Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d563ff-9f97-4dde-a337-88748f25fd4d/1/k-49Zcf6kIyNKkmMdLj4rsaO704.mft
File:                     k-49Zcf6kIyNKkmMdLj4rsaO704.mft (raw, json)
Hash identifier:          vQJFlBCVkA+Zdc397uuh6zoaXxYtEIKF2u9pQoJMkno=
Subject key identifier:   74:DE:73:7A:81:88:63:57:CD:EE:B7:B4:76:95:98:EF:21:4C:6D:63
Authority key identifier: 93:EE:3D:65:C7:FA:90:8C:8D:2A:49:8C:74:B8:F8:AE:C6:8E:EF:4E
Certificate issuer:       /CN=93ee3d65c7fa908c8d2a498c74b8f8aec68eef4e
Certificate serial:       0193568922100C9CC71ED6891AA792170D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-49Zcf6kIyNKkmMdLj4rsaO704.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d563ff-9f97-4dde-a337-88748f25fd4d/1/k-49Zcf6kIyNKkmMdLj4rsaO704.mft
Manifest number:          06BA
Signing time:             Sat 23 Nov 2024 01:00:47 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:47 +0000
Files and hashes:         1: k-49Zcf6kIyNKkmMdLj4rsaO704.crl (hash: vSItwMTJYZ0n1um+QMjE0bTbAxxCQocXjsDqoHgghbI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d563ff-9f97-4dde-a337-88748f25fd4d/1/k-49Zcf6kIyNKkmMdLj4rsaO704.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d563ff-9f97-4dde-a337-88748f25fd4d/1/k-49Zcf6kIyNKkmMdLj4rsaO704.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k-49Zcf6kIyNKkmMdLj4rsaO704.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:22:10:0c:9c:c7:1e:d6:89:1a:a7:92:17:0d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93ee3d65c7fa908c8d2a498c74b8f8aec68eef4e
        Validity
            Not Before: Nov 23 01:00:47 2024 GMT
            Not After : Nov 24 01:00:47 2024 GMT
        Subject: CN=74de737a81886357cdeeb7b4769598ef214c6d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:9c:b1:21:d5:a7:dc:5e:d9:a0:5a:3b:5e:
                    59:78:eb:96:de:e3:de:e1:a0:6f:39:5e:4f:21:bb:
                    82:50:91:50:4c:0f:cd:cb:35:9b:1d:0f:4e:8f:5a:
                    61:7a:2d:38:88:8c:11:13:db:40:68:d0:c6:01:ab:
                    b3:10:09:a8:98:52:4a:ba:4f:1a:a3:43:f0:47:4f:
                    ce:fd:7c:ad:6c:f4:e6:ec:b4:35:8a:30:30:e9:1f:
                    d3:85:9b:88:cf:2c:d6:a7:88:14:29:e7:89:96:f9:
                    92:02:47:70:3a:a3:48:f3:97:83:e5:9b:da:49:eb:
                    18:2e:f3:59:e0:6a:c2:dd:3a:da:82:49:6d:c1:16:
                    79:cc:e9:2a:75:e2:dd:68:2b:8f:bb:58:ef:74:d9:
                    6c:00:66:12:71:49:e7:bc:03:b7:53:ce:91:83:ee:
                    01:bb:3e:76:92:b3:f9:73:a2:70:6b:0e:ca:ab:0b:
                    88:00:2b:7e:27:5d:31:95:0c:52:79:25:63:1d:0c:
                    5c:ca:d1:35:4a:7d:23:f0:c7:43:8b:b8:9d:9a:cb:
                    d3:96:78:90:34:02:6a:39:e7:42:a3:44:36:71:f9:
                    05:91:3c:26:32:22:54:6a:61:a2:10:bf:b2:48:da:
                    eb:d3:7e:66:a1:76:84:96:b5:b2:79:e8:96:c2:0a:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DE:73:7A:81:88:63:57:CD:EE:B7:B4:76:95:98:EF:21:4C:6D:63
            X509v3 Authority Key Identifier:
                keyid:93:EE:3D:65:C7:FA:90:8C:8D:2A:49:8C:74:B8:F8:AE:C6:8E:EF:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-49Zcf6kIyNKkmMdLj4rsaO704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d563ff-9f97-4dde-a337-88748f25fd4d/1/k-49Zcf6kIyNKkmMdLj4rsaO704.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d563ff-9f97-4dde-a337-88748f25fd4d/1/k-49Zcf6kIyNKkmMdLj4rsaO704.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:8b:63:48:5d:55:1c:c8:da:e5:68:61:6d:bb:2d:9c:e3:24:
         17:0e:0e:d8:d2:a0:29:00:ce:87:be:51:ee:4d:ec:d7:c5:c8:
         40:2d:89:11:2a:04:31:7e:70:6f:e9:46:62:92:2d:d2:eb:c8:
         1c:44:ec:28:06:3b:88:18:4e:49:09:7e:6f:8e:ab:60:12:c3:
         f1:e9:93:fe:4f:59:d4:1a:8a:74:3a:56:22:9f:ae:0a:3e:d9:
         d4:b3:36:45:99:ca:0e:df:a6:0d:59:2c:85:78:98:d8:6f:df:
         80:60:0f:fb:6a:7e:82:a8:8c:a8:4e:d8:98:41:0c:a2:8c:e3:
         73:f3:44:c6:57:f6:2c:83:cb:c0:32:01:99:e3:83:ed:fd:19:
         d0:db:47:b7:5e:bc:81:33:1f:6d:e9:82:e9:cc:60:80:01:8b:
         23:5e:76:80:3c:73:1f:92:a5:57:73:ec:66:f7:7d:d2:1a:7e:
         17:43:22:80:e8:98:74:3b:a8:b7:2b:17:fa:e7:85:52:f6:07:
         ed:13:d6:4d:ee:33:84:3b:4a:3e:8b:71:b1:cf:ac:30:9d:83:
         d0:05:13:7d:1d:74:ba:75:59:05:44:26:aa:68:18:d9:d9:a6:
         09:87:01:f5:ec:23:b2:09:34:14:d9:3c:00:50:d9:f4:1a:0b:
         41:ae:72:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiSIQDJzHHtaJGqeSFw1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZWUzZDY1YzdmYTkwOGM4ZDJhNDk4Yzc0YjhmOGFlYzY4
ZWVmNGUwHhcNMjQxMTIzMDEwMDQ3WhcNMjQxMTI0MDEwMDQ3WjAzMTEwLwYDVQQD
Eyg3NGRlNzM3YTgxODg2MzU3Y2RlZWI3YjQ3Njk1OThlZjIxNGM2ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK6csSHVp9xe2aBaO15ZeOuW3uPe
4aBvOV5PIbuCUJFQTA/NyzWbHQ9Oj1phei04iIwRE9tAaNDGAauzEAmomFJKuk8a
o0PwR0/O/XytbPTm7LQ1ijAw6R/ThZuIzyzWp4gUKeeJlvmSAkdwOqNI85eD5Zva
SesYLvNZ4GrC3TragkltwRZ5zOkqdeLdaCuPu1jvdNlsAGYScUnnvAO3U86Rg+4B
uz52krP5c6Jwaw7KqwuIACt+J10xlQxSeSVjHQxcytE1Sn0j8MdDi7idmsvTlniQ
NAJqOedCo0Q2cfkFkTwmMiJUamGiEL+ySNrr035moXaElrWyeeiWwgqQ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTec3qBiGNXze63tHaVmO8hTG1jMB8GA1UdIwQY
MBaAFJPuPWXH+pCMjSpJjHS4+K7Gju9OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay00OVpjZjZrSXlOS2ttTWRMajRyc2FPNzA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kNTYzZmYtOWY5Ny00ZGRlLWEzMzct
ODg3NDhmMjVmZDRkLzEvay00OVpjZjZrSXlOS2ttTWRMajRyc2FPNzA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kNTYzZmYtOWY5Ny00ZGRlLWEzMzctODg3NDhmMjVmZDRk
LzEvay00OVpjZjZrSXlOS2ttTWRMajRyc2FPNzA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4tjSF1V
HMja5WhhbbstnOMkFw4O2NKgKQDOh75R7k3s18XIQC2JESoEMX5wb+lGYpIt0uvI
HETsKAY7iBhOSQl+b46rYBLD8emT/k9Z1BqKdDpWIp+uCj7Z1LM2RZnKDt+mDVks
hXiY2G/fgGAP+2p+gqiMqE7YmEEMoozjc/NExlf2LIPLwDIBmeOD7f0Z0NtHt168
gTMfbemC6cxggAGLI152gDxzH5KlV3PsZvd90hp+F0MigOiYdDuotysX+ueFUvYH
7RPWTe4zhDtKPotxsc+sMJ2D0AUTfR10unVZBUQmqmgY2dmmCYcB9ewjsgk0FNk8
AFDZ9BoLQa5yWw==
-----END CERTIFICATE-----