Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
File:                     0z3ubd_dv6ge6rxEHFPnAvklgWU.mft (raw, json)
Hash identifier:          T2R/aU6wfjTdYLsCRIUR5qK8CkpU0Ur9vQQ8utUnu2U=
Subject key identifier:   2E:0A:58:F9:D8:6B:C3:CE:70:76:CD:72:DE:2B:3C:7D:89:4D:7F:AC
Authority key identifier: D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65
Certificate issuer:       /CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
Certificate serial:       01936A7DCAFF049F67C24DE811EE3D61E681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
Manifest number:          113D
Signing time:             Tue 26 Nov 2024 22:00:49 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:49 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:49 +0000
Files and hashes:         1: 0z3ubd_dv6ge6rxEHFPnAvklgWU.crl (hash: vISE9RfA3w+lHybXp7JuEQr1sFIqxA1H9ieyskfaSBQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:ca:ff:04:9f:67:c2:4d:e8:11:ee:3d:61:e6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d33dee6ddfddbfa81eeabc441c53e702f9258165
        Validity
            Not Before: Nov 26 22:00:49 2024 GMT
            Not After : Nov 27 22:00:49 2024 GMT
        Subject: CN=2e0a58f9d86bc3ce7076cd72de2b3c7d894d7fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9e:3e:5e:05:2b:80:b3:54:5d:ab:e4:30:45:
                    2f:44:b8:5d:14:00:55:78:1c:50:0b:7a:6d:3b:bc:
                    68:5a:cf:f7:2f:2e:06:25:48:14:9d:13:c2:e5:86:
                    7a:f7:57:0e:e2:63:41:aa:7f:63:1f:e2:b7:77:9f:
                    0f:a2:7e:ea:4a:b1:65:95:66:ad:c7:cd:a8:45:c6:
                    c5:9c:b0:2c:92:67:5f:9c:5e:36:fb:ae:36:85:ed:
                    7c:72:1b:2b:6b:34:c6:6c:1f:cb:92:6e:68:db:34:
                    15:2c:fd:ed:e4:d9:8f:0d:fc:bc:1f:52:25:58:12:
                    6c:bf:f0:9c:5f:56:c8:e3:40:3d:91:f3:49:23:0b:
                    56:e1:33:28:8c:de:f6:98:30:3d:7e:0d:ac:16:0f:
                    54:5a:d0:87:f8:1d:a6:b1:9c:d6:44:75:41:cb:1e:
                    00:11:22:e4:d4:5c:ef:8b:2f:d5:a2:31:82:35:6a:
                    fc:e3:4b:5b:ec:e5:7d:99:3b:f5:d5:aa:01:40:23:
                    ec:31:74:ae:1a:70:cb:ee:7f:60:7c:b5:93:1a:ed:
                    02:46:de:d8:9a:ef:b9:fc:96:96:57:84:d0:32:14:
                    54:6b:39:d9:b0:98:c7:9f:14:d0:4c:0f:05:8a:39:
                    61:e9:61:9e:80:7a:c0:16:a4:73:87:5b:fa:0d:8d:
                    68:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:0A:58:F9:D8:6B:C3:CE:70:76:CD:72:DE:2B:3C:7D:89:4D:7F:AC
            X509v3 Authority Key Identifier:
                keyid:D3:3D:EE:6D:DF:DD:BF:A8:1E:EA:BC:44:1C:53:E7:02:F9:25:81:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z3ubd_dv6ge6rxEHFPnAvklgWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4eae11-8dc8-4aa0-87fb-1bcbb106ecfb/1/0z3ubd_dv6ge6rxEHFPnAvklgWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:34:86:fc:e3:6f:f5:f3:6a:61:f2:a9:c7:f9:59:7f:c6:4b:
         31:e6:46:b4:85:5f:41:c8:f4:42:e0:a0:e1:37:b1:2c:b2:c6:
         e7:80:04:0f:c5:e5:0e:7b:d3:b0:7c:b4:f5:0f:c8:5e:79:e0:
         c4:af:af:45:10:f7:93:b3:12:47:03:8a:49:56:89:40:e3:32:
         50:f3:43:d0:de:dc:de:2f:21:61:36:83:92:4e:f1:9e:1b:8d:
         e5:29:9f:d6:39:57:39:63:cb:46:4a:f5:54:bd:09:2c:ba:a3:
         44:c3:ab:77:72:9e:95:86:11:54:04:1a:d4:51:22:11:6c:96:
         c5:a2:87:e2:2b:5a:86:e4:13:63:94:0c:d9:db:7b:72:7c:d0:
         74:fd:97:a6:3a:7c:29:1b:fb:d1:ce:69:f0:3b:25:92:9c:a7:
         f3:d7:6f:6d:ec:38:3d:34:3d:40:91:19:e1:38:ca:a7:30:6b:
         eb:d0:72:27:81:f6:53:39:1a:b3:6a:87:36:4f:f3:20:bb:5e:
         8f:df:77:d8:8e:f6:7a:60:32:b0:51:2d:ce:b4:22:e3:5d:27:
         ca:33:30:6f:3d:cc:f2:3b:d9:25:2e:05:79:7e:08:04:eb:be:
         90:2f:17:1c:ec:64:fb:1d:cc:b9:d9:6c:5c:5b:9c:9e:6d:3f:
         c4:60:1d:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfcr/BJ9nwk3oEe49YeaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2RlZTZkZGZkZGJmYTgxZWVhYmM0NDFjNTNlNzAyZjky
NTgxNjUwHhcNMjQxMTI2MjIwMDQ5WhcNMjQxMTI3MjIwMDQ5WjAzMTEwLwYDVQQD
EygyZTBhNThmOWQ4NmJjM2NlNzA3NmNkNzJkZTJiM2M3ZDg5NGQ3ZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Z4+XgUrgLNUXavkMEUvRLhdFABV
eBxQC3ptO7xoWs/3Ly4GJUgUnRPC5YZ691cO4mNBqn9jH+K3d58Pon7qSrFllWat
x82oRcbFnLAskmdfnF42+642he18chsrazTGbB/Lkm5o2zQVLP3t5NmPDfy8H1Il
WBJsv/CcX1bI40A9kfNJIwtW4TMojN72mDA9fg2sFg9UWtCH+B2msZzWRHVByx4A
ESLk1Fzviy/VojGCNWr840tb7OV9mTv11aoBQCPsMXSuGnDL7n9gfLWTGu0CRt7Y
mu+5/JaWV4TQMhRUaznZsJjHnxTQTA8Fijlh6WGegHrAFqRzh1v6DY1olQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4KWPnYa8POcHbNct4rPH2JTX+sMB8GA1UdIwQY
MBaAFNM97m3f3b+oHuq8RBxT5wL5JYFlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHozdWJkX2R2NmdlNnJ4RUhGUG5BdmtsZ1dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80ZWFlMTEtOGRjOC00YWEwLTg3ZmIt
MWJjYmIxMDZlY2ZiLzEvMHozdWJkX2R2NmdlNnJ4RUhGUG5BdmtsZ1dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi80ZWFlMTEtOGRjOC00YWEwLTg3ZmItMWJjYmIxMDZlY2Zi
LzEvMHozdWJkX2R2NmdlNnJ4RUhGUG5BdmtsZ1dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzSG/ONv
9fNqYfKpx/lZf8ZLMeZGtIVfQcj0QuCg4TexLLLG54AED8XlDnvTsHy09Q/IXnng
xK+vRRD3k7MSRwOKSVaJQOMyUPND0N7c3i8hYTaDkk7xnhuN5Smf1jlXOWPLRkr1
VL0JLLqjRMOrd3KelYYRVAQa1FEiEWyWxaKH4itahuQTY5QM2dt7cnzQdP2Xpjp8
KRv70c5p8Dslkpyn89dvbew4PTQ9QJEZ4TjKpzBr69ByJ4H2Uzkas2qHNk/zILte
j9932I72emAysFEtzrQi410nyjMwbz3M8jvZJS4FeX4IBOu+kC8XHOxk+x3Mudls
XFucnm0/xGAd9g==
-----END CERTIFICATE-----