Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft
File:                     8lszZFa0ffwPOdyRpriCpKq76rM.mft (raw, json)
Hash identifier:          UhI6WWCZyw6S/eb/lrvdK/okgy26/66c6U8Wbfjr1wU=
Subject key identifier:   5A:3B:8C:C3:13:B1:5B:F5:7F:6A:98:39:D3:B3:25:BF:84:01:81:1F
Authority key identifier: F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3
Certificate issuer:       /CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
Certificate serial:       01935764CA9769F236B4A720283BD1DE5270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft
Manifest number:          0E31
Signing time:             Sat 23 Nov 2024 05:00:43 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:43 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:43 +0000
Files and hashes:         1: 8lszZFa0ffwPOdyRpriCpKq76rM.crl (hash: 7WnpXiSZBzu0TPMc9oJCi72Ormfzfpq6tn4VVAnySQU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:ca:97:69:f2:36:b4:a7:20:28:3b:d1:de:52:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25b336456b47dfc0f39dc91a6b882a4aabbeab3
        Validity
            Not Before: Nov 23 05:00:43 2024 GMT
            Not After : Nov 24 05:00:43 2024 GMT
        Subject: CN=5a3b8cc313b15bf57f6a9839d3b325bf8401811f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:80:89:4c:f9:a6:c2:99:98:22:c8:5c:66:eb:
                    8a:43:48:e7:5c:df:bd:f7:22:fc:eb:8c:77:6b:45:
                    5e:6b:7c:02:ef:02:64:7c:34:f0:cb:cf:e9:46:07:
                    99:b3:05:aa:65:8c:d2:55:b1:07:75:1a:e2:84:e5:
                    94:40:71:a7:ce:ab:88:65:5a:05:fe:cc:32:7d:58:
                    f4:9d:e4:cf:04:f5:35:bf:c1:28:e3:ce:1f:50:d6:
                    29:a2:ff:1f:0b:53:54:c2:bc:78:04:1c:1f:dd:ea:
                    1b:75:f5:ad:d6:3f:56:5a:ed:c9:97:b2:ef:9a:1f:
                    42:a9:ea:c2:76:b0:7b:d7:31:17:c4:f2:bc:7a:d6:
                    b4:07:de:69:74:5e:3a:2b:0e:8f:11:e3:6f:69:aa:
                    20:79:8d:2f:f7:0d:93:09:bd:82:b9:d2:64:18:77:
                    b8:e9:c7:4c:86:22:d8:0b:25:1b:f7:d5:86:77:90:
                    4b:75:95:00:ce:3c:f2:e6:60:56:4a:20:d9:75:16:
                    3a:c0:7a:40:01:dc:98:47:9b:53:7b:c3:87:9f:00:
                    2f:dc:ce:bd:97:ae:f1:cc:5f:35:35:db:96:29:12:
                    20:64:0a:7e:4f:71:14:a8:69:68:09:1b:f6:c6:15:
                    ff:3e:91:ff:03:d7:40:c3:19:7d:54:d5:ff:2f:8f:
                    3c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3B:8C:C3:13:B1:5B:F5:7F:6A:98:39:D3:B3:25:BF:84:01:81:1F
            X509v3 Authority Key Identifier:
                keyid:F2:5B:33:64:56:B4:7D:FC:0F:39:DC:91:A6:B8:82:A4:AA:BB:EA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lszZFa0ffwPOdyRpriCpKq76rM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e197fc-7bf1-4ec5-ab4e-5cabe6d54c93/1/8lszZFa0ffwPOdyRpriCpKq76rM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:29:84:78:80:11:4a:eb:70:b5:67:35:81:94:da:80:76:ac:
         2d:24:b9:e9:87:01:67:13:6a:60:3d:1d:a3:49:c0:00:f3:c5:
         19:d3:4d:6b:cc:ee:1e:78:91:0b:06:db:52:fb:9f:cc:72:1c:
         b0:c9:52:7f:d6:7d:9f:5d:65:8f:a7:92:a2:ec:ac:de:c0:e6:
         52:f8:f7:fb:68:04:49:e6:41:f1:33:20:2d:59:f1:13:3d:fa:
         15:9f:f4:f8:44:38:06:21:05:96:94:b8:48:63:16:5c:e9:a1:
         76:f8:82:d2:4c:3f:4b:c8:46:b3:58:7a:e5:34:c0:f6:a2:52:
         57:6f:e2:68:34:4e:3f:33:19:98:54:91:fb:b3:14:f3:31:95:
         98:20:7a:d5:51:35:a7:69:9d:b7:d5:16:af:70:04:93:70:7d:
         c8:b9:2c:7a:70:4b:b3:a1:15:74:75:89:e7:14:4b:c6:c9:aa:
         54:1e:4a:86:da:10:e2:17:75:79:4d:c4:ff:83:07:90:ff:72:
         7e:c9:e8:4f:15:66:b1:8a:06:18:c9:c3:79:24:78:48:9d:ce:
         fd:79:2a:d2:ea:7e:ec:23:d4:7c:73:95:68:71:ec:c1:4e:c5:
         51:4c:d7:3e:ab:ca:67:ce:4d:9a:e4:57:69:3e:d6:a8:f1:e9:
         2a:c0:d0:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZMqXafI2tKcgKDvR3lJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWIzMzY0NTZiNDdkZmMwZjM5ZGM5MWE2Yjg4MmE0YWFi
YmVhYjMwHhcNMjQxMTIzMDUwMDQzWhcNMjQxMTI0MDUwMDQzWjAzMTEwLwYDVQQD
Eyg1YTNiOGNjMzEzYjE1YmY1N2Y2YTk4MzlkM2IzMjViZjg0MDE4MTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4CJTPmmwpmYIshcZuuKQ0jnXN+9
9yL864x3a0Vea3wC7wJkfDTwy8/pRgeZswWqZYzSVbEHdRrihOWUQHGnzquIZVoF
/swyfVj0neTPBPU1v8Eo484fUNYpov8fC1NUwrx4BBwf3eobdfWt1j9WWu3Jl7Lv
mh9CqerCdrB71zEXxPK8eta0B95pdF46Kw6PEeNvaaogeY0v9w2TCb2CudJkGHe4
6cdMhiLYCyUb99WGd5BLdZUAzjzy5mBWSiDZdRY6wHpAAdyYR5tTe8OHnwAv3M69
l67xzF81NduWKRIgZAp+T3EUqGloCRv2xhX/PpH/A9dAwxl9VNX/L488wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFo7jMMTsVv1f2qYOdOzJb+EAYEfMB8GA1UdIwQY
MBaAFPJbM2RWtH38Dznckaa4gqSqu+qzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGxzelpGYTBmZndQT2R5UnByaUNwS3E3NnJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lMTk3ZmMtN2JmMS00ZWM1LWFiNGUt
NWNhYmU2ZDU0YzkzLzEvOGxzelpGYTBmZndQT2R5UnByaUNwS3E3NnJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9lMTk3ZmMtN2JmMS00ZWM1LWFiNGUtNWNhYmU2ZDU0Yzkz
LzEvOGxzelpGYTBmZndQT2R5UnByaUNwS3E3NnJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApymEeIAR
SutwtWc1gZTagHasLSS56YcBZxNqYD0do0nAAPPFGdNNa8zuHniRCwbbUvufzHIc
sMlSf9Z9n11lj6eSouys3sDmUvj3+2gESeZB8TMgLVnxEz36FZ/0+EQ4BiEFlpS4
SGMWXOmhdviC0kw/S8hGs1h65TTA9qJSV2/iaDROPzMZmFSR+7MU8zGVmCB61VE1
p2mdt9UWr3AEk3B9yLksenBLs6EVdHWJ5xRLxsmqVB5KhtoQ4hd1eU3E/4MHkP9y
fsnoTxVmsYoGGMnDeSR4SJ3O/Xkq0up+7CPUfHOVaHHswU7FUUzXPqvKZ85NmuRX
aT7WqPHpKsDQrw==
-----END CERTIFICATE-----