Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d426ef-b81c-4d1e-8d0a-2b76adf6b62c/1/1-LqMOKifgRWEb4zgGgOGPD_ulBc.mft
File:                     1-LqMOKifgRWEb4zgGgOGPD_ulBc.mft (raw, json)
Hash identifier:          r1nwsvNfM6Y0D26bKQQ14H8+eVVlaShiHjhUL0jo9Jw=
Subject key identifier:   D9:E7:F8:D6:72:52:38:44:8D:5E:D9:D2:22:23:51:17:95:E8:19:7D
Authority key identifier: F8:BA:8C:38:A8:9F:81:15:84:6F:8C:E0:1A:03:86:3C:3F:EE:94:17
Certificate issuer:       /CN=f8ba8c38a89f8115846f8ce01a03863c3fee9417
Certificate serial:       01936A46E6E2A83C2FE9E3E3CC468200F455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LqMOKifgRWEb4zgGgOGPD_ulBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/d426ef-b81c-4d1e-8d0a-2b76adf6b62c/1/1-LqMOKifgRWEb4zgGgOGPD_ulBc.mft
Manifest number:          0275
Signing time:             Tue 26 Nov 2024 21:00:51 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:51 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:51 +0000
Files and hashes:         1: 1-LqMOKifgRWEb4zgGgOGPD_ulBc.crl (hash: v/BBI8Z/0F3qEdzZMXJK1i2VX8fs5btRO7EdKL5GztU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/d426ef-b81c-4d1e-8d0a-2b76adf6b62c/1/1-LqMOKifgRWEb4zgGgOGPD_ulBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/d426ef-b81c-4d1e-8d0a-2b76adf6b62c/1/1-LqMOKifgRWEb4zgGgOGPD_ulBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LqMOKifgRWEb4zgGgOGPD_ulBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:e6:e2:a8:3c:2f:e9:e3:e3:cc:46:82:00:f4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ba8c38a89f8115846f8ce01a03863c3fee9417
        Validity
            Not Before: Nov 26 21:00:51 2024 GMT
            Not After : Nov 27 21:00:51 2024 GMT
        Subject: CN=d9e7f8d6725238448d5ed9d22223511795e8197d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:aa:a8:9e:ef:c8:55:b9:66:65:93:96:22:3b:
                    e2:7d:04:c0:5e:33:15:11:4e:a8:45:87:12:55:cf:
                    7d:86:70:4d:2a:16:86:6b:75:aa:d9:29:23:52:83:
                    81:ad:52:57:7f:67:a6:3d:31:21:29:c7:47:0c:0c:
                    e0:59:68:9c:ac:6d:93:6b:ca:dc:52:ea:e5:96:6a:
                    13:69:ce:a6:b1:5e:24:f4:23:aa:ae:4a:5a:83:3c:
                    86:cf:6b:7e:e0:79:d7:42:e1:1c:3d:3d:91:97:1d:
                    6d:d1:2a:3f:5a:d3:e2:de:1f:c3:b7:eb:59:e3:d9:
                    e8:8a:db:21:24:43:ff:f0:ce:0c:d8:c0:ee:69:db:
                    54:2e:2f:c4:05:98:83:f4:14:2f:44:c3:3a:63:ec:
                    c3:5e:0b:c2:df:f5:b5:b1:13:a6:56:9b:6f:b3:d5:
                    10:1e:df:9c:f6:94:d7:e1:0a:63:33:6b:d8:2a:54:
                    29:1c:f9:14:53:f8:78:e5:ce:d6:bc:66:04:05:33:
                    ce:b5:8e:f8:e4:a9:03:a8:2c:74:bd:08:04:07:44:
                    bb:5d:f1:ec:74:27:ae:7f:b3:6b:3b:2a:fb:3e:1c:
                    08:79:a3:1c:28:24:13:a3:e6:46:f0:24:a3:98:3d:
                    a2:6d:ae:ac:03:4c:43:ac:45:f6:03:51:0d:74:bc:
                    06:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E7:F8:D6:72:52:38:44:8D:5E:D9:D2:22:23:51:17:95:E8:19:7D
            X509v3 Authority Key Identifier:
                keyid:F8:BA:8C:38:A8:9F:81:15:84:6F:8C:E0:1A:03:86:3C:3F:EE:94:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LqMOKifgRWEb4zgGgOGPD_ulBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d426ef-b81c-4d1e-8d0a-2b76adf6b62c/1/1-LqMOKifgRWEb4zgGgOGPD_ulBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d426ef-b81c-4d1e-8d0a-2b76adf6b62c/1/1-LqMOKifgRWEb4zgGgOGPD_ulBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:76:de:62:0d:51:b2:9c:f2:cd:e7:dc:e6:7d:05:e4:0f:54:
         7f:c5:36:75:f1:72:38:da:72:86:b9:50:dc:60:a8:e6:7d:b7:
         fe:60:ed:45:c2:e6:9e:32:62:df:a2:d8:29:7a:a9:b7:7a:4a:
         ca:93:e3:cc:28:6b:ea:0e:8a:16:2b:d3:1e:74:bb:ba:dc:26:
         7e:52:ea:ed:54:88:dd:33:17:31:a4:a7:76:53:a4:b0:ff:1b:
         fd:dd:4b:25:83:5a:13:b2:6c:d7:a8:7b:78:e3:10:0d:46:d0:
         f0:30:00:66:94:3b:50:dd:b0:ca:45:d8:67:46:68:f7:aa:c9:
         d9:1c:4d:a3:7b:07:b3:b0:1d:73:03:69:5a:3a:0f:e6:69:70:
         7f:c6:6d:75:92:25:ea:61:b5:31:7f:39:89:54:21:b8:90:33:
         a5:9a:96:29:95:85:8f:1f:27:b2:ab:82:94:5a:8d:17:50:ad:
         d7:ef:98:51:7d:bd:d7:db:74:75:b2:b2:ad:9b:38:ff:1d:9e:
         08:1a:83:25:37:7a:b1:e9:e1:4d:7c:20:b9:91:bc:fb:2d:1b:
         a7:68:d8:1f:fc:e8:86:c2:67:fa:1f:80:28:d3:c5:29:66:cc:
         5f:5b:b2:f9:3b:11:63:cb:20:94:47:30:b5:3a:29:ff:95:6a:
         94:9a:e9:00
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNqRubiqDwv6ePjzEaCAPRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YmE4YzM4YTg5ZjgxMTU4NDZmOGNlMDFhMDM4NjNjM2Zl
ZTk0MTcwHhcNMjQxMTI2MjEwMDUxWhcNMjQxMTI3MjEwMDUxWjAzMTEwLwYDVQQD
EyhkOWU3ZjhkNjcyNTIzODQ0OGQ1ZWQ5ZDIyMjIzNTExNzk1ZTgxOTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6qonu/IVblmZZOWIjvifQTAXjMV
EU6oRYcSVc99hnBNKhaGa3Wq2SkjUoOBrVJXf2emPTEhKcdHDAzgWWicrG2Ta8rc
UurllmoTac6msV4k9COqrkpagzyGz2t+4HnXQuEcPT2Rlx1t0So/WtPi3h/Dt+tZ
49noitshJEP/8M4M2MDuadtULi/EBZiD9BQvRMM6Y+zDXgvC3/W1sROmVptvs9UQ
Ht+c9pTX4QpjM2vYKlQpHPkUU/h45c7WvGYEBTPOtY745KkDqCx0vQgEB0S7XfHs
dCeuf7NrOyr7PhwIeaMcKCQTo+ZG8CSjmD2iba6sA0xDrEX2A1ENdLwGfQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNnn+NZyUjhEjV7Z0iIjUReV6Bl9MB8GA1UdIwQY
MBaAFPi6jDion4EVhG+M4BoDhjw/7pQXMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1McU1PS2lmZ1JXRWI0emdHZ09HUERfdWxCYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvZDQyNmVmLWI4MWMtNGQxZS04ZDBh
LTJiNzZhZGY2YjYyYy8xLzEtTHFNT0tpZmdSV0ViNHpnR2dPR1BEX3VsQmMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VhL2Q0MjZlZi1iODFjLTRkMWUtOGQwYS0yYjc2YWRmNmI2
MmMvMS8xLUxxTU9LaWZnUldFYjR6Z0dnT0dQRF91bEJjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnbe
Yg1Rspzyzefc5n0F5A9Uf8U2dfFyONpyhrlQ3GCo5n23/mDtRcLmnjJi36LYKXqp
t3pKypPjzChr6g6KFivTHnS7utwmflLq7VSI3TMXMaSndlOksP8b/d1LJYNaE7Js
16h7eOMQDUbQ8DAAZpQ7UN2wykXYZ0Zo96rJ2RxNo3sHs7AdcwNpWjoP5mlwf8Zt
dZIl6mG1MX85iVQhuJAzpZqWKZWFjx8nsquClFqNF1Ct1++YUX2919t0dbKyrZs4
/x2eCBqDJTd6senhTXwguZG8+y0bp2jYH/zohsJn+h+AKNPFKWbMX1uy+TsRY8sg
lEcwtTop/5VqlJrpAA==
-----END CERTIFICATE-----