Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
File:                     XOMWuo-zBWfOy8cnBR02QA4lH8c.mft (raw, json)
Hash identifier:          dByVyJprk98JylA4UV8FcrE77RTIBJ4H7rqFix+LQA0=
Subject key identifier:   0D:00:B3:42:2E:30:48:56:12:7E:D9:5C:0B:C1:BB:75:4A:9E:AC:40
Authority key identifier: 5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7
Certificate issuer:       /CN=5ce316ba8fb30567cecbc727051d36400e251fc7
Certificate serial:       0191F9A2FFC913600AC3AD666AF387D9CF45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
Manifest number:          94
Signing time:             Mon 16 Sep 2024 07:01:34 +0000
Manifest this update:     Mon 16 Sep 2024 07:01:34 +0000
Manifest next update:     Tue 17 Sep 2024 07:01:34 +0000
Files and hashes:         1: XOMWuo-zBWfOy8cnBR02QA4lH8c.crl (hash: A4A+zm39J/VFkXYL/DNbIySwA4qyZKVS/zznW2gdBiU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:a2:ff:c9:13:60:0a:c3:ad:66:6a:f3:87:d9:cf:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ce316ba8fb30567cecbc727051d36400e251fc7
        Validity
            Not Before: Sep 16 07:01:34 2024 GMT
            Not After : Sep 17 07:01:34 2024 GMT
        Subject: CN=0d00b3422e304856127ed95c0bc1bb754a9eac40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:79:64:b9:17:b8:71:e6:85:c1:f9:33:56:41:
                    7f:e0:74:06:d6:65:f7:5e:2d:27:b0:e3:09:37:0b:
                    21:34:bd:6a:46:fc:ed:7e:9a:ae:cc:67:22:78:4a:
                    96:f4:66:c8:c8:5d:0a:97:2b:b4:87:7e:67:a3:b4:
                    cc:11:59:16:15:76:17:0a:03:c3:fd:c4:eb:8c:7b:
                    36:67:39:71:52:70:d2:8b:86:f2:5d:d2:0c:17:f8:
                    4b:80:a7:2e:d4:57:50:a5:c1:75:7f:15:4c:1c:a1:
                    44:49:22:bd:b4:1a:1b:18:99:fa:e6:1c:23:46:bb:
                    dd:04:e0:7b:ac:4e:81:02:07:23:3a:ef:5e:ca:c3:
                    a5:f3:0b:16:f9:bb:13:1d:1b:cb:4b:50:f4:67:ad:
                    eb:ad:2c:dc:94:a8:d5:a7:b4:24:aa:e7:ee:f5:b2:
                    4c:42:10:bd:56:79:f5:20:26:ac:8b:4c:f8:bc:51:
                    b9:c5:01:af:f6:79:6e:6c:2b:61:42:e2:b6:66:17:
                    43:66:08:1c:b3:33:0b:d7:81:78:78:e7:40:80:f1:
                    23:f5:ad:b8:5e:a5:a7:b4:8e:59:83:0b:24:cd:54:
                    48:57:f6:37:6e:39:4d:93:10:33:b7:27:2d:74:a5:
                    ac:c8:4c:0b:bf:21:fc:31:da:78:c1:79:39:16:03:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:00:B3:42:2E:30:48:56:12:7E:D9:5C:0B:C1:BB:75:4A:9E:AC:40
            X509v3 Authority Key Identifier:
                keyid:5C:E3:16:BA:8F:B3:05:67:CE:CB:C7:27:05:1D:36:40:0E:25:1F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOMWuo-zBWfOy8cnBR02QA4lH8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/247eef-f71a-421f-bb86-26729d894ef7/1/XOMWuo-zBWfOy8cnBR02QA4lH8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:d8:c9:55:e6:01:67:d4:3c:bd:ab:18:00:ee:d5:c0:05:b4:
         1b:24:a6:71:84:13:99:6a:62:cf:72:4e:c4:02:0b:74:2a:85:
         a5:f5:f1:18:cc:cd:c4:79:4f:62:f8:20:de:c8:ed:32:68:c7:
         3c:b0:62:bd:a1:d8:44:61:b0:c4:ff:d9:e2:3c:84:1d:0d:c6:
         26:38:70:95:ac:70:e1:97:02:56:e9:80:bc:b8:f5:97:91:d8:
         4a:2e:6a:b0:91:0b:4a:8c:6b:4c:13:49:a6:77:55:50:16:b2:
         6b:9f:c2:9e:8c:cd:46:9c:db:a5:71:52:d3:85:db:1f:36:9a:
         e7:33:58:fb:d1:32:dd:1c:d3:9a:5a:98:b5:91:17:12:86:78:
         e9:98:80:5c:67:08:b4:71:b2:34:e4:9b:af:35:d4:45:8a:8d:
         e8:0b:89:02:f4:da:8f:a6:35:43:a1:23:6f:6c:3b:84:7c:15:
         77:37:ac:d1:fe:4b:61:4b:98:66:55:b6:e6:6e:12:ef:d0:11:
         93:71:f4:41:91:52:6c:fe:44:c4:9e:b3:05:ef:6b:10:20:48:
         2f:b8:93:ea:b4:f8:31:31:3e:2a:09:b7:b0:93:31:1d:41:9c:
         5f:e7:a1:30:6f:c6:de:6e:f5:9e:35:1c:5d:5f:87:d2:c8:62:
         58:a0:a7:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5ov/JE2AKw61mavOH2c9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZTMxNmJhOGZiMzA1NjdjZWNiYzcyNzA1MWQzNjQwMGUy
NTFmYzcwHhcNMjQwOTE2MDcwMTM0WhcNMjQwOTE3MDcwMTM0WjAzMTEwLwYDVQQD
EygwZDAwYjM0MjJlMzA0ODU2MTI3ZWQ5NWMwYmMxYmI3NTRhOWVhYzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HlkuRe4ceaFwfkzVkF/4HQG1mX3
Xi0nsOMJNwshNL1qRvztfpquzGcieEqW9GbIyF0Klyu0h35no7TMEVkWFXYXCgPD
/cTrjHs2ZzlxUnDSi4byXdIMF/hLgKcu1FdQpcF1fxVMHKFESSK9tBobGJn65hwj
RrvdBOB7rE6BAgcjOu9eysOl8wsW+bsTHRvLS1D0Z63rrSzclKjVp7Qkqufu9bJM
QhC9Vnn1ICasi0z4vFG5xQGv9nlubCthQuK2ZhdDZggcszML14F4eOdAgPEj9a24
XqWntI5ZgwskzVRIV/Y3bjlNkxAztyctdKWsyEwLvyH8Mdp4wXk5FgMCtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0As0IuMEhWEn7ZXAvBu3VKnqxAMB8GA1UdIwQY
MBaAFFzjFrqPswVnzsvHJwUdNkAOJR/HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yNDdlZWYtZjcxYS00MjFmLWJiODYt
MjY3MjlkODk0ZWY3LzEvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yNDdlZWYtZjcxYS00MjFmLWJiODYtMjY3MjlkODk0ZWY3
LzEvWE9NV3VvLXpCV2ZPeThjbkJSMDJRQTRsSDhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNjJVeYB
Z9Q8vasYAO7VwAW0GySmcYQTmWpiz3JOxAILdCqFpfXxGMzNxHlPYvgg3sjtMmjH
PLBivaHYRGGwxP/Z4jyEHQ3GJjhwlaxw4ZcCVumAvLj1l5HYSi5qsJELSoxrTBNJ
pndVUBaya5/CnozNRpzbpXFS04XbHzaa5zNY+9Ey3RzTmlqYtZEXEoZ46ZiAXGcI
tHGyNOSbrzXURYqN6AuJAvTaj6Y1Q6Ejb2w7hHwVdzes0f5LYUuYZlW25m4S79AR
k3H0QZFSbP5ExJ6zBe9rECBIL7iT6rT4MTE+Kgm3sJMxHUGcX+ehMG/G3m71njUc
XV+H0shiWKCnZg==
-----END CERTIFICATE-----