQ3P1wI6SElq/DZ2/pEYkzeANcTsob6FvOI+7iuAz0XaiLeO5qM3Q
REF2OCF9CLhEVHiKLiqBEzXsPoT2/dvGK/GiqXpkhcEZPENBapNdAAUdS2gAvu6F
Mdi2XKXWWT4XuLqP0j1TZfMJNRElRgnHmCTLnYyz8bbAtdjo495BLdH1oZiyocck
AMlf40AM22DBQWvyDqDlD3BpOOawAYU2A1ABoqpnokKRKgmUvQjXUKq+ZdaJsavO
rFV86+TGlxXJGw==
-----END CERTIFICATE-----