Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
File:                     MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft (raw, json)
Hash identifier:          JVrTAQ4V/HnrGt65SX80AxU5kWGGGQIvr1xhdAyPLIk=
Subject key identifier:   7F:31:53:BD:CE:19:C9:4A:F8:C8:5C:41:0C:1F:57:60:09:64:84:60
Authority key identifier: 33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97
Certificate issuer:       /CN=33229bd682fe0a3410698bdd4c262dc99cc02797
Certificate serial:       019356F6CE03F86504AC5AD41F08B7FD7252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
Manifest number:          06CD
Signing time:             Sat 23 Nov 2024 03:00:35 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:35 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:35 +0000
Files and hashes:         1: MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl (hash: HRGnDNlXHDoCvEYdc/zAEr2/VRf2a/V70Jo69HvCdjU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:ce:03:f8:65:04:ac:5a:d4:1f:08:b7:fd:72:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33229bd682fe0a3410698bdd4c262dc99cc02797
        Validity
            Not Before: Nov 23 03:00:35 2024 GMT
            Not After : Nov 24 03:00:35 2024 GMT
        Subject: CN=7f3153bdce19c94af8c85c410c1f576009648460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bc:06:5c:38:76:1a:6b:37:5e:a7:a2:9e:51:
                    63:21:f7:40:a4:d0:37:53:ae:2c:4c:d5:8a:86:03:
                    32:09:ee:2b:3f:c0:c2:73:21:6e:cd:b7:46:ee:9f:
                    43:2d:22:da:6e:63:45:d6:82:82:00:9b:79:72:e8:
                    ae:53:71:97:f2:59:a1:c1:6a:7c:86:56:bb:30:c6:
                    69:62:fd:1c:4d:ae:b1:b4:65:74:69:19:32:55:9b:
                    3f:9b:01:36:5a:1d:b8:d9:a9:14:18:60:18:26:dc:
                    58:b0:71:b5:21:ee:04:68:36:b2:7b:b9:f8:82:ea:
                    85:ec:ab:05:46:2d:cc:a2:a9:0b:8f:ae:5c:83:b3:
                    2f:39:5b:3b:6b:fb:01:1a:05:52:0b:1b:1a:12:98:
                    64:3f:6c:a0:ec:9e:28:c8:89:ad:73:cd:c4:d8:cf:
                    47:40:79:5e:1d:81:e1:7a:1b:00:53:af:9b:7b:de:
                    99:77:ac:f9:d9:50:8a:8b:86:38:0b:99:c0:e3:27:
                    2b:f1:32:06:9f:a9:fb:e4:a1:26:ff:c8:c9:0f:1e:
                    a0:87:6a:35:5b:09:34:dc:46:62:a4:19:72:8f:79:
                    31:3e:53:07:54:da:21:15:5a:4d:63:3a:af:95:b9:
                    4c:c5:ce:1b:d7:e8:e8:5f:3b:ea:d0:f7:6a:18:06:
                    b7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:31:53:BD:CE:19:C9:4A:F8:C8:5C:41:0C:1F:57:60:09:64:84:60
            X509v3 Authority Key Identifier:
                keyid:33:22:9B:D6:82:FE:0A:34:10:69:8B:DD:4C:26:2D:C9:9C:C0:27:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f8dd98-81b6-4df8-9154-07def10a118b/1/MyKb1oL-CjQQaYvdTCYtyZzAJ5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:82:31:b3:46:93:ae:e7:01:82:06:3e:df:c8:0d:47:5b:7a:
         7c:0e:a7:32:14:e6:3b:39:1d:ba:4e:ae:ef:72:56:c3:cc:0d:
         ba:4b:b9:49:4f:b6:34:e2:30:d8:b4:a5:67:7d:2b:bf:94:20:
         d0:09:75:31:15:65:b2:27:ed:dd:01:f2:65:b3:86:b2:f7:89:
         ed:31:1f:81:e9:55:c5:60:1b:ba:14:be:71:4e:2d:b2:56:11:
         e1:20:4c:09:86:58:72:9e:c8:c8:9a:32:f8:39:f0:47:47:02:
         d1:00:63:5c:be:91:9a:6c:71:3b:0f:0b:a7:45:9e:eb:d4:4a:
         9d:39:06:76:8d:12:9b:85:2c:bc:d7:46:31:90:34:e1:61:a6:
         f5:f9:b8:ab:37:3e:2d:fc:08:47:b5:73:08:e8:7b:d5:6c:f5:
         0d:56:d1:b1:55:c7:03:a6:71:f4:82:56:c4:d0:85:05:c0:46:
         96:bb:28:8c:2f:9b:19:4f:8c:69:68:fc:60:e9:63:76:16:5d:
         53:a0:c3:3f:31:2c:53:22:cf:65:42:17:8f:0b:69:ab:d0:4a:
         09:50:3e:1f:0c:7a:81:17:27:e1:87:80:62:27:5d:a8:ff:14:
         ec:ab:54:5f:6b:9d:22:85:ca:28:9b:16:da:93:a6:bf:e6:ad:
         18:24:44:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9s4D+GUErFrUHwi3/XJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMjI5YmQ2ODJmZTBhMzQxMDY5OGJkZDRjMjYyZGM5OWNj
MDI3OTcwHhcNMjQxMTIzMDMwMDM1WhcNMjQxMTI0MDMwMDM1WjAzMTEwLwYDVQQD
Eyg3ZjMxNTNiZGNlMTljOTRhZjhjODVjNDEwYzFmNTc2MDA5NjQ4NDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrwGXDh2Gms3XqeinlFjIfdApNA3
U64sTNWKhgMyCe4rP8DCcyFuzbdG7p9DLSLabmNF1oKCAJt5cuiuU3GX8lmhwWp8
hla7MMZpYv0cTa6xtGV0aRkyVZs/mwE2Wh242akUGGAYJtxYsHG1Ie4EaDaye7n4
guqF7KsFRi3MoqkLj65cg7MvOVs7a/sBGgVSCxsaEphkP2yg7J4oyImtc83E2M9H
QHleHYHhehsAU6+be96Zd6z52VCKi4Y4C5nA4ycr8TIGn6n75KEm/8jJDx6gh2o1
Wwk03EZipBlyj3kxPlMHVNohFVpNYzqvlblMxc4b1+joXzvq0PdqGAa3PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH8xU73OGclK+MhcQQwfV2AJZIRgMB8GA1UdIwQY
MBaAFDMim9aC/go0EGmL3UwmLcmcwCeXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXlLYjFvTC1DalFRYVl2ZFRDWXR5WnpBSjVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mOGRkOTgtODFiNi00ZGY4LTkxNTQt
MDdkZWYxMGExMThiLzEvTXlLYjFvTC1DalFRYVl2ZFRDWXR5WnpBSjVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mOGRkOTgtODFiNi00ZGY4LTkxNTQtMDdkZWYxMGExMThi
LzEvTXlLYjFvTC1DalFRYVl2ZFRDWXR5WnpBSjVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoIxs0aT
rucBggY+38gNR1t6fA6nMhTmOzkduk6u73JWw8wNuku5SU+2NOIw2LSlZ30rv5Qg
0Al1MRVlsift3QHyZbOGsveJ7TEfgelVxWAbuhS+cU4tslYR4SBMCYZYcp7IyJoy
+DnwR0cC0QBjXL6RmmxxOw8Lp0We69RKnTkGdo0Sm4UsvNdGMZA04WGm9fm4qzc+
LfwIR7VzCOh71Wz1DVbRsVXHA6Zx9IJWxNCFBcBGlrsojC+bGU+MaWj8YOljdhZd
U6DDPzEsUyLPZUIXjwtpq9BKCVA+Hwx6gRcn4YeAYiddqP8U7KtUX2udIoXKKJsW
2pOmv+atGCRELQ==
-----END CERTIFICATE-----