Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File:                     N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier:          OrJL43R4WtkTLvssXz18SxPBupCmjt4A5MRzaD41U3w=
Subject key identifier:   92:93:74:44:CF:F5:C2:E4:00:F0:59:BB:7A:03:69:CB:C9:00:EF:5E
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer:       /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial:       019365578C317642EF128516F2AEE45B8A57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number:          0A1D
Signing time:             Mon 25 Nov 2024 22:00:56 +0000
Manifest this update:     Mon 25 Nov 2024 22:00:56 +0000
Manifest next update:     Tue 26 Nov 2024 22:00:56 +0000
Files and hashes:         1: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: fs+o64lYvavfPkgVd5ClyVsXHLm2auPqiYWN1zxIwok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:57:8c:31:76:42:ef:12:85:16:f2:ae:e4:5b:8a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
        Validity
            Not Before: Nov 25 22:00:56 2024 GMT
            Not After : Nov 26 22:00:56 2024 GMT
        Subject: CN=92937444cff5c2e400f059bb7a0369cbc900ef5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:72:b9:61:00:21:64:6a:72:21:cc:5c:0e:
                    39:12:30:f9:87:04:51:2a:e2:6e:8a:1a:93:d3:9e:
                    b5:8c:05:22:b0:36:1d:9e:08:6d:82:97:ff:2d:a3:
                    c5:b9:33:2f:85:3c:d9:3f:9c:b6:2d:82:d6:92:d7:
                    39:20:7c:9b:4a:92:5d:49:c3:b2:92:54:30:f9:25:
                    23:1d:ca:a3:51:eb:d3:49:53:0c:c3:68:00:de:8b:
                    a4:53:69:50:88:21:cc:4e:d1:e3:ea:4b:df:9a:55:
                    6f:fe:f0:3f:ef:a0:63:3f:0c:71:a3:b0:a0:5b:d2:
                    9f:60:21:c9:99:e7:c6:7e:56:47:b8:59:d2:07:29:
                    33:cf:25:02:12:0c:5f:f3:c1:af:c9:77:c7:0a:f0:
                    63:13:31:da:59:d0:0b:73:6c:e1:28:12:98:e1:ad:
                    c7:84:6a:d5:42:e2:a5:9e:ae:c0:6f:f1:cb:e2:10:
                    64:c2:e1:6b:3c:25:61:6b:ce:b5:a2:b2:b8:81:ec:
                    c0:82:5b:99:ee:48:c2:c7:a4:18:ae:f7:9e:54:0a:
                    42:0a:e0:f0:c0:1c:03:10:37:a3:90:52:4b:96:ac:
                    75:56:0e:db:ad:49:5c:26:42:75:2d:9e:ea:82:c2:
                    93:09:d1:74:36:37:90:64:7e:11:e6:6d:85:8a:ca:
                    d2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:93:74:44:CF:F5:C2:E4:00:F0:59:BB:7A:03:69:CB:C9:00:EF:5E
            X509v3 Authority Key Identifier:
                keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:09:75:0a:8e:1c:d4:d3:81:71:73:66:64:34:42:6b:7f:65:
         3f:f0:07:8f:cd:f3:02:d9:22:5f:3c:dd:33:cb:3b:46:b0:22:
         47:04:7d:6b:88:68:30:3f:41:e7:d3:fc:02:4e:a2:3a:2a:7b:
         c9:f3:46:8b:d0:a4:79:de:b9:4e:5a:67:aa:cb:68:48:72:58:
         b4:3e:82:e0:41:21:f9:4e:7b:c8:ce:98:0c:fc:80:36:50:46:
         b6:64:b4:7f:40:9a:f2:d8:7b:32:be:a4:45:38:cf:65:a1:02:
         29:c1:71:1a:7b:8a:d8:64:93:2a:1b:24:28:ef:b5:ac:45:01:
         a5:0a:3b:c2:77:b3:c4:37:d7:85:ea:43:a0:90:91:74:9b:1f:
         55:54:40:ed:97:a6:15:4d:b2:fe:be:62:25:52:b9:78:8a:71:
         e3:6b:06:2d:f3:71:ca:18:a8:b5:cb:6e:18:8c:e1:1d:52:28:
         a7:b9:ec:9d:27:fe:e5:eb:44:42:dd:c0:13:20:ff:08:0e:ab:
         cb:ae:7d:60:35:bd:f7:f3:d1:7c:32:28:49:16:fe:2e:11:ac:
         87:03:72:fd:b6:bb:d1:7d:35:51:66:48:0f:5d:37:b6:2c:0b:
         52:14:20:82:60:e0:25:44:db:89:ac:1b:ff:4f:88:a9:7c:ed:
         41:5c:50:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNlV4wxdkLvEoUW8q7kW4pXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTM1MmUxN2FmODdlZTJlNWRjMTczZDE1NTQzZGE2M2Jl
NTU0NzMwHhcNMjQxMTI1MjIwMDU2WhcNMjQxMTI2MjIwMDU2WjAzMTEwLwYDVQQD
Eyg5MjkzNzQ0NGNmZjVjMmU0MDBmMDU5YmI3YTAzNjljYmM5MDBlZjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscVyuWEAIWRqciHMXA45EjD5hwRR
KuJuihqT0561jAUisDYdnghtgpf/LaPFuTMvhTzZP5y2LYLWktc5IHybSpJdScOy
klQw+SUjHcqjUevTSVMMw2gA3oukU2lQiCHMTtHj6kvfmlVv/vA/76BjPwxxo7Cg
W9KfYCHJmefGflZHuFnSBykzzyUCEgxf88GvyXfHCvBjEzHaWdALc2zhKBKY4a3H
hGrVQuKlnq7Ab/HL4hBkwuFrPCVha861orK4gezAgluZ7kjCx6QYrveeVApCCuDw
wBwDEDejkFJLlqx1Vg7brUlcJkJ1LZ7qgsKTCdF0NjeQZH4R5m2FisrSMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKTdETP9cLkAPBZu3oDacvJAO9eMB8GA1UdIwQY
MBaAFDejUuF6+H7i5dwXPRVUPaY75VRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYt
MzViMjFiZmZhZDRkLzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYtMzViMjFiZmZhZDRk
LzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwl1Co4c
1NOBcXNmZDRCa39lP/AHj83zAtkiXzzdM8s7RrAiRwR9a4hoMD9B59P8Ak6iOip7
yfNGi9Cked65TlpnqstoSHJYtD6C4EEh+U57yM6YDPyANlBGtmS0f0Ca8th7Mr6k
RTjPZaECKcFxGnuK2GSTKhskKO+1rEUBpQo7wnezxDfXhepDoJCRdJsfVVRA7Zem
FU2y/r5iJVK5eIpx42sGLfNxyhiotctuGIzhHVIop7nsnSf+5etEQt3AEyD/CA6r
y659YDW99/PRfDIoSRb+LhGshwNy/ba70X01UWZID103tiwLUhQggmDgJUTbiawb
/0+IqXztQVxQCw==
-----END CERTIFICATE-----