Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File:                     8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier:          0aLNGuocht/GtT7o/hJEYV5HqBRShK5SRcHMqApRPCA=
Subject key identifier:   1E:AE:0B:A8:AE:FA:F9:6F:3E:2C:0C:AC:B1:40:98:7B:C3:5B:A5:86
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer:       /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial:       019407221962B30EFA00B16EB5D1BF2DA4A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number:          0B71
Signing time:             Fri 27 Dec 2024 08:01:02 +0000
Manifest this update:     Fri 27 Dec 2024 08:01:02 +0000
Manifest next update:     Sat 28 Dec 2024 08:01:02 +0000
Files and hashes:         1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: KVbKvVb22UTFbTJ2Ub/L/S+h0yOgSd48zJHfaajYxfs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:07:22:19:62:b3:0e:fa:00:b1:6e:b5:d1:bf:2d:a4:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
        Validity
            Not Before: Dec 27 08:01:02 2024 GMT
            Not After : Dec 28 08:01:02 2024 GMT
        Subject: CN=1eae0ba8aefaf96f3e2c0cacb140987bc35ba586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:b8:9e:88:1a:9b:0d:f3:aa:a3:37:c8:22:
                    73:ab:cd:22:cb:33:53:e3:ee:2d:a9:50:98:ea:61:
                    59:b3:bc:c4:5a:f9:e5:05:81:12:54:0d:de:d3:6b:
                    2c:cc:ad:ed:83:c8:5d:80:ee:2e:36:0f:1e:1a:87:
                    ed:92:4a:91:21:75:34:2f:b0:d1:3e:69:8e:1a:3d:
                    3e:72:13:fa:53:6a:40:dc:98:56:9d:30:b5:d6:62:
                    42:21:04:6b:41:38:58:32:f8:e2:f3:90:97:d2:9c:
                    bb:a4:9e:df:24:74:3d:6d:72:20:41:c5:31:35:16:
                    f6:ab:59:ee:b5:e3:12:a5:1d:ca:02:c8:84:eb:ea:
                    b5:ea:b9:6c:b3:91:89:5f:c3:e4:99:a3:ed:45:da:
                    1e:b4:13:12:fa:f0:5c:dc:e3:d8:67:3f:28:83:88:
                    97:a0:71:de:10:6a:f3:8f:fe:97:24:22:0a:d4:e7:
                    48:36:a9:05:68:54:33:aa:7d:63:28:1e:96:14:2e:
                    8c:68:34:18:0f:b6:b9:07:5c:28:56:78:28:a4:e7:
                    b8:99:ac:ea:49:7c:c4:28:31:08:03:d7:70:b7:e7:
                    e5:bc:5e:77:c8:bf:06:71:08:f1:16:ad:55:58:73:
                    d3:62:de:91:6c:d4:d4:20:d0:2e:46:e4:e7:c1:40:
                    70:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AE:0B:A8:AE:FA:F9:6F:3E:2C:0C:AC:B1:40:98:7B:C3:5B:A5:86
            X509v3 Authority Key Identifier:
                keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:c5:91:76:f4:94:96:d3:58:2a:8a:e8:52:ab:d9:47:b7:54:
         a5:9d:fa:4a:3c:3f:83:8a:99:87:a5:40:78:fa:74:51:a2:b0:
         dc:88:6b:6a:70:a9:59:f8:4a:65:73:5b:39:c0:d4:1b:f2:1a:
         40:dc:11:9d:16:e0:9b:14:66:53:0b:89:8e:ce:57:a7:8a:4a:
         91:24:88:12:b2:72:5e:0f:18:25:c4:8b:8d:8a:ab:1c:7c:4c:
         28:f0:2f:d7:ed:7d:37:f8:54:a5:c7:b2:99:dd:cc:9a:12:c4:
         ce:ab:84:70:35:0b:5e:5b:ab:da:7b:6b:c1:9d:b9:f2:1f:c8:
         6e:29:3e:1a:79:e4:89:d4:09:f9:d2:c8:3f:a2:64:36:e1:14:
         19:03:9c:92:c8:11:9d:2b:98:f2:2a:e2:af:b6:88:47:f4:b9:
         08:a5:07:ea:82:59:39:5a:61:46:27:38:59:40:31:70:7a:60:
         89:32:d9:bf:eb:1f:4b:90:a1:50:14:ca:15:83:2f:a8:3f:30:
         fc:4d:69:26:0b:ff:f1:c3:7c:ed:4b:2e:64:e8:81:c3:8e:15:
         68:f8:c7:d1:6a:a5:b6:e0:10:27:7d:6a:ca:6c:9e:06:b1:9b:
         3c:11:2a:f8:30:11:e7:c0:dc:7f:88:1d:f6:7e:b3:69:6a:2e:
         1b:8a:d1:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQHIhlisw76ALFutdG/LaSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyM2VmZDRiZDkyN2I0Y2VhMzMxMjBhMjFiNGY3MzE0ZGNi
ZWExNzkwHhcNMjQxMjI3MDgwMTAyWhcNMjQxMjI4MDgwMTAyWjAzMTEwLwYDVQQD
EygxZWFlMGJhOGFlZmFmOTZmM2UyYzBjYWNiMTQwOTg3YmMzNWJhNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/+4nogamw3zqqM3yCJzq80iyzNT
4+4tqVCY6mFZs7zEWvnlBYESVA3e02sszK3tg8hdgO4uNg8eGoftkkqRIXU0L7DR
PmmOGj0+chP6U2pA3JhWnTC11mJCIQRrQThYMvji85CX0py7pJ7fJHQ9bXIgQcUx
NRb2q1nuteMSpR3KAsiE6+q16rlss5GJX8PkmaPtRdoetBMS+vBc3OPYZz8og4iX
oHHeEGrzj/6XJCIK1OdINqkFaFQzqn1jKB6WFC6MaDQYD7a5B1woVngopOe4mazq
SXzEKDEIA9dwt+flvF53yL8GcQjxFq1VWHPTYt6RbNTUINAuRuTnwUBwsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6uC6iu+vlvPiwMrLFAmHvDW6WGMB8GA1UdIwQY
MBaAFPI+/UvZJ7TOozEgohtPcxTcvqF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTIt
ZDJjOGE2NWFhY2ZlLzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTItZDJjOGE2NWFhY2Zl
LzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe8WRdvSU
ltNYKoroUqvZR7dUpZ36Sjw/g4qZh6VAePp0UaKw3IhranCpWfhKZXNbOcDUG/Ia
QNwRnRbgmxRmUwuJjs5Xp4pKkSSIErJyXg8YJcSLjYqrHHxMKPAv1+19N/hUpcey
md3MmhLEzquEcDULXlur2ntrwZ258h/Ibik+GnnkidQJ+dLIP6JkNuEUGQOcksgR
nSuY8irir7aIR/S5CKUH6oJZOVphRic4WUAxcHpgiTLZv+sfS5ChUBTKFYMvqD8w
/E1pJgv/8cN87UsuZOiBw44VaPjH0WqltuAQJ31qymyeBrGbPBEq+DAR58Dcf4gd
9n6zaWouG4rRVA==
-----END CERTIFICATE-----