Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
File:                     54z133frZmwE77frs8o0BK3sNPs.mft (raw, json)
Hash identifier:          2z4eSKS86Jid+ba/tnDL/JGdiQytpThRlVYt0POQMI4=
Subject key identifier:   2A:21:17:BF:43:44:3A:04:85:CD:C2:F7:A5:CB:26:70:6F:90:D4:AE
Authority key identifier: E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB
Certificate issuer:       /CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
Certificate serial:       019357650F4C4FBE61E212BBC457DB0DCB2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
Manifest number:          0A51
Signing time:             Sat 23 Nov 2024 05:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 05:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 05:01:00 +0000
Files and hashes:         1: 54z133frZmwE77frs8o0BK3sNPs.crl (hash: 8qEH6dQC9GvTCQEynrsY/Wr1HIYfKmrA5UlpKgf/hiE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:65:0f:4c:4f:be:61:e2:12:bb:c4:57:db:0d:cb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e78cf5df77eb666c04efb7ebb3ca3404adec34fb
        Validity
            Not Before: Nov 23 05:01:00 2024 GMT
            Not After : Nov 24 05:01:00 2024 GMT
        Subject: CN=2a2117bf43443a0485cdc2f7a5cb26706f90d4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:ca:f3:fb:c2:82:e5:6e:51:99:58:73:d0:37:
                    5a:a6:05:cd:62:fb:68:51:c4:a7:df:03:3d:cb:91:
                    90:33:a6:4c:89:1c:41:2f:15:06:51:01:3d:6e:fc:
                    ae:6f:cb:ec:5a:fd:ec:15:ec:4d:2d:7e:b9:23:1f:
                    d8:ba:69:e1:c6:0c:f4:df:40:54:e5:9e:ae:12:54:
                    0a:4c:42:43:af:9c:34:b0:a1:b1:db:2c:e4:c6:6f:
                    2a:f3:10:5a:fd:95:28:cf:18:1d:d5:12:e8:e5:c3:
                    c5:96:a0:95:4e:32:df:33:9d:cc:0f:f8:a9:54:0b:
                    9f:28:64:1f:84:24:0b:3a:77:d3:17:cc:f9:8a:db:
                    8f:b0:e8:ee:4b:65:82:7a:61:47:f4:88:7f:d4:95:
                    86:16:d1:bf:5b:f1:c9:fc:68:96:6d:9f:8e:7c:fa:
                    e1:91:18:3a:34:b2:ec:68:97:2b:8f:84:f8:68:bc:
                    d9:a5:65:41:94:2c:66:66:c2:80:1f:8c:79:f6:3e:
                    6f:7b:b1:49:6c:49:54:30:1b:58:c2:77:6a:98:9b:
                    e7:67:f7:8c:ad:fa:6c:6c:e2:9b:12:ba:2a:59:ef:
                    36:8c:c7:fe:23:a1:2a:7a:4d:82:03:b4:d2:6d:a1:
                    5e:59:e3:b1:2a:c4:ef:79:6e:d2:2a:74:1b:18:a9:
                    f9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:21:17:BF:43:44:3A:04:85:CD:C2:F7:A5:CB:26:70:6F:90:D4:AE
            X509v3 Authority Key Identifier:
                keyid:E7:8C:F5:DF:77:EB:66:6C:04:EF:B7:EB:B3:CA:34:04:AD:EC:34:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54z133frZmwE77frs8o0BK3sNPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dc7bd4-5b8e-49ce-94b9-211b43947007/1/54z133frZmwE77frs8o0BK3sNPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:57:e4:f5:34:7c:42:9a:a0:35:5c:46:bb:77:4c:6d:4a:54:
         67:e7:8b:ad:f0:4f:5d:21:ba:f6:f3:ec:64:20:79:96:d0:f2:
         5d:55:8e:15:87:2b:0f:a7:32:f3:e5:00:59:51:83:65:0b:4e:
         98:75:79:f7:b5:4f:bd:3c:5c:42:4c:ea:a5:1b:08:1f:54:76:
         e3:11:64:20:c7:0c:b4:42:95:b5:77:a1:83:ab:4f:dd:d7:dd:
         d9:a1:b2:2d:ef:7a:09:5b:5e:84:72:68:1a:22:99:02:ab:aa:
         9f:8d:d0:6a:13:6a:96:4f:62:6b:53:53:5c:b5:d8:5d:d1:e4:
         2a:e2:53:38:9c:1a:25:0b:22:b6:5b:ae:4a:c9:08:dd:b2:f5:
         79:13:8f:81:03:e5:bd:cb:9d:cd:e4:69:b5:16:89:b4:59:2a:
         cf:97:5a:12:2f:de:7b:58:28:2b:11:b0:61:73:9b:2d:6a:69:
         9e:a9:84:e5:0a:78:e1:74:42:01:94:c1:c3:37:79:f7:f6:44:
         2c:f5:fb:6e:00:10:60:41:50:1e:88:6b:14:c2:db:05:f0:cf:
         76:22:a1:8f:d7:75:b2:59:53:f0:eb:af:fd:02:f4:92:5c:c4:
         c0:77:17:10:1c:fa:96:b4:5e:98:6a:7f:63:72:29:32:9f:aa:
         05:39:23:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZQ9MT75h4hK7xFfbDcsrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OGNmNWRmNzdlYjY2NmMwNGVmYjdlYmIzY2EzNDA0YWRl
YzM0ZmIwHhcNMjQxMTIzMDUwMTAwWhcNMjQxMTI0MDUwMTAwWjAzMTEwLwYDVQQD
EygyYTIxMTdiZjQzNDQzYTA0ODVjZGMyZjdhNWNiMjY3MDZmOTBkNGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98rz+8KC5W5RmVhz0DdapgXNYvto
UcSn3wM9y5GQM6ZMiRxBLxUGUQE9bvyub8vsWv3sFexNLX65Ix/Yumnhxgz030BU
5Z6uElQKTEJDr5w0sKGx2yzkxm8q8xBa/ZUozxgd1RLo5cPFlqCVTjLfM53MD/ip
VAufKGQfhCQLOnfTF8z5ituPsOjuS2WCemFH9Ih/1JWGFtG/W/HJ/GiWbZ+OfPrh
kRg6NLLsaJcrj4T4aLzZpWVBlCxmZsKAH4x59j5ve7FJbElUMBtYwndqmJvnZ/eM
rfpsbOKbEroqWe82jMf+I6Eqek2CA7TSbaFeWeOxKsTveW7SKnQbGKn5DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCohF79DRDoEhc3C96XLJnBvkNSuMB8GA1UdIwQY
MBaAFOeM9d9362ZsBO+367PKNASt7DT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0Yjkt
MjExYjQzOTQ3MDA3LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9kYzdiZDQtNWI4ZS00OWNlLTk0YjktMjExYjQzOTQ3MDA3
LzEvNTR6MTMzZnJabXdFNzdmcnM4bzBCSzNzTlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFfk9TR8
QpqgNVxGu3dMbUpUZ+eLrfBPXSG69vPsZCB5ltDyXVWOFYcrD6cy8+UAWVGDZQtO
mHV597VPvTxcQkzqpRsIH1R24xFkIMcMtEKVtXehg6tP3dfd2aGyLe96CVtehHJo
GiKZAquqn43QahNqlk9ia1NTXLXYXdHkKuJTOJwaJQsitluuSskI3bL1eROPgQPl
vcudzeRptRaJtFkqz5daEi/ee1goKxGwYXObLWppnqmE5Qp44XRCAZTBwzd59/ZE
LPX7bgAQYEFQHohrFMLbBfDPdiKhj9d1sllT8Ouv/QL0klzEwHcXEBz6lrRemGp/
Y3IpMp+qBTkj5Q==
-----END CERTIFICATE-----