Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
File:                     oYNGitFuaZjU23dpvvv6BuofE0I.mft (raw, json)
Hash identifier:          cke/n3EiYtjKRLFQEsCI+J3T+pp/+sCv1hd9XvtJjiw=
Subject key identifier:   96:FF:E0:8A:74:E2:54:8D:5C:B5:8F:A6:F0:68:52:08:73:94:02:1C
Authority key identifier: A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42
Certificate issuer:       /CN=a183468ad16e6998d4db7769befbfa06ea1f1342
Certificate serial:       019357644C9740E53196EA3C0C6FA6A30DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
Manifest number:          0CED
Signing time:             Sat 23 Nov 2024 05:00:11 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:11 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:11 +0000
Files and hashes:         1: oYNGitFuaZjU23dpvvv6BuofE0I.crl (hash: JRRVgxMuu1gTYzXJJium8aoqF//gyb2sgHqsqM0ANTc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:4c:97:40:e5:31:96:ea:3c:0c:6f:a6:a3:0d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a183468ad16e6998d4db7769befbfa06ea1f1342
        Validity
            Not Before: Nov 23 05:00:11 2024 GMT
            Not After : Nov 24 05:00:11 2024 GMT
        Subject: CN=96ffe08a74e2548d5cb58fa6f06852087394021c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b5:9d:8b:06:77:07:25:2b:67:a7:ae:42:2c:
                    a1:25:5b:be:d2:f4:1f:e2:d4:76:b0:52:d1:16:56:
                    67:b7:ba:af:48:08:12:d1:ed:a9:06:89:83:26:27:
                    e5:5c:5f:1d:e5:03:47:6b:23:bd:77:20:61:ce:c3:
                    9b:1d:f7:01:7d:27:e6:d1:94:eb:30:c5:2c:d7:72:
                    b9:9e:b0:2e:79:9c:da:07:12:dc:19:41:94:6a:31:
                    0f:9e:f5:ef:29:a1:28:0b:a3:6f:a2:80:ea:62:86:
                    f0:86:58:2a:b1:65:5d:bd:da:96:e5:a7:09:cd:89:
                    89:90:75:cc:a9:ab:c2:d2:f9:01:95:12:38:d7:48:
                    17:15:4d:f6:29:34:0e:d1:bf:99:47:e6:e3:3f:12:
                    7d:20:1f:de:95:23:29:20:5e:29:e2:a4:8f:2a:22:
                    f7:ce:71:15:f3:58:0c:fa:0d:8f:94:80:bd:13:08:
                    03:87:e0:96:fc:d8:77:7b:2a:20:39:bb:b3:05:cb:
                    59:22:7a:c1:0d:d7:ab:87:bc:31:10:8d:35:00:d3:
                    d3:bb:79:c3:9e:29:34:e8:6c:a5:c2:1b:98:f5:23:
                    30:20:27:1f:ec:f5:c4:9a:8c:db:3e:3a:bd:8a:08:
                    45:77:9c:d0:3b:2d:a0:52:8a:90:bb:57:55:a9:a6:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FF:E0:8A:74:E2:54:8D:5C:B5:8F:A6:F0:68:52:08:73:94:02:1C
            X509v3 Authority Key Identifier:
                keyid:A1:83:46:8A:D1:6E:69:98:D4:DB:77:69:BE:FB:FA:06:EA:1F:13:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYNGitFuaZjU23dpvvv6BuofE0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/689d05-1b14-4f9b-8e7c-371ac7c654da/1/oYNGitFuaZjU23dpvvv6BuofE0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:91:a2:8c:cf:5c:b4:43:2f:a1:3f:54:67:88:29:bb:f0:45:
         a3:dc:0a:93:90:36:3a:e8:ee:e7:83:fd:12:05:c3:be:d5:fc:
         ca:44:e7:b5:d7:46:52:47:c5:1b:91:ee:99:aa:82:94:a6:14:
         25:c1:04:9c:2a:ec:7f:46:9f:ed:65:6b:d3:38:4b:5c:0e:1c:
         b7:8f:ea:0d:6c:2f:b0:78:99:87:ac:45:5e:ae:cf:c6:1f:66:
         e7:cd:fc:3c:18:0e:25:b6:e6:b9:0e:a6:b6:e1:10:48:2f:bf:
         af:e2:f6:6a:4b:b7:bd:14:13:b9:ab:b6:24:b2:d9:d5:0d:21:
         c0:e5:64:8e:3d:e7:fd:2d:6a:76:5d:86:98:e9:0a:d2:2c:fe:
         1a:f7:57:c1:48:9b:68:7b:3e:0c:ec:85:e5:bc:2a:5b:f5:c0:
         7d:72:52:ff:50:16:20:1b:85:4d:04:d0:01:3a:e8:eb:d4:e3:
         bc:a7:26:f8:92:d2:ba:30:2c:34:82:bf:12:d4:eb:77:81:6d:
         a6:9e:af:f5:7f:fd:b6:7d:56:2c:fb:3e:10:bd:2f:cb:77:6a:
         a6:d9:8d:d2:46:54:6e:01:df:ae:14:8e:ab:1d:eb:b3:8a:28:
         32:95:01:cf:a9:b0:e9:40:1d:b6:da:1c:48:87:50:43:f4:74:
         4a:e8:0e:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZEyXQOUxluo8DG+mow3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODM0NjhhZDE2ZTY5OThkNGRiNzc2OWJlZmJmYTA2ZWEx
ZjEzNDIwHhcNMjQxMTIzMDUwMDExWhcNMjQxMTI0MDUwMDExWjAzMTEwLwYDVQQD
Eyg5NmZmZTA4YTc0ZTI1NDhkNWNiNThmYTZmMDY4NTIwODczOTQwMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubWdiwZ3ByUrZ6euQiyhJVu+0vQf
4tR2sFLRFlZnt7qvSAgS0e2pBomDJiflXF8d5QNHayO9dyBhzsObHfcBfSfm0ZTr
MMUs13K5nrAueZzaBxLcGUGUajEPnvXvKaEoC6NvooDqYobwhlgqsWVdvdqW5acJ
zYmJkHXMqavC0vkBlRI410gXFU32KTQO0b+ZR+bjPxJ9IB/elSMpIF4p4qSPKiL3
znEV81gM+g2PlIC9EwgDh+CW/Nh3eyogObuzBctZInrBDderh7wxEI01ANPTu3nD
nik06GylwhuY9SMwICcf7PXEmozbPjq9ighFd5zQOy2gUoqQu1dVqab90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb/4Ip04lSNXLWPpvBoUghzlAIcMB8GA1UdIwQY
MBaAFKGDRorRbmmY1Nt3ab77+gbqHxNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lOR2l0RnVhWmpVMjNkcHZ2djZCdW9mRTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODlkMDUtMWIxNC00ZjliLThlN2Mt
MzcxYWM3YzY1NGRhLzEvb1lOR2l0RnVhWmpVMjNkcHZ2djZCdW9mRTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82ODlkMDUtMWIxNC00ZjliLThlN2MtMzcxYWM3YzY1NGRh
LzEvb1lOR2l0RnVhWmpVMjNkcHZ2djZCdW9mRTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipGijM9c
tEMvoT9UZ4gpu/BFo9wKk5A2Ouju54P9EgXDvtX8ykTntddGUkfFG5HumaqClKYU
JcEEnCrsf0af7WVr0zhLXA4ct4/qDWwvsHiZh6xFXq7Pxh9m5838PBgOJbbmuQ6m
tuEQSC+/r+L2aku3vRQTuau2JLLZ1Q0hwOVkjj3n/S1qdl2GmOkK0iz+GvdXwUib
aHs+DOyF5bwqW/XAfXJS/1AWIBuFTQTQATro69TjvKcm+JLSujAsNIK/EtTrd4Ft
pp6v9X/9tn1WLPs+EL0vy3dqptmN0kZUbgHfrhSOqx3rs4ooMpUBz6mw6UAdttoc
SIdQQ/R0SugOzw==
-----END CERTIFICATE-----