Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
File:                     y92Il7O48S4yaeHZHBXqtLNHkHA.mft (raw, json)
Hash identifier:          qB5JPpg69G4csOTPXf5xdEX9eN7rlhnbXDefupMmiUo=
Subject key identifier:   DB:AE:A7:1A:C0:38:79:2A:BD:83:01:F7:39:72:36:AF:43:CA:1E:96
Authority key identifier: CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70
Certificate issuer:       /CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
Certificate serial:       019356897922B235E84BAABE06CEE5D96726
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
Manifest number:          0A76
Signing time:             Sat 23 Nov 2024 01:01:10 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:10 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:10 +0000
Files and hashes:         1: y92Il7O48S4yaeHZHBXqtLNHkHA.crl (hash: qDV7Dqg3jqqWYgBO5tK8l0+WZm31RZL7hj/hkxYbAX8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:79:22:b2:35:e8:4b:aa:be:06:ce:e5:d9:67:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbdd8897b3b8f12e3269e1d91c15eab4b3479070
        Validity
            Not Before: Nov 23 01:01:10 2024 GMT
            Not After : Nov 24 01:01:10 2024 GMT
        Subject: CN=dbaea71ac038792abd8301f7397236af43ca1e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:bf:21:51:cc:92:66:a6:b2:57:96:9b:d6:
                    bf:ec:a5:a3:12:f0:a8:38:6f:b0:b3:18:0b:11:84:
                    ca:91:56:f4:73:c3:e4:eb:c8:bd:95:fc:1b:7a:94:
                    3c:01:ad:a1:a2:c2:5e:1e:e8:b8:fe:0d:10:ee:70:
                    a3:6d:df:23:68:09:b8:d5:2a:8c:7a:95:7e:95:64:
                    2a:0a:58:4b:71:da:38:c8:8f:8b:4e:dd:b2:77:df:
                    db:3f:9c:95:b4:93:77:93:e5:03:2c:18:00:a6:c1:
                    e2:0b:8b:54:5f:4f:eb:35:aa:7c:94:86:83:0c:21:
                    e0:91:2f:e3:6d:4b:b2:8c:ca:39:1a:ce:b8:91:9e:
                    a5:1f:63:aa:6e:d5:8b:8f:ce:c2:25:a1:48:73:20:
                    15:6f:1e:8e:ed:4a:93:fb:d8:78:23:a6:3b:48:76:
                    80:92:ac:2e:8e:6f:b5:ff:1a:5c:8e:80:18:fa:7d:
                    f5:47:46:f0:5f:6b:9a:58:ec:61:39:da:fa:e9:95:
                    40:7a:58:41:1d:43:be:4c:34:8f:ab:df:8c:53:75:
                    55:1b:ee:44:88:af:f8:2d:38:7a:a7:66:53:93:10:
                    cc:4f:b5:b1:32:de:72:da:79:d6:df:8f:20:89:93:
                    d5:0b:23:34:eb:b1:8d:40:99:ad:dc:92:9e:cb:7d:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AE:A7:1A:C0:38:79:2A:BD:83:01:F7:39:72:36:AF:43:CA:1E:96
            X509v3 Authority Key Identifier:
                keyid:CB:DD:88:97:B3:B8:F1:2E:32:69:E1:D9:1C:15:EA:B4:B3:47:90:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y92Il7O48S4yaeHZHBXqtLNHkHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/f57571-980f-4c57-a4cf-6cb4849cfd71/1/y92Il7O48S4yaeHZHBXqtLNHkHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:3e:5b:8c:d4:14:70:d5:ae:38:5d:dd:a4:31:c1:36:83:ca:
         83:33:f9:de:17:0c:23:60:3d:84:e0:f2:52:0f:32:d2:26:0d:
         42:ae:e9:35:77:51:9b:26:e3:85:2b:21:19:88:c5:de:f4:40:
         58:c9:03:5f:69:bd:67:a9:eb:ad:2d:5a:9e:f4:c3:be:ac:2a:
         ae:96:a6:5a:9e:40:28:7c:c9:70:a1:9a:e2:8f:ad:79:47:a3:
         d9:6b:ab:9b:f2:48:70:2c:7a:13:59:5d:3c:b9:72:20:c8:b5:
         48:5f:40:fe:0c:2d:60:a9:9d:7a:14:dc:cd:6f:90:bf:c8:f3:
         b3:3a:62:a6:99:47:dc:f7:e9:de:c0:e7:59:64:d8:b9:f8:06:
         31:0e:aa:4a:f1:2f:2b:dd:3f:24:f4:3b:a2:52:f0:09:db:05:
         cb:fd:d4:9f:21:2d:3a:0b:5d:d4:74:3c:c7:b9:d3:27:c6:8d:
         a8:f5:f5:7d:a1:7b:54:e8:0e:07:2b:6f:16:ce:4c:e8:3b:18:
         59:71:5a:28:bd:3d:53:13:bc:b2:fc:54:b9:6d:2d:c0:44:71:
         b9:e3:05:39:9d:88:02:f5:ab:17:5e:d7:dd:67:9d:91:1f:40:
         0f:10:4a:41:4f:c6:68:0b:bf:cd:e8:e1:c5:09:2c:50:64:62:
         3c:b9:ab:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiXkisjXoS6q+Bs7l2WcmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZGQ4ODk3YjNiOGYxMmUzMjY5ZTFkOTFjMTVlYWI0YjM0
NzkwNzAwHhcNMjQxMTIzMDEwMTEwWhcNMjQxMTI0MDEwMTEwWjAzMTEwLwYDVQQD
EyhkYmFlYTcxYWMwMzg3OTJhYmQ4MzAxZjczOTcyMzZhZjQzY2ExZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+m/IVHMkmamsleWm9a/7KWjEvCo
OG+wsxgLEYTKkVb0c8Pk68i9lfwbepQ8Aa2hosJeHui4/g0Q7nCjbd8jaAm41SqM
epV+lWQqClhLcdo4yI+LTt2yd9/bP5yVtJN3k+UDLBgApsHiC4tUX0/rNap8lIaD
DCHgkS/jbUuyjMo5Gs64kZ6lH2OqbtWLj87CJaFIcyAVbx6O7UqT+9h4I6Y7SHaA
kqwujm+1/xpcjoAY+n31R0bwX2uaWOxhOdr66ZVAelhBHUO+TDSPq9+MU3VVG+5E
iK/4LTh6p2ZTkxDMT7WxMt5y2nnW348giZPVCyM067GNQJmt3JKey30KIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuupxrAOHkqvYMB9zlyNq9Dyh6WMB8GA1UdIwQY
MBaAFMvdiJezuPEuMmnh2RwV6rSzR5BwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTkySWw3TzQ4UzR5YWVIWkhCWHF0TE5Ia0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9mNTc1NzEtOTgwZi00YzU3LWE0Y2Yt
NmNiNDg0OWNmZDcxLzEveTkySWw3TzQ4UzR5YWVIWkhCWHF0TE5Ia0hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9mNTc1NzEtOTgwZi00YzU3LWE0Y2YtNmNiNDg0OWNmZDcx
LzEveTkySWw3TzQ4UzR5YWVIWkhCWHF0TE5Ia0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3D5bjNQU
cNWuOF3dpDHBNoPKgzP53hcMI2A9hODyUg8y0iYNQq7pNXdRmybjhSshGYjF3vRA
WMkDX2m9Z6nrrS1anvTDvqwqrpamWp5AKHzJcKGa4o+teUej2Wurm/JIcCx6E1ld
PLlyIMi1SF9A/gwtYKmdehTczW+Qv8jzszpipplH3Pfp3sDnWWTYufgGMQ6qSvEv
K90/JPQ7olLwCdsFy/3UnyEtOgtd1HQ8x7nTJ8aNqPX1faF7VOgOBytvFs5M6DsY
WXFaKL09UxO8svxUuW0twERxueMFOZ2IAvWrF17X3WedkR9ADxBKQU/GaAu/zejh
xQksUGRiPLmrBA==
-----END CERTIFICATE-----