Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
File:                     g27BEvKGCMthun5cs62BDusT8Wk.mft (raw, json)
Hash identifier:          hsDbURwbEov2/M3ne+wGKYAGxLotdu4NNJagO12y9p4=
Subject key identifier:   B9:98:58:78:88:D3:74:42:73:35:77:2F:94:74:C6:0C:3C:56:E8:F9
Authority key identifier: 83:6E:C1:12:F2:86:08:CB:61:BA:7E:5C:B3:AD:81:0E:EB:13:F1:69
Certificate issuer:       /CN=836ec112f28608cb61ba7e5cb3ad810eeb13f169
Certificate serial:       0191FB5A13EBDD0F77A5AD74A33C5935AC0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g27BEvKGCMthun5cs62BDusT8Wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
Manifest number:          B7
Signing time:             Mon 16 Sep 2024 15:01:10 +0000
Manifest this update:     Mon 16 Sep 2024 15:01:10 +0000
Manifest next update:     Tue 17 Sep 2024 15:01:10 +0000
Files and hashes:         1: g27BEvKGCMthun5cs62BDusT8Wk.crl (hash: wS29jKWbr8RKGLqte2+B6o9XW8KyYovSjyLPxFpDGnw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g27BEvKGCMthun5cs62BDusT8Wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:5a:13:eb:dd:0f:77:a5:ad:74:a3:3c:59:35:ac:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836ec112f28608cb61ba7e5cb3ad810eeb13f169
        Validity
            Not Before: Sep 16 15:01:10 2024 GMT
            Not After : Sep 17 15:01:10 2024 GMT
        Subject: CN=b998587888d374427335772f9474c60c3c56e8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cb:27:09:bd:5d:7a:cf:6d:0e:02:2a:48:22:
                    a9:4b:d0:68:f3:d3:1f:3c:4f:1e:b3:07:50:5f:2f:
                    76:cd:98:0f:da:02:c6:3c:34:bd:13:dd:60:14:08:
                    c3:16:b9:c7:22:2d:cc:9b:9f:60:12:c7:ff:9f:05:
                    af:b8:98:7b:91:b4:a5:22:11:fb:16:0b:64:c8:b1:
                    2b:66:13:66:a5:93:6d:f4:27:99:51:ea:a2:56:c6:
                    41:33:02:76:11:34:19:5d:26:c4:2d:2a:20:1e:5e:
                    7f:fc:c2:2b:bd:d0:ad:69:59:b2:0b:3e:24:be:75:
                    9d:6c:f8:7f:4c:03:83:4c:40:a3:88:dc:12:b4:e4:
                    2f:c7:12:e1:b0:7f:54:20:4c:f0:77:ad:6f:87:71:
                    50:17:a4:e3:39:bc:53:2d:80:2c:97:79:f0:67:5d:
                    be:19:f8:d1:98:f1:62:e0:cb:b7:de:cb:3a:b0:65:
                    6a:06:01:0a:02:d5:72:68:25:92:12:cb:65:a3:3c:
                    50:34:e7:5a:9e:d9:5d:d3:8b:f6:ec:93:c0:3b:12:
                    bc:73:62:6c:23:c4:c4:a1:71:f5:d3:b9:0e:d9:f4:
                    12:44:a5:b2:52:19:fd:0c:c6:a0:68:17:84:0f:61:
                    22:2f:fd:74:94:d5:90:a8:1f:f3:55:23:bc:81:77:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:98:58:78:88:D3:74:42:73:35:77:2F:94:74:C6:0C:3C:56:E8:F9
            X509v3 Authority Key Identifier:
                keyid:83:6E:C1:12:F2:86:08:CB:61:BA:7E:5C:B3:AD:81:0E:EB:13:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g27BEvKGCMthun5cs62BDusT8Wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/665d01-3cc7-483e-8e9f-c9243b8374aa/1/g27BEvKGCMthun5cs62BDusT8Wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e3:6b:4a:89:d0:84:c7:a8:f2:17:83:60:aa:02:ed:e6:98:
         47:a4:95:22:2b:6c:2b:75:c8:ac:89:7d:39:03:05:c2:a1:66:
         b1:32:8d:54:8e:c7:e4:39:fa:df:1e:cb:3e:9a:93:8f:0b:6f:
         82:fd:69:d5:fa:cb:18:4b:d8:06:9b:c2:9e:9c:94:d6:f1:46:
         e6:1e:f4:75:da:7b:ed:1a:36:d6:3f:af:0e:c7:77:b7:b4:61:
         3b:11:f0:61:18:3f:19:e3:1a:74:aa:29:ef:24:e5:df:3d:80:
         8c:18:58:dc:62:7c:20:9a:84:19:81:7b:82:c9:06:81:c1:08:
         0f:de:56:04:e6:da:21:cf:27:ee:5f:e4:3d:b9:e4:49:cd:52:
         64:b6:29:3c:fa:50:ce:00:75:36:41:49:a4:1d:de:db:78:a4:
         b3:be:8d:17:01:35:ea:2a:bf:10:c7:ed:96:d2:b0:77:10:24:
         5d:88:93:98:28:5d:a9:2a:2b:a6:29:49:51:3c:f1:15:33:d6:
         ea:67:12:b7:2c:55:53:52:c5:a9:46:1c:25:a9:f8:96:f0:17:
         70:0b:19:18:94:05:ed:44:ad:a1:2b:b6:d2:e8:36:b2:05:bf:
         d2:67:59:e6:24:7d:34:80:08:2b:17:32:2f:80:6d:d8:53:63:
         c3:de:3d:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH7WhPr3Q93pa10ozxZNawKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNmVjMTEyZjI4NjA4Y2I2MWJhN2U1Y2IzYWQ4MTBlZWIx
M2YxNjkwHhcNMjQwOTE2MTUwMTEwWhcNMjQwOTE3MTUwMTEwWjAzMTEwLwYDVQQD
EyhiOTk4NTg3ODg4ZDM3NDQyNzMzNTc3MmY5NDc0YzYwYzNjNTZlOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMsnCb1des9tDgIqSCKpS9Bo89Mf
PE8eswdQXy92zZgP2gLGPDS9E91gFAjDFrnHIi3Mm59gEsf/nwWvuJh7kbSlIhH7
FgtkyLErZhNmpZNt9CeZUeqiVsZBMwJ2ETQZXSbELSogHl5//MIrvdCtaVmyCz4k
vnWdbPh/TAODTECjiNwStOQvxxLhsH9UIEzwd61vh3FQF6TjObxTLYAsl3nwZ12+
GfjRmPFi4Mu33ss6sGVqBgEKAtVyaCWSEstlozxQNOdantld04v27JPAOxK8c2Js
I8TEoXH107kO2fQSRKWyUhn9DMagaBeED2EiL/10lNWQqB/zVSO8gXePiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmYWHiI03RCczV3L5R0xgw8Vuj5MB8GA1UdIwQY
MBaAFINuwRLyhgjLYbp+XLOtgQ7rE/FpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzI3QkV2S0dDTXRodW41Y3M2MkJEdXNUOFdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82NjVkMDEtM2NjNy00ODNlLThlOWYt
YzkyNDNiODM3NGFhLzEvZzI3QkV2S0dDTXRodW41Y3M2MkJEdXNUOFdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS82NjVkMDEtM2NjNy00ODNlLThlOWYtYzkyNDNiODM3NGFh
LzEvZzI3QkV2S0dDTXRodW41Y3M2MkJEdXNUOFdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuNrSonQ
hMeo8heDYKoC7eaYR6SVIitsK3XIrIl9OQMFwqFmsTKNVI7H5Dn63x7LPpqTjwtv
gv1p1frLGEvYBpvCnpyU1vFG5h70ddp77Ro21j+vDsd3t7RhOxHwYRg/GeMadKop
7yTl3z2AjBhY3GJ8IJqEGYF7gskGgcEID95WBObaIc8n7l/kPbnkSc1SZLYpPPpQ
zgB1NkFJpB3e23iks76NFwE16iq/EMftltKwdxAkXYiTmChdqSorpilJUTzxFTPW
6mcStyxVU1LFqUYcJan4lvAXcAsZGJQF7UStoSu20ug2sgW/0mdZ5iR9NIAIKxcy
L4Bt2FNjw949Hg==
-----END CERTIFICATE-----