Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
File:                     avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json)
Hash identifier:          xlms87N6jHnHW+rzqrsR3XHS1KcHO6nQCQtGDQlNd3Q=
Subject key identifier:   E5:9D:6F:CB:6B:3B:DC:E5:0F:9C:C4:E3:C5:E3:E9:85:61:44:A9:2B
Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03
Certificate issuer:       /CN=6af5016ff89da0c8cafee215ef6241c30bc93003
Certificate serial:       019360D55845F232073E73C3B6D549C6A9E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
Manifest number:          0A56
Signing time:             Mon 25 Nov 2024 01:00:14 +0000
Manifest this update:     Mon 25 Nov 2024 01:00:14 +0000
Manifest next update:     Tue 26 Nov 2024 01:00:14 +0000
Files and hashes:         1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: czLERRzMFWwHGbQDKThwIrcSEIB9HY7AF6QsnWjSrO4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 01:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:60:d5:58:45:f2:32:07:3e:73:c3:b6:d5:49:c6:a9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003
        Validity
            Not Before: Nov 25 01:00:14 2024 GMT
            Not After : Nov 26 01:00:14 2024 GMT
        Subject: CN=e59d6fcb6b3bdce50f9cc4e3c5e3e9856144a92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:12:a7:f5:b4:8b:5b:0a:8c:f3:8a:20:82:
                    de:8f:5c:b8:e9:b3:59:1a:83:97:09:ee:43:e7:ea:
                    39:25:92:43:4b:46:2d:cf:2f:06:6b:3a:59:75:ab:
                    6c:11:f1:45:dd:7f:27:92:80:6e:a7:af:18:ae:3f:
                    cd:be:5f:50:ea:35:e9:a1:06:fa:bd:2b:d5:e0:ee:
                    7f:9f:9b:fc:9e:88:a5:81:6a:00:40:1a:61:bc:69:
                    c8:38:a2:e1:f2:89:86:26:03:89:4f:ea:77:ea:f6:
                    5f:75:a6:a6:2b:54:33:de:a0:d6:db:c7:39:22:2c:
                    f1:23:a2:61:53:23:e4:6c:0d:45:18:46:06:72:9b:
                    9e:df:e5:37:6f:5e:1b:ee:7e:2b:83:d5:48:f5:32:
                    e2:13:7f:91:cb:96:3e:52:64:ac:9b:44:23:17:49:
                    ea:60:7e:89:e7:a6:c0:4b:bd:82:10:f6:df:8d:ee:
                    c7:e4:45:d7:07:25:74:b5:de:f3:97:fa:58:75:82:
                    bc:22:a7:63:09:c6:6a:73:cf:e5:b6:07:24:a5:97:
                    a6:b3:1a:5d:17:cf:4e:05:9a:22:d6:2e:d4:38:dd:
                    d1:2e:ab:31:4c:60:78:d3:82:c7:d2:ab:00:c8:69:
                    1c:32:f5:53:bb:8d:ab:98:46:83:48:d5:7b:92:41:
                    95:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:9D:6F:CB:6B:3B:DC:E5:0F:9C:C4:E3:C5:E3:E9:85:61:44:A9:2B
            X509v3 Authority Key Identifier:
                keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:76:93:c2:3a:ad:d5:d5:86:18:16:2f:71:21:90:d3:e2:7e:
         60:19:ac:42:2f:81:5c:e6:07:c7:e3:8c:a1:be:b3:86:5b:67:
         be:00:b7:29:2b:52:62:fa:99:38:b1:b6:07:4f:c6:8d:81:7e:
         c3:20:41:ec:2d:f7:f0:f9:bd:13:98:d0:e2:8a:a0:a4:64:76:
         18:b7:50:1a:5a:bd:bc:36:ea:73:eb:80:b1:d2:ff:76:0e:12:
         4c:b4:09:ca:86:9f:84:7b:cc:64:1a:6f:a9:47:6a:78:99:b3:
         c6:fd:45:bc:7e:82:9b:e5:8c:e4:44:70:d3:fa:c2:b3:8e:6d:
         c5:ff:bb:b0:ec:20:e7:96:cf:db:12:80:0c:4c:f3:ca:9d:3c:
         9c:86:bb:d8:59:4f:b4:5a:7b:37:12:ab:61:15:47:24:00:e9:
         d7:81:b5:f4:65:31:aa:a9:33:ad:32:fb:4b:2f:3a:b3:fd:09:
         40:ee:e0:3c:e1:88:58:50:01:4b:80:20:3d:9b:d3:54:16:0b:
         f8:64:5c:13:18:62:ae:93:c8:54:a2:f9:b0:28:b8:5f:fc:0e:
         50:cc:35:02:57:81:40:23:89:87:64:ea:88:70:96:91:35:f2:
         e4:27:2b:12:d6:f2:9a:18:4c:a6:b8:8c:20:f8:1f:89:03:84:
         52:6d:3e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNg1VhF8jIHPnPDttVJxqngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZjUwMTZmZjg5ZGEwYzhjYWZlZTIxNWVmNjI0MWMzMGJj
OTMwMDMwHhcNMjQxMTI1MDEwMDE0WhcNMjQxMTI2MDEwMDE0WjAzMTEwLwYDVQQD
EyhlNTlkNmZjYjZiM2JkY2U1MGY5Y2M0ZTNjNWUzZTk4NTYxNDRhOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK8Sp/W0i1sKjPOKIILej1y46bNZ
GoOXCe5D5+o5JZJDS0Ytzy8GazpZdatsEfFF3X8nkoBup68Yrj/Nvl9Q6jXpoQb6
vSvV4O5/n5v8noilgWoAQBphvGnIOKLh8omGJgOJT+p36vZfdaamK1Qz3qDW28c5
IizxI6JhUyPkbA1FGEYGcpue3+U3b14b7n4rg9VI9TLiE3+Ry5Y+UmSsm0QjF0nq
YH6J56bAS72CEPbfje7H5EXXByV0td7zl/pYdYK8IqdjCcZqc8/ltgckpZemsxpd
F89OBZoi1i7UON3RLqsxTGB404LH0qsAyGkcMvVTu42rmEaDSNV7kkGVLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWdb8trO9zlD5zE48Xj6YVhRKkrMB8GA1UdIwQY
MBaAFGr1AW/4naDIyv7iFe9iQcMLyTADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMDc0ODUtOTdkZi00N2Q5LWFhOTYt
ZGYwYzc0ZDU0NWQyLzEvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9hMDc0ODUtOTdkZi00N2Q5LWFhOTYtZGYwYzc0ZDU0NWQy
LzEvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3aTwjqt
1dWGGBYvcSGQ0+J+YBmsQi+BXOYHx+OMob6zhltnvgC3KStSYvqZOLG2B0/GjYF+
wyBB7C338Pm9E5jQ4oqgpGR2GLdQGlq9vDbqc+uAsdL/dg4STLQJyoafhHvMZBpv
qUdqeJmzxv1FvH6Cm+WM5ERw0/rCs45txf+7sOwg55bP2xKADEzzyp08nIa72FlP
tFp7NxKrYRVHJADp14G19GUxqqkzrTL7Sy86s/0JQO7gPOGIWFABS4AgPZvTVBYL
+GRcExhirpPIVKL5sCi4X/wOUMw1AleBQCOJh2TqiHCWkTXy5CcrEtbymhhMpriM
IPgfiQOEUm0+bw==
-----END CERTIFICATE-----