Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
File:                     6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft (raw, json)
Hash identifier:          0cvALLSa5vTjutmPCSJ1dLeXJ6qa3CBH4vWrunPVyTM=
Subject key identifier:   57:AE:88:CD:71:AC:AC:B7:84:F2:5A:2A:D0:0C:EB:CD:8B:99:70:63
Authority key identifier: E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC
Certificate issuer:       /CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
Certificate serial:       019369D8DDADFAE6409C20982B73E5290250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
Manifest number:          0B11
Signing time:             Tue 26 Nov 2024 19:00:40 +0000
Manifest this update:     Tue 26 Nov 2024 19:00:40 +0000
Manifest next update:     Wed 27 Nov 2024 19:00:40 +0000
Files and hashes:         1: 6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl (hash: EaLp/bwyw22+ntVtHkbt5Jzv0wC7BumpLfSyUCzFCsk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d8:dd:ad:fa:e6:40:9c:20:98:2b:73:e5:29:02:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e899b5ef23bb423a47d2b8f233e82c35409ccbfc
        Validity
            Not Before: Nov 26 19:00:40 2024 GMT
            Not After : Nov 27 19:00:40 2024 GMT
        Subject: CN=57ae88cd71acacb784f25a2ad00cebcd8b997063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:1a:f2:57:66:e0:88:01:87:0d:e1:9e:03:
                    9c:00:03:47:76:b7:b2:fb:b4:7f:51:22:c4:93:ba:
                    5a:d3:a6:61:59:4e:22:68:c8:c3:d8:15:52:ed:e6:
                    14:06:40:74:22:a4:3c:10:ef:84:f3:47:97:d5:bb:
                    f0:44:84:b2:9c:43:21:0c:03:c4:85:6c:83:7f:ab:
                    32:03:f3:72:92:f2:4c:3a:72:52:f1:f9:37:fd:1e:
                    a6:9c:de:32:5b:13:5b:c1:60:84:23:ce:12:cb:fc:
                    ef:3e:d3:de:4d:b3:17:e0:1d:71:1e:f7:91:4d:87:
                    c3:d6:08:2c:93:cc:12:8b:b7:6a:e0:69:66:2e:34:
                    d8:65:ab:18:cc:91:0f:72:9f:a0:ab:1e:e0:e3:d3:
                    9a:bd:60:e3:7c:14:62:ad:55:a1:75:57:bb:84:03:
                    98:e2:86:c3:5e:f9:dc:d1:7c:53:43:29:75:25:53:
                    d3:0a:ab:16:04:9a:04:70:ce:5d:cb:c0:a6:f2:e2:
                    a1:1f:68:fc:02:ff:08:36:05:3b:c3:c8:96:76:4e:
                    af:9d:aa:51:d8:bb:c2:84:a3:c4:51:c2:b0:d9:91:
                    1d:46:4b:bc:97:4a:35:5b:2d:43:8c:b0:fe:ef:8f:
                    46:39:9b:5d:ae:8c:0e:77:c0:43:51:70:c3:f2:97:
                    a6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:AE:88:CD:71:AC:AC:B7:84:F2:5A:2A:D0:0C:EB:CD:8B:99:70:63
            X509v3 Authority Key Identifier:
                keyid:E8:99:B5:EF:23:BB:42:3A:47:D2:B8:F2:33:E8:2C:35:40:9C:CB:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Jm17yO7QjpH0rjyM-gsNUCcy_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3b25df-baf6-4470-ab6f-db324a7e28e8/1/6Jm17yO7QjpH0rjyM-gsNUCcy_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3e:ef:64:44:b7:8b:c3:e6:87:ca:cb:80:67:39:cb:d1:a4:
         50:0f:4b:23:da:97:1a:84:d2:4e:d8:bf:b0:c0:18:a6:40:13:
         fc:e0:7a:b7:96:a0:3b:f3:20:85:3e:8f:c1:4c:91:af:81:f0:
         b9:ac:0d:84:b8:37:af:0b:62:b0:de:43:4b:e4:49:71:07:1e:
         d3:1c:b4:6d:0b:a7:d2:88:85:7f:54:99:0a:37:f6:a0:77:68:
         3e:b1:85:c0:13:bd:2f:44:5c:64:dd:19:2c:40:eb:bb:ee:ef:
         8d:c3:0c:91:76:df:0f:b7:ce:51:b7:76:09:a1:f8:f9:e1:1d:
         7d:d6:e1:02:2c:c3:21:20:62:11:f9:93:78:9f:47:f2:63:9e:
         8c:c4:41:72:9b:da:48:8e:96:e0:c6:f1:a7:3e:87:5a:f5:4f:
         e6:82:f5:13:60:68:2d:02:c1:61:06:08:12:8c:45:b2:c3:86:
         b0:3a:8e:0a:4c:25:f0:09:c8:ec:5b:a7:e7:f4:15:19:46:0f:
         e3:16:0a:27:23:5b:61:a8:47:16:bb:4e:9c:89:39:ea:7c:4b:
         ad:c0:ea:de:74:24:1b:77:51:14:8c:73:81:78:8f:a4:f2:cb:
         ed:fc:0b:58:e1:aa:44:01:e3:59:6f:58:19:9b:33:8f:cc:30:
         09:93:5d:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2N2t+uZAnCCYK3PlKQJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OTliNWVmMjNiYjQyM2E0N2QyYjhmMjMzZTgyYzM1NDA5
Y2NiZmMwHhcNMjQxMTI2MTkwMDQwWhcNMjQxMTI3MTkwMDQwWjAzMTEwLwYDVQQD
Eyg1N2FlODhjZDcxYWNhY2I3ODRmMjVhMmFkMDBjZWJjZDhiOTk3MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9Qa8ldm4IgBhw3hngOcAANHdrey
+7R/USLEk7pa06ZhWU4iaMjD2BVS7eYUBkB0IqQ8EO+E80eX1bvwRISynEMhDAPE
hWyDf6syA/NykvJMOnJS8fk3/R6mnN4yWxNbwWCEI84Sy/zvPtPeTbMX4B1xHveR
TYfD1ggsk8wSi7dq4GlmLjTYZasYzJEPcp+gqx7g49OavWDjfBRirVWhdVe7hAOY
4obDXvnc0XxTQyl1JVPTCqsWBJoEcM5dy8Cm8uKhH2j8Av8INgU7w8iWdk6vnapR
2LvChKPEUcKw2ZEdRku8l0o1Wy1DjLD+749GOZtdrowOd8BDUXDD8pemKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeuiM1xrKy3hPJaKtAM682LmXBjMB8GA1UdIwQY
MBaAFOiZte8ju0I6R9K48jPoLDVAnMv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYjI1ZGYtYmFmNi00NDcwLWFiNmYt
ZGIzMjRhN2UyOGU4LzEvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zYjI1ZGYtYmFmNi00NDcwLWFiNmYtZGIzMjRhN2UyOGU4
LzEvNkptMTd5TzdRanBIMHJqeU0tZ3NOVUNjeV93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcT7vZES3
i8Pmh8rLgGc5y9GkUA9LI9qXGoTSTti/sMAYpkAT/OB6t5agO/MghT6PwUyRr4Hw
uawNhLg3rwtisN5DS+RJcQce0xy0bQun0oiFf1SZCjf2oHdoPrGFwBO9L0RcZN0Z
LEDru+7vjcMMkXbfD7fOUbd2CaH4+eEdfdbhAizDISBiEfmTeJ9H8mOejMRBcpva
SI6W4Mbxpz6HWvVP5oL1E2BoLQLBYQYIEoxFssOGsDqOCkwl8AnI7Fun5/QVGUYP
4xYKJyNbYahHFrtOnIk56nxLrcDq3nQkG3dRFIxzgXiPpPLL7fwLWOGqRAHjWW9Y
GZszj8wwCZNdTg==
-----END CERTIFICATE-----