Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File:                     W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier:          ViMTLZIUWNwB3gu50HEfECWO1xpGHyGcuUf42sdpwys=
Subject key identifier:   55:D9:D2:20:64:82:54:6A:5B:31:4B:D8:C7:FC:89:CE:7C:EB:26:88
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer:       /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial:       0193572D8E634222B46062CD98AF966762EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number:          010F
Signing time:             Sat 23 Nov 2024 04:00:23 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:23 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:23 +0000
Files and hashes:         1: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: CA21znhydKivQJe8rtRIVYL2mXD1xEFezBbWCD+whA8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2d:8e:63:42:22:b4:60:62:cd:98:af:96:67:62:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
        Validity
            Not Before: Nov 23 04:00:23 2024 GMT
            Not After : Nov 24 04:00:23 2024 GMT
        Subject: CN=55d9d2206482546a5b314bd8c7fc89ce7ceb2688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:13:69:93:aa:28:b6:f8:74:09:fe:cf:2c:65:
                    f5:5e:3b:ed:be:8f:4f:d9:c8:56:7a:1c:df:c9:56:
                    e0:16:b4:c4:cb:a9:2f:5e:8a:7c:1c:50:86:a2:4b:
                    5e:67:8d:d7:62:5e:7f:e7:a1:20:bb:50:b1:e4:1a:
                    83:eb:cf:00:a9:ad:92:a3:97:f9:12:29:ce:cb:f2:
                    be:5c:aa:b1:86:a2:12:1f:1a:5f:50:ff:8c:0e:d6:
                    a4:2b:e8:41:56:cd:be:d7:0e:24:33:c8:f1:38:66:
                    34:2a:99:a1:47:13:da:48:1f:85:60:60:25:a0:ef:
                    89:a1:de:a7:31:87:5a:ea:e1:3d:7e:20:1d:6d:d7:
                    ac:30:3d:4c:e9:f1:b1:48:c3:53:92:5a:36:b3:7f:
                    2e:e7:1d:e2:6e:9b:10:ba:dc:60:fd:4e:f4:48:96:
                    57:8b:8c:bf:55:d1:c4:d5:97:dd:e5:f7:7a:5b:9c:
                    5b:48:bf:a5:a6:0e:c2:4e:d7:70:38:17:eb:84:67:
                    6f:d7:fe:27:37:a3:8d:de:84:01:63:60:63:7d:7d:
                    c5:6e:35:fd:6c:30:04:35:44:5f:60:5d:dd:22:9d:
                    13:8a:a0:84:3e:56:2d:f0:5f:e0:62:1b:06:ba:d1:
                    b3:13:cf:cf:f2:91:b7:34:5e:ed:fa:85:90:fa:5c:
                    b6:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D9:D2:20:64:82:54:6A:5B:31:4B:D8:C7:FC:89:CE:7C:EB:26:88
            X509v3 Authority Key Identifier:
                keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0a:7b:5b:8d:29:35:77:be:cf:e8:f3:33:d6:21:33:3d:9a:
         78:c5:ad:7d:18:51:26:4b:db:7d:09:2f:4b:49:93:cd:0d:7b:
         fa:4f:62:b2:e0:4b:d4:f9:1c:c1:f7:78:1f:f2:f7:da:18:1f:
         6d:42:bb:a2:bf:ea:07:18:36:fd:ff:ea:ec:7a:8a:89:56:69:
         07:21:f0:b3:0b:b4:33:4b:62:3b:52:1b:42:6f:a6:b2:d5:f9:
         6e:6f:49:bd:97:44:6f:c6:6a:74:44:dd:48:52:11:63:2b:9a:
         68:c3:8a:ec:6d:65:16:32:56:5b:50:21:4e:53:68:62:66:c9:
         b0:f8:bf:85:0b:f8:8d:30:80:5c:95:66:3b:b8:51:17:96:8a:
         2b:93:37:25:5c:5e:e5:3b:df:81:cf:cf:e6:50:17:be:f8:6d:
         71:5e:6e:4f:cf:35:f3:16:ab:43:80:da:5c:ec:11:0c:38:14:
         59:99:1e:ac:f2:de:76:1d:1e:de:bb:f7:6a:d9:02:bf:a3:a4:
         f4:2b:f0:56:37:58:9c:9e:53:0a:7c:83:8e:96:21:b8:a5:81:
         54:c4:51:e6:44:78:a9:7d:27:84:07:02:4b:f9:27:dd:6a:5a:
         bb:cf:dc:ef:05:f4:52:5c:cb:c5:27:77:27:a5:87:7f:51:2b:
         21:af:e8:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLY5jQiK0YGLNmK+WZ2LqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZjViZGE1ODM2NTJlMDU4N2ZlZjg0MTY2YjQxZjZjZGE4
ZjFmNzgwHhcNMjQxMTIzMDQwMDIzWhcNMjQxMTI0MDQwMDIzWjAzMTEwLwYDVQQD
Eyg1NWQ5ZDIyMDY0ODI1NDZhNWIzMTRiZDhjN2ZjODljZTdjZWIyNjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RNpk6ootvh0Cf7PLGX1Xjvtvo9P
2chWehzfyVbgFrTEy6kvXop8HFCGokteZ43XYl5/56Egu1Cx5BqD688Aqa2So5f5
EinOy/K+XKqxhqISHxpfUP+MDtakK+hBVs2+1w4kM8jxOGY0KpmhRxPaSB+FYGAl
oO+Jod6nMYda6uE9fiAdbdesMD1M6fGxSMNTklo2s38u5x3ibpsQutxg/U70SJZX
i4y/VdHE1Zfd5fd6W5xbSL+lpg7CTtdwOBfrhGdv1/4nN6ON3oQBY2BjfX3FbjX9
bDAENURfYF3dIp0TiqCEPlYt8F/gYhsGutGzE8/P8pG3NF7t+oWQ+ly2cwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFXZ0iBkglRqWzFL2Mf8ic586yaIMB8GA1UdIwQY
MBaAFFv1vaWDZS4Fh/74QWa0H2zajx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMt
MmE3OWU1ZDIyYWUxLzEvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMtMmE3OWU1ZDIyYWUx
LzEvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgp7W40p
NXe+z+jzM9YhMz2aeMWtfRhRJkvbfQkvS0mTzQ17+k9isuBL1Pkcwfd4H/L32hgf
bUK7or/qBxg2/f/q7HqKiVZpByHwswu0M0tiO1IbQm+mstX5bm9JvZdEb8ZqdETd
SFIRYyuaaMOK7G1lFjJWW1AhTlNoYmbJsPi/hQv4jTCAXJVmO7hRF5aKK5M3JVxe
5Tvfgc/P5lAXvvhtcV5uT8818xarQ4DaXOwRDDgUWZkerPLedh0e3rv3atkCv6Ok
9CvwVjdYnJ5TCnyDjpYhuKWBVMRR5kR4qX0nhAcCS/kn3Wpau8/c7wX0UlzLxSd3
J6WHf1ErIa/o5A==
-----END CERTIFICATE-----