Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File:                     jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier:          Yha5M1nHutcwlrd7QHUt7V9VWDkyVMRx7WQG+8F4IFk=
Subject key identifier:   07:19:09:E6:91:F8:13:ED:59:67:D0:12:31:2E:D7:5B:85:6F:1B:67
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer:       /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial:       018F889272FE7BCB80924F9B678AF3362775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number:          1174
Signing time:             Fri 17 May 2024 22:00:50 +0000
Manifest this update:     Fri 17 May 2024 22:00:50 +0000
Manifest next update:     Sat 18 May 2024 22:00:50 +0000
Files and hashes:         1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: x+Z242JW3Zj2Pcyvhg15lNkckcK5H3TKQHfgCazDZjk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:92:72:fe:7b:cb:80:92:4f:9b:67:8a:f3:36:27:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
        Validity
            Not Before: May 17 22:00:50 2024 GMT
            Not After : May 18 22:00:50 2024 GMT
        Subject: CN=071909e691f813ed5967d012312ed75b856f1b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:78:8f:f8:a2:36:0b:da:cc:90:98:bb:93:
                    ef:c0:5a:db:e6:95:04:6f:0f:53:20:8a:a3:85:96:
                    d5:c8:c9:ff:6d:b0:c5:b0:c8:2d:f5:e1:a1:73:6f:
                    90:4b:bc:a6:a8:fc:af:b0:45:74:03:b3:22:dd:54:
                    6e:17:a0:da:13:71:f7:72:0b:44:c1:a8:fc:65:a1:
                    e9:89:c0:20:fa:79:3b:67:00:ee:ab:3b:be:38:26:
                    db:04:39:5e:6d:26:02:c6:96:31:80:d7:39:61:1b:
                    e5:e7:34:cf:df:b8:b8:7d:8a:13:4e:6b:8b:89:12:
                    fc:e7:a8:d5:e8:09:7b:62:28:05:1a:51:47:d4:22:
                    ba:eb:21:9b:04:b4:ac:c1:fa:2d:69:64:2c:e6:01:
                    8f:12:cc:66:74:76:62:95:41:a5:f2:7d:53:d1:e5:
                    7d:d6:1a:b1:0d:e2:c9:8d:c6:6c:12:69:c7:9e:e2:
                    2c:fb:bc:6e:2f:7a:d6:f9:29:f7:d7:0b:a2:8d:47:
                    89:d4:bd:4d:ef:95:bc:fd:29:97:48:48:f8:1f:60:
                    85:bd:40:06:c1:78:94:70:a6:66:c8:75:d9:d9:da:
                    37:d2:20:88:34:c8:1d:f0:61:61:e2:97:5f:ee:be:
                    f7:07:88:ab:58:16:93:5f:75:d4:40:1d:21:18:f3:
                    26:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:19:09:E6:91:F8:13:ED:59:67:D0:12:31:2E:D7:5B:85:6F:1B:67
            X509v3 Authority Key Identifier:
                keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:cd:dd:f8:fa:55:ec:7d:bd:fd:36:82:e2:33:29:9a:bc:a7:
         7c:8f:b8:6c:1f:40:d8:c5:7b:d8:2e:bd:b3:1d:bc:8c:b9:df:
         a9:73:50:38:56:df:ac:6d:83:a4:49:8d:51:77:b3:2e:01:97:
         cd:e9:93:02:be:be:a9:73:d5:08:ec:12:3b:12:52:b0:20:d9:
         86:25:74:25:b1:d7:61:e8:75:42:c4:da:b1:f9:e3:e6:22:bc:
         79:ae:d8:d9:57:be:dc:9b:80:c0:98:9d:5b:d2:4b:1c:e6:7b:
         2d:63:d6:ea:a0:c9:92:94:40:f0:c7:ff:fc:20:d7:ee:88:6d:
         bb:d0:91:1c:51:69:11:90:d5:8f:f8:a1:33:f4:30:46:14:47:
         6c:26:49:a0:b2:1f:55:76:a0:29:1e:4f:69:3d:fb:e6:37:3d:
         1f:c3:ff:dd:ba:3b:d0:b5:b5:22:e8:8f:55:59:71:94:3d:32:
         9a:09:81:d8:fd:e9:60:0d:a9:ff:2b:b4:97:e6:8c:bf:ce:47:
         ce:ac:52:f1:f0:a6:2b:08:0f:02:92:26:5f:30:44:f5:76:ec:
         22:1a:9d:f8:3f:52:e3:7f:53:fe:ec:52:eb:46:15:55:04:ca:
         23:78:a2:81:1e:cc:0e:0a:0c:7e:26:c9:96:82:4f:67:97:18:
         15:82:ff:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IknL+e8uAkk+bZ4rzNid1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNTAwMmY2MzllODE5NThkMGY5YjM1ODVhZWQ3NjcwN2Qy
NjI1ZGUwHhcNMjQwNTE3MjIwMDUwWhcNMjQwNTE4MjIwMDUwWjAzMTEwLwYDVQQD
EygwNzE5MDllNjkxZjgxM2VkNTk2N2QwMTIzMTJlZDc1Yjg1NmYxYjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnF4j/iiNgvazJCYu5PvwFrb5pUE
bw9TIIqjhZbVyMn/bbDFsMgt9eGhc2+QS7ymqPyvsEV0A7Mi3VRuF6DaE3H3cgtE
waj8ZaHpicAg+nk7ZwDuqzu+OCbbBDlebSYCxpYxgNc5YRvl5zTP37i4fYoTTmuL
iRL856jV6Al7YigFGlFH1CK66yGbBLSswfotaWQs5gGPEsxmdHZilUGl8n1T0eV9
1hqxDeLJjcZsEmnHnuIs+7xuL3rW+Sn31wuijUeJ1L1N75W8/SmXSEj4H2CFvUAG
wXiUcKZmyHXZ2do30iCINMgd8GFh4pdf7r73B4irWBaTX3XUQB0hGPMmZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcZCeaR+BPtWWfQEjEu11uFbxtnMB8GA1UdIwQY
MBaAFIxQAvY56BlY0PmzWFrtdnB9JiXeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakZBQzlqbm9HVmpRLWJOWVd1MTJjSDBtSmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYTYxMjgtYmYwMy00Y2E1LWE3NjYt
NmYwNjE5MTQ0NGFjLzEvakZBQzlqbm9HVmpRLWJOWVd1MTJjSDBtSmQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zYTYxMjgtYmYwMy00Y2E1LWE3NjYtNmYwNjE5MTQ0NGFj
LzEvakZBQzlqbm9HVmpRLWJOWVd1MTJjSDBtSmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGs3d+PpV
7H29/TaC4jMpmrynfI+4bB9A2MV72C69sx28jLnfqXNQOFbfrG2DpEmNUXezLgGX
zemTAr6+qXPVCOwSOxJSsCDZhiV0JbHXYeh1QsTasfnj5iK8ea7Y2Ve+3JuAwJid
W9JLHOZ7LWPW6qDJkpRA8Mf//CDX7ohtu9CRHFFpEZDVj/ihM/QwRhRHbCZJoLIf
VXagKR5PaT375jc9H8P/3bo70LW1IuiPVVlxlD0ymgmB2P3pYA2p/yu0l+aMv85H
zqxS8fCmKwgPApImXzBE9XbsIhqd+D9S439T/uxS60YVVQTKI3iigR7MDgoMfibJ
loJPZ5cYFYL/AQ==
-----END CERTIFICATE-----