Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft
File:                     VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft (raw, json)
Hash identifier:          mh1lb8H5TQKCVn0vTjeW/qXusa/a3AYa8o10avtVMvs=
Subject key identifier:   FD:41:AE:01:F1:29:33:2F:B4:A8:16:25:71:3D:57:6A:65:09:C9:A7
Authority key identifier: 55:C3:F3:7C:66:6C:E8:45:A2:A0:78:2C:1C:87:30:46:EF:B0:E5:96
Certificate issuer:       /CN=55c3f37c666ce845a2a0782c1c873046efb0e596
Certificate serial:       018F87B61581191DCB2962A8FE85C63DAABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcPzfGZs6EWioHgsHIcwRu-w5ZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft
Manifest number:          0C68
Signing time:             Fri 17 May 2024 18:00:08 +0000
Manifest this update:     Fri 17 May 2024 18:00:08 +0000
Manifest next update:     Sat 18 May 2024 18:00:08 +0000
Files and hashes:         1: VcPzfGZs6EWioHgsHIcwRu-w5ZY.crl (hash: TXyDv2yKdKX9sHBEk3AHDxBZf62dYJmN6EcsDsFK9D8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VcPzfGZs6EWioHgsHIcwRu-w5ZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:15:81:19:1d:cb:29:62:a8:fe:85:c6:3d:aa:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c3f37c666ce845a2a0782c1c873046efb0e596
        Validity
            Not Before: May 17 18:00:08 2024 GMT
            Not After : May 18 18:00:08 2024 GMT
        Subject: CN=fd41ae01f129332fb4a81625713d576a6509c9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:91:f8:00:07:a2:2c:07:5d:03:c4:f5:30:ce:
                    db:df:87:2e:ef:c3:96:4c:b7:01:f2:3f:4e:2b:0f:
                    92:9c:87:cc:0a:6a:02:a9:fb:03:42:29:f8:1c:73:
                    89:f5:d8:55:90:23:f3:f1:78:5b:a3:eb:37:54:3d:
                    b1:19:de:dd:52:61:39:50:a8:0d:9a:e6:14:bd:b6:
                    94:63:31:17:99:50:89:a2:2d:9f:4e:ae:7c:93:2f:
                    33:b4:ee:55:62:6c:59:5c:61:4a:76:23:8d:88:9a:
                    cb:0a:86:39:39:9a:02:b6:92:61:45:9c:75:8d:86:
                    29:fe:8a:72:25:0a:24:c2:54:b9:cf:cb:e9:14:74:
                    fa:57:83:eb:35:36:61:5b:1e:39:57:0f:6f:96:28:
                    51:c7:f0:af:52:1a:f7:45:45:16:80:fe:15:05:f0:
                    ff:55:38:79:65:be:eb:f1:64:ed:46:76:7b:eb:d4:
                    6e:8f:20:0a:3d:11:9a:2b:73:11:38:81:c2:22:e2:
                    e4:11:a4:cc:4a:37:c0:a9:90:91:0f:cb:4e:a5:d2:
                    6d:0a:fe:1e:63:07:a5:45:28:f3:98:16:44:27:e6:
                    84:bc:f2:ed:ff:56:e5:1c:22:d0:fc:c0:68:cc:41:
                    5b:13:d4:68:68:36:aa:a4:c4:77:62:be:d0:c1:26:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:41:AE:01:F1:29:33:2F:B4:A8:16:25:71:3D:57:6A:65:09:C9:A7
            X509v3 Authority Key Identifier:
                keyid:55:C3:F3:7C:66:6C:E8:45:A2:A0:78:2C:1C:87:30:46:EF:B0:E5:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcPzfGZs6EWioHgsHIcwRu-w5ZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c43cbd-f710-40e7-b8b4-7391f1060abf/1/VcPzfGZs6EWioHgsHIcwRu-w5ZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0c:93:c3:16:5a:50:fa:66:b6:b7:47:7b:fa:7f:42:7c:94:
         75:89:f0:8a:59:ad:da:db:ee:56:4b:ba:bd:40:b2:23:a3:d0:
         54:fb:fc:b7:61:7b:cb:4e:d1:fb:3c:c5:f4:88:46:09:65:74:
         70:c8:57:c5:62:99:78:92:dc:8e:a7:d5:2f:62:0d:df:b0:57:
         58:57:b2:84:c6:f6:ba:03:66:8f:63:16:9a:57:83:59:7f:80:
         fa:6b:97:3b:ca:f5:95:5e:9b:56:f2:77:00:42:3e:63:63:62:
         9f:d7:1a:59:e9:2f:d1:98:66:c4:08:4f:e4:1b:cd:aa:9c:8a:
         0f:a9:16:b3:46:a3:e6:e7:f8:ca:fd:26:e3:3d:2e:a9:b6:b4:
         60:60:78:fe:af:4c:77:1c:db:df:4d:ca:66:3f:d0:00:b7:19:
         f5:2c:76:ee:20:06:82:72:0e:f5:22:ce:42:d5:29:87:52:9a:
         a7:50:3f:17:f5:6e:e7:d6:9a:13:6f:9a:b2:1f:11:4c:9b:10:
         61:c2:6d:9a:bc:dd:ba:da:9a:46:10:25:94:5c:af:f7:30:eb:
         1c:c7:c2:08:1f:d9:04:3b:65:1c:9c:b1:ad:4e:78:4d:47:9b:
         e3:51:14:4c:0e:d0:12:64:c8:c9:a5:61:63:cc:53:50:0e:bf:
         81:5a:3f:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HthWBGR3LKWKo/oXGPaq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YzNmMzdjNjY2Y2U4NDVhMmEwNzgyYzFjODczMDQ2ZWZi
MGU1OTYwHhcNMjQwNTE3MTgwMDA4WhcNMjQwNTE4MTgwMDA4WjAzMTEwLwYDVQQD
EyhmZDQxYWUwMWYxMjkzMzJmYjRhODE2MjU3MTNkNTc2YTY1MDljOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZH4AAeiLAddA8T1MM7b34cu78OW
TLcB8j9OKw+SnIfMCmoCqfsDQin4HHOJ9dhVkCPz8Xhbo+s3VD2xGd7dUmE5UKgN
muYUvbaUYzEXmVCJoi2fTq58ky8ztO5VYmxZXGFKdiONiJrLCoY5OZoCtpJhRZx1
jYYp/opyJQokwlS5z8vpFHT6V4PrNTZhWx45Vw9vlihRx/CvUhr3RUUWgP4VBfD/
VTh5Zb7r8WTtRnZ769RujyAKPRGaK3MROIHCIuLkEaTMSjfAqZCRD8tOpdJtCv4e
YwelRSjzmBZEJ+aEvPLt/1blHCLQ/MBozEFbE9RoaDaqpMR3Yr7QwSbE8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1BrgHxKTMvtKgWJXE9V2plCcmnMB8GA1UdIwQY
MBaAFFXD83xmbOhFoqB4LByHMEbvsOWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNQemZHWnM2RVdpb0hnc0hJY3dSdS13NVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jNDNjYmQtZjcxMC00MGU3LWI4YjQt
NzM5MWYxMDYwYWJmLzEvVmNQemZHWnM2RVdpb0hnc0hJY3dSdS13NVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jNDNjYmQtZjcxMC00MGU3LWI4YjQtNzM5MWYxMDYwYWJm
LzEvVmNQemZHWnM2RVdpb0hnc0hJY3dSdS13NVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgyTwxZa
UPpmtrdHe/p/QnyUdYnwilmt2tvuVku6vUCyI6PQVPv8t2F7y07R+zzF9IhGCWV0
cMhXxWKZeJLcjqfVL2IN37BXWFeyhMb2ugNmj2MWmleDWX+A+muXO8r1lV6bVvJ3
AEI+Y2Nin9caWekv0ZhmxAhP5BvNqpyKD6kWs0aj5uf4yv0m4z0uqba0YGB4/q9M
dxzb303KZj/QALcZ9Sx27iAGgnIO9SLOQtUph1Kap1A/F/Vu59aaE2+ash8RTJsQ
YcJtmrzdutqaRhAllFyv9zDrHMfCCB/ZBDtlHJyxrU54TUeb41EUTA7QEmTIyaVh
Y8xTUA6/gVo/EA==
-----END CERTIFICATE-----