Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
File:                     MmboynDkwXGKCYBFOPnkYLMF-bM.mft (raw, json)
Hash identifier:          KTZay9TR/SvU3uQn++rBKXDtPGe5gdvt2mmR++yNBwo=
Subject key identifier:   AD:69:36:5A:50:A1:E5:D8:8F:83:B3:CA:E3:16:8B:BC:C7:62:E9:9A
Authority key identifier: 32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3
Certificate issuer:       /CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
Certificate serial:       01936A46B4F720448D2BBE58AAD0660517F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
Manifest number:          1379
Signing time:             Tue 26 Nov 2024 21:00:38 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:38 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:38 +0000
Files and hashes:         1: MmboynDkwXGKCYBFOPnkYLMF-bM.crl (hash: PRKfgyM1wHtYUUjRDoOMdwxu0IOenudGqyYFQbPS6nU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:b4:f7:20:44:8d:2b:be:58:aa:d0:66:05:17:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3266e8ca70e4c1718a09804538f9e460b305f9b3
        Validity
            Not Before: Nov 26 21:00:38 2024 GMT
            Not After : Nov 27 21:00:38 2024 GMT
        Subject: CN=ad69365a50a1e5d88f83b3cae3168bbcc762e99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:77:2f:35:86:f2:a0:88:df:79:2e:79:7f:0c:
                    40:56:b6:23:48:38:4a:d9:f2:33:7b:c8:94:d1:fc:
                    ae:f9:d0:0d:c9:4f:9f:0c:f0:96:5f:b7:0d:de:66:
                    11:69:db:94:92:76:a8:57:76:d8:79:00:38:34:5f:
                    05:9d:85:5b:49:53:3f:1a:44:f6:db:bc:dc:8d:da:
                    8f:4b:17:88:94:04:fa:0b:8a:27:1a:1d:ea:27:d4:
                    42:c7:74:de:9b:ac:81:a8:f3:92:a9:7e:0c:bf:94:
                    ef:e6:7b:0a:aa:7c:12:93:b9:09:7c:c9:7d:15:dd:
                    72:57:87:31:67:ae:8e:3b:17:3f:18:21:ce:a7:d0:
                    a5:40:b1:8e:ba:5b:38:2d:d1:e5:f5:6b:9b:93:44:
                    92:ed:90:e6:3f:6d:90:0c:e9:54:a2:c7:c5:4c:43:
                    45:4d:fb:d2:8d:b3:32:7c:18:92:bf:69:a6:1c:c8:
                    8c:f4:af:81:3a:f8:9d:0e:d0:e3:7e:0a:3d:70:ce:
                    fe:1d:5f:b0:b9:f5:9d:09:0f:b6:96:3d:bb:92:70:
                    93:fb:8d:2e:0f:70:09:ea:a3:5a:da:ea:dc:67:1a:
                    29:8d:ac:b4:57:24:68:10:1a:d7:7d:2c:88:ac:0d:
                    4f:cf:cf:23:88:1a:f7:50:c0:ae:b2:64:2e:b7:e3:
                    5a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:69:36:5A:50:A1:E5:D8:8F:83:B3:CA:E3:16:8B:BC:C7:62:E9:9A
            X509v3 Authority Key Identifier:
                keyid:32:66:E8:CA:70:E4:C1:71:8A:09:80:45:38:F9:E4:60:B3:05:F9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmboynDkwXGKCYBFOPnkYLMF-bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3d4e04-93d4-4f5a-8dcd-332f34588365/1/MmboynDkwXGKCYBFOPnkYLMF-bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:14:d5:44:d8:5a:64:cb:21:e5:4d:0b:dd:27:f7:3c:41:98:
         1a:70:88:03:3f:01:87:6f:1a:34:a5:64:c8:92:79:bc:df:a9:
         71:28:9a:a0:94:f6:1c:46:ef:94:5b:a3:f9:ab:c6:48:9f:b4:
         9f:f2:f1:84:56:f4:0b:93:fd:34:86:92:71:f0:15:c9:c3:c3:
         b5:88:db:2b:b8:de:9e:8a:27:44:d6:78:40:8c:33:47:cf:36:
         5b:7d:e9:7a:7f:dc:7b:1c:a2:d6:1c:8b:88:7a:3a:77:68:b7:
         e0:a6:3f:94:db:aa:8b:41:15:03:00:69:f5:bd:4d:01:6f:ba:
         52:74:41:28:08:a8:4f:6e:b8:bb:33:6c:f1:17:b7:c1:6f:0a:
         81:89:60:b7:3b:d6:8f:9c:1a:79:20:6a:61:62:69:73:06:11:
         d4:30:05:b1:2c:19:6b:08:45:c0:35:6d:34:ab:b5:8e:a0:6e:
         5b:9c:b8:9a:5f:e8:46:19:7b:39:4e:7c:45:ea:db:a9:3c:e1:
         2b:c4:b6:5f:70:e5:62:aa:b2:01:3d:f9:fd:d2:12:be:f3:b9:
         7f:9c:e9:b2:48:bd:13:69:74:93:65:a0:e2:32:8e:95:c1:d1:
         0b:50:8d:1f:dc:dc:1f:f4:91:c8:dc:ea:e7:01:7c:99:d9:62:
         b9:37:ee:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRrT3IESNK75YqtBmBRfyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjZlOGNhNzBlNGMxNzE4YTA5ODA0NTM4ZjllNDYwYjMw
NWY5YjMwHhcNMjQxMTI2MjEwMDM4WhcNMjQxMTI3MjEwMDM4WjAzMTEwLwYDVQQD
EyhhZDY5MzY1YTUwYTFlNWQ4OGY4M2IzY2FlMzE2OGJiY2M3NjJlOTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHcvNYbyoIjfeS55fwxAVrYjSDhK
2fIze8iU0fyu+dANyU+fDPCWX7cN3mYRaduUknaoV3bYeQA4NF8FnYVbSVM/GkT2
27zcjdqPSxeIlAT6C4onGh3qJ9RCx3Tem6yBqPOSqX4Mv5Tv5nsKqnwSk7kJfMl9
Fd1yV4cxZ66OOxc/GCHOp9ClQLGOuls4LdHl9Wubk0SS7ZDmP22QDOlUosfFTENF
TfvSjbMyfBiSv2mmHMiM9K+BOvidDtDjfgo9cM7+HV+wufWdCQ+2lj27knCT+40u
D3AJ6qNa2urcZxopjay0VyRoEBrXfSyIrA1Pz88jiBr3UMCusmQut+NajwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1pNlpQoeXYj4OzyuMWi7zHYumaMB8GA1UdIwQY
MBaAFDJm6Mpw5MFxigmARTj55GCzBfmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2Qt
MzMyZjM0NTg4MzY1LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zZDRlMDQtOTNkNC00ZjVhLThkY2QtMzMyZjM0NTg4MzY1
LzEvTW1ib3luRGt3WEdLQ1lCRk9QbmtZTE1GLWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhTVRNha
ZMsh5U0L3Sf3PEGYGnCIAz8Bh28aNKVkyJJ5vN+pcSiaoJT2HEbvlFuj+avGSJ+0
n/LxhFb0C5P9NIaScfAVycPDtYjbK7jenoonRNZ4QIwzR882W33pen/cexyi1hyL
iHo6d2i34KY/lNuqi0EVAwBp9b1NAW+6UnRBKAioT264uzNs8Re3wW8KgYlgtzvW
j5waeSBqYWJpcwYR1DAFsSwZawhFwDVtNKu1jqBuW5y4ml/oRhl7OU58RerbqTzh
K8S2X3DlYqqyAT35/dISvvO5f5zpski9E2l0k2Wg4jKOlcHRC1CNH9zcH/SRyNzq
5wF8mdliuTfumQ==
-----END CERTIFICATE-----