Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
File:                     1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft (raw, json)
Hash identifier:          TZ5/U1O1RTlyBRyaxuwNJVBvQF2qMZJS8cljWyxYvRw=
Subject key identifier:   EB:DD:26:43:7E:6F:72:D4:8B:C7:D2:91:D0:85:17:CA:58:BC:D3:8A
Authority key identifier: FB:6C:BB:52:FF:32:B3:19:FE:72:78:C0:6D:19:E1:95:4E:BD:6A:05
Certificate issuer:       /CN=fb6cbb52ff32b319fe7278c06d19e1954ebd6a05
Certificate serial:       01936AB4E64D388934E4BA7E7C49ABD73B28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
Manifest number:          0338
Signing time:             Tue 26 Nov 2024 23:01:00 +0000
Manifest this update:     Tue 26 Nov 2024 23:01:00 +0000
Manifest next update:     Wed 27 Nov 2024 23:01:00 +0000
Files and hashes:         1: 1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl (hash: e8hFyazhm+5owDIOXJW5REIIeRwR/2Q6od9TkRdise0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:e6:4d:38:89:34:e4:ba:7e:7c:49:ab:d7:3b:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6cbb52ff32b319fe7278c06d19e1954ebd6a05
        Validity
            Not Before: Nov 26 23:01:00 2024 GMT
            Not After : Nov 27 23:01:00 2024 GMT
        Subject: CN=ebdd26437e6f72d48bc7d291d08517ca58bcd38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:db:72:3b:8b:50:64:ea:42:d1:13:21:35:fe:
                    d9:78:1f:d3:cb:06:12:f6:ba:3d:d6:76:b5:33:2e:
                    5a:85:c0:95:c0:f9:b7:40:fd:37:e3:36:cf:31:15:
                    df:aa:af:18:c7:6f:ce:50:87:ac:cd:0d:7b:70:14:
                    6c:56:1d:11:de:84:69:77:bd:3a:0c:ef:59:22:bd:
                    31:c8:b0:9b:f9:fe:99:81:6e:dd:ad:d1:8a:72:12:
                    0a:72:f1:88:e0:20:ca:19:11:1a:10:dc:d3:f8:e7:
                    b6:e6:36:cd:72:2c:94:36:09:3d:33:e1:e9:2c:c7:
                    23:e3:01:6a:03:8e:ac:0b:de:d2:39:e9:11:e9:04:
                    59:3d:d2:72:d8:cc:a2:7f:63:fd:2f:32:55:a6:cc:
                    2f:9e:8f:e2:5b:93:95:61:53:52:5d:f6:35:71:c1:
                    19:3b:08:0b:52:92:4c:5d:c0:b1:93:e0:8d:7e:9f:
                    90:36:4e:99:9e:85:d2:6a:bf:6e:f1:5b:25:bc:05:
                    0f:6b:fb:ad:c9:45:8c:98:e4:05:66:9c:01:05:76:
                    06:a7:ce:94:9b:ef:37:9c:78:6e:7c:80:36:6c:96:
                    f3:d0:c3:0e:80:ad:ea:1e:06:b6:b7:3b:b3:5e:dd:
                    67:83:42:96:45:4b:6c:05:63:60:d2:49:76:42:53:
                    f4:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DD:26:43:7E:6F:72:D4:8B:C7:D2:91:D0:85:17:CA:58:BC:D3:8A
            X509v3 Authority Key Identifier:
                keyid:FB:6C:BB:52:FF:32:B3:19:FE:72:78:C0:6D:19:E1:95:4E:BD:6A:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2y7Uv8ysxn-cnjAbRnhlU69agU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/887f08-f245-4e51-a6fb-7b2a2ab79ffa/1/1-2y7Uv8ysxn-cnjAbRnhlU69agU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5e:0c:23:7f:ba:a7:19:f4:c2:4e:97:71:95:63:99:38:8d:
         11:87:7b:3d:8d:da:b2:b4:9f:c5:45:72:8b:a8:8c:50:6c:fb:
         d8:03:21:eb:91:f9:d8:4e:8b:27:14:c6:ef:eb:1b:19:2b:1c:
         94:73:e8:6b:c7:03:6c:02:ed:f4:8d:a7:15:5c:83:17:07:74:
         1a:da:fb:ad:28:df:c3:6e:3a:ed:60:53:8f:fa:d1:7b:a2:20:
         38:50:96:38:a9:c3:b4:bc:96:72:9a:4d:7c:9d:d9:7e:5d:52:
         06:94:ed:7a:a0:1e:f5:96:a5:c3:7d:80:2c:5b:00:e4:8f:cc:
         80:ad:ec:e5:73:43:2b:9f:41:68:2d:6a:d9:14:5c:65:58:73:
         0a:79:34:34:25:79:10:e7:fe:a5:a4:36:de:77:1c:10:b9:cb:
         e5:26:fd:ed:8d:1d:a2:7e:38:62:c1:14:bf:7d:38:2b:ee:a5:
         7c:dd:00:3d:bb:ac:6e:33:f6:3d:32:d9:2a:41:c2:dc:f2:e4:
         76:79:aa:2f:4b:dc:20:1a:e2:7e:cc:d6:43:31:03:6d:63:14:
         15:d9:f2:18:93:82:c8:04:dc:6e:fa:71:18:5d:a6:9b:10:74:
         3a:a3:34:23:1c:79:b2:f5:cb:aa:26:4f:04:a0:c5:28:87:98:
         38:cb:83:16
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNqtOZNOIk05Lp+fEmr1zsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNmNiYjUyZmYzMmIzMTlmZTcyNzhjMDZkMTllMTk1NGVi
ZDZhMDUwHhcNMjQxMTI2MjMwMTAwWhcNMjQxMTI3MjMwMTAwWjAzMTEwLwYDVQQD
EyhlYmRkMjY0MzdlNmY3MmQ0OGJjN2QyOTFkMDg1MTdjYTU4YmNkMzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NtyO4tQZOpC0RMhNf7ZeB/TywYS
9ro91na1My5ahcCVwPm3QP034zbPMRXfqq8Yx2/OUIeszQ17cBRsVh0R3oRpd706
DO9ZIr0xyLCb+f6ZgW7drdGKchIKcvGI4CDKGREaENzT+Oe25jbNciyUNgk9M+Hp
LMcj4wFqA46sC97SOekR6QRZPdJy2Myif2P9LzJVpswvno/iW5OVYVNSXfY1ccEZ
OwgLUpJMXcCxk+CNfp+QNk6ZnoXSar9u8VslvAUPa/utyUWMmOQFZpwBBXYGp86U
m+83nHhufIA2bJbz0MMOgK3qHga2tzuzXt1ng0KWRUtsBWNg0kl2QlP0wQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOvdJkN+b3LUi8fSkdCFF8pYvNOKMB8GA1UdIwQY
MBaAFPtsu1L/MrMZ/nJ4wG0Z4ZVOvWoFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0yeTdVdjh5c3huLWNuakFiUm5obFU2OWFnVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvODg3ZjA4LWYyNDUtNGU1MS1hNmZi
LTdiMmEyYWI3OWZmYS8xLzEtMnk3VXY4eXN4bi1jbmpBYlJuaGxVNjlhZ1UubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E2Lzg4N2YwOC1mMjQ1LTRlNTEtYTZmYi03YjJhMmFiNzlm
ZmEvMS8xLTJ5N1V2OHlzeG4tY25qQWJSbmhsVTY5YWdVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT14M
I3+6pxn0wk6XcZVjmTiNEYd7PY3asrSfxUVyi6iMUGz72AMh65H52E6LJxTG7+sb
GSsclHPoa8cDbALt9I2nFVyDFwd0Gtr7rSjfw2467WBTj/rRe6IgOFCWOKnDtLyW
cppNfJ3Zfl1SBpTteqAe9Zalw32ALFsA5I/MgK3s5XNDK59BaC1q2RRcZVhzCnk0
NCV5EOf+paQ23nccELnL5Sb97Y0don44YsEUv304K+6lfN0APbusbjP2PTLZKkHC
3PLkdnmqL0vcIBrifszWQzEDbWMUFdnyGJOCyATcbvpxGF2mmxB0OqM0Ixx5svXL
qiZPBKDFKIeYOMuDFg==
-----END CERTIFICATE-----