Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File:                     _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier:          8sr6p6covwkvzbQst5QKhTWDM/I8RuvWAXFqHhS7nUg=
Subject key identifier:   06:7B:A2:F1:6B:71:07:E3:07:50:A1:05:96:36:6D:1B:8D:1C:CD:02
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer:       /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial:       01936B22C14CE5E59EC4FD15033FFA39E20C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number:          10A5
Signing time:             Wed 27 Nov 2024 01:01:00 +0000
Manifest this update:     Wed 27 Nov 2024 01:01:00 +0000
Manifest next update:     Thu 28 Nov 2024 01:01:00 +0000
Files and hashes:         1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: rdhQcM2TVJphqY3s2WpHTY9pvRr5RSS1Nrle+X9n1Dc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:c1:4c:e5:e5:9e:c4:fd:15:03:3f:fa:39:e2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
        Validity
            Not Before: Nov 27 01:01:00 2024 GMT
            Not After : Nov 28 01:01:00 2024 GMT
        Subject: CN=067ba2f16b7107e30750a10596366d1b8d1ccd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:15:d6:75:0c:07:dd:b5:c4:e7:33:e6:d2:
                    67:bf:23:b6:81:3f:3e:ef:81:ec:56:35:03:71:6a:
                    09:c8:66:62:4c:89:7f:43:06:58:d4:27:33:b8:f0:
                    28:b9:bc:ec:48:fc:ff:79:62:15:3d:1e:a8:23:7f:
                    3d:53:7a:2d:bb:1f:c9:00:e4:43:3f:1e:6b:6c:c6:
                    6c:eb:73:79:78:bb:c3:31:1b:a8:73:9e:0a:94:7e:
                    de:b1:e3:7a:ae:68:55:82:d3:df:d2:49:3b:da:b4:
                    62:0e:ad:4d:a3:b3:54:b0:b9:0e:85:6d:2b:e9:ae:
                    8f:29:91:0b:76:89:c4:b9:7e:7d:5f:87:e2:f8:32:
                    4b:96:3d:dd:82:7a:04:2f:7a:a0:a4:8e:cd:de:6c:
                    03:77:06:0e:3a:56:83:2a:43:14:21:50:ee:8d:1d:
                    54:5c:6f:1a:7b:0e:76:2f:9f:4d:d5:ca:0e:6d:d5:
                    73:f9:23:7b:63:6d:80:f7:a8:92:cf:b1:09:d4:ef:
                    c3:a5:47:cc:cb:36:44:23:66:8c:45:5c:56:e3:0f:
                    9a:a2:b5:6d:df:f6:bd:fa:ac:c4:04:40:4e:f3:22:
                    37:39:05:f5:ef:8d:ab:43:b4:c4:78:ff:3f:f0:23:
                    a1:bb:65:25:b7:52:b5:8b:fc:6f:3b:27:0d:23:28:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7B:A2:F1:6B:71:07:E3:07:50:A1:05:96:36:6D:1B:8D:1C:CD:02
            X509v3 Authority Key Identifier:
                keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f8:16:f3:db:a5:13:46:27:52:ea:6d:80:5f:0a:7d:20:12:
         d7:1c:21:4e:2d:fb:17:46:41:84:45:d7:2a:16:f7:75:b4:e7:
         89:4f:41:0a:a6:5e:a1:8b:b9:4c:d4:f9:88:75:43:5f:96:23:
         91:29:a2:f9:05:24:85:58:7b:a4:97:9d:6f:23:32:e7:dd:0d:
         be:c0:5b:5d:d9:c4:d1:5d:ef:00:98:65:23:20:d9:f0:43:a1:
         4b:6e:b1:45:00:ba:3f:79:f2:fe:ab:b0:f8:3d:11:31:75:46:
         d1:b9:9c:0a:3a:4f:9b:fc:49:78:76:b3:9a:07:f1:cc:ad:a4:
         0a:8b:52:a0:66:21:6f:10:50:42:5f:d5:47:9b:12:13:88:5d:
         50:58:c0:c8:1d:a4:b3:07:f5:8b:b2:6d:1e:a9:58:bf:7e:2a:
         da:61:2e:2d:62:ee:46:60:e5:58:e1:21:81:9e:67:c8:b4:a4:
         1c:4c:d5:e6:77:c3:2a:73:1e:cd:d9:51:20:9a:57:db:d6:5a:
         59:54:c0:11:8f:e7:ce:99:51:75:30:0f:9d:63:6d:25:c3:3a:
         65:d7:88:38:c9:fe:1e:02:e9:6b:9b:85:a1:30:5e:37:5c:99:
         41:af:eb:5e:5d:5b:8f:59:ed:01:a8:70:5e:b7:b3:ff:2f:15:
         c6:9f:68:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIsFM5eWexP0VAz/6OeIMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzQxM2RkMzY2N2U3ODE5NWU1MjY4YWEyODVhZWE1MTZi
Y2IxOTkwHhcNMjQxMTI3MDEwMTAwWhcNMjQxMTI4MDEwMTAwWjAzMTEwLwYDVQQD
EygwNjdiYTJmMTZiNzEwN2UzMDc1MGExMDU5NjM2NmQxYjhkMWNjZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IAV1nUMB921xOcz5tJnvyO2gT8+
74HsVjUDcWoJyGZiTIl/QwZY1CczuPAoubzsSPz/eWIVPR6oI389U3otux/JAORD
Px5rbMZs63N5eLvDMRuoc54KlH7eseN6rmhVgtPf0kk72rRiDq1No7NUsLkOhW0r
6a6PKZELdonEuX59X4fi+DJLlj3dgnoEL3qgpI7N3mwDdwYOOlaDKkMUIVDujR1U
XG8aew52L59N1coObdVz+SN7Y22A96iSz7EJ1O/DpUfMyzZEI2aMRVxW4w+aorVt
3/a9+qzEBEBO8yI3OQX1742rQ7TEeP8/8COhu2Ult1K1i/xvOycNIyhX6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ7ovFrcQfjB1ChBZY2bRuNHM0CMB8GA1UdIwQY
MBaAFP7EE902Z+eBleUmiqKFrqUWvLGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9iMTk1ZTctYjgwNC00NTk0LTk2NWUt
M2ZkMTRiOTM2ZWI0LzEvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9iMTk1ZTctYjgwNC00NTk0LTk2NWUtM2ZkMTRiOTM2ZWI0
LzEvX3NRVDNUWm41NEdWNVNhS29vV3VwUmE4c1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfgW89ul
E0YnUuptgF8KfSAS1xwhTi37F0ZBhEXXKhb3dbTniU9BCqZeoYu5TNT5iHVDX5Yj
kSmi+QUkhVh7pJedbyMy590NvsBbXdnE0V3vAJhlIyDZ8EOhS26xRQC6P3ny/quw
+D0RMXVG0bmcCjpPm/xJeHazmgfxzK2kCotSoGYhbxBQQl/VR5sSE4hdUFjAyB2k
swf1i7JtHqlYv34q2mEuLWLuRmDlWOEhgZ5nyLSkHEzV5nfDKnMezdlRIJpX29Za
WVTAEY/nzplRdTAPnWNtJcM6ZdeIOMn+HgLpa5uFoTBeN1yZQa/rXl1bj1ntAahw
Xrez/y8Vxp9oxQ==
-----END CERTIFICATE-----