Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.mft
File:                     OV0LIy1YxovmwD8sFET1EDq8jKE.mft (raw, json)
Hash identifier:          YTHyqv34Uy7zXeEd8g7HO/y1L4nnIChLvE6E+KbiZPs=
Subject key identifier:   72:F1:35:45:3C:23:DA:F7:0D:80:74:16:76:24:DE:5A:44:23:96:E0
Authority key identifier: 39:5D:0B:23:2D:58:C6:8B:E6:C0:3F:2C:14:44:F5:10:3A:BC:8C:A1
Certificate issuer:       /CN=395d0b232d58c68be6c03f2c1444f5103abc8ca1
Certificate serial:       019357D26BD722B7EC07E5EEB9A094504AA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OV0LIy1YxovmwD8sFET1EDq8jKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.mft
Manifest number:          136D
Signing time:             Sat 23 Nov 2024 07:00:28 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:28 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:28 +0000
Files and hashes:         1: OV0LIy1YxovmwD8sFET1EDq8jKE.crl (hash: PcY8D4zGjGeCHHUv9a2dlZjiiePw9nL4axPnG0A5G9A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OV0LIy1YxovmwD8sFET1EDq8jKE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:6b:d7:22:b7:ec:07:e5:ee:b9:a0:94:50:4a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395d0b232d58c68be6c03f2c1444f5103abc8ca1
        Validity
            Not Before: Nov 23 07:00:28 2024 GMT
            Not After : Nov 24 07:00:28 2024 GMT
        Subject: CN=72f135453c23daf70d8074167624de5a442396e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:58:b3:c8:91:1f:47:7f:ba:01:98:da:0e:51:
                    7b:4a:80:37:ff:91:67:83:ca:d3:91:bb:45:02:d2:
                    5e:2d:46:f0:8c:c7:5b:31:a0:9d:a3:b5:a4:05:10:
                    92:40:3c:05:3e:89:33:33:24:8c:67:bc:0f:4a:ba:
                    fd:34:9a:20:94:e1:b1:17:19:9b:d0:9f:bd:17:2d:
                    56:14:90:66:f6:6c:97:4d:55:ed:2a:53:e7:82:c5:
                    e6:a9:52:a2:98:33:e5:5a:e9:82:d0:0e:be:56:04:
                    80:bd:0c:3b:a9:06:12:1d:91:97:f0:59:ad:9a:93:
                    01:4d:13:f7:e0:c1:bb:13:8d:da:6c:65:28:9f:6c:
                    1d:d9:94:da:b2:bd:87:0b:4a:53:d7:fc:87:91:a6:
                    a2:21:5e:9e:87:cc:9e:e7:d4:85:85:45:e1:2f:88:
                    1c:8c:1a:36:3d:e3:ea:0e:21:82:6f:2a:8a:2c:fd:
                    b1:62:81:d8:20:47:4d:9e:40:86:81:60:47:1d:f7:
                    4b:39:43:b6:20:04:c0:13:3a:6b:2c:2d:e7:28:ef:
                    12:be:17:cf:1c:02:58:f6:08:cb:ca:88:a1:a7:09:
                    7a:91:5f:29:d8:2f:11:5d:e2:3a:53:73:f8:e3:78:
                    d8:42:cd:af:dd:61:6c:57:9d:bf:68:68:4e:ba:ef:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F1:35:45:3C:23:DA:F7:0D:80:74:16:76:24:DE:5A:44:23:96:E0
            X509v3 Authority Key Identifier:
                keyid:39:5D:0B:23:2D:58:C6:8B:E6:C0:3F:2C:14:44:F5:10:3A:BC:8C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OV0LIy1YxovmwD8sFET1EDq8jKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:1f:9b:29:3a:0b:b8:b6:c1:fd:9c:de:d5:48:ec:0b:70:13:
         45:0e:7f:5e:a5:7b:8c:ed:32:b4:7b:af:e3:e9:1a:62:30:71:
         88:0b:a1:cd:cb:cc:89:22:ef:35:18:67:82:81:76:0d:4f:7b:
         11:f8:75:43:f4:67:ba:42:3e:1d:c4:7b:39:5f:36:d7:91:5b:
         49:f5:5f:c4:3e:0c:8d:35:a9:0d:26:26:f2:2f:cd:1c:8c:90:
         33:b3:94:e1:ec:87:b3:0a:48:71:5c:ee:bf:e4:9b:eb:38:59:
         08:d7:c3:c8:f1:ea:54:55:f6:6d:b8:9b:63:3b:57:14:99:92:
         a4:53:b9:f1:9e:70:1e:01:91:7d:6f:96:2e:31:5b:11:a6:0e:
         56:82:62:f3:93:52:c1:d4:d5:39:5a:7e:96:d6:3a:02:ad:f7:
         ae:3e:8f:80:cb:ca:d0:e3:60:3d:a4:8d:91:fb:10:dc:4b:f9:
         b0:f9:5a:cd:57:27:c9:b9:29:8b:78:01:91:35:75:67:f9:03:
         8e:22:6c:8e:70:57:af:e9:b7:f3:0e:9c:66:bc:9c:1e:3d:1b:
         83:31:e3:fd:2f:2e:67:80:3f:9a:88:4c:f7:6f:d1:dd:ce:db:
         6c:34:5f:54:be:19:fb:d6:a2:a8:e9:13:c8:c6:9f:c1:87:e2:
         70:3c:64:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0mvXIrfsB+XuuaCUUEqgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NWQwYjIzMmQ1OGM2OGJlNmMwM2YyYzE0NDRmNTEwM2Fi
YzhjYTEwHhcNMjQxMTIzMDcwMDI4WhcNMjQxMTI0MDcwMDI4WjAzMTEwLwYDVQQD
Eyg3MmYxMzU0NTNjMjNkYWY3MGQ4MDc0MTY3NjI0ZGU1YTQ0MjM5NmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1izyJEfR3+6AZjaDlF7SoA3/5Fn
g8rTkbtFAtJeLUbwjMdbMaCdo7WkBRCSQDwFPokzMySMZ7wPSrr9NJoglOGxFxmb
0J+9Fy1WFJBm9myXTVXtKlPngsXmqVKimDPlWumC0A6+VgSAvQw7qQYSHZGX8Fmt
mpMBTRP34MG7E43abGUon2wd2ZTasr2HC0pT1/yHkaaiIV6eh8ye59SFhUXhL4gc
jBo2PePqDiGCbyqKLP2xYoHYIEdNnkCGgWBHHfdLOUO2IATAEzprLC3nKO8SvhfP
HAJY9gjLyoihpwl6kV8p2C8RXeI6U3P443jYQs2v3WFsV52/aGhOuu8EIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLxNUU8I9r3DYB0FnYk3lpEI5bgMB8GA1UdIwQY
MBaAFDldCyMtWMaL5sA/LBRE9RA6vIyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1YwTEl5MVl4b3Ztd0Q4c0ZFVDFFRHE4aktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My85ZGZjZmItYWUyZC00YzA0LWE0MDAt
YjhlZGViMTY2ZDYyLzEvT1YwTEl5MVl4b3Ztd0Q4c0ZFVDFFRHE4aktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My85ZGZjZmItYWUyZC00YzA0LWE0MDAtYjhlZGViMTY2ZDYy
LzEvT1YwTEl5MVl4b3Ztd0Q4c0ZFVDFFRHE4aktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYh+bKToL
uLbB/Zze1UjsC3ATRQ5/XqV7jO0ytHuv4+kaYjBxiAuhzcvMiSLvNRhngoF2DU97
Efh1Q/RnukI+HcR7OV8215FbSfVfxD4MjTWpDSYm8i/NHIyQM7OU4eyHswpIcVzu
v+Sb6zhZCNfDyPHqVFX2bbibYztXFJmSpFO58Z5wHgGRfW+WLjFbEaYOVoJi85NS
wdTVOVp+ltY6Aq33rj6PgMvK0ONgPaSNkfsQ3Ev5sPlazVcnybkpi3gBkTV1Z/kD
jiJsjnBXr+m38w6cZrycHj0bgzHj/S8uZ4A/mohM92/R3c7bbDRfVL4Z+9aiqOkT
yMafwYficDxkzA==
-----END CERTIFICATE-----