Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
File:                     SY8T56W69q6fUdJp9Z9k1GhJZB4.mft (raw, json)
Hash identifier:          MdOgu+FFxfMN+rbiL2O4GcNG2H7yNOIgRewQqCXivBA=
Subject key identifier:   6F:5F:EC:05:42:09:9C:B2:2C:D6:92:77:7B:0B:12:1B:4E:54:5E:88
Authority key identifier: 49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E
Certificate issuer:       /CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
Certificate serial:       018F87B6B261495A39B44BAB4217E4005F6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
Manifest number:          0858
Signing time:             Fri 17 May 2024 18:00:48 +0000
Manifest this update:     Fri 17 May 2024 18:00:48 +0000
Manifest next update:     Sat 18 May 2024 18:00:48 +0000
Files and hashes:         1: SY8T56W69q6fUdJp9Z9k1GhJZB4.crl (hash: qZPiY3vSKaFOG7PlEpsAHniN0j+rwTvMj9Nc/sAgVjg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b2:61:49:5a:39:b4:4b:ab:42:17:e4:00:5f:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=498f13e7a5baf6ae9f51d269f59f64d46849641e
        Validity
            Not Before: May 17 18:00:48 2024 GMT
            Not After : May 18 18:00:48 2024 GMT
        Subject: CN=6f5fec0542099cb22cd692777b0b121b4e545e88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:92:db:a3:d8:ef:15:5f:e5:58:ef:e5:04:
                    d4:98:e6:7b:19:d8:b3:49:2a:b3:a6:98:5a:c9:f4:
                    e9:f8:50:62:52:eb:d3:1b:4e:87:1c:d1:74:03:0b:
                    1b:c7:66:4d:94:01:71:ba:a8:b9:a5:a4:ec:2c:3b:
                    4b:e2:9f:48:20:d1:67:e1:9d:5a:d9:8a:3a:dd:39:
                    c4:ad:3c:b1:04:bd:f6:85:07:0b:5d:ee:6e:99:94:
                    19:78:c4:91:ff:79:c6:a3:e6:54:15:56:6c:e7:08:
                    73:f9:94:31:6b:0d:40:03:68:55:9d:4f:44:80:de:
                    c9:28:21:85:46:13:b9:d9:fb:2e:8d:17:2a:b2:59:
                    bf:88:3f:70:5b:85:f1:72:60:ab:e4:9b:18:df:4e:
                    14:ce:da:e2:02:e1:fa:f9:e3:ab:65:55:34:fd:3c:
                    e0:94:ce:95:c2:35:3f:44:de:b5:22:31:47:6c:97:
                    d0:5e:19:8c:69:0b:89:a9:f9:8e:12:90:14:e8:1f:
                    cd:00:7b:d5:41:dc:4f:cb:95:ad:e6:4e:89:7f:c8:
                    d7:42:cb:89:13:d0:8b:5b:ca:12:8e:1d:c5:a8:e3:
                    52:c4:87:a5:2a:e3:9a:5c:81:b2:fe:03:1c:36:1f:
                    9f:6b:ed:a5:2e:53:53:de:af:b0:1c:75:23:d5:a6:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:5F:EC:05:42:09:9C:B2:2C:D6:92:77:7B:0B:12:1B:4E:54:5E:88
            X509v3 Authority Key Identifier:
                keyid:49:8F:13:E7:A5:BA:F6:AE:9F:51:D2:69:F5:9F:64:D4:68:49:64:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY8T56W69q6fUdJp9Z9k1GhJZB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/f9ff50-5fff-477a-9ed6-ce1b4224ec49/1/SY8T56W69q6fUdJp9Z9k1GhJZB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:55:9a:26:6c:58:ac:d6:af:73:3a:14:aa:59:7a:01:08:d7:
         72:69:a2:c9:df:ef:45:b1:f5:e5:09:a6:27:3d:4a:b9:ba:be:
         23:7c:da:79:b0:16:f8:84:83:c9:a4:5d:3a:be:0a:c5:31:9c:
         f6:17:1a:4c:80:83:e4:54:b3:b6:d5:d8:d5:2f:7c:2b:31:b7:
         0d:cd:ba:79:37:24:6f:58:69:bf:3a:d1:b4:6c:a8:fc:90:fe:
         14:b8:68:9c:e8:b2:7d:79:8a:34:ed:da:03:c7:e8:f9:c4:1a:
         94:0d:ab:e0:9b:00:86:4e:25:64:b2:c3:a0:db:38:39:e4:b4:
         d2:d8:6c:c9:1e:cc:d9:cd:f4:21:7d:9b:c9:a4:d9:b1:ac:ca:
         17:fa:bf:8b:81:13:26:e8:da:4f:e8:85:cb:88:6b:88:6d:00:
         05:c2:38:87:b4:e0:88:f3:4f:83:d5:3b:62:6d:fc:9e:27:12:
         7b:fc:71:b3:e3:d3:55:3c:31:c1:28:a7:b2:20:7a:09:e3:37:
         ca:9c:97:63:01:f6:0d:f8:49:8f:e5:f4:62:59:d2:c7:a4:8c:
         64:3c:9b:7e:6d:b4:f2:a8:36:83:7a:64:cb:f5:29:a3:43:97:
         d9:0f:fe:0b:df:3a:74:60:c5:6b:d0:a8:4c:e8:11:1e:6b:b2:
         61:ea:d4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtrJhSVo5tEurQhfkAF9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGYxM2U3YTViYWY2YWU5ZjUxZDI2OWY1OWY2NGQ0Njg0
OTY0MWUwHhcNMjQwNTE3MTgwMDQ4WhcNMjQwNTE4MTgwMDQ4WjAzMTEwLwYDVQQD
Eyg2ZjVmZWMwNTQyMDk5Y2IyMmNkNjkyNzc3YjBiMTIxYjRlNTQ1ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC2S26PY7xVf5Vjv5QTUmOZ7Gdiz
SSqzpphayfTp+FBiUuvTG06HHNF0Awsbx2ZNlAFxuqi5paTsLDtL4p9IINFn4Z1a
2Yo63TnErTyxBL32hQcLXe5umZQZeMSR/3nGo+ZUFVZs5whz+ZQxaw1AA2hVnU9E
gN7JKCGFRhO52fsujRcqslm/iD9wW4XxcmCr5JsY304UztriAuH6+eOrZVU0/Tzg
lM6VwjU/RN61IjFHbJfQXhmMaQuJqfmOEpAU6B/NAHvVQdxPy5Wt5k6Jf8jXQsuJ
E9CLW8oSjh3FqONSxIelKuOaXIGy/gMcNh+fa+2lLlNT3q+wHHUj1aac8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9f7AVCCZyyLNaSd3sLEhtOVF6IMB8GA1UdIwQY
MBaAFEmPE+eluvaun1HSafWfZNRoSWQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYt
Y2UxYjQyMjRlYzQ5LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9mOWZmNTAtNWZmZi00NzdhLTllZDYtY2UxYjQyMjRlYzQ5
LzEvU1k4VDU2VzY5cTZmVWRKcDlaOWsxR2hKWkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllWaJmxY
rNavczoUqll6AQjXcmmiyd/vRbH15QmmJz1Kubq+I3zaebAW+ISDyaRdOr4KxTGc
9hcaTICD5FSzttXY1S98KzG3Dc26eTckb1hpvzrRtGyo/JD+FLhonOiyfXmKNO3a
A8fo+cQalA2r4JsAhk4lZLLDoNs4OeS00thsyR7M2c30IX2byaTZsazKF/q/i4ET
JujaT+iFy4hriG0ABcI4h7TgiPNPg9U7Ym38nicSe/xxs+PTVTwxwSinsiB6CeM3
ypyXYwH2DfhJj+X0YlnSx6SMZDybfm208qg2g3pky/Upo0OX2Q/+C986dGDFa9Co
TOgRHmuyYerUQw==
-----END CERTIFICATE-----