Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
File:                     fylmV6-NAMJf119W7MiiizUVBXU.mft (raw, json)
Hash identifier:          DTEcp8uwMUNYBFDDOFYoqQ+bmkMGXhZO/Y7cstFUMiM=
Subject key identifier:   1C:53:88:5D:BD:BB:44:50:7F:A8:AC:BB:22:AA:3F:30:C0:F0:54:39
Authority key identifier: 7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75
Certificate issuer:       /CN=7f296657af8d00c25fd75f56ecc8a28b35150575
Certificate serial:       019364B26C070D5E2593B13C17435284B48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
Manifest number:          0CAD
Signing time:             Mon 25 Nov 2024 19:00:34 +0000
Manifest this update:     Mon 25 Nov 2024 19:00:34 +0000
Manifest next update:     Tue 26 Nov 2024 19:00:34 +0000
Files and hashes:         1: fylmV6-NAMJf119W7MiiizUVBXU.crl (hash: E4/zHUwwQxg0wHuHzQGE5dx2V4cwe5DR0mOrjAIS5Ms=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:64:b2:6c:07:0d:5e:25:93:b1:3c:17:43:52:84:b4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f296657af8d00c25fd75f56ecc8a28b35150575
        Validity
            Not Before: Nov 25 19:00:34 2024 GMT
            Not After : Nov 26 19:00:34 2024 GMT
        Subject: CN=1c53885dbdbb44507fa8acbb22aa3f30c0f05439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a5:09:03:d5:ec:b6:91:71:46:89:c1:3d:26:
                    be:e6:9c:ca:d9:c6:fa:30:56:fe:b7:39:f3:42:62:
                    29:2f:e3:d8:1e:16:c7:4b:a2:f8:55:86:5c:71:36:
                    f7:2c:81:a1:b2:73:2c:49:38:a7:83:ab:cb:15:d2:
                    3e:f3:96:b8:f2:ec:b8:75:44:2f:40:4c:8b:20:94:
                    b6:56:39:19:c5:7f:29:f5:93:0a:04:c4:07:bd:ae:
                    4d:8e:1a:e7:14:75:ab:b1:04:5a:19:56:09:7c:65:
                    18:de:30:19:63:d9:4c:d4:e9:39:5e:5f:91:d0:7f:
                    35:7d:0a:08:00:cd:63:d2:9e:7e:9d:60:f2:71:16:
                    6f:39:bd:25:6e:89:f4:ac:92:2d:c5:c8:20:b8:60:
                    6e:f3:21:ee:de:1a:79:f0:87:18:a3:98:18:cd:b2:
                    eb:79:8c:58:75:7e:37:e6:43:bb:63:3d:24:39:35:
                    bc:cb:24:3f:25:cf:c3:93:cb:18:a0:93:a7:0b:ce:
                    6c:a3:64:68:78:e1:94:f0:54:72:f8:e8:74:0f:9c:
                    3d:ff:78:5d:9b:03:ad:48:13:70:ce:d9:29:a9:a6:
                    3e:85:57:a1:b5:10:95:bf:e2:67:f3:fa:12:13:d3:
                    0e:c4:72:f5:3e:b4:a6:c7:e3:2f:dd:0b:06:84:fb:
                    53:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:53:88:5D:BD:BB:44:50:7F:A8:AC:BB:22:AA:3F:30:C0:F0:54:39
            X509v3 Authority Key Identifier:
                keyid:7F:29:66:57:AF:8D:00:C2:5F:D7:5F:56:EC:C8:A2:8B:35:15:05:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fylmV6-NAMJf119W7MiiizUVBXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e80b33-3bee-46ec-b35d-baf95a506d19/1/fylmV6-NAMJf119W7MiiizUVBXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:fa:60:09:13:c0:c8:b6:2c:5b:b9:e8:df:da:26:7e:cf:96:
         eb:83:82:42:54:3e:e2:c4:99:74:4a:83:88:e5:b6:43:9c:4c:
         3b:44:27:56:0e:a4:c0:5b:71:32:30:33:9c:8b:88:53:f3:c4:
         cd:e1:d7:f7:73:33:3d:c8:8a:fc:b9:b9:31:2a:74:1b:b7:44:
         e3:43:ca:ab:f0:2f:05:d7:d7:ea:34:db:cf:d7:88:5a:0e:1e:
         ba:72:1e:69:0a:88:60:d8:2d:7c:94:66:29:64:5c:4f:32:a0:
         70:f0:03:7e:9b:9d:c9:a1:b8:fc:04:56:ed:89:87:e6:28:68:
         6d:21:07:eb:a4:84:e6:76:db:63:e5:15:ce:93:45:1c:f8:08:
         46:23:e0:4b:3d:50:b8:30:03:75:e0:c4:15:96:a7:6f:bc:fe:
         de:a9:09:16:a7:4b:cd:83:2d:28:0a:ac:9d:eb:24:df:67:4b:
         5a:c4:d0:96:33:be:48:a6:d8:4b:c3:3e:5a:86:11:34:c6:83:
         74:9e:31:36:a0:fd:b0:be:61:ee:62:5e:18:9b:f2:8c:18:1e:
         1c:f8:43:bb:cb:d1:2e:0a:0a:2e:db:1b:89:50:9e:75:08:38:
         a3:ef:08:03:68:2c:fe:5b:4d:6e:96:e7:3a:84:4b:ec:e3:c0:
         ee:6c:a7:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNksmwHDV4lk7E8F0NShLSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMjk2NjU3YWY4ZDAwYzI1ZmQ3NWY1NmVjYzhhMjhiMzUx
NTA1NzUwHhcNMjQxMTI1MTkwMDM0WhcNMjQxMTI2MTkwMDM0WjAzMTEwLwYDVQQD
EygxYzUzODg1ZGJkYmI0NDUwN2ZhOGFjYmIyMmFhM2YzMGMwZjA1NDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aUJA9XstpFxRonBPSa+5pzK2cb6
MFb+tznzQmIpL+PYHhbHS6L4VYZccTb3LIGhsnMsSTing6vLFdI+85a48uy4dUQv
QEyLIJS2VjkZxX8p9ZMKBMQHva5NjhrnFHWrsQRaGVYJfGUY3jAZY9lM1Ok5Xl+R
0H81fQoIAM1j0p5+nWDycRZvOb0lbon0rJItxcgguGBu8yHu3hp58IcYo5gYzbLr
eYxYdX435kO7Yz0kOTW8yyQ/Jc/Dk8sYoJOnC85so2RoeOGU8FRy+Oh0D5w9/3hd
mwOtSBNwztkpqaY+hVehtRCVv+Jn8/oSE9MOxHL1PrSmx+Mv3QsGhPtTawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxTiF29u0RQf6isuyKqPzDA8FQ5MB8GA1UdIwQY
MBaAFH8pZlevjQDCX9dfVuzIoos1FQV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnlsbVY2LU5BTUpmMTE5VzdNaWlpelVWQlhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lODBiMzMtM2JlZS00NmVjLWIzNWQt
YmFmOTVhNTA2ZDE5LzEvZnlsbVY2LU5BTUpmMTE5VzdNaWlpelVWQlhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lODBiMzMtM2JlZS00NmVjLWIzNWQtYmFmOTVhNTA2ZDE5
LzEvZnlsbVY2LU5BTUpmMTE5VzdNaWlpelVWQlhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPpgCRPA
yLYsW7no39omfs+W64OCQlQ+4sSZdEqDiOW2Q5xMO0QnVg6kwFtxMjAznIuIU/PE
zeHX93MzPciK/Lm5MSp0G7dE40PKq/AvBdfX6jTbz9eIWg4eunIeaQqIYNgtfJRm
KWRcTzKgcPADfpudyaG4/ARW7YmH5ihobSEH66SE5nbbY+UVzpNFHPgIRiPgSz1Q
uDADdeDEFZanb7z+3qkJFqdLzYMtKAqsnesk32dLWsTQljO+SKbYS8M+WoYRNMaD
dJ4xNqD9sL5h7mJeGJvyjBgeHPhDu8vRLgoKLtsbiVCedQg4o+8IA2gs/ltNbpbn
OoRL7OPA7mynKA==
-----END CERTIFICATE-----