Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
File:                     lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft (raw, json)
Hash identifier:          k9uZ+ZpLs6B9gyOm8yVbTLxVLKLOPxZYhy9y6dMhU8s=
Subject key identifier:   15:7D:8A:BD:0A:78:43:9D:1E:5A:64:7E:BC:94:13:5C:96:14:42:0E
Authority key identifier: 97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68
Certificate issuer:       /CN=9735a94f31546d437b89720e844b2f12a5abf268
Certificate serial:       018F87B62976002A5E1DA96C646B3FE9E02C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
Manifest number:          06A8
Signing time:             Fri 17 May 2024 18:00:13 +0000
Manifest this update:     Fri 17 May 2024 18:00:13 +0000
Manifest next update:     Sat 18 May 2024 18:00:13 +0000
Files and hashes:         1: lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl (hash: z+Pu5L/8YQUP6KtxN8yRvX84jmuOyiZtGJ6NyGa6l7I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:29:76:00:2a:5e:1d:a9:6c:64:6b:3f:e9:e0:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9735a94f31546d437b89720e844b2f12a5abf268
        Validity
            Not Before: May 17 18:00:13 2024 GMT
            Not After : May 18 18:00:13 2024 GMT
        Subject: CN=157d8abd0a78439d1e5a647ebc94135c9614420e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:64:5c:c7:66:e7:d7:01:6d:83:1d:56:cb:
                    b9:c4:bc:52:6d:cb:c2:9c:c4:52:43:25:1a:b7:d9:
                    cb:61:8c:00:09:cb:f2:9c:6d:12:60:10:2a:d3:d1:
                    90:1d:f2:84:9d:22:2d:53:c9:cd:91:a4:44:1d:be:
                    b4:6b:43:5b:6c:09:66:42:0e:c2:a8:bb:c8:fb:72:
                    ff:77:5a:ac:a7:96:9c:fa:0b:75:58:fd:c5:a8:1c:
                    4f:5a:51:50:d1:19:02:3e:38:a2:6a:23:8a:9f:2c:
                    73:4d:0a:3a:0e:ab:4f:a2:40:48:c1:c5:f6:09:86:
                    4e:8d:19:08:6b:62:6f:58:ae:a0:e9:d7:c4:f3:7e:
                    3b:3f:10:3e:83:b1:8f:4e:ed:d1:84:c6:f3:11:99:
                    ae:e5:1c:e5:73:03:78:da:32:fb:43:7b:5a:e9:d9:
                    dc:66:bd:23:b6:4a:3e:39:38:65:98:30:95:64:9e:
                    57:2d:10:05:bd:f3:64:50:98:0b:9c:46:6c:56:8f:
                    60:85:3d:99:cf:98:63:03:b3:cb:85:4c:01:f0:f8:
                    ac:f0:51:8c:fd:1d:5e:cf:94:aa:ef:25:ef:18:a2:
                    d7:ec:5b:93:3c:bc:26:30:a8:76:8b:fa:77:4c:e6:
                    1d:e1:4f:17:8c:38:e8:9d:27:69:e0:0d:25:6b:f5:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7D:8A:BD:0A:78:43:9D:1E:5A:64:7E:BC:94:13:5C:96:14:42:0E
            X509v3 Authority Key Identifier:
                keyid:97:35:A9:4F:31:54:6D:43:7B:89:72:0E:84:4B:2F:12:A5:AB:F2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzWpTzFUbUN7iXIOhEsvEqWr8mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/cd4350-be74-47e0-96b3-b0db2eaa97ed/1/lzWpTzFUbUN7iXIOhEsvEqWr8mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:3a:99:a8:f3:e7:bb:b6:a8:78:3e:d4:83:10:b7:0c:87:10:
         0b:50:43:e9:4b:18:54:48:87:e9:f6:ff:dc:eb:07:f7:2a:5d:
         e2:29:67:af:cf:80:93:94:0e:b0:ce:53:03:9e:4d:1d:1c:3e:
         51:60:87:4f:68:e7:dc:a5:d3:2a:ad:af:2e:8f:26:70:03:45:
         f4:98:f9:9b:5a:6e:56:3c:53:11:d0:b8:cb:9a:74:a0:6b:be:
         8a:8e:00:73:54:6e:c5:14:22:6f:a7:18:1f:c1:cb:43:93:48:
         09:6b:f1:59:3d:97:a3:36:5b:6c:fb:a5:f7:6e:27:b0:55:69:
         19:61:e7:3a:34:d7:79:2a:4b:17:61:08:5e:37:e0:7b:58:0b:
         d9:d4:ec:ec:4a:01:e2:67:35:8a:8d:38:cb:c5:7b:b9:2d:db:
         8d:94:a8:69:85:41:c8:92:26:2d:7e:2c:bb:20:79:af:4a:35:
         1f:82:bf:cb:04:56:0a:ee:c4:38:eb:1b:ed:22:6b:fc:e3:53:
         a0:71:03:45:35:e0:b4:a3:96:57:2a:d3:dd:dc:ed:e9:7c:12:
         d3:c9:35:1e:db:a7:b5:11:31:26:c5:13:c8:09:cc:80:88:c1:
         ed:4a:66:c9:ce:35:45:75:43:af:09:f8:cb:ed:5e:7b:1e:32:
         3c:4f:f8:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htil2ACpeHalsZGs/6eAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3MzVhOTRmMzE1NDZkNDM3Yjg5NzIwZTg0NGIyZjEyYTVh
YmYyNjgwHhcNMjQwNTE3MTgwMDEzWhcNMjQwNTE4MTgwMDEzWjAzMTEwLwYDVQQD
EygxNTdkOGFiZDBhNzg0MzlkMWU1YTY0N2ViYzk0MTM1Yzk2MTQ0MjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBJkXMdm59cBbYMdVsu5xLxSbcvC
nMRSQyUat9nLYYwACcvynG0SYBAq09GQHfKEnSItU8nNkaREHb60a0NbbAlmQg7C
qLvI+3L/d1qsp5ac+gt1WP3FqBxPWlFQ0RkCPjiiaiOKnyxzTQo6DqtPokBIwcX2
CYZOjRkIa2JvWK6g6dfE8347PxA+g7GPTu3RhMbzEZmu5RzlcwN42jL7Q3ta6dnc
Zr0jtko+OThlmDCVZJ5XLRAFvfNkUJgLnEZsVo9ghT2Zz5hjA7PLhUwB8Pis8FGM
/R1ez5Sq7yXvGKLX7FuTPLwmMKh2i/p3TOYd4U8XjDjonSdp4A0la/VfhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV9ir0KeEOdHlpkfryUE1yWFEIOMB8GA1UdIwQY
MBaAFJc1qU8xVG1De4lyDoRLLxKlq/JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHpXcFR6RlViVU43aVhJT2hFc3ZFcVdyOG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jZDQzNTAtYmU3NC00N2UwLTk2YjMt
YjBkYjJlYWE5N2VkLzEvbHpXcFR6RlViVU43aVhJT2hFc3ZFcVdyOG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9jZDQzNTAtYmU3NC00N2UwLTk2YjMtYjBkYjJlYWE5N2Vk
LzEvbHpXcFR6RlViVU43aVhJT2hFc3ZFcVdyOG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDqZqPPn
u7aoeD7UgxC3DIcQC1BD6UsYVEiH6fb/3OsH9ypd4ilnr8+Ak5QOsM5TA55NHRw+
UWCHT2jn3KXTKq2vLo8mcANF9Jj5m1puVjxTEdC4y5p0oGu+io4Ac1RuxRQib6cY
H8HLQ5NICWvxWT2XozZbbPul924nsFVpGWHnOjTXeSpLF2EIXjfge1gL2dTs7EoB
4mc1io04y8V7uS3bjZSoaYVByJImLX4suyB5r0o1H4K/ywRWCu7EOOsb7SJr/ONT
oHEDRTXgtKOWVyrT3dzt6XwS08k1HtuntRExJsUTyAnMgIjB7Upmyc41RXVDrwn4
y+1eex4yPE/4iA==
-----END CERTIFICATE-----