Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
File:                     O4RSPDky4tGYBGI0uWLg3FGr9YY.mft (raw, json)
Hash identifier:          EeiEpZGoLQvzb6PVMOOMhkP+pRJvOQy+5fBi6krr6fA=
Subject key identifier:   8C:FA:2E:86:42:2C:92:0B:54:3A:A6:15:E4:11:FF:BC:25:AA:2A:BC
Authority key identifier: 3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86
Certificate issuer:       /CN=3b84523c3932e2d198046234b962e0dc51abf586
Certificate serial:       019369DA50BF98CD4A0DACD388462558C7BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
Manifest number:          137A
Signing time:             Tue 26 Nov 2024 19:02:15 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:15 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:15 +0000
Files and hashes:         1: O4RSPDky4tGYBGI0uWLg3FGr9YY.crl (hash: DVRzPQXOYY6OUTivV2dwfrzBmc/S+OkNrdO+3JHOwjU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:50:bf:98:cd:4a:0d:ac:d3:88:46:25:58:c7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b84523c3932e2d198046234b962e0dc51abf586
        Validity
            Not Before: Nov 26 19:02:15 2024 GMT
            Not After : Nov 27 19:02:15 2024 GMT
        Subject: CN=8cfa2e86422c920b543aa615e411ffbc25aa2abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:a1:81:d7:0b:07:24:a8:9e:fd:1c:52:df:
                    0d:86:16:f3:47:bf:38:ee:43:76:ea:1c:42:be:41:
                    10:63:69:1f:55:c3:5b:00:fa:0c:f6:9d:ca:13:db:
                    95:99:7e:f2:3f:b1:5b:fb:6d:1b:5c:26:45:d8:81:
                    19:77:bc:5e:aa:96:cd:c9:c2:94:61:5b:db:7d:81:
                    58:f9:38:18:b3:5f:25:30:77:4b:68:8e:c5:02:fb:
                    ca:38:69:86:b5:d1:7f:94:c8:56:c4:e9:19:30:3b:
                    57:cd:43:4b:bb:6c:a3:bb:69:ca:35:00:f8:f4:5e:
                    f1:b5:38:b8:39:8c:b2:d2:69:1e:a6:81:d3:35:b6:
                    84:d3:10:f6:57:ed:fa:ca:01:27:d7:89:f8:27:1a:
                    e7:5f:04:15:8b:02:e4:5a:af:ff:b2:10:e6:c9:cb:
                    c8:56:cf:ca:31:7d:9c:3d:48:25:7d:8f:6d:e9:da:
                    99:a5:ff:b8:69:0a:a4:ba:2b:01:d1:4e:82:31:ce:
                    4c:8d:9f:aa:f3:dc:47:5a:dc:a8:f2:31:82:47:8c:
                    4d:4b:ed:c4:37:69:b0:2f:94:0d:3a:78:2a:51:a5:
                    99:4d:30:14:d8:7d:52:e9:63:f0:3f:90:9a:5c:b5:
                    a6:26:36:2d:b8:ab:5b:8d:0d:85:31:7e:81:4b:a3:
                    05:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FA:2E:86:42:2C:92:0B:54:3A:A6:15:E4:11:FF:BC:25:AA:2A:BC
            X509v3 Authority Key Identifier:
                keyid:3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:5e:29:9b:fd:08:55:90:1e:22:f6:ba:6e:ec:31:f8:ac:4c:
         cd:ea:66:87:08:a8:5d:81:13:0f:6a:0d:96:91:e7:34:c4:0d:
         71:5f:c8:58:78:51:a1:5d:08:f5:54:cf:b0:28:0f:71:3d:b2:
         cf:42:01:ad:4a:22:7e:da:e4:ff:bc:3d:91:0d:96:df:d0:cd:
         20:3f:81:a1:46:27:5c:32:27:cd:13:00:01:7f:22:e3:c0:52:
         56:7c:0f:a7:43:ec:77:33:ed:29:13:2d:4b:e0:fa:c3:e6:a5:
         e8:18:5a:dd:9d:a6:4c:50:4a:52:5b:fe:76:d8:42:58:5b:49:
         f1:e9:10:67:b5:8b:a8:34:df:c1:cf:3e:70:22:17:9d:11:2d:
         2b:70:cf:ba:b9:34:bb:51:3b:26:d2:e9:3f:2a:70:77:db:b7:
         fb:f5:33:02:9c:d9:cb:52:b1:22:ef:71:c0:a3:b2:86:18:c4:
         74:7b:45:e9:1d:03:55:44:ff:be:15:fe:d8:72:4d:b5:25:5c:
         a0:dc:68:cd:72:fe:95:b3:01:3b:40:67:35:3d:7a:b3:b6:83:
         57:b4:10:31:e7:2c:23:87:d4:81:2e:29:1a:6d:82:c3:69:4a:
         b5:ad:ea:b4:58:3b:1e:ad:e1:2b:c4:2c:4d:82:51:d2:58:d8:
         6b:0d:b1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2lC/mM1KDazTiEYlWMe9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiODQ1MjNjMzkzMmUyZDE5ODA0NjIzNGI5NjJlMGRjNTFh
YmY1ODYwHhcNMjQxMTI2MTkwMjE1WhcNMjQxMTI3MTkwMjE1WjAzMTEwLwYDVQQD
Eyg4Y2ZhMmU4NjQyMmM5MjBiNTQzYWE2MTVlNDExZmZiYzI1YWEyYWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NChgdcLBySonv0cUt8NhhbzR784
7kN26hxCvkEQY2kfVcNbAPoM9p3KE9uVmX7yP7Fb+20bXCZF2IEZd7xeqpbNycKU
YVvbfYFY+TgYs18lMHdLaI7FAvvKOGmGtdF/lMhWxOkZMDtXzUNLu2yju2nKNQD4
9F7xtTi4OYyy0mkepoHTNbaE0xD2V+36ygEn14n4JxrnXwQViwLkWq//shDmycvI
Vs/KMX2cPUglfY9t6dqZpf+4aQqkuisB0U6CMc5MjZ+q89xHWtyo8jGCR4xNS+3E
N2mwL5QNOngqUaWZTTAU2H1S6WPwP5CaXLWmJjYtuKtbjQ2FMX6BS6MF1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIz6LoZCLJILVDqmFeQR/7wlqiq8MB8GA1UdIwQY
MBaAFDuEUjw5MuLRmARiNLli4NxRq/WGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzRSU1BEa3k0dEdZQkdJMHVXTGczRkdyOVlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82NDBhNWUtZWQ1Mi00N2IwLWJjZmYt
YmRmNWM3ODA3NDJlLzEvTzRSU1BEa3k0dEdZQkdJMHVXTGczRkdyOVlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy82NDBhNWUtZWQ1Mi00N2IwLWJjZmYtYmRmNWM3ODA3NDJl
LzEvTzRSU1BEa3k0dEdZQkdJMHVXTGczRkdyOVlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYF4pm/0I
VZAeIva6buwx+KxMzepmhwioXYETD2oNlpHnNMQNcV/IWHhRoV0I9VTPsCgPcT2y
z0IBrUoiftrk/7w9kQ2W39DNID+BoUYnXDInzRMAAX8i48BSVnwPp0PsdzPtKRMt
S+D6w+al6Bha3Z2mTFBKUlv+dthCWFtJ8ekQZ7WLqDTfwc8+cCIXnREtK3DPurk0
u1E7JtLpPypwd9u3+/UzApzZy1KxIu9xwKOyhhjEdHtF6R0DVUT/vhX+2HJNtSVc
oNxozXL+lbMBO0BnNT16s7aDV7QQMecsI4fUgS4pGm2Cw2lKta3qtFg7Hq3hK8Qs
TYJR0ljYaw2xPQ==
-----END CERTIFICATE-----