Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
File:                     ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft (raw, json)
Hash identifier:          kvJL7VfIWy/glGCFzeQ+DAtixrb+ABI1RjT734Mt6sQ=
Subject key identifier:   F0:37:FB:91:FA:09:FA:1C:7E:08:BE:89:FB:1D:FE:93:E3:2C:EC:64
Authority key identifier: B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2
Certificate issuer:       /CN=b9aefe976787c2878e269d807cab98ad736d61e2
Certificate serial:       019356F685357C4F702E12D4CCE59207A805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
Manifest number:          10EA
Signing time:             Sat 23 Nov 2024 03:00:16 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:16 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:16 +0000
Files and hashes:         1: ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl (hash: 6w/KRnEtrv7a1xao9T2NI/G/TVto8X7ycATO9dWMWjs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:85:35:7c:4f:70:2e:12:d4:cc:e5:92:07:a8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9aefe976787c2878e269d807cab98ad736d61e2
        Validity
            Not Before: Nov 23 03:00:16 2024 GMT
            Not After : Nov 24 03:00:16 2024 GMT
        Subject: CN=f037fb91fa09fa1c7e08be89fb1dfe93e32cec64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a9:86:3c:ae:f7:9c:a3:ab:e3:27:3f:b0:af:
                    f4:65:98:12:27:7b:21:cb:7b:f4:6a:b1:3e:a8:75:
                    2e:18:54:08:99:b7:79:84:c4:b4:cc:41:f8:47:43:
                    28:58:dd:c3:42:43:85:aa:cc:2e:05:18:a5:0d:b5:
                    0f:40:09:40:76:8b:63:b1:31:04:7f:9e:31:fa:63:
                    59:ee:8c:04:a6:fc:d2:5a:86:30:6d:98:7e:37:8e:
                    4f:01:74:9a:13:a0:a3:9e:43:78:8a:25:b5:b0:b2:
                    a4:1b:ac:85:2c:6e:c7:dd:56:eb:fa:0e:7a:20:3b:
                    27:05:98:b7:ea:a0:8d:ae:f6:94:6b:d1:87:e4:58:
                    9f:c2:9e:9a:7a:38:06:69:54:0f:40:06:76:8f:b9:
                    54:85:78:ed:ad:7b:28:9d:6c:fa:97:d9:ee:ad:08:
                    92:f4:95:b8:d8:73:b4:d2:f4:1e:5a:1d:aa:b4:78:
                    97:d1:18:bf:f9:29:c5:59:fe:7c:53:55:a7:e3:19:
                    64:cf:02:00:97:63:ea:1a:bc:f0:26:16:48:66:2e:
                    d3:b0:41:80:9e:89:6f:93:ab:68:d3:15:4c:6c:d7:
                    3e:b0:3e:6c:5d:c2:9c:0b:60:fa:3f:fa:84:24:bf:
                    1c:cb:20:f1:b0:c2:88:db:3c:59:55:d2:38:c3:b5:
                    76:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:37:FB:91:FA:09:FA:1C:7E:08:BE:89:FB:1D:FE:93:E3:2C:EC:64
            X509v3 Authority Key Identifier:
                keyid:B9:AE:FE:97:67:87:C2:87:8E:26:9D:80:7C:AB:98:AD:73:6D:61:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua7-l2eHwoeOJp2AfKuYrXNtYeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/82cd86-dbf9-4471-811b-14bd71356daa/1/ua7-l2eHwoeOJp2AfKuYrXNtYeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:12:0a:19:90:14:38:88:be:5c:e1:93:c2:20:bf:59:36:0d:
         4e:77:be:3c:71:ce:fc:10:90:8f:de:5d:70:fe:15:04:c7:ab:
         d5:30:63:b1:59:aa:9d:15:2d:0c:ec:3c:24:23:a4:89:66:15:
         00:14:fb:ea:e2:8e:d3:fa:93:1b:1f:ba:7f:ff:f3:90:b8:c8:
         51:a1:59:e7:ee:59:e4:fa:c4:a2:76:ca:e9:4b:46:12:d9:42:
         3b:68:1b:73:82:1c:2e:6f:01:40:fe:47:96:2f:1d:87:1d:1b:
         4e:b0:c4:fb:cd:20:84:79:4e:8a:30:29:6e:f9:25:27:a0:c1:
         1d:89:26:1e:b3:ca:95:ff:a3:2f:19:16:92:bb:d3:be:85:5f:
         e4:92:9a:cd:61:8c:38:cb:00:b0:29:a5:1a:3d:16:3d:f6:63:
         83:d0:60:7d:29:e1:4a:cb:ea:05:de:bd:a4:77:2e:fe:5c:e9:
         d3:4f:20:ac:8c:f7:3f:a1:ec:de:e0:b1:8e:0d:a4:90:57:de:
         98:b1:8d:66:d3:fa:af:5c:b2:de:63:ac:7c:53:60:95:97:87:
         9b:bd:6e:4b:84:36:f0:58:27:e6:9f:54:2a:df:10:c9:94:6f:
         3c:52:9f:f7:b8:12:9f:2d:b6:f8:ae:9b:57:e4:e4:ad:b5:3e:
         0d:3f:9a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9oU1fE9wLhLUzOWSB6gFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWVmZTk3Njc4N2MyODc4ZTI2OWQ4MDdjYWI5OGFkNzM2
ZDYxZTIwHhcNMjQxMTIzMDMwMDE2WhcNMjQxMTI0MDMwMDE2WjAzMTEwLwYDVQQD
EyhmMDM3ZmI5MWZhMDlmYTFjN2UwOGJlODlmYjFkZmU5M2UzMmNlYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqmGPK73nKOr4yc/sK/0ZZgSJ3sh
y3v0arE+qHUuGFQImbd5hMS0zEH4R0MoWN3DQkOFqswuBRilDbUPQAlAdotjsTEE
f54x+mNZ7owEpvzSWoYwbZh+N45PAXSaE6CjnkN4iiW1sLKkG6yFLG7H3Vbr+g56
IDsnBZi36qCNrvaUa9GH5Fifwp6aejgGaVQPQAZ2j7lUhXjtrXsonWz6l9nurQiS
9JW42HO00vQeWh2qtHiX0Ri/+SnFWf58U1Wn4xlkzwIAl2PqGrzwJhZIZi7TsEGA
nolvk6to0xVMbNc+sD5sXcKcC2D6P/qEJL8cyyDxsMKI2zxZVdI4w7V28wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPA3+5H6Cfocfgi+ifsd/pPjLOxkMB8GA1UdIwQY
MBaAFLmu/pdnh8KHjiadgHyrmK1zbWHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MmNkODYtZGJmOS00NDcxLTgxMWIt
MTRiZDcxMzU2ZGFhLzEvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84MmNkODYtZGJmOS00NDcxLTgxMWItMTRiZDcxMzU2ZGFh
LzEvdWE3LWwyZUh3b2VPSnAyQWZLdVlyWE50WWVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERIKGZAU
OIi+XOGTwiC/WTYNTne+PHHO/BCQj95dcP4VBMer1TBjsVmqnRUtDOw8JCOkiWYV
ABT76uKO0/qTGx+6f//zkLjIUaFZ5+5Z5PrEonbK6UtGEtlCO2gbc4IcLm8BQP5H
li8dhx0bTrDE+80ghHlOijApbvklJ6DBHYkmHrPKlf+jLxkWkrvTvoVf5JKazWGM
OMsAsCmlGj0WPfZjg9BgfSnhSsvqBd69pHcu/lzp008grIz3P6Hs3uCxjg2kkFfe
mLGNZtP6r1yy3mOsfFNglZeHm71uS4Q28Fgn5p9UKt8QyZRvPFKf97gSny22+K6b
V+TkrbU+DT+a1Q==
-----END CERTIFICATE-----