Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
File:                     z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft (raw, json)
Hash identifier:          1cGdJWoDnlWnPkCfNFnPo1GX1680DvWT5EKfDnVAx04=
Subject key identifier:   F2:23:0C:F4:7B:69:4C:08:C6:CA:8F:59:B5:C6:E8:C9:35:94:87:10
Authority key identifier: CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49
Certificate issuer:       /CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
Certificate serial:       018F8749EA6D646DECF9C114873D6821076E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 16:01:59 +0000
Manifest this update:     Fri 17 May 2024 16:01:59 +0000
Manifest next update:     Sat 18 May 2024 16:01:59 +0000
Files and hashes:         1: z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl (hash: 3bJ8pZOCY+Cnju+jUGuVIinDOJvbHc1TommblE+i5aI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:ea:6d:64:6d:ec:f9:c1:14:87:3d:68:21:07:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649
        Validity
            Not Before: May 17 16:01:59 2024 GMT
            Not After : May 18 16:01:59 2024 GMT
        Subject: CN=f2230cf47b694c08c6ca8f59b5c6e8c935948710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b5:ba:41:b7:c0:72:cf:a3:6b:65:4d:0f:38:
                    8d:50:bf:4f:e5:75:29:01:e2:2d:d8:97:76:dd:ae:
                    25:86:42:bb:37:a1:d9:4f:5b:7c:bf:4e:3a:e6:c8:
                    4e:6f:d4:92:c8:9c:4a:84:60:45:3d:48:cc:ed:3f:
                    34:e6:7a:d2:12:2e:63:09:a6:91:c8:81:c7:3b:b4:
                    3a:f9:4f:ae:28:99:35:c4:ec:35:f1:21:f7:a4:39:
                    6f:44:3f:90:c5:ff:15:39:b3:c4:1c:ea:cf:63:5f:
                    ad:3d:98:58:f9:41:e9:7c:69:34:f4:28:4c:6a:06:
                    52:d8:2c:cb:6e:dc:4e:a9:e9:42:19:e9:c4:a8:2d:
                    d9:04:6b:a5:7c:d2:e4:80:94:11:34:dc:9e:0d:fe:
                    b9:ba:ea:00:82:8e:d1:f3:83:a1:31:39:a0:b5:01:
                    a5:12:b6:ff:90:7c:87:82:d6:2f:18:28:9a:5b:56:
                    3f:a6:52:1e:06:99:4a:05:a8:2d:26:fc:a2:73:e2:
                    5d:99:79:9b:60:c9:ca:53:3d:3c:35:f2:31:d5:d7:
                    77:4e:e2:af:e9:98:2d:01:a8:7e:be:16:fa:1f:80:
                    9e:7f:2e:83:06:f5:25:ad:1c:69:36:ce:31:14:d8:
                    9b:76:bf:22:a1:e8:4d:5e:8a:fb:2c:31:f7:19:95:
                    8d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:23:0C:F4:7B:69:4C:08:C6:CA:8F:59:B5:C6:E8:C9:35:94:87:10
            X509v3 Authority Key Identifier:
                keyid:CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:27:0f:c5:eb:26:d2:14:19:ef:88:c0:03:ee:fc:64:6d:72:
         a6:0a:ad:17:26:9c:a1:eb:1f:19:7b:1f:26:fa:0c:3c:ef:f6:
         a4:a8:3c:fd:b8:20:a3:63:1a:cc:bf:ba:93:f4:45:57:09:99:
         8c:7b:e1:d5:7c:02:a1:82:b1:02:14:4a:55:ed:c9:11:46:49:
         a1:64:fb:33:48:92:2c:14:27:16:49:aa:87:31:58:e1:82:c8:
         01:44:b0:e8:6d:a2:ff:df:7a:96:65:9d:ea:51:9b:91:4b:1a:
         75:49:bf:9a:9f:6f:52:df:38:c0:e7:a0:ce:74:01:0b:f5:d5:
         bb:6f:a1:70:4c:16:86:80:8c:04:e7:07:52:b3:3c:dc:fa:0a:
         cb:85:5d:a1:83:c6:d1:70:9a:fb:06:a4:af:06:1e:be:af:37:
         0c:13:67:67:3b:f6:f0:09:64:fb:26:d7:dc:da:26:23:66:21:
         96:fe:9a:4a:d0:33:d0:8c:9d:a3:d7:f9:04:d7:f0:af:74:90:
         de:ff:61:d6:af:f8:a0:c0:9c:f5:94:f2:81:3a:a6:e5:64:22:
         24:40:ec:b6:ea:6b:92:c1:63:a3:bd:a2:18:82:48:37:02:56:
         4b:1d:11:2d:95:35:ba:72:f7:28:a8:7c:bb:aa:9b:4e:9b:34:
         91:a3:04:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSeptZG3s+cEUhz1oIQduMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYTVjZWMxNDNhMmFmMWVkMWMyZDk5Njk2ZjFmMTY4N2Y0
NTg2NDkwHhcNMjQwNTE3MTYwMTU5WhcNMjQwNTE4MTYwMTU5WjAzMTEwLwYDVQQD
EyhmMjIzMGNmNDdiNjk0YzA4YzZjYThmNTliNWM2ZThjOTM1OTQ4NzEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbW6QbfAcs+ja2VNDziNUL9P5XUp
AeIt2Jd23a4lhkK7N6HZT1t8v0465shOb9SSyJxKhGBFPUjM7T805nrSEi5jCaaR
yIHHO7Q6+U+uKJk1xOw18SH3pDlvRD+Qxf8VObPEHOrPY1+tPZhY+UHpfGk09ChM
agZS2CzLbtxOqelCGenEqC3ZBGulfNLkgJQRNNyeDf65uuoAgo7R84OhMTmgtQGl
Erb/kHyHgtYvGCiaW1Y/plIeBplKBagtJvyic+JdmXmbYMnKUz08NfIx1dd3TuKv
6ZgtAah+vhb6H4Cefy6DBvUlrRxpNs4xFNibdr8ioehNXor7LDH3GZWNWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIjDPR7aUwIxsqPWbXG6Mk1lIcQMB8GA1UdIwQY
MBaAFM+lzsFDoq8e0cLZlpbx8Wh/RYZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejZYT3dVT2lyeDdSd3RtV2x2SHhhSDlGaGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOWUwZDktNTJhMi00MzdjLTg5NWYt
NGM1ODJjMjhmYmEzLzEvejZYT3dVT2lyeDdSd3RtV2x2SHhhSDlGaGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zOWUwZDktNTJhMi00MzdjLTg5NWYtNGM1ODJjMjhmYmEz
LzEvejZYT3dVT2lyeDdSd3RtV2x2SHhhSDlGaGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACycPxesm
0hQZ74jAA+78ZG1ypgqtFyacoesfGXsfJvoMPO/2pKg8/bggo2MazL+6k/RFVwmZ
jHvh1XwCoYKxAhRKVe3JEUZJoWT7M0iSLBQnFkmqhzFY4YLIAUSw6G2i/996lmWd
6lGbkUsadUm/mp9vUt84wOegznQBC/XVu2+hcEwWhoCMBOcHUrM83PoKy4VdoYPG
0XCa+wakrwYevq83DBNnZzv28Alk+ybX3NomI2Yhlv6aStAz0Iydo9f5BNfwr3SQ
3v9h1q/4oMCc9ZTygTqm5WQiJEDstuprksFjo72iGIJINwJWSx0RLZU1unL3KKh8
u6qbTps0kaMECA==
-----END CERTIFICATE-----