Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
File:                     EQKbhwTDK6_sKzyCn89YaqGz2cE.mft (raw, json)
Hash identifier:          O1CrFvz+lNh3spkjMsugxTIWnBhvm57hxP5m50xLrQQ=
Subject key identifier:   F1:92:59:11:DE:16:B7:04:F8:C2:55:89:73:C6:22:CC:8E:CB:6E:32
Authority key identifier: 11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1
Certificate issuer:       /CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
Certificate serial:       0193568AFA896D2FEF912B3E84C0ACB28E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
Manifest number:          107C
Signing time:             Sat 23 Nov 2024 01:02:48 +0000
Manifest this update:     Sat 23 Nov 2024 01:02:48 +0000
Manifest next update:     Sun 24 Nov 2024 01:02:48 +0000
Files and hashes:         1: EQKbhwTDK6_sKzyCn89YaqGz2cE.crl (hash: /Nr/u33ZhhIKxuGnN7+Bp0bZYhQnYYjLKfFKnVdj+XQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:02:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:fa:89:6d:2f:ef:91:2b:3e:84:c0:ac:b2:8e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11029b8704c32bafec2b3c829fcf586aa1b3d9c1
        Validity
            Not Before: Nov 23 01:02:48 2024 GMT
            Not After : Nov 24 01:02:48 2024 GMT
        Subject: CN=f1925911de16b704f8c2558973c622cc8ecb6e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ad:b9:17:86:c8:8b:7b:f8:3b:74:7e:76:56:
                    b1:e7:1c:96:fb:70:5a:91:fa:46:12:a5:69:b9:e6:
                    e6:ce:de:dd:9f:a9:0d:60:2a:6c:cc:82:26:6d:0f:
                    39:04:ff:53:6e:90:ca:b9:cf:2d:33:b2:29:bb:4b:
                    00:bb:9c:b4:46:51:0a:4f:aa:e3:54:b6:13:1e:ab:
                    ee:0a:ab:e8:c0:2c:be:34:b9:ee:e4:a9:e8:e6:01:
                    45:97:08:ec:1f:c9:26:ac:42:ae:05:c9:13:8c:70:
                    f1:86:90:6f:88:87:63:2d:17:05:ed:7b:b7:03:2f:
                    af:99:75:64:5f:a1:12:c7:91:02:23:97:ee:c8:05:
                    54:71:ae:d6:28:2d:03:0d:81:a5:8b:93:f6:f0:2e:
                    25:46:af:e7:2a:ff:db:fb:a0:36:9d:56:3c:c5:5d:
                    cc:b9:ec:c7:1a:ed:ff:b3:f9:8f:e3:ba:55:48:97:
                    f3:81:2b:b5:be:eb:c8:ee:5e:8d:ba:f5:bc:fc:ff:
                    bf:1b:13:48:92:33:27:05:52:56:0e:be:45:07:ac:
                    74:3b:fc:ab:61:f1:1d:cc:23:84:86:0c:55:60:cf:
                    27:1c:69:8e:bf:e1:ee:aa:75:36:f5:37:ab:e9:8f:
                    a1:fb:99:2a:53:ae:81:c0:e5:e3:3b:77:60:d4:2c:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:92:59:11:DE:16:B7:04:F8:C2:55:89:73:C6:22:CC:8E:CB:6E:32
            X509v3 Authority Key Identifier:
                keyid:11:02:9B:87:04:C3:2B:AF:EC:2B:3C:82:9F:CF:58:6A:A1:B3:D9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQKbhwTDK6_sKzyCn89YaqGz2cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/ac826a-09b0-4c59-9dae-ce9a7421fa69/1/EQKbhwTDK6_sKzyCn89YaqGz2cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:76:7a:8e:ba:7e:12:44:6c:dd:05:6a:ec:ab:31:38:bd:1b:
         ef:d4:51:6c:95:dc:fd:cf:77:57:c0:85:e4:96:63:9a:6c:37:
         10:65:1d:08:86:d5:f9:70:d7:f3:62:ab:63:ef:6f:0a:66:32:
         3f:94:a5:e7:d7:95:b0:4a:19:2a:65:46:42:1f:35:4e:72:f2:
         16:d4:6d:9a:34:26:67:b8:8c:45:ed:16:52:a1:8c:11:c8:05:
         9d:e6:0e:ce:d1:5f:9f:2c:8a:40:e0:cf:38:61:c1:a7:b7:17:
         c7:e2:cc:b3:3a:fa:f9:cb:bc:09:74:a1:aa:6e:7b:b7:8f:02:
         53:9a:46:30:3f:4b:08:f7:52:c4:ff:2c:8b:33:70:02:2e:d4:
         05:01:e0:37:88:af:bc:67:fa:d4:ed:fd:b5:ae:8a:f8:ae:38:
         95:0a:c0:c9:da:ee:68:20:85:db:b0:d6:af:33:86:58:88:52:
         e9:50:0c:be:76:d0:e7:7f:2b:66:98:8c:b5:21:e2:93:79:16:
         07:53:91:13:c3:73:e0:69:df:af:ab:55:4d:d8:72:d8:fa:ff:
         84:d2:b4:5b:9e:e0:9e:96:a1:d5:b8:95:6b:aa:ab:1a:42:58:
         90:ba:e4:a8:de:cd:3c:c1:05:f8:3d:59:8a:04:5a:dc:40:ff:
         1c:76:32:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWivqJbS/vkSs+hMCsso4DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMDI5Yjg3MDRjMzJiYWZlYzJiM2M4MjlmY2Y1ODZhYTFi
M2Q5YzEwHhcNMjQxMTIzMDEwMjQ4WhcNMjQxMTI0MDEwMjQ4WjAzMTEwLwYDVQQD
EyhmMTkyNTkxMWRlMTZiNzA0ZjhjMjU1ODk3M2M2MjJjYzhlY2I2ZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq25F4bIi3v4O3R+dlax5xyW+3Ba
kfpGEqVpuebmzt7dn6kNYCpszIImbQ85BP9TbpDKuc8tM7Ipu0sAu5y0RlEKT6rj
VLYTHqvuCqvowCy+NLnu5Kno5gFFlwjsH8kmrEKuBckTjHDxhpBviIdjLRcF7Xu3
Ay+vmXVkX6ESx5ECI5fuyAVUca7WKC0DDYGli5P28C4lRq/nKv/b+6A2nVY8xV3M
uezHGu3/s/mP47pVSJfzgSu1vuvI7l6NuvW8/P+/GxNIkjMnBVJWDr5FB6x0O/yr
YfEdzCOEhgxVYM8nHGmOv+HuqnU29Ter6Y+h+5kqU66BwOXjO3dg1Cxu5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGSWRHeFrcE+MJViXPGIsyOy24yMB8GA1UdIwQY
MBaAFBECm4cEwyuv7Cs8gp/PWGqhs9nBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVFLYmh3VERLNl9zS3p5Q244OVlhcUd6MmNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hYzgyNmEtMDliMC00YzU5LTlkYWUt
Y2U5YTc0MjFmYTY5LzEvRVFLYmh3VERLNl9zS3p5Q244OVlhcUd6MmNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9hYzgyNmEtMDliMC00YzU5LTlkYWUtY2U5YTc0MjFmYTY5
LzEvRVFLYmh3VERLNl9zS3p5Q244OVlhcUd6MmNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3Z6jrp+
EkRs3QVq7KsxOL0b79RRbJXc/c93V8CF5JZjmmw3EGUdCIbV+XDX82KrY+9vCmYy
P5Sl59eVsEoZKmVGQh81TnLyFtRtmjQmZ7iMRe0WUqGMEcgFneYOztFfnyyKQODP
OGHBp7cXx+LMszr6+cu8CXShqm57t48CU5pGMD9LCPdSxP8sizNwAi7UBQHgN4iv
vGf61O39ta6K+K44lQrAydruaCCF27DWrzOGWIhS6VAMvnbQ538rZpiMtSHik3kW
B1ORE8Nz4Gnfr6tVTdhy2Pr/hNK0W57gnpah1biVa6qrGkJYkLrkqN7NPMEF+D1Z
igRa3ED/HHYyRg==
-----END CERTIFICATE-----