Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
File:                     LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft (raw, json)
Hash identifier:          eS6AZU3VH6qwAjtVIuYJJu2uxsqYLWklT7HP+Subwxs=
Subject key identifier:   7D:A4:9C:38:7C:92:91:9A:E9:43:1B:89:F9:F5:18:CA:FF:B4:0A:FB
Authority key identifier: 2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92
Certificate issuer:       /CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
Certificate serial:       019369D8EAFC4B6904A55E21C3B692C362A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
Manifest number:          8F
Signing time:             Tue 26 Nov 2024 19:00:43 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:43 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:43 +0000
Files and hashes:         1: LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl (hash: yjzwb6xPcptkOoMi7nu3q1pk/VtBB/YVLkCPiY4XofE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:ea:fc:4b:69:04:a5:5e:21:c3:b6:92:c3:62:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f15b73a7c2d131ec14ebd9071718b54c3fba692
        Validity
            Not Before: Nov 26 19:00:43 2024 GMT
            Not After : Nov 27 19:00:43 2024 GMT
        Subject: CN=7da49c387c92919ae9431b89f9f518caffb40afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:79:8d:d8:4f:eb:7c:57:fc:8c:ca:27:c7:c5:
                    90:18:80:b4:7a:20:5a:f2:58:91:b2:8a:e6:74:4d:
                    d4:41:99:51:38:22:d3:00:8f:bb:f5:81:5e:2c:e8:
                    0b:82:06:a1:a4:f3:2e:0a:cd:c1:a2:ee:f0:ac:4d:
                    db:28:7e:e5:e2:ae:d9:53:eb:56:54:1a:60:30:60:
                    55:72:e6:71:46:80:b4:cc:88:98:31:82:f7:8f:bc:
                    60:a0:e1:8b:97:61:78:59:6d:52:6e:66:51:f1:63:
                    75:12:9c:ff:ab:4f:97:76:5a:b5:0a:6d:74:33:a3:
                    d6:17:10:95:57:e1:f1:21:3d:e7:1a:f8:a8:e9:9b:
                    7e:9a:16:d4:91:7a:a1:05:80:67:2e:b7:56:fc:92:
                    bf:0a:ee:2a:32:8e:e6:a4:3a:5f:77:f2:b4:74:fe:
                    0e:05:52:48:8a:bc:3a:30:a1:95:9a:37:2a:ec:51:
                    3d:6f:6f:11:2a:70:ae:f5:18:98:53:02:7d:0a:d4:
                    4f:d0:09:90:78:97:20:e7:d2:e7:b3:6d:4a:49:2c:
                    33:d4:ef:66:30:20:d9:f8:11:1c:53:43:c6:57:95:
                    91:05:8a:a0:58:52:5e:c5:d0:aa:18:29:75:f9:b6:
                    53:ee:dc:e8:10:9e:6b:5e:55:df:98:1b:00:d9:a0:
                    06:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A4:9C:38:7C:92:91:9A:E9:43:1B:89:F9:F5:18:CA:FF:B4:0A:FB
            X509v3 Authority Key Identifier:
                keyid:2F:15:B7:3A:7C:2D:13:1E:C1:4E:BD:90:71:71:8B:54:C3:FB:A6:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxW3OnwtEx7BTr2QcXGLVMP7ppI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7929f4-ec35-4d9c-92a8-0eb45ef62d8d/1/LxW3OnwtEx7BTr2QcXGLVMP7ppI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8a:cc:ba:99:1b:a9:97:39:47:60:56:d5:0d:95:40:e3:e7:
         c6:54:85:de:da:63:3d:ae:8b:fc:24:37:f0:ce:30:2d:87:4a:
         b8:23:1e:c8:2c:d7:7c:d3:8c:83:29:96:10:c9:5f:ce:06:6f:
         45:35:ec:9f:d8:df:86:22:62:bd:b1:f4:9e:e3:f9:fb:3f:2c:
         d2:7d:85:f3:b9:a9:78:1b:79:51:10:cc:81:ae:f6:6f:b4:1f:
         a3:b4:d4:d5:7a:9a:c4:61:4c:8d:22:0f:f7:e7:52:da:33:bd:
         7d:2f:5e:aa:c0:b1:82:9d:e0:2b:7b:35:a6:99:e4:23:4a:8b:
         d9:d2:69:13:51:78:73:2d:56:fb:73:ee:03:e2:b9:33:b1:89:
         26:8e:0d:72:74:9d:3e:c0:78:18:8a:9d:4f:46:2f:89:9e:95:
         7e:19:6c:a1:cc:c9:da:5b:32:15:0b:be:70:f3:5e:a7:d8:6f:
         9d:a7:48:6a:5a:cb:da:f4:73:ef:60:02:6a:45:71:a0:cb:d3:
         7c:a5:37:8b:26:ee:fa:a2:1f:28:08:3c:03:3d:cc:2e:92:65:
         83:32:3a:fa:6c:79:72:31:30:d4:e7:6b:15:49:00:77:0c:e5:
         6c:db:05:12:01:be:28:f9:59:38:6a:fd:76:9c:dd:2f:30:86:
         3b:ed:e8:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2Or8S2kEpV4hw7aSw2KjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMTViNzNhN2MyZDEzMWVjMTRlYmQ5MDcxNzE4YjU0YzNm
YmE2OTIwHhcNMjQxMTI2MTkwMDQzWhcNMjQxMTI3MTkwMDQzWjAzMTEwLwYDVQQD
Eyg3ZGE0OWMzODdjOTI5MTlhZTk0MzFiODlmOWY1MThjYWZmYjQwYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nmN2E/rfFf8jMonx8WQGIC0eiBa
8liRsormdE3UQZlROCLTAI+79YFeLOgLggahpPMuCs3Bou7wrE3bKH7l4q7ZU+tW
VBpgMGBVcuZxRoC0zIiYMYL3j7xgoOGLl2F4WW1SbmZR8WN1Epz/q0+Xdlq1Cm10
M6PWFxCVV+HxIT3nGvio6Zt+mhbUkXqhBYBnLrdW/JK/Cu4qMo7mpDpfd/K0dP4O
BVJIirw6MKGVmjcq7FE9b28RKnCu9RiYUwJ9CtRP0AmQeJcg59Lns21KSSwz1O9m
MCDZ+BEcU0PGV5WRBYqgWFJexdCqGCl1+bZT7tzoEJ5rXlXfmBsA2aAGKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2knDh8kpGa6UMbifn1GMr/tAr7MB8GA1UdIwQY
MBaAFC8Vtzp8LRMewU69kHFxi1TD+6aSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83OTI5ZjQtZWMzNS00ZDljLTkyYTgt
MGViNDVlZjYyZDhkLzEvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83OTI5ZjQtZWMzNS00ZDljLTkyYTgtMGViNDVlZjYyZDhk
LzEvTHhXM09ud3RFeDdCVHIyUWNYR0xWTVA3cHBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr4rMupkb
qZc5R2BW1Q2VQOPnxlSF3tpjPa6L/CQ38M4wLYdKuCMeyCzXfNOMgymWEMlfzgZv
RTXsn9jfhiJivbH0nuP5+z8s0n2F87mpeBt5URDMga72b7Qfo7TU1XqaxGFMjSIP
9+dS2jO9fS9eqsCxgp3gK3s1ppnkI0qL2dJpE1F4cy1W+3PuA+K5M7GJJo4NcnSd
PsB4GIqdT0YviZ6VfhlsoczJ2lsyFQu+cPNep9hvnadIalrL2vRz72ACakVxoMvT
fKU3iybu+qIfKAg8Az3MLpJlgzI6+mx5cjEw1OdrFUkAdwzlbNsFEgG+KPlZOGr9
dpzdLzCGO+3o7Q==
-----END CERTIFICATE-----