Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
File:                     rjjDnx4hTH7N8vDslXhHAfLRKI8.mft (raw, json)
Hash identifier:          rheKyvdiOcSuk+i2VgT8bF94M6FhyC7mFfMIU+ALNCo=
Subject key identifier:   6F:10:65:91:9B:A2:33:01:77:65:8E:4E:35:E5:37:96:FA:BD:00:C0
Authority key identifier: AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F
Certificate issuer:       /CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
Certificate serial:       0193688F573E511DDC79A02F67F39C839DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
Manifest number:          1378
Signing time:             Tue 26 Nov 2024 13:00:44 +0000
Manifest this update:     Tue 26 Nov 2024 13:00:44 +0000
Manifest next update:     Wed 27 Nov 2024 13:00:44 +0000
Files and hashes:         1: rjjDnx4hTH7N8vDslXhHAfLRKI8.crl (hash: JpM51KdM5kyqUpTFPOume16EIHjcbOzbldrMoSI9JXg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:68:8f:57:3e:51:1d:dc:79:a0:2f:67:f3:9c:83:9d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae38c39f1e214c7ecdf2f0ec95784701f2d1288f
        Validity
            Not Before: Nov 26 13:00:44 2024 GMT
            Not After : Nov 27 13:00:44 2024 GMT
        Subject: CN=6f1065919ba2330177658e4e35e53796fabd00c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:83:1a:68:8e:0c:62:88:99:9c:dc:c3:77:5e:
                    30:7d:f5:7d:33:b6:99:0e:a3:8b:88:e5:4f:0d:75:
                    a7:71:45:09:ce:28:ab:75:f2:47:e9:5a:97:19:45:
                    f3:7c:51:09:9f:e2:2c:a2:ff:0c:a7:eb:97:2b:2a:
                    91:a0:43:50:e3:52:bc:c7:e0:f8:c2:23:48:be:35:
                    ed:98:3d:c1:db:20:72:1a:a7:1d:d2:a9:2e:cd:82:
                    9d:88:84:1b:7a:64:05:2c:8a:da:6f:06:0e:7e:7e:
                    e2:86:f9:f9:7a:a6:68:87:f7:1c:e6:d9:63:42:33:
                    e1:7c:80:84:24:e3:00:b4:21:9d:fe:f2:68:1e:cc:
                    6d:51:7a:21:3c:3f:21:6d:08:91:c8:bf:2e:24:8b:
                    92:73:b8:2a:22:f5:5c:34:9a:c0:0e:1a:28:13:13:
                    18:23:e3:c1:b4:54:78:23:08:9d:8d:cf:19:d8:14:
                    c0:b8:92:d0:b9:46:06:4d:49:81:a1:4f:a8:dd:c0:
                    97:a5:54:4e:af:c9:bc:0d:19:b0:03:8f:f2:f5:18:
                    2b:b4:ec:e4:cc:a7:9b:37:e7:b3:bf:f7:ba:aa:a5:
                    07:8c:06:66:d8:3b:4b:b4:75:83:85:4a:3d:4a:d9:
                    c4:9a:48:cd:6b:af:e1:0d:57:ba:96:91:da:d5:d5:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:10:65:91:9B:A2:33:01:77:65:8E:4E:35:E5:37:96:FA:BD:00:C0
            X509v3 Authority Key Identifier:
                keyid:AE:38:C3:9F:1E:21:4C:7E:CD:F2:F0:EC:95:78:47:01:F2:D1:28:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjjDnx4hTH7N8vDslXhHAfLRKI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6b8155-e838-45c9-af22-101bab0df2df/1/rjjDnx4hTH7N8vDslXhHAfLRKI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f8:3c:79:fd:99:09:99:76:2b:68:cd:ce:ed:74:d0:56:17:
         f9:c9:49:a4:d8:5e:10:c4:51:2c:c2:5e:ac:62:21:cd:12:33:
         5c:e6:f9:9f:40:d9:46:0e:03:de:47:c1:a5:39:b9:30:1b:9f:
         73:e6:86:d0:34:be:c9:33:32:eb:a9:51:11:3c:2c:81:fa:30:
         cd:4f:2b:74:77:8f:f8:9a:af:1a:c4:96:48:80:2c:00:77:da:
         5d:77:86:3a:1a:7d:86:8c:e8:c6:d9:a6:b8:79:b6:65:ee:42:
         a3:03:3b:ec:28:fb:59:5c:ff:f7:f0:23:cd:17:11:54:6a:82:
         0f:94:91:29:0c:02:a6:4e:45:19:8c:35:c1:10:43:fc:5b:d6:
         9c:2a:a9:8b:a9:29:10:8b:94:83:b2:83:8c:61:67:64:65:ab:
         26:d5:da:4f:e9:29:3c:f7:3c:3d:5f:07:d1:a4:3e:30:9d:60:
         83:13:f8:85:ba:9c:15:cc:e1:4e:31:7c:75:e3:aa:2a:1e:09:
         47:e5:8c:cd:f2:dd:e0:1b:f3:d4:69:1d:07:83:5c:f9:70:8f:
         9c:8c:15:90:42:b5:f6:38:9a:28:19:9d:b9:7d:25:9e:01:eb:
         24:de:c1:6d:0b:d4:f2:70:c3:08:98:24:ba:75:15:27:4a:d9:
         b7:67:27:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNoj1c+UR3ceaAvZ/Ocg53IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlMzhjMzlmMWUyMTRjN2VjZGYyZjBlYzk1Nzg0NzAxZjJk
MTI4OGYwHhcNMjQxMTI2MTMwMDQ0WhcNMjQxMTI3MTMwMDQ0WjAzMTEwLwYDVQQD
Eyg2ZjEwNjU5MTliYTIzMzAxNzc2NThlNGUzNWU1Mzc5NmZhYmQwMGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IMaaI4MYoiZnNzDd14wffV9M7aZ
DqOLiOVPDXWncUUJziirdfJH6VqXGUXzfFEJn+Isov8Mp+uXKyqRoENQ41K8x+D4
wiNIvjXtmD3B2yByGqcd0qkuzYKdiIQbemQFLIrabwYOfn7ihvn5eqZoh/cc5tlj
QjPhfICEJOMAtCGd/vJoHsxtUXohPD8hbQiRyL8uJIuSc7gqIvVcNJrADhooExMY
I+PBtFR4Iwidjc8Z2BTAuJLQuUYGTUmBoU+o3cCXpVROr8m8DRmwA4/y9RgrtOzk
zKebN+ezv/e6qqUHjAZm2DtLtHWDhUo9StnEmkjNa6/hDVe6lpHa1dVB1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8QZZGbojMBd2WOTjXlN5b6vQDAMB8GA1UdIwQY
MBaAFK44w58eIUx+zfLw7JV4RwHy0SiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82YjgxNTUtZTgzOC00NWM5LWFmMjIt
MTAxYmFiMGRmMmRmLzEvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi82YjgxNTUtZTgzOC00NWM5LWFmMjItMTAxYmFiMGRmMmRm
LzEvcmpqRG54NGhUSDdOOHZEc2xYaEhBZkxSS0k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/g8ef2Z
CZl2K2jNzu100FYX+clJpNheEMRRLMJerGIhzRIzXOb5n0DZRg4D3kfBpTm5MBuf
c+aG0DS+yTMy66lRETwsgfowzU8rdHeP+JqvGsSWSIAsAHfaXXeGOhp9hozoxtmm
uHm2Ze5CowM77Cj7WVz/9/AjzRcRVGqCD5SRKQwCpk5FGYw1wRBD/FvWnCqpi6kp
EIuUg7KDjGFnZGWrJtXaT+kpPPc8PV8H0aQ+MJ1ggxP4hbqcFczhTjF8deOqKh4J
R+WMzfLd4Bvz1GkdB4Nc+XCPnIwVkEK19jiaKBmduX0lngHrJN7BbQvU8nDDCJgk
unUVJ0rZt2cn9g==
-----END CERTIFICATE-----