Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
File:                     j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json)
Hash identifier:          xmFL74nXTI+g6+sKglgOqCE7itV/Zetq59w7xlVl858=
Subject key identifier:   6A:34:12:94:5C:E0:96:B0:6F:68:FD:B6:9E:87:C5:6A:83:FF:3A:AB
Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
Certificate issuer:       /CN=8fac851d9982896a765876d311b97b509357ec32
Certificate serial:       019355E488AC7D1771E3A7535BB8849B660F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
Manifest number:          03FA
Signing time:             Fri 22 Nov 2024 22:01:00 +0000
Manifest this update:     Fri 22 Nov 2024 22:01:00 +0000
Manifest next update:     Sat 23 Nov 2024 22:01:00 +0000
Files and hashes:         1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: yjvxzRm2w4Apixv85Dt976BN7Ctzux9q5EdWEcoI+Kk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:88:ac:7d:17:71:e3:a7:53:5b:b8:84:9b:66:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fac851d9982896a765876d311b97b509357ec32
        Validity
            Not Before: Nov 22 22:01:00 2024 GMT
            Not After : Nov 23 22:01:00 2024 GMT
        Subject: CN=6a3412945ce096b06f68fdb69e87c56a83ff3aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:92:18:5a:b1:0b:7c:94:ea:81:b4:b0:d3:
                    60:0a:d8:56:7c:d9:6d:88:2b:a4:07:52:81:fe:b0:
                    3f:50:52:cf:2a:6c:b9:44:2f:99:9e:19:f7:d4:80:
                    0a:31:8f:e7:a2:5b:8e:b3:2f:ba:0e:e8:67:e0:f7:
                    0a:76:4c:da:44:56:52:4d:95:14:75:b7:12:7a:5e:
                    88:f6:d9:09:87:0d:da:67:55:03:a3:21:1f:a8:87:
                    94:66:1b:d6:b3:5a:f3:95:67:63:f2:f8:47:3e:c3:
                    83:f3:29:a5:e7:43:8c:49:fa:2b:04:c4:1f:b3:98:
                    3e:7b:d1:5a:d0:6e:0f:22:85:2d:78:47:42:51:cb:
                    64:8b:05:67:d8:d1:a3:d2:44:e8:fe:fa:d8:73:9d:
                    4e:ca:8e:7e:d7:32:94:1f:6b:8c:ce:ac:d9:4b:16:
                    e7:56:e8:e3:be:ba:65:62:6f:10:00:aa:64:06:df:
                    d0:c9:0a:6c:2e:20:06:8b:16:94:54:68:05:1f:ab:
                    cb:d8:35:c1:85:d6:ca:c2:66:21:3b:a4:2d:8e:5c:
                    2b:da:26:3a:25:54:0e:a2:d5:55:20:ab:36:7b:f0:
                    50:d4:cf:af:60:5c:10:0e:0b:41:dc:da:68:07:1a:
                    a0:a7:bc:1a:b5:14:4c:d1:c7:98:02:c4:90:fd:3f:
                    5c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:34:12:94:5C:E0:96:B0:6F:68:FD:B6:9E:87:C5:6A:83:FF:3A:AB
            X509v3 Authority Key Identifier:
                keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:44:f2:bb:21:0e:d9:b1:19:ff:8f:fc:fa:fd:f1:4d:23:ac:
         2a:bb:f3:40:65:9a:fe:97:12:48:12:50:1b:77:d8:85:58:36:
         bb:32:ae:99:f2:95:76:d3:03:6b:2c:41:4b:81:3b:36:70:d0:
         40:1b:f7:a5:cc:8d:59:1e:80:10:1b:da:74:50:eb:9b:ff:50:
         51:5d:9c:cc:e7:b4:df:7f:a1:a1:f7:47:7d:03:dc:2f:f0:1d:
         41:33:cf:65:7c:bf:be:50:13:5f:1e:37:62:eb:d7:c7:c8:0f:
         b7:3e:43:6a:75:ad:8d:de:ec:8e:5c:6f:48:f7:64:e7:13:d6:
         f6:0b:7e:d5:d2:60:ae:b4:34:0d:a9:62:e4:a4:f6:a7:22:e1:
         95:3b:f0:dc:d9:74:b8:ab:98:7f:dd:67:4f:21:cb:3a:a2:b7:
         af:d9:cd:95:d5:5b:c4:3e:69:03:dc:3e:e4:8f:b5:11:59:b4:
         09:1d:44:6f:c6:38:9d:99:14:32:a9:04:c5:2a:e0:77:23:45:
         63:f6:95:f0:f4:27:5d:c4:6e:0b:03:2c:63:4a:8c:97:5c:a5:
         2c:c1:05:b6:12:be:f5:c3:27:b5:1d:82:36:82:d7:bc:52:02:
         03:df:40:95:de:f9:a3:3b:5f:af:da:f4:17:0b:3e:f4:e4:e2:
         99:69:92:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5IisfRdx46dTW7iEm2YPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYWM4NTFkOTk4Mjg5NmE3NjU4NzZkMzExYjk3YjUwOTM1
N2VjMzIwHhcNMjQxMTIyMjIwMTAwWhcNMjQxMTIzMjIwMTAwWjAzMTEwLwYDVQQD
Eyg2YTM0MTI5NDVjZTA5NmIwNmY2OGZkYjY5ZTg3YzU2YTgzZmYzYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBOSGFqxC3yU6oG0sNNgCthWfNlt
iCukB1KB/rA/UFLPKmy5RC+Znhn31IAKMY/noluOsy+6Duhn4PcKdkzaRFZSTZUU
dbcSel6I9tkJhw3aZ1UDoyEfqIeUZhvWs1rzlWdj8vhHPsOD8yml50OMSforBMQf
s5g+e9Fa0G4PIoUteEdCUctkiwVn2NGj0kTo/vrYc51Oyo5+1zKUH2uMzqzZSxbn
VujjvrplYm8QAKpkBt/QyQpsLiAGixaUVGgFH6vL2DXBhdbKwmYhO6Qtjlwr2iY6
JVQOotVVIKs2e/BQ1M+vYFwQDgtB3NpoBxqgp7watRRM0ceYAsSQ/T9cnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGo0EpRc4Jawb2j9tp6HxWqD/zqrMB8GA1UdIwQY
MBaAFI+shR2Zgolqdlh20xG5e1CTV+wyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy85MmM5ZDUtNTQ2Mi00MTkwLWEzMzAt
MmRmYzRhNmY1ZDBkLzEvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy85MmM5ZDUtNTQ2Mi00MTkwLWEzMzAtMmRmYzRhNmY1ZDBk
LzEvajZ5RkhabUNpV3AyV0hiVEVibDdVSk5YN0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1UTyuyEO
2bEZ/4/8+v3xTSOsKrvzQGWa/pcSSBJQG3fYhVg2uzKumfKVdtMDayxBS4E7NnDQ
QBv3pcyNWR6AEBvadFDrm/9QUV2czOe033+hofdHfQPcL/AdQTPPZXy/vlATXx43
YuvXx8gPtz5DanWtjd7sjlxvSPdk5xPW9gt+1dJgrrQ0Dali5KT2pyLhlTvw3Nl0
uKuYf91nTyHLOqK3r9nNldVbxD5pA9w+5I+1EVm0CR1Eb8Y4nZkUMqkExSrgdyNF
Y/aV8PQnXcRuCwMsY0qMl1ylLMEFthK+9cMntR2CNoLXvFICA99Ald75oztfr9r0
Fws+9OTimWmSRQ==
-----END CERTIFICATE-----