Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
File:                     1GYMK1_mmAYfHgqlfVXfbPBChU0.mft (raw, json)
Hash identifier:          5uSzTpgQbTKQqU9yW5yownn2F/PgRommhVR80JEMZGU=
Subject key identifier:   51:48:C7:3E:DB:B8:FE:62:4A:C7:70:F9:08:70:16:D5:C5:DE:5F:6A
Authority key identifier: D4:66:0C:2B:5F:E6:98:06:1F:1E:0A:A5:7D:55:DF:6C:F0:42:85:4D
Certificate issuer:       /CN=d4660c2b5fe698061f1e0aa57d55df6cf042854d
Certificate serial:       019357D27D8CE6F882CC86A6D9B1EFAAE214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GYMK1_mmAYfHgqlfVXfbPBChU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
Manifest number:          1301
Signing time:             Sat 23 Nov 2024 07:00:32 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:32 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:32 +0000
Files and hashes:         1: 1GYMK1_mmAYfHgqlfVXfbPBChU0.crl (hash: icmd1yg8jVNoh4UYq7SDDOw30dRKo0JPIf7KMvjpGlg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GYMK1_mmAYfHgqlfVXfbPBChU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:7d:8c:e6:f8:82:cc:86:a6:d9:b1:ef:aa:e2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4660c2b5fe698061f1e0aa57d55df6cf042854d
        Validity
            Not Before: Nov 23 07:00:32 2024 GMT
            Not After : Nov 24 07:00:32 2024 GMT
        Subject: CN=5148c73edbb8fe624ac770f9087016d5c5de5f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1f:e8:14:63:77:9c:26:a6:8a:0c:e7:7b:b4:
                    8c:4d:49:e2:c6:f5:7a:a8:8f:1d:5b:3f:17:24:f3:
                    ed:e6:cb:8d:4a:bb:06:2d:24:75:3d:79:c9:7f:9a:
                    f0:eb:13:a4:16:79:d8:c8:0e:a1:d0:6b:ce:91:f8:
                    76:95:12:fc:93:35:4b:fe:e8:b9:c3:7d:ca:d0:34:
                    24:48:69:05:be:b0:f3:4c:6a:52:1b:31:4a:f3:f7:
                    f9:9e:ce:30:21:fd:ae:f7:20:06:25:01:61:8f:38:
                    54:dd:ca:be:c1:e7:75:38:aa:06:91:e3:02:e0:98:
                    46:a1:7d:2c:05:75:6d:47:e1:19:e7:39:50:77:16:
                    96:3d:19:02:43:15:da:84:22:2d:9b:18:e5:6d:ae:
                    28:0b:d3:1e:75:45:29:d2:9e:df:19:bf:b8:94:e1:
                    06:f4:ab:5a:0c:7c:61:6f:8d:47:01:7e:92:f8:97:
                    f4:a5:58:02:a6:fc:89:d6:60:f5:af:50:d5:97:81:
                    d6:52:27:83:1b:aa:66:70:5d:6f:e3:f1:ad:f4:6a:
                    a9:52:66:6b:6c:1a:89:c6:79:d4:bb:c4:54:8d:a9:
                    16:4c:43:d4:4d:4e:62:14:da:d6:98:7a:dc:1a:ef:
                    fe:6b:fd:03:33:9d:ab:fc:eb:ac:a6:30:6b:58:0c:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:48:C7:3E:DB:B8:FE:62:4A:C7:70:F9:08:70:16:D5:C5:DE:5F:6A
            X509v3 Authority Key Identifier:
                keyid:D4:66:0C:2B:5F:E6:98:06:1F:1E:0A:A5:7D:55:DF:6C:F0:42:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GYMK1_mmAYfHgqlfVXfbPBChU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f50e1-e7a9-4769-887f-708038bb9816/1/1GYMK1_mmAYfHgqlfVXfbPBChU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6a:95:a6:25:2c:1f:3c:40:94:c7:05:e9:03:5a:7f:92:5a:
         c6:e7:4c:0e:d4:66:fb:de:66:7b:37:54:34:1b:87:9c:6e:0d:
         b6:57:a9:28:07:17:98:12:a2:8f:ca:75:c4:72:ec:a6:e3:52:
         b0:19:a1:b3:d4:2b:68:a4:86:46:e8:ad:a4:09:72:72:cf:6d:
         e5:f5:1a:69:15:9f:d5:c6:51:90:e7:7c:cc:c2:88:cc:67:94:
         37:ce:17:bb:80:c7:39:2d:5f:b5:06:27:1e:8f:2d:a4:a9:fd:
         16:bd:27:a2:03:9a:0c:78:48:0a:16:31:86:4f:b6:53:bb:0a:
         49:df:53:68:d5:ef:bc:c3:5b:4c:9d:e9:ed:78:0d:70:33:dd:
         fe:54:b3:9e:16:95:df:c9:8b:38:b6:98:4e:44:08:31:b1:2f:
         e8:99:44:6c:af:e3:f5:90:f5:82:b8:9b:4e:7a:3d:37:99:b4:
         2e:99:d6:d0:99:33:6a:cb:c1:7a:81:d0:e7:2a:da:1e:5d:0a:
         14:7c:13:aa:02:11:4f:00:c3:42:b9:73:ff:d0:2b:cc:65:fb:
         6e:ce:dd:dd:0d:85:3e:c7:9a:14:dd:17:c6:cd:60:fc:60:24:
         d2:d6:11:2f:c9:d6:27:03:03:f8:ef:13:53:6f:5f:95:b0:f4:
         80:73:ce:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0n2M5viCzIam2bHvquIUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NjYwYzJiNWZlNjk4MDYxZjFlMGFhNTdkNTVkZjZjZjA0
Mjg1NGQwHhcNMjQxMTIzMDcwMDMyWhcNMjQxMTI0MDcwMDMyWjAzMTEwLwYDVQQD
Eyg1MTQ4YzczZWRiYjhmZTYyNGFjNzcwZjkwODcwMTZkNWM1ZGU1ZjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2x/oFGN3nCamigzne7SMTUnixvV6
qI8dWz8XJPPt5suNSrsGLSR1PXnJf5rw6xOkFnnYyA6h0GvOkfh2lRL8kzVL/ui5
w33K0DQkSGkFvrDzTGpSGzFK8/f5ns4wIf2u9yAGJQFhjzhU3cq+wed1OKoGkeMC
4JhGoX0sBXVtR+EZ5zlQdxaWPRkCQxXahCItmxjlba4oC9MedUUp0p7fGb+4lOEG
9KtaDHxhb41HAX6S+Jf0pVgCpvyJ1mD1r1DVl4HWUieDG6pmcF1v4/Gt9GqpUmZr
bBqJxnnUu8RUjakWTEPUTU5iFNrWmHrcGu/+a/0DM52r/OuspjBrWAx6JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFIxz7buP5iSsdw+QhwFtXF3l9qMB8GA1UdIwQY
MBaAFNRmDCtf5pgGHx4KpX1V32zwQoVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdZTUsxX21tQVlmSGdxbGZWWGZiUEJDaFUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZjUwZTEtZTdhOS00NzY5LTg4N2Yt
NzA4MDM4YmI5ODE2LzEvMUdZTUsxX21tQVlmSGdxbGZWWGZiUEJDaFUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZjUwZTEtZTdhOS00NzY5LTg4N2YtNzA4MDM4YmI5ODE2
LzEvMUdZTUsxX21tQVlmSGdxbGZWWGZiUEJDaFUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2qVpiUs
HzxAlMcF6QNaf5JaxudMDtRm+95mezdUNBuHnG4NtlepKAcXmBKij8p1xHLspuNS
sBmhs9QraKSGRuitpAlycs9t5fUaaRWf1cZRkOd8zMKIzGeUN84Xu4DHOS1ftQYn
Ho8tpKn9Fr0nogOaDHhIChYxhk+2U7sKSd9TaNXvvMNbTJ3p7XgNcDPd/lSznhaV
38mLOLaYTkQIMbEv6JlEbK/j9ZD1gribTno9N5m0LpnW0JkzasvBeoHQ5yraHl0K
FHwTqgIRTwDDQrlz/9ArzGX7bs7d3Q2FPseaFN0Xxs1g/GAk0tYRL8nWJwMD+O8T
U29flbD0gHPOFQ==
-----END CERTIFICATE-----