Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File:                     vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier:          1aXhU1Ci4ryoHdRW3AYbhnHG47uTBZCaymMibuFXqfY=
Subject key identifier:   DF:7F:C5:5D:A1:62:4A:5B:F5:7A:44:7D:08:BC:C6:9F:8D:56:5C:81
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer:       /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial:       019365FDED55F21F490434561C20FC3F1721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number:          02F8
Signing time:             Tue 26 Nov 2024 01:02:40 +0000
Manifest this update:     Tue 26 Nov 2024 01:02:40 +0000
Manifest next update:     Wed 27 Nov 2024 01:02:40 +0000
Files and hashes:         1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: vw6tpD4gttAsNqojkEFwkXPc4lDMxCiQFsA39N8PeRE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 23:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:fd:ed:55:f2:1f:49:04:34:56:1c:20:fc:3f:17:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
        Validity
            Not Before: Nov 26 01:02:40 2024 GMT
            Not After : Nov 27 01:02:40 2024 GMT
        Subject: CN=df7fc55da1624a5bf57a447d08bcc69f8d565c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:9d:c4:e6:e9:3c:9a:b8:ee:a4:9a:a2:3e:
                    65:07:01:29:72:7f:d0:f3:98:bd:98:b7:5b:7f:b1:
                    28:5f:f8:50:e4:55:d2:a3:9f:87:52:05:0b:f3:f4:
                    d3:79:bc:f8:fb:b1:f0:21:63:b3:76:5f:88:1e:bf:
                    93:9a:78:5e:0c:10:29:9b:ba:1a:1a:0b:f9:0d:be:
                    c4:e0:0c:3e:32:08:f7:17:f5:c1:0f:17:08:1e:aa:
                    42:59:d4:e8:be:4a:dd:18:4f:96:e0:4d:24:76:44:
                    2b:0a:37:73:e4:d1:a0:72:02:d0:81:0e:a4:df:fc:
                    88:e6:83:b7:0e:4a:1e:b0:60:5f:41:c8:b7:5d:4c:
                    3e:ea:3c:9d:a9:25:8d:87:fa:c0:ad:c9:b8:cb:ed:
                    93:4c:28:ba:72:ae:19:f3:ad:02:25:ff:3e:b8:47:
                    d3:9e:91:75:b6:7a:70:46:05:99:79:e4:8a:9b:0e:
                    28:65:f6:da:e1:36:90:bb:ca:35:f7:a4:2c:40:73:
                    f2:6d:73:99:38:f8:fd:b6:a7:31:26:d3:bd:e3:44:
                    25:eb:cc:5d:49:60:7f:b8:ac:5d:05:33:5d:7c:0f:
                    03:e2:a6:1a:df:1d:43:14:98:bf:73:b3:13:08:ea:
                    7d:74:21:6f:2d:87:92:c4:41:5c:42:aa:8c:dc:b0:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7F:C5:5D:A1:62:4A:5B:F5:7A:44:7D:08:BC:C6:9F:8D:56:5C:81
            X509v3 Authority Key Identifier:
                keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:f0:77:a7:87:93:20:63:17:0f:6c:22:cd:d7:a9:c0:4e:dd:
         5f:4a:18:d6:31:c5:a9:2a:46:fa:26:82:3e:0c:ec:f6:5a:86:
         bd:20:bb:41:67:1f:99:4b:3d:ab:aa:fb:37:bf:88:6e:22:a5:
         a6:50:c5:e9:75:e4:31:3a:8b:9c:3c:a1:9e:90:61:91:3c:d4:
         b9:7b:b1:79:e7:d8:92:4e:3d:e6:81:c4:43:bf:ea:15:42:7d:
         4c:17:36:5b:7e:a9:ea:22:98:4a:f9:bc:85:33:48:25:ba:c0:
         62:65:c1:65:3d:9d:0f:68:7c:bd:16:bd:a3:d5:97:de:54:cf:
         29:b5:b1:b4:80:ef:d4:06:24:d8:96:d4:00:b0:11:21:97:6c:
         2d:1b:a1:92:8c:5c:92:69:d5:45:88:52:f6:d3:39:2b:17:bb:
         d6:8a:f3:07:1f:51:4f:d4:d8:23:54:3f:37:68:bd:b5:52:ce:
         bf:a1:23:69:dd:27:a1:34:7a:06:c3:56:5c:30:73:65:4c:7b:
         eb:97:a3:36:18:2d:a9:8e:09:be:8f:9c:15:9c:af:2e:f2:d4:
         7c:be:e3:f4:90:2f:56:28:11:0b:7c:58:f3:1f:54:82:8d:d6:
         08:d9:1d:12:7f:60:60:9b:37:9d:2c:b2:2f:02:24:58:83:c1:
         bc:12:8a:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNl/e1V8h9JBDRWHCD8PxchMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMmY3NjhjZmUzODRmOWY4Y2Q5MDNjNjg3ZDg2NTJhYzU0
ZTc0OTUwHhcNMjQxMTI2MDEwMjQwWhcNMjQxMTI3MDEwMjQwWjAzMTEwLwYDVQQD
EyhkZjdmYzU1ZGExNjI0YTViZjU3YTQ0N2QwOGJjYzY5ZjhkNTY1YzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttWdxObpPJq47qSaoj5lBwEpcn/Q
85i9mLdbf7EoX/hQ5FXSo5+HUgUL8/TTebz4+7HwIWOzdl+IHr+TmnheDBApm7oa
Ggv5Db7E4Aw+Mgj3F/XBDxcIHqpCWdTovkrdGE+W4E0kdkQrCjdz5NGgcgLQgQ6k
3/yI5oO3DkoesGBfQci3XUw+6jydqSWNh/rArcm4y+2TTCi6cq4Z860CJf8+uEfT
npF1tnpwRgWZeeSKmw4oZfba4TaQu8o196QsQHPybXOZOPj9tqcxJtO940Ql68xd
SWB/uKxdBTNdfA8D4qYa3x1DFJi/c7MTCOp9dCFvLYeSxEFcQqqM3LC34wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9/xV2hYkpb9XpEfQi8xp+NVlyBMB8GA1UdIwQY
MBaAFLwvdoz+OE+fjNkDxofYZSrFTnSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82NGM5OWQtODE4OC00MWNmLTlmNDkt
ZWNlYjZkNzIyYTE0LzEvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82NGM5OWQtODE4OC00MWNmLTlmNDktZWNlYjZkNzIyYTE0
LzEvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxPB3p4eT
IGMXD2wizdepwE7dX0oY1jHFqSpG+iaCPgzs9lqGvSC7QWcfmUs9q6r7N7+IbiKl
plDF6XXkMTqLnDyhnpBhkTzUuXuxeefYkk495oHEQ7/qFUJ9TBc2W36p6iKYSvm8
hTNIJbrAYmXBZT2dD2h8vRa9o9WX3lTPKbWxtIDv1AYk2JbUALARIZdsLRuhkoxc
kmnVRYhS9tM5Kxe71orzBx9RT9TYI1Q/N2i9tVLOv6Ejad0noTR6BsNWXDBzZUx7
65ejNhgtqY4Jvo+cFZyvLvLUfL7j9JAvVigRC3xY8x9Ugo3WCNkdEn9gYJs3nSyy
LwIkWIPBvBKK/Q==
-----END CERTIFICATE-----