Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft
File:                     SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft (raw, json)
Hash identifier:          nza5mCwkimbawzjRSFINOTM5+Ahyw4oZQ8UJVUD64eI=
Subject key identifier:   C7:BB:03:32:FA:F0:11:C6:00:B8:90:FF:25:7F:2B:F5:5A:AA:CD:67
Authority key identifier: 4A:62:2B:81:9A:BF:35:03:C8:18:EB:FB:6D:87:3C:21:C1:BF:CF:B4
Certificate issuer:       /CN=4a622b819abf3503c818ebfb6d873c21c1bfcfb4
Certificate serial:       0191FAEE39D5E38C391C57E084096C712902
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft
Manifest number:          010D
Signing time:             Mon 16 Sep 2024 13:03:21 +0000
Manifest this update:     Mon 16 Sep 2024 13:03:21 +0000
Manifest next update:     Tue 17 Sep 2024 13:03:21 +0000
Files and hashes:         1: SmIrgZq_NQPIGOv7bYc8IcG_z7Q.crl (hash: GRn4kZva5ZTisNz8ROCNuedPT/NVTrmusu8plR6/hyw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:03:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ee:39:d5:e3:8c:39:1c:57:e0:84:09:6c:71:29:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a622b819abf3503c818ebfb6d873c21c1bfcfb4
        Validity
            Not Before: Sep 16 13:03:21 2024 GMT
            Not After : Sep 17 13:03:21 2024 GMT
        Subject: CN=c7bb0332faf011c600b890ff257f2bf55aaacd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:78:f2:40:6e:71:2e:b5:7c:a6:09:9b:77:
                    07:30:b9:dc:a1:bd:0e:29:b4:4e:1a:ac:a0:ca:80:
                    88:ab:3a:d6:18:16:bf:c3:eb:63:a3:f7:ed:b6:61:
                    27:2b:66:0f:d4:65:fc:ca:0a:fa:bf:8e:50:42:25:
                    68:cb:82:9c:c7:56:e8:c5:c2:3b:61:a6:02:75:c1:
                    61:de:24:a2:8a:16:a2:32:39:18:d5:84:61:1c:3a:
                    ec:34:0a:db:b3:67:7f:2c:b9:8f:3f:71:14:9a:19:
                    05:c2:48:c0:97:87:66:0f:b6:35:46:2d:49:37:f9:
                    c6:a6:c4:04:31:89:16:4c:c8:bb:bc:a6:bf:5a:d6:
                    cd:2e:9a:4d:83:67:0a:81:c5:65:af:7c:b6:f4:41:
                    58:65:c5:ac:1b:6f:d2:f3:34:36:c6:7c:9c:4c:6a:
                    52:ed:26:3a:4d:78:21:64:29:0b:80:87:1b:bc:9e:
                    68:bc:45:ff:60:98:6e:d0:42:01:74:cc:b6:b6:af:
                    99:70:57:fb:ed:50:74:17:3a:8a:c3:5e:f2:cf:a2:
                    24:bb:30:b4:91:06:02:12:4f:a0:8a:c6:0a:b8:44:
                    3b:8e:da:7f:f4:33:66:dc:8b:1b:fd:71:92:94:33:
                    95:17:62:85:46:a9:d1:02:46:9a:b0:81:92:b3:44:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BB:03:32:FA:F0:11:C6:00:B8:90:FF:25:7F:2B:F5:5A:AA:CD:67
            X509v3 Authority Key Identifier:
                keyid:4A:62:2B:81:9A:BF:35:03:C8:18:EB:FB:6D:87:3C:21:C1:BF:CF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/052f29-d545-4a8a-8672-40e34c061968/1/SmIrgZq_NQPIGOv7bYc8IcG_z7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6e:5d:fd:96:16:4d:b5:5f:7d:c4:96:2e:31:b9:4e:0b:df:
         62:43:c7:2f:63:58:3c:26:fc:dc:31:0e:41:1c:8e:e2:02:fc:
         94:52:33:49:84:26:e8:e2:bf:ea:a4:c9:0e:a8:8d:e3:bd:72:
         06:99:9d:84:a6:90:e9:ef:fe:a8:c8:34:4b:30:1b:fc:f7:4c:
         47:c5:98:d9:59:c1:ee:8b:52:20:2e:b8:03:72:61:df:2e:10:
         7c:90:b8:32:b9:9a:93:2f:21:4a:f6:76:e5:99:96:ac:e0:3f:
         9c:54:15:37:29:1f:cf:c0:32:ce:27:17:91:49:95:05:89:fa:
         af:43:ce:b6:e9:54:ff:77:2d:e7:70:c7:7a:53:8b:7d:54:66:
         07:29:3a:9e:8c:26:8c:b3:5a:58:0b:cf:ff:d3:4f:75:fa:a0:
         20:86:10:ca:bf:ce:66:1a:a9:6a:3b:3f:cd:76:9f:6a:ea:67:
         1e:82:76:4b:ea:6d:4a:d7:40:0b:fa:ad:cd:12:34:b5:da:c1:
         c7:8e:6f:10:4b:07:10:72:eb:f1:42:bc:1b:91:1c:21:27:8f:
         40:c4:70:60:11:ae:5d:5b:7c:27:f0:8e:b2:76:ca:a1:0c:64:
         26:e2:42:e4:f7:2e:f1:e0:91:74:3f:c4:d7:fb:a4:de:54:78:
         a6:38:86:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH67jnV44w5HFfghAlscSkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjIyYjgxOWFiZjM1MDNjODE4ZWJmYjZkODczYzIxYzFi
ZmNmYjQwHhcNMjQwOTE2MTMwMzIxWhcNMjQwOTE3MTMwMzIxWjAzMTEwLwYDVQQD
EyhjN2JiMDMzMmZhZjAxMWM2MDBiODkwZmYyNTdmMmJmNTVhYWFjZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfx48kBucS61fKYJm3cHMLncob0O
KbROGqygyoCIqzrWGBa/w+tjo/fttmEnK2YP1GX8ygr6v45QQiVoy4Kcx1boxcI7
YaYCdcFh3iSiihaiMjkY1YRhHDrsNArbs2d/LLmPP3EUmhkFwkjAl4dmD7Y1Ri1J
N/nGpsQEMYkWTMi7vKa/WtbNLppNg2cKgcVlr3y29EFYZcWsG2/S8zQ2xnycTGpS
7SY6TXghZCkLgIcbvJ5ovEX/YJhu0EIBdMy2tq+ZcFf77VB0FzqKw17yz6IkuzC0
kQYCEk+gisYKuEQ7jtp/9DNm3Isb/XGSlDOVF2KFRqnRAkaasIGSs0TXlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMe7AzL68BHGALiQ/yV/K/Vaqs1nMB8GA1UdIwQY
MBaAFEpiK4GavzUDyBjr+22HPCHBv8+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21JcmdacV9OUVBJR092N2JZYzhJY0dfejdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wNTJmMjktZDU0NS00YThhLTg2NzIt
NDBlMzRjMDYxOTY4LzEvU21JcmdacV9OUVBJR092N2JZYzhJY0dfejdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wNTJmMjktZDU0NS00YThhLTg2NzItNDBlMzRjMDYxOTY4
LzEvU21JcmdacV9OUVBJR092N2JZYzhJY0dfejdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeW5d/ZYW
TbVffcSWLjG5TgvfYkPHL2NYPCb83DEOQRyO4gL8lFIzSYQm6OK/6qTJDqiN471y
BpmdhKaQ6e/+qMg0SzAb/PdMR8WY2VnB7otSIC64A3Jh3y4QfJC4Mrmaky8hSvZ2
5ZmWrOA/nFQVNykfz8AyzicXkUmVBYn6r0POtulU/3ct53DHelOLfVRmByk6nowm
jLNaWAvP/9NPdfqgIIYQyr/OZhqpajs/zXafaupnHoJ2S+ptStdAC/qtzRI0tdrB
x45vEEsHEHLr8UK8G5EcISePQMRwYBGuXVt8J/COsnbKoQxkJuJC5Pcu8eCRdD/E
1/uk3lR4pjiGTA==
-----END CERTIFICATE-----