Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File:                     MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier:          U7nHEFgqYjn4Sfg4/+zWst9rYmKL2dxLEP/MYSo966o=
Subject key identifier:   4E:61:E5:26:4E:81:9E:D9:8D:26:58:B2:43:D7:04:88:7E:51:5B:FF
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer:       /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial:       018F87493FF2E2F8348260B6E8F5A4DEB80E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number:          0239
Signing time:             Fri 17 May 2024 16:01:15 +0000
Manifest this update:     Fri 17 May 2024 16:01:15 +0000
Manifest next update:     Sat 18 May 2024 16:01:15 +0000
Files and hashes:         1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: UOvDJaWnpdt8bV2ItEBb0ROjRUTtTbDplzJTQSVu7b8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:3f:f2:e2:f8:34:82:60:b6:e8:f5:a4:de:b8:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
        Validity
            Not Before: May 17 16:01:15 2024 GMT
            Not After : May 18 16:01:15 2024 GMT
        Subject: CN=4e61e5264e819ed98d2658b243d704887e515bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:f4:39:4e:3b:27:0d:31:c1:92:7b:62:bf:
                    57:0e:e4:5c:56:36:99:18:42:4c:0e:e5:af:7b:b4:
                    72:e6:37:7d:f8:e2:cf:64:99:ab:b3:95:2a:43:11:
                    b4:af:8f:c1:18:3e:be:82:36:1b:31:79:85:33:86:
                    42:c1:6f:1a:96:68:bd:e9:a0:15:c1:97:75:69:a9:
                    46:81:52:3b:f0:d5:17:5b:dc:b7:d2:cc:ec:c3:57:
                    7e:24:75:18:ba:37:5e:27:1a:90:32:8e:f1:87:01:
                    46:18:4e:9a:59:74:c7:b3:14:1f:6b:55:56:08:72:
                    64:f1:62:6e:5f:f2:3c:2d:c7:f4:01:5a:25:21:83:
                    1a:80:67:99:f7:27:bd:6a:70:72:8d:a4:6d:34:79:
                    cb:0f:29:96:7a:8a:48:ad:2e:13:56:89:02:b0:fb:
                    c0:e6:7d:75:14:c8:c1:82:c4:7b:0f:bd:dc:33:cb:
                    b2:06:f4:94:d0:3e:bf:60:b0:3d:46:bd:34:12:d6:
                    33:03:b8:96:9b:5a:a3:e0:cd:42:85:51:14:22:c2:
                    bf:d5:18:56:5f:43:63:d3:3d:14:e8:23:b0:6e:9f:
                    c3:ce:3a:a5:3b:39:d6:26:75:a6:12:89:f8:67:81:
                    84:ac:23:c6:2c:97:31:89:47:ed:39:a5:6c:5c:a7:
                    e2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:61:E5:26:4E:81:9E:D9:8D:26:58:B2:43:D7:04:88:7E:51:5B:FF
            X509v3 Authority Key Identifier:
                keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b0:2d:69:04:cc:a4:e6:9f:13:a7:1d:99:b6:2e:a7:bf:04:
         d0:98:18:b4:cd:73:0b:f0:f3:cc:07:0f:5a:c4:c9:db:a7:6d:
         04:63:37:83:87:2e:d5:58:a2:fd:5e:ac:4f:cc:ea:08:81:80:
         1a:fe:2d:d7:03:14:15:c4:9c:20:32:ce:15:55:29:ba:48:80:
         78:7c:5d:b5:f8:8e:c8:22:21:37:b1:53:a5:05:19:f9:62:41:
         eb:34:71:31:35:a1:b7:95:9b:cf:b6:74:f6:69:2a:c9:88:dc:
         7d:1b:7a:0a:1d:24:16:bb:06:a5:73:1f:fd:f0:b1:18:ba:36:
         92:dc:23:dc:73:b3:01:dd:4f:c4:da:aa:cc:81:5c:e9:db:a7:
         38:2f:a3:f2:15:92:5a:42:0b:e9:9d:a4:97:0c:4e:91:2e:b3:
         49:98:83:08:2e:24:39:52:1f:cc:4c:4d:e1:54:7f:f0:78:29:
         da:a6:e7:1a:4f:db:d9:6b:28:01:3e:5f:74:92:7f:55:23:0a:
         89:cb:5f:e0:77:0a:1a:57:7b:c0:88:39:cb:06:43:6d:7a:d1:
         3a:35:71:29:34:21:a7:f0:51:ed:66:d2:65:83:33:be:d7:8a:
         f6:57:2e:05:d1:4d:df:69:80:8a:71:6f:d3:6e:d3:d3:a4:e2:
         40:15:71:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HST/y4vg0gmC26PWk3rgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYzRmNGIxZGU0YzMxZTU2MTViZmQwYjNjY2IyZDgxN2U4
M2I5MzMwHhcNMjQwNTE3MTYwMTE1WhcNMjQwNTE4MTYwMTE1WjAzMTEwLwYDVQQD
Eyg0ZTYxZTUyNjRlODE5ZWQ5OGQyNjU4YjI0M2Q3MDQ4ODdlNTE1YmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSX0OU47Jw0xwZJ7Yr9XDuRcVjaZ
GEJMDuWve7Ry5jd9+OLPZJmrs5UqQxG0r4/BGD6+gjYbMXmFM4ZCwW8almi96aAV
wZd1aalGgVI78NUXW9y30szsw1d+JHUYujdeJxqQMo7xhwFGGE6aWXTHsxQfa1VW
CHJk8WJuX/I8Lcf0AVolIYMagGeZ9ye9anByjaRtNHnLDymWeopIrS4TVokCsPvA
5n11FMjBgsR7D73cM8uyBvSU0D6/YLA9Rr00EtYzA7iWm1qj4M1ChVEUIsK/1RhW
X0Nj0z0U6COwbp/DzjqlOznWJnWmEon4Z4GErCPGLJcxiUftOaVsXKfiQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5h5SZOgZ7ZjSZYskPXBIh+UVv/MB8GA1UdIwQY
MBaAFDDE9LHeTDHlYVv9CzzLLYF+g7kzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xNGEyNmItNDVjZi00M2VlLWFmMDUt
Y2Y5NzFkMmMyYTY1LzEvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8xNGEyNmItNDVjZi00M2VlLWFmMDUtY2Y5NzFkMmMyYTY1
LzEvTU1UMHNkNU1NZVZoV18wTFBNc3RnWDZEdVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILAtaQTM
pOafE6cdmbYup78E0JgYtM1zC/DzzAcPWsTJ26dtBGM3g4cu1Vii/V6sT8zqCIGA
Gv4t1wMUFcScIDLOFVUpukiAeHxdtfiOyCIhN7FTpQUZ+WJB6zRxMTWht5Wbz7Z0
9mkqyYjcfRt6Ch0kFrsGpXMf/fCxGLo2ktwj3HOzAd1PxNqqzIFc6dunOC+j8hWS
WkIL6Z2klwxOkS6zSZiDCC4kOVIfzExN4VR/8Hgp2qbnGk/b2WsoAT5fdJJ/VSMK
ictf4HcKGld7wIg5ywZDbXrROjVxKTQhp/BR7WbSZYMzvteK9lcuBdFN32mAinFv
027T06TiQBVxnw==
-----END CERTIFICATE-----