Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
File:                     ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft (raw, json)
Hash identifier:          T6uAP/gnDWjpXMxQF+K6FbkF7TSlCK99AEHlvwQfHzY=
Subject key identifier:   AB:B2:FB:A0:AC:2B:42:64:EC:0B:AB:F5:AF:75:53:BB:E2:51:05:05
Authority key identifier: 8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
Certificate issuer:       /CN=8dad9277ba91819eb734924c125f876a41659eab
Certificate serial:       019369DABF0A97F914107849503DA848DB42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
Manifest number:          0D30
Signing time:             Tue 26 Nov 2024 19:02:43 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:43 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:43 +0000
Files and hashes:         1: ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl (hash: yB4aiaKyjgQh3cyc1+suPr1dRGBWUrqPHwg1yNQY7BE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:bf:0a:97:f9:14:10:78:49:50:3d:a8:48:db:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dad9277ba91819eb734924c125f876a41659eab
        Validity
            Not Before: Nov 26 19:02:43 2024 GMT
            Not After : Nov 27 19:02:43 2024 GMT
        Subject: CN=abb2fba0ac2b4264ec0babf5af7553bbe2510505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:3f:3d:70:43:62:d9:34:35:26:b7:f5:48:
                    83:84:a8:dc:31:97:c3:8b:1c:48:5a:28:28:79:97:
                    54:13:06:53:3f:bb:7c:fe:1a:64:b4:5b:74:22:40:
                    65:44:11:64:44:e0:d7:d9:35:3c:fd:f8:3e:eb:7c:
                    ff:1b:14:c5:34:6f:90:15:52:1a:0c:a8:59:6f:03:
                    bf:9f:8a:71:99:23:c7:16:38:e6:b3:1a:cc:26:2d:
                    f1:4d:6b:2e:83:0d:f9:98:cc:cb:81:7f:d9:e3:f1:
                    dd:8d:ec:35:14:9b:8d:86:d7:84:da:2f:6a:b1:e1:
                    4c:4b:18:e8:94:af:ba:18:ed:ac:79:47:30:7d:71:
                    8f:d6:c2:10:98:5d:52:2a:7b:be:bd:e7:f3:ff:ad:
                    04:1a:d9:2b:96:f8:16:a5:9b:b1:63:a1:61:83:81:
                    28:22:40:a0:cf:d8:b9:00:e5:46:a0:ca:34:f2:48:
                    c4:4d:00:62:36:22:d3:78:ee:6c:98:08:a6:97:90:
                    4b:9b:e8:dd:e3:9f:1b:ab:34:fe:11:3b:81:3b:bd:
                    86:b8:6e:92:b3:19:09:c6:55:54:01:f1:78:05:9a:
                    5b:96:28:e3:20:a3:40:39:d9:b1:3b:9a:24:16:5e:
                    60:c5:1d:f7:2d:f8:3a:7b:67:30:b3:49:11:f8:50:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B2:FB:A0:AC:2B:42:64:EC:0B:AB:F5:AF:75:53:BB:E2:51:05:05
            X509v3 Authority Key Identifier:
                keyid:8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:fe:3a:0a:e8:b0:d1:b3:42:d0:08:17:4c:44:91:b6:54:a7:
         d7:db:cd:b2:82:26:f9:f2:20:8a:03:39:13:47:ca:af:83:be:
         fa:08:af:81:fe:83:a8:c9:3b:27:fd:bb:f7:9c:40:8d:04:9e:
         ad:0d:00:48:c0:ba:e0:d1:2f:86:70:72:20:fa:07:4c:dc:e5:
         d8:28:25:ab:9a:7e:9a:a3:30:a2:e8:5e:bf:e2:db:50:da:c6:
         b0:bb:a9:d9:ea:20:57:04:8a:0c:5e:12:9b:57:0f:31:84:aa:
         fb:c8:d4:86:f7:24:0e:22:b7:f0:d3:1a:dc:3e:41:2f:2f:0c:
         7e:28:48:b5:d1:dc:4a:74:00:ca:54:30:0d:43:54:6f:66:fc:
         cf:39:49:65:6e:de:f0:32:5e:90:98:7a:79:29:ee:37:02:62:
         97:30:fe:a7:43:8f:2c:6f:eb:37:88:69:51:6c:d9:5f:b1:54:
         dc:0d:87:05:ad:b8:72:b1:13:27:73:9b:ba:72:ff:12:af:02:
         36:68:5c:c0:6a:ff:6b:21:f1:15:4f:06:76:66:42:c2:36:3b:
         d5:4c:94:cf:21:39:eb:c0:cc:4f:6b:25:ee:6c:b4:97:51:2a:
         cf:99:ac:a9:82:4e:ed:d5:3f:2d:3b:0d:95:df:69:6a:8e:3f:
         d1:ea:25:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2r8Kl/kUEHhJUD2oSNtCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYWQ5Mjc3YmE5MTgxOWViNzM0OTI0YzEyNWY4NzZhNDE2
NTllYWIwHhcNMjQxMTI2MTkwMjQzWhcNMjQxMTI3MTkwMjQzWjAzMTEwLwYDVQQD
EyhhYmIyZmJhMGFjMmI0MjY0ZWMwYmFiZjVhZjc1NTNiYmUyNTEwNTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp0/PXBDYtk0NSa39UiDhKjcMZfD
ixxIWigoeZdUEwZTP7t8/hpktFt0IkBlRBFkRODX2TU8/fg+63z/GxTFNG+QFVIa
DKhZbwO/n4pxmSPHFjjmsxrMJi3xTWsugw35mMzLgX/Z4/Hdjew1FJuNhteE2i9q
seFMSxjolK+6GO2seUcwfXGP1sIQmF1SKnu+vefz/60EGtkrlvgWpZuxY6Fhg4Eo
IkCgz9i5AOVGoMo08kjETQBiNiLTeO5smAiml5BLm+jd458bqzT+ETuBO72GuG6S
sxkJxlVUAfF4BZpblijjIKNAOdmxO5okFl5gxR33Lfg6e2cws0kR+FBz2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKuy+6CsK0Jk7Aur9a91U7viUQUFMB8GA1UdIwQY
MBaAFI2tkne6kYGetzSSTBJfh2pBZZ6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lY2IxZGEtYjgzNS00M2ZhLWI2MDIt
OTE0OWQzNDhhNmM3LzEvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lY2IxZGEtYjgzNS00M2ZhLWI2MDItOTE0OWQzNDhhNmM3
LzEvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlv46Cuiw
0bNC0AgXTESRtlSn19vNsoIm+fIgigM5E0fKr4O++givgf6DqMk7J/2795xAjQSe
rQ0ASMC64NEvhnByIPoHTNzl2Cglq5p+mqMwouhev+LbUNrGsLup2eogVwSKDF4S
m1cPMYSq+8jUhvckDiK38NMa3D5BLy8MfihItdHcSnQAylQwDUNUb2b8zzlJZW7e
8DJekJh6eSnuNwJilzD+p0OPLG/rN4hpUWzZX7FU3A2HBa24crETJ3ObunL/Eq8C
NmhcwGr/ayHxFU8GdmZCwjY71UyUzyE568DMT2sl7my0l1Eqz5msqYJO7dU/LTsN
ld9pao4/0eolPA==
-----END CERTIFICATE-----