Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File:                     wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier:          g95lWXHxhcsO8JU93/zIca0G/4YBTwefaVjQWJL4woE=
Subject key identifier:   D5:43:9E:BA:8C:FC:75:EA:DE:C4:8C:BA:8B:D4:DD:6E:6E:FE:58:F4
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer:       /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial:       01936A467E8EA4122436B54500DA6452E136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number:          0A06
Signing time:             Tue 26 Nov 2024 21:00:25 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:25 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:25 +0000
Files and hashes:         1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: dGI+qy3zndwMK2X8YJo9I60vopnG8PAEYVc4BGTthr4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:7e:8e:a4:12:24:36:b5:45:00:da:64:52:e1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
        Validity
            Not Before: Nov 26 21:00:25 2024 GMT
            Not After : Nov 27 21:00:25 2024 GMT
        Subject: CN=d5439eba8cfc75eadec48cba8bd4dd6e6efe58f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3c:32:6e:c2:5a:e0:1e:b8:a9:ab:c2:5c:5c:
                    b2:b5:20:0a:01:9c:76:c9:64:ec:96:e0:87:b2:d2:
                    56:80:c6:bf:a9:0f:3c:0c:88:c9:b8:ac:da:f3:ca:
                    0c:f4:1a:9a:9c:77:e5:8a:85:49:cf:77:e0:ae:ff:
                    06:cb:67:bb:38:cc:c9:61:84:51:e9:d4:dc:ec:e2:
                    60:58:83:d8:84:98:b1:0c:87:1b:51:61:d8:5e:37:
                    07:c4:1e:41:a4:bf:62:d9:9c:88:f2:c3:c3:4e:5c:
                    f5:38:af:95:99:6c:fd:91:eb:e9:38:e1:e4:32:5a:
                    ce:fa:08:fd:2b:bf:0c:5c:36:4b:34:21:12:aa:37:
                    20:f6:4c:e0:5c:4c:1c:e6:ad:1a:97:20:62:e0:d5:
                    89:f5:57:63:6d:10:ac:c9:5f:68:12:a6:01:47:0b:
                    f9:55:69:a6:4d:c5:77:b2:0a:10:27:61:85:1d:74:
                    60:dd:a1:50:de:a5:e7:7e:cf:c8:93:35:a0:8e:75:
                    44:76:40:e4:63:c6:a4:52:6b:d5:3c:f9:72:b8:8d:
                    88:e5:2c:a0:2f:c2:46:70:2f:80:75:21:0f:18:e2:
                    4a:de:d0:b0:40:de:50:b9:11:c1:91:48:5b:68:6a:
                    c7:1d:9f:e4:d7:ea:db:df:3a:02:df:43:6f:e0:b8:
                    79:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:43:9E:BA:8C:FC:75:EA:DE:C4:8C:BA:8B:D4:DD:6E:6E:FE:58:F4
            X509v3 Authority Key Identifier:
                keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e0:78:2b:c9:04:60:86:17:fd:12:69:86:4a:a0:e1:ea:ec:
         cc:a2:39:59:fd:7b:50:45:2f:4d:1c:0e:7a:b3:75:d5:40:f9:
         b1:51:d7:50:b7:20:45:50:11:5e:1c:f5:de:39:34:f2:dd:ac:
         32:6f:17:ea:35:ee:64:69:f3:5e:e9:e4:40:26:f0:d3:3d:e4:
         07:2c:5e:da:b8:bf:9a:40:03:6d:07:14:2f:a8:97:72:bd:bf:
         1f:25:2c:52:7d:17:cb:fb:e9:e8:44:1b:ce:24:19:8c:e7:e0:
         96:ac:c7:d1:31:cb:3d:28:70:af:c7:62:e3:0b:a0:7e:a1:25:
         62:89:5a:85:19:94:e1:c1:f3:5f:1e:eb:7d:27:cb:b1:83:42:
         d0:1d:16:f4:1b:92:34:76:d2:79:8f:2c:aa:ac:6a:f7:4e:1b:
         c9:b8:71:b0:a7:84:90:c4:21:73:86:43:d2:9d:42:40:2f:ca:
         f1:9c:ea:39:63:6e:9b:ce:ff:2d:f4:5b:71:fa:70:9f:f1:9e:
         d2:aa:dd:bd:cc:02:9e:66:23:9d:05:d2:24:c1:b9:c9:17:b9:
         cc:80:3e:9a:7c:97:ba:4c:fb:49:86:71:a3:02:52:7f:a7:14:
         a0:ff:dd:a6:2c:8e:a1:c5:1b:21:03:e6:f3:60:94:5e:3d:a2:
         67:23:23:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRn6OpBIkNrVFANpkUuE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNDc2YzhkYjU0OWY3YjU4OGE5MDJiMGY0Y2U4MGJlYjZk
MjU3NDgwHhcNMjQxMTI2MjEwMDI1WhcNMjQxMTI3MjEwMDI1WjAzMTEwLwYDVQQD
EyhkNTQzOWViYThjZmM3NWVhZGVjNDhjYmE4YmQ0ZGQ2ZTZlZmU1OGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzwybsJa4B64qavCXFyytSAKAZx2
yWTsluCHstJWgMa/qQ88DIjJuKza88oM9BqanHflioVJz3fgrv8Gy2e7OMzJYYRR
6dTc7OJgWIPYhJixDIcbUWHYXjcHxB5BpL9i2ZyI8sPDTlz1OK+VmWz9kevpOOHk
MlrO+gj9K78MXDZLNCESqjcg9kzgXEwc5q0alyBi4NWJ9VdjbRCsyV9oEqYBRwv5
VWmmTcV3sgoQJ2GFHXRg3aFQ3qXnfs/IkzWgjnVEdkDkY8akUmvVPPlyuI2I5Syg
L8JGcC+AdSEPGOJK3tCwQN5QuRHBkUhbaGrHHZ/k1+rb3zoC30Nv4Lh5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVDnrqM/HXq3sSMuovU3W5u/lj0MB8GA1UdIwQY
MBaAFMJHbI21Sfe1iKkCsPTOgL620ldIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2It
MWYwYmYwZDhjYjM2LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2ItMWYwYmYwZDhjYjM2
LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArOB4K8kE
YIYX/RJphkqg4erszKI5Wf17UEUvTRwOerN11UD5sVHXULcgRVARXhz13jk08t2s
Mm8X6jXuZGnzXunkQCbw0z3kByxe2ri/mkADbQcUL6iXcr2/HyUsUn0Xy/vp6EQb
ziQZjOfglqzH0THLPShwr8di4wugfqElYolahRmU4cHzXx7rfSfLsYNC0B0W9BuS
NHbSeY8sqqxq904bybhxsKeEkMQhc4ZD0p1CQC/K8ZzqOWNum87/LfRbcfpwn/Ge
0qrdvcwCnmYjnQXSJMG5yRe5zIA+mnyXukz7SYZxowJSf6cUoP/dpiyOocUbIQPm
82CUXj2iZyMjVw==
-----END CERTIFICATE-----