Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
File:                     MWg4BbI9i3h9aSEFPX666XBAihk.mft (raw, json)
Hash identifier:          MbTsmekTl3wRjqo1VIpICZxuxRbV5le1kKuMeGCPJxI=
Subject key identifier:   90:3F:0F:9D:8B:2B:51:6F:43:77:EC:2F:0A:A1:16:19:42:30:85:03
Authority key identifier: 31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19
Certificate issuer:       /CN=31683805b23d8b787d6921053d7ebae970408a19
Certificate serial:       0191FA475165B73E0C8223691134D4608FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
Manifest number:          0104
Signing time:             Mon 16 Sep 2024 10:01:03 +0000
Manifest this update:     Mon 16 Sep 2024 10:01:03 +0000
Manifest next update:     Tue 17 Sep 2024 10:01:03 +0000
Files and hashes:         1: MWg4BbI9i3h9aSEFPX666XBAihk.crl (hash: n1ItljBqEzqoSRkrONl2ytiBp7McANANIcB48puSMwQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 10:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:47:51:65:b7:3e:0c:82:23:69:11:34:d4:60:8f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31683805b23d8b787d6921053d7ebae970408a19
        Validity
            Not Before: Sep 16 10:01:03 2024 GMT
            Not After : Sep 17 10:01:03 2024 GMT
        Subject: CN=903f0f9d8b2b516f4377ec2f0aa1161942308503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a5:2b:b2:67:70:cf:15:97:dd:c1:b1:b1:c1:
                    65:96:bc:8b:c8:96:e5:b3:83:67:d1:6d:fc:17:02:
                    88:4c:2b:d3:3c:5b:45:52:0f:95:ea:d3:18:6f:50:
                    c3:a7:42:69:3c:56:16:44:e1:74:aa:f8:62:ef:71:
                    d8:84:1a:5e:fd:24:bb:45:d6:ef:2c:56:2b:7e:ad:
                    96:00:a9:82:04:6a:9b:ea:89:c9:6d:2d:45:dc:5e:
                    05:7e:8b:68:da:56:33:0f:01:e4:df:56:d7:6e:c7:
                    9d:04:6d:c7:5f:1c:6b:7e:02:da:d3:03:32:f8:70:
                    65:f5:ea:32:67:0d:bf:ee:00:9a:f1:1c:71:b7:e9:
                    de:e1:fe:b2:9b:96:9d:56:60:2a:0a:93:5d:9c:6e:
                    63:c6:af:78:d1:21:96:52:90:60:e5:56:93:f2:fc:
                    e8:62:f9:59:fc:f8:a8:74:ae:9d:e2:55:5d:a9:7d:
                    3e:04:69:fd:10:e1:35:da:cb:e9:3b:50:8f:de:2d:
                    5e:53:f6:f1:4a:46:68:6d:36:ea:94:8a:0a:e9:1c:
                    3c:d8:54:8d:98:94:45:c8:02:c5:0b:f8:9c:41:13:
                    68:5a:25:78:45:99:7e:5f:f4:9e:2a:6a:b4:c7:3f:
                    70:48:b1:4a:de:3a:09:e8:fa:7a:20:11:b6:1f:3d:
                    c8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:3F:0F:9D:8B:2B:51:6F:43:77:EC:2F:0A:A1:16:19:42:30:85:03
            X509v3 Authority Key Identifier:
                keyid:31:68:38:05:B2:3D:8B:78:7D:69:21:05:3D:7E:BA:E9:70:40:8A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWg4BbI9i3h9aSEFPX666XBAihk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ea3528-45b9-47a4-9612-2a456fd096ab/1/MWg4BbI9i3h9aSEFPX666XBAihk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3e:b8:49:7e:2d:1e:d7:e0:9f:80:55:b7:2f:34:57:d8:d3:
         d1:83:dd:53:0f:32:a5:26:4a:c8:30:50:c4:d2:45:6c:f9:02:
         22:8e:f7:59:7e:95:fa:41:86:d1:ed:9f:65:73:b2:bd:b1:4e:
         9d:a8:c5:99:03:d1:a7:1a:7a:9c:30:bc:d2:77:2a:06:8e:cd:
         26:fd:57:51:c4:d6:45:99:67:b8:53:e2:c8:61:87:b6:4f:a8:
         a2:a1:a9:4e:46:83:aa:2d:32:77:52:32:19:a4:5f:07:5e:28:
         e0:ff:5c:6b:ee:c0:b6:d4:41:1b:b1:0c:ba:64:67:33:13:5f:
         ce:6a:0a:48:4b:b1:67:ce:93:a6:d7:d4:7c:09:db:9e:1d:42:
         76:bd:1e:b1:e2:77:fe:ae:73:0d:e9:49:77:cb:0b:8c:03:30:
         d6:f5:f4:f3:34:c1:4d:5d:37:77:c6:38:20:ca:50:ef:ea:a6:
         be:8f:f4:7d:d7:76:64:2c:3f:14:d2:7e:45:69:20:b6:e4:8c:
         09:78:cd:4c:b6:35:32:2b:ce:d6:13:cb:1e:a3:e2:4d:38:e8:
         fd:cf:31:9e:d7:ae:2e:3d:68:d5:59:e7:dd:0d:bf:3a:3c:e8:
         ed:a4:9d:82:c4:55:9f:15:59:8e:fb:ff:23:be:66:01:75:fd:
         03:3e:1b:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH6R1Fltz4MgiNpETTUYI/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNjgzODA1YjIzZDhiNzg3ZDY5MjEwNTNkN2ViYWU5NzA0
MDhhMTkwHhcNMjQwOTE2MTAwMTAzWhcNMjQwOTE3MTAwMTAzWjAzMTEwLwYDVQQD
Eyg5MDNmMGY5ZDhiMmI1MTZmNDM3N2VjMmYwYWExMTYxOTQyMzA4NTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56UrsmdwzxWX3cGxscFllryLyJbl
s4Nn0W38FwKITCvTPFtFUg+V6tMYb1DDp0JpPFYWROF0qvhi73HYhBpe/SS7Rdbv
LFYrfq2WAKmCBGqb6onJbS1F3F4Ffoto2lYzDwHk31bXbsedBG3HXxxrfgLa0wMy
+HBl9eoyZw2/7gCa8Rxxt+ne4f6ym5adVmAqCpNdnG5jxq940SGWUpBg5VaT8vzo
YvlZ/PiodK6d4lVdqX0+BGn9EOE12svpO1CP3i1eU/bxSkZobTbqlIoK6Rw82FSN
mJRFyALFC/icQRNoWiV4RZl+X/SeKmq0xz9wSLFK3joJ6Pp6IBG2Hz3IewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJA/D52LK1FvQ3fsLwqhFhlCMIUDMB8GA1UdIwQY
MBaAFDFoOAWyPYt4fWkhBT1+uulwQIoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9lYTM1MjgtNDViOS00N2E0LTk2MTIt
MmE0NTZmZDA5NmFiLzEvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9lYTM1MjgtNDViOS00N2E0LTk2MTItMmE0NTZmZDA5NmFi
LzEvTVdnNEJiSTlpM2g5YVNFRlBYNjY2WEJBaWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMT64SX4t
Htfgn4BVty80V9jT0YPdUw8ypSZKyDBQxNJFbPkCIo73WX6V+kGG0e2fZXOyvbFO
najFmQPRpxp6nDC80ncqBo7NJv1XUcTWRZlnuFPiyGGHtk+ooqGpTkaDqi0yd1Iy
GaRfB14o4P9ca+7AttRBG7EMumRnMxNfzmoKSEuxZ86TptfUfAnbnh1Cdr0eseJ3
/q5zDelJd8sLjAMw1vX08zTBTV03d8Y4IMpQ7+qmvo/0fdd2ZCw/FNJ+RWkgtuSM
CXjNTLY1MivO1hPLHqPiTTjo/c8xnteuLj1o1Vnn3Q2/Ojzo7aSdgsRVnxVZjvv/
I75mAXX9Az4b/A==
-----END CERTIFICATE-----