Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File:                     mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier:          W5bP9jECzfAjZ+z4+FVM7VIn7Hmty2FsXxMdVpbFQkA=
Subject key identifier:   AA:3B:7B:06:5F:14:56:E6:07:5C:39:38:52:71:4C:0E:0C:75:F1:60
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer:       /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial:       018F87497B925904C924718BC6FD96B5F256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number:          024C
Signing time:             Fri 17 May 2024 16:01:30 +0000
Manifest this update:     Fri 17 May 2024 16:01:30 +0000
Manifest next update:     Sat 18 May 2024 16:01:30 +0000
Files and hashes:         1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: FMDfVvWuTngwBKAjHCOSWPd8TQ78m28vlGW/w1AHmyU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:7b:92:59:04:c9:24:71:8b:c6:fd:96:b5:f2:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
        Validity
            Not Before: May 17 16:01:30 2024 GMT
            Not After : May 18 16:01:30 2024 GMT
        Subject: CN=aa3b7b065f1456e6075c393852714c0e0c75f160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b9:83:ad:4b:25:31:e3:9d:fa:cd:7a:f6:8a:
                    e0:97:aa:cd:4b:3f:f7:24:82:07:01:f4:9a:1c:59:
                    e1:5f:0e:88:50:a1:2f:7f:71:9f:49:04:26:9d:af:
                    6e:16:2c:41:a0:fd:fb:35:cc:62:28:b7:b7:7e:96:
                    aa:a8:5e:d6:02:4b:c6:8c:a4:29:e1:22:62:b0:5a:
                    df:a4:64:82:1f:4f:eb:e6:11:24:51:bb:84:67:17:
                    17:d3:29:9c:fe:12:56:83:05:e2:06:af:b0:68:3f:
                    b0:12:c3:61:fd:e7:9f:51:73:2a:51:4d:58:6c:33:
                    43:37:94:bc:71:32:ab:8b:71:34:7b:21:ad:36:67:
                    8d:c5:84:94:e7:34:0e:be:8c:67:30:16:c7:55:01:
                    94:45:5a:e2:92:82:2e:9a:3b:82:e1:b5:b5:07:9c:
                    86:8e:df:0e:b9:73:75:f6:3e:6d:23:e3:4c:22:85:
                    09:06:3d:e8:a0:3c:7d:10:a0:7d:17:92:2f:0c:9e:
                    a8:40:bd:ff:dc:42:3d:1c:4c:87:14:52:c3:63:94:
                    68:e0:e5:8b:74:b1:14:93:90:f5:67:78:0d:b5:07:
                    70:42:19:f4:01:55:34:21:5b:83:29:43:b2:56:05:
                    36:7b:01:ad:a2:ca:8b:51:df:60:5e:13:3d:4f:f0:
                    d1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3B:7B:06:5F:14:56:E6:07:5C:39:38:52:71:4C:0E:0C:75:F1:60
            X509v3 Authority Key Identifier:
                keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:83:7b:ca:f7:02:dd:d3:39:c3:84:70:36:21:69:40:86:b3:
         f5:1d:d5:0d:ed:8c:d6:ab:25:32:e3:fb:3e:fd:05:68:74:28:
         5e:05:15:87:5a:55:81:c3:a5:fc:0d:33:a2:5e:d1:8f:df:96:
         fe:13:79:39:d5:cf:81:58:51:da:f5:2a:15:85:cd:32:73:fe:
         ee:e9:f8:fb:11:a0:71:f9:8b:65:6c:16:13:e8:e3:d2:0d:da:
         a7:d7:fc:67:01:5c:ca:e4:94:fd:10:b1:53:bd:da:45:3f:88:
         da:d3:5a:87:52:28:0a:cd:e4:bc:2c:0f:18:bd:3d:f4:4d:71:
         79:b4:25:de:ee:bd:09:da:97:8a:9f:18:d0:70:c8:94:ee:9d:
         d3:2f:e6:d5:c5:22:28:8e:f2:0a:eb:02:7a:3c:26:fc:de:ae:
         05:13:b6:0d:60:b4:68:4d:c9:f0:21:b8:bf:9e:b2:be:35:84:
         77:46:c0:61:d9:31:31:01:0a:1d:47:5e:f6:12:51:cb:04:d4:
         81:80:74:c7:ba:49:24:8f:64:9e:a1:47:ff:88:3a:a9:8f:a6:
         06:dc:fa:09:26:6b:b4:4d:96:75:1c:43:f6:86:d5:6b:db:16:
         ee:bb:96:db:98:d8:8b:40:0e:71:04:5f:ab:0c:62:c0:bd:a3:
         f0:a6:ce:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSXuSWQTJJHGLxv2WtfJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDQ0MmI4YzBjZDFkZDUzNWJlYWU3MmI5NGRkMzVmOTI3
MjAzOGQwHhcNMjQwNTE3MTYwMTMwWhcNMjQwNTE4MTYwMTMwWjAzMTEwLwYDVQQD
EyhhYTNiN2IwNjVmMTQ1NmU2MDc1YzM5Mzg1MjcxNGMwZTBjNzVmMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrmDrUslMeOd+s169orgl6rNSz/3
JIIHAfSaHFnhXw6IUKEvf3GfSQQmna9uFixBoP37NcxiKLe3fpaqqF7WAkvGjKQp
4SJisFrfpGSCH0/r5hEkUbuEZxcX0ymc/hJWgwXiBq+waD+wEsNh/eefUXMqUU1Y
bDNDN5S8cTKri3E0eyGtNmeNxYSU5zQOvoxnMBbHVQGURVrikoIumjuC4bW1B5yG
jt8OuXN19j5tI+NMIoUJBj3ooDx9EKB9F5IvDJ6oQL3/3EI9HEyHFFLDY5Ro4OWL
dLEUk5D1Z3gNtQdwQhn0AVU0IVuDKUOyVgU2ewGtosqLUd9gXhM9T/DRSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKo7ewZfFFbmB1w5OFJxTA4MdfFgMB8GA1UdIwQY
MBaAFJkEQrjAzR3VNb6ucrlN01+ScgONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2Mt
ODRjYWQ3YTZlNWNiLzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2MtODRjYWQ3YTZlNWNi
LzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoN7yvcC
3dM5w4RwNiFpQIaz9R3VDe2M1qslMuP7Pv0FaHQoXgUVh1pVgcOl/A0zol7Rj9+W
/hN5OdXPgVhR2vUqFYXNMnP+7un4+xGgcfmLZWwWE+jj0g3ap9f8ZwFcyuSU/RCx
U73aRT+I2tNah1IoCs3kvCwPGL099E1xebQl3u69CdqXip8Y0HDIlO6d0y/m1cUi
KI7yCusCejwm/N6uBRO2DWC0aE3J8CG4v56yvjWEd0bAYdkxMQEKHUde9hJRywTU
gYB0x7pJJI9knqFH/4g6qY+mBtz6CSZrtE2WdRxD9obVa9sW7ruW25jYi0AOcQRf
qwxiwL2j8KbOlw==
-----END CERTIFICATE-----