Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File:                     x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier:          b0oNnhs0A34gJOr11RCva7uRxmDM9OGSIVJXCei6r3A=
Subject key identifier:   5B:62:52:33:52:35:75:27:E5:8D:E5:CF:70:8D:38:5A:1C:40:1E:DC
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer:       /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial:       01936A46F0119D17B3D2898AFE9A2D287A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number:          03B3
Signing time:             Tue 26 Nov 2024 21:00:53 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:53 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:53 +0000
Files and hashes:         1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: d3vYDye/o818NuLNfs1HOPEICu1AMCPAytpFfLKdrwA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:f0:11:9d:17:b3:d2:89:8a:fe:9a:2d:28:7a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
        Validity
            Not Before: Nov 26 21:00:53 2024 GMT
            Not After : Nov 27 21:00:53 2024 GMT
        Subject: CN=5b62523352357527e58de5cf708d385a1c401edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:76:3e:c6:88:b3:89:bc:95:33:0b:9e:d8:89:
                    59:2a:a2:f9:b8:69:cb:94:94:9a:6e:00:7e:73:3f:
                    79:cc:14:f6:89:70:ad:ed:eb:1b:60:53:07:1c:fc:
                    98:62:2d:41:b9:7e:31:1c:61:77:06:f3:85:f9:3b:
                    eb:93:5b:7c:33:b0:d0:14:31:4f:56:93:99:c9:42:
                    7d:e8:be:bb:72:6a:e1:9f:a2:2f:a6:c9:aa:ef:1a:
                    cc:68:3d:32:7e:60:a9:3a:cb:38:8c:86:74:d4:36:
                    26:16:a1:63:cc:a9:72:ae:af:e9:f9:d4:77:2f:6f:
                    93:db:90:ab:4d:7f:e5:82:d6:5a:cc:21:f9:2d:a5:
                    91:81:4f:67:40:1c:ed:56:d0:66:da:fe:c1:f5:38:
                    0c:a0:a9:90:48:ec:17:be:42:a9:2d:36:1d:8c:9d:
                    ce:0e:1f:37:98:51:c7:97:7a:fe:03:8a:92:b4:31:
                    1c:a8:25:a3:e2:f5:8f:0d:e4:9b:07:97:dc:6c:e8:
                    e1:a2:16:da:76:b0:d9:1f:b1:44:fb:9a:89:6d:88:
                    d0:39:68:a6:09:68:11:eb:e7:ca:66:b3:83:4f:56:
                    24:d5:ec:18:5f:e1:24:a8:17:d0:fc:c2:07:a4:d5:
                    eb:ee:2b:6b:e7:3f:1d:46:b0:c7:ed:29:eb:f7:e8:
                    c8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:62:52:33:52:35:75:27:E5:8D:E5:CF:70:8D:38:5A:1C:40:1E:DC
            X509v3 Authority Key Identifier:
                keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:8b:0c:61:40:bf:d9:05:c5:ac:1b:9d:98:f5:01:f1:32:a3:
         96:5b:3e:50:b1:48:cf:ba:d8:da:9a:a7:5a:23:e5:7f:cb:7a:
         66:f5:ee:34:cc:9a:a5:6d:bd:ff:43:51:ee:ab:9e:ac:15:f5:
         16:95:39:61:b6:9d:d0:48:73:65:6f:42:85:87:41:1b:1a:60:
         28:d9:0d:e8:3b:83:38:c4:0e:84:2c:27:5c:30:a9:84:ae:be:
         db:e1:f8:a8:ce:6e:8a:67:e7:af:ed:49:a7:3b:46:98:a1:5d:
         08:25:0b:91:4a:ee:c0:82:69:88:cf:76:0b:76:42:94:e1:f4:
         f9:f8:c3:b8:14:ed:47:5f:c3:82:bb:bb:f6:83:63:e4:b5:ab:
         81:30:23:33:d8:80:9b:6e:26:31:ef:68:87:45:0b:92:e1:d9:
         0e:2d:4a:17:e0:07:03:77:69:93:32:d3:03:76:cd:99:a7:2a:
         33:d4:69:ba:ac:d5:13:ea:6a:e0:b6:12:64:be:d8:8e:6c:b9:
         10:c1:dd:50:ba:f8:68:6d:f0:60:f5:d4:c1:d9:38:a8:8b:52:
         14:32:64:eb:c2:a5:a5:93:ed:c0:14:38:b1:67:d1:7a:30:53:
         bf:b0:df:c5:1a:83:0d:95:01:95:9c:85:b6:4d:f3:24:a7:a8:
         18:4e:ef:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRvARnRez0omK/potKHoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3N2IxOTY5ZDlhZGRmMTk5NjMyYjRkZTA1ZThhMjBlM2Rl
N2I2YzQwHhcNMjQxMTI2MjEwMDUzWhcNMjQxMTI3MjEwMDUzWjAzMTEwLwYDVQQD
Eyg1YjYyNTIzMzUyMzU3NTI3ZTU4ZGU1Y2Y3MDhkMzg1YTFjNDAxZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43Y+xoizibyVMwue2IlZKqL5uGnL
lJSabgB+cz95zBT2iXCt7esbYFMHHPyYYi1BuX4xHGF3BvOF+Tvrk1t8M7DQFDFP
VpOZyUJ96L67cmrhn6Ivpsmq7xrMaD0yfmCpOss4jIZ01DYmFqFjzKlyrq/p+dR3
L2+T25CrTX/lgtZazCH5LaWRgU9nQBztVtBm2v7B9TgMoKmQSOwXvkKpLTYdjJ3O
Dh83mFHHl3r+A4qStDEcqCWj4vWPDeSbB5fcbOjhohbadrDZH7FE+5qJbYjQOWim
CWgR6+fKZrODT1Yk1ewYX+EkqBfQ/MIHpNXr7itr5z8dRrDH7Snr9+jIVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtiUjNSNXUn5Y3lz3CNOFocQB7cMB8GA1UdIwQY
MBaAFMd7GWnZrd8ZljK03gXoog4957bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3Nzkt
N2M3ODJmNmE0NmM3LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80OWE4MDItNjM2ZS00ZjA2LWI3NzktN2M3ODJmNmE0NmM3
LzEveDNzWmFkbXQzeG1XTXJUZUJlaWlEajNudHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIsMYUC/
2QXFrBudmPUB8TKjlls+ULFIz7rY2pqnWiPlf8t6ZvXuNMyapW29/0NR7querBX1
FpU5Ybad0EhzZW9ChYdBGxpgKNkN6DuDOMQOhCwnXDCphK6+2+H4qM5uimfnr+1J
pztGmKFdCCULkUruwIJpiM92C3ZClOH0+fjDuBTtR1/Dgru79oNj5LWrgTAjM9iA
m24mMe9oh0ULkuHZDi1KF+AHA3dpkzLTA3bNmacqM9RpuqzVE+pq4LYSZL7Yjmy5
EMHdULr4aG3wYPXUwdk4qItSFDJk68KlpZPtwBQ4sWfRejBTv7DfxRqDDZUBlZyF
tk3zJKeoGE7v8A==
-----END CERTIFICATE-----