Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92c776-1900-43db-a3ab-74f74b45ee42/1/EfljSnRS6Reg38hpyUigMwJCu_M.mft
File:                     EfljSnRS6Reg38hpyUigMwJCu_M.mft (raw, json)
Hash identifier:          vVLt2w17dR00MqyqgG3tKKI98/vRy2YH2wS1wCY0gns=
Subject key identifier:   5C:35:A9:E8:6E:B8:6B:B3:61:A4:83:3E:D3:66:5E:B5:55:A5:C7:0D
Authority key identifier: 11:F9:63:4A:74:52:E9:17:A0:DF:C8:69:C9:48:A0:33:02:42:BB:F3
Certificate issuer:       /CN=11f9634a7452e917a0dfc869c948a0330242bbf3
Certificate serial:       018F934D009B54EB0F00BB33C20141F308C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EfljSnRS6Reg38hpyUigMwJCu_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/92c776-1900-43db-a3ab-74f74b45ee42/1/EfljSnRS6Reg38hpyUigMwJCu_M.mft
Manifest number:          030E
Signing time:             Mon 20 May 2024 00:00:48 +0000
Manifest this update:     Mon 20 May 2024 00:00:48 +0000
Manifest next update:     Tue 21 May 2024 00:00:48 +0000
Files and hashes:         1: EfljSnRS6Reg38hpyUigMwJCu_M.crl (hash: HyJIpvRTa6ZIeoM+iVF9B/9yA9Ysw9twK4ivxETXlF0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/92c776-1900-43db-a3ab-74f74b45ee42/1/EfljSnRS6Reg38hpyUigMwJCu_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/92c776-1900-43db-a3ab-74f74b45ee42/1/EfljSnRS6Reg38hpyUigMwJCu_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EfljSnRS6Reg38hpyUigMwJCu_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:4d:00:9b:54:eb:0f:00:bb:33:c2:01:41:f3:08:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11f9634a7452e917a0dfc869c948a0330242bbf3
        Validity
            Not Before: May 20 00:00:48 2024 GMT
            Not After : May 21 00:00:48 2024 GMT
        Subject: CN=5c35a9e86eb86bb361a4833ed3665eb555a5c70d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c9:56:c6:df:76:30:92:95:a2:f1:92:d7:fb:
                    bf:ff:18:dc:58:69:36:2a:6c:ce:6c:a5:78:fe:1c:
                    5e:94:2c:87:15:10:ab:aa:a5:8f:d6:b7:29:ee:ee:
                    34:09:6f:80:cd:dd:b1:00:07:2f:af:b0:17:90:d8:
                    02:2a:16:d3:e4:de:ae:5d:b9:6f:43:64:7a:c3:08:
                    d2:5f:a9:85:58:46:bc:90:b2:66:af:0c:ba:9d:dd:
                    f8:54:e9:70:97:93:f8:11:a9:f4:9c:97:9a:b3:d2:
                    ea:08:c7:5f:08:2d:2c:79:13:41:31:a0:3d:9e:96:
                    8a:96:17:57:71:a2:51:93:bc:79:5c:e4:bf:2e:0c:
                    33:72:2d:57:44:01:ef:08:5e:3c:5f:6a:d1:74:fc:
                    2a:91:8a:b3:7b:a6:83:9b:c0:d5:d3:33:53:96:54:
                    c5:b0:d2:68:6b:21:54:e4:c5:8f:59:77:e7:00:2e:
                    e2:be:1f:30:95:7c:36:5b:6c:2e:ed:0a:0b:1b:5c:
                    fa:10:16:26:7e:39:a1:12:a0:f5:28:91:45:ae:13:
                    e7:9a:9b:f2:0a:6b:d2:da:4d:37:09:45:61:d7:e5:
                    db:3c:bc:49:fd:05:a4:3c:e8:4c:04:6f:90:8c:bc:
                    87:b7:12:48:12:b5:c8:ae:6a:44:cd:99:4b:c8:a2:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:35:A9:E8:6E:B8:6B:B3:61:A4:83:3E:D3:66:5E:B5:55:A5:C7:0D
            X509v3 Authority Key Identifier:
                keyid:11:F9:63:4A:74:52:E9:17:A0:DF:C8:69:C9:48:A0:33:02:42:BB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfljSnRS6Reg38hpyUigMwJCu_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92c776-1900-43db-a3ab-74f74b45ee42/1/EfljSnRS6Reg38hpyUigMwJCu_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92c776-1900-43db-a3ab-74f74b45ee42/1/EfljSnRS6Reg38hpyUigMwJCu_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8c:7f:2b:2d:3f:95:49:9d:45:24:f8:ff:b7:e7:94:c3:99:
         d7:e1:12:18:19:a5:3f:36:03:8e:6d:b7:45:8f:61:4f:ca:be:
         78:d9:37:e7:34:88:b8:52:54:e9:54:0a:57:c5:7f:ac:ba:45:
         93:8b:b5:60:e5:95:af:70:0f:01:16:7d:06:56:e3:f7:07:30:
         f8:f8:cf:f1:16:8f:8c:7b:62:cd:a6:70:f2:3e:e4:e0:d9:c9:
         d2:34:41:43:89:08:04:b4:99:4e:19:b3:1c:68:55:a9:3c:59:
         3c:df:f6:24:f6:3b:2e:db:db:66:89:75:18:97:04:3b:1a:66:
         be:bc:e0:62:15:37:8a:90:37:43:d5:e7:01:5b:0c:df:11:13:
         5d:27:bb:2e:c2:e9:85:14:bc:4d:1f:77:8e:c0:0f:11:dd:5e:
         f9:88:24:e1:59:b5:cb:ac:93:7f:0e:ef:8e:09:0a:7e:9e:10:
         8b:dc:62:19:d6:2c:29:15:2a:ad:22:9f:d8:28:fd:c9:a8:6b:
         93:6a:62:6c:96:df:bc:94:c2:9a:01:49:50:df:f4:5d:34:a2:
         b8:1d:e3:30:82:91:07:21:3c:d0:a2:42:29:5d:18:35:c9:5b:
         9b:6e:f0:b2:2c:8f:6c:fc:a6:c8:36:d9:17:e5:f5:f4:b8:1e:
         8a:01:6c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+TTQCbVOsPALszwgFB8wjIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZjk2MzRhNzQ1MmU5MTdhMGRmYzg2OWM5NDhhMDMzMDI0
MmJiZjMwHhcNMjQwNTIwMDAwMDQ4WhcNMjQwNTIxMDAwMDQ4WjAzMTEwLwYDVQQD
Eyg1YzM1YTllODZlYjg2YmIzNjFhNDgzM2VkMzY2NWViNTU1YTVjNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsclWxt92MJKVovGS1/u//xjcWGk2
KmzObKV4/hxelCyHFRCrqqWP1rcp7u40CW+Azd2xAAcvr7AXkNgCKhbT5N6uXblv
Q2R6wwjSX6mFWEa8kLJmrwy6nd34VOlwl5P4Ean0nJeas9LqCMdfCC0seRNBMaA9
npaKlhdXcaJRk7x5XOS/Lgwzci1XRAHvCF48X2rRdPwqkYqze6aDm8DV0zNTllTF
sNJoayFU5MWPWXfnAC7ivh8wlXw2W2wu7QoLG1z6EBYmfjmhEqD1KJFFrhPnmpvy
CmvS2k03CUVh1+XbPLxJ/QWkPOhMBG+QjLyHtxJIErXIrmpEzZlLyKKGiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFw1qehuuGuzYaSDPtNmXrVVpccNMB8GA1UdIwQY
MBaAFBH5Y0p0UukXoN/IaclIoDMCQrvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWZsalNuUlM2UmVnMzhocHlVaWdNd0pDdV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmM3NzYtMTkwMC00M2RiLWEzYWIt
NzRmNzRiNDVlZTQyLzEvRWZsalNuUlM2UmVnMzhocHlVaWdNd0pDdV9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85MmM3NzYtMTkwMC00M2RiLWEzYWItNzRmNzRiNDVlZTQy
LzEvRWZsalNuUlM2UmVnMzhocHlVaWdNd0pDdV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIox/Ky0/
lUmdRST4/7fnlMOZ1+ESGBmlPzYDjm23RY9hT8q+eNk35zSIuFJU6VQKV8V/rLpF
k4u1YOWVr3APARZ9Blbj9wcw+PjP8RaPjHtizaZw8j7k4NnJ0jRBQ4kIBLSZThmz
HGhVqTxZPN/2JPY7LtvbZol1GJcEOxpmvrzgYhU3ipA3Q9XnAVsM3xETXSe7LsLp
hRS8TR93jsAPEd1e+Ygk4Vm1y6yTfw7vjgkKfp4Qi9xiGdYsKRUqrSKf2Cj9yahr
k2pibJbfvJTCmgFJUN/0XTSiuB3jMIKRByE80KJCKV0YNclbm27wsiyPbPymyDbZ
F+X19LgeigFsrw==
-----END CERTIFICATE-----