Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
File:                     bdEoKnfiVmUBaNLlZWrvzprWouw.mft (raw, json)
Hash identifier:          WRYO63x2WUajZG9Uz5C9c1vO71VR9FGs2L1TZYV9zS8=
Subject key identifier:   38:B8:BA:96:2E:42:2F:89:B0:CC:5F:F4:C9:9B:FA:DA:26:42:6C:0B
Authority key identifier: 6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC
Certificate issuer:       /CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
Certificate serial:       0191FB2300E64746E39229636FC16D2F9D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
Manifest number:          F1
Signing time:             Mon 16 Sep 2024 14:01:00 +0000
Manifest this update:     Mon 16 Sep 2024 14:01:00 +0000
Manifest next update:     Tue 17 Sep 2024 14:01:00 +0000
Files and hashes:         1: bdEoKnfiVmUBaNLlZWrvzprWouw.crl (hash: TLD1HjviZLsC38IVe3uEBtaSM35AEvQ0MAzfSsQ/G0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:23:00:e6:47:46:e3:92:29:63:6f:c1:6d:2f:9d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1282a77e256650168d2e5656aefce9ad6a2ec
        Validity
            Not Before: Sep 16 14:01:00 2024 GMT
            Not After : Sep 17 14:01:00 2024 GMT
        Subject: CN=38b8ba962e422f89b0cc5ff4c99bfada26426c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:88:a2:96:8d:f1:78:e7:1f:41:da:0f:45:db:
                    90:9f:b3:88:3c:ae:d6:14:28:ae:1f:fe:f3:7d:cc:
                    8c:5d:81:a4:a3:67:80:7b:4a:79:02:17:64:56:2a:
                    c2:0d:c4:9d:41:51:0b:7e:51:1f:88:be:da:ef:49:
                    b8:a4:6d:44:e7:ea:9e:f3:28:6b:98:e4:c6:b3:0e:
                    7a:81:8e:4a:03:8c:02:bd:b9:42:ad:c8:2e:09:9f:
                    8c:69:6a:d8:ef:ee:5d:58:7c:6f:53:6a:06:5f:67:
                    c8:b4:a9:2c:4a:e4:e3:32:9c:bd:c0:b5:61:3b:71:
                    d5:37:a3:99:0c:26:2f:12:61:22:9e:d2:bf:56:25:
                    70:76:f5:02:8f:e6:3c:fc:93:bd:7f:9d:c5:3d:8c:
                    80:69:51:6c:5b:e8:04:36:af:c0:d9:71:be:8c:ff:
                    11:cd:4d:ba:ee:d1:fa:5f:42:2d:d1:0a:cc:b2:11:
                    ab:36:40:6b:f8:ba:d6:5f:27:26:a5:fc:2a:24:de:
                    02:60:5b:5c:26:b3:c5:0e:ec:d6:fc:a9:ab:0e:cf:
                    f9:92:0b:34:c0:5f:bf:e0:29:b3:74:ed:60:be:06:
                    85:f5:40:f3:a9:d1:e3:d1:82:cd:d6:a7:d6:f4:c3:
                    9c:70:31:22:6a:33:dc:35:d3:5d:e2:14:a2:eb:58:
                    9a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B8:BA:96:2E:42:2F:89:B0:CC:5F:F4:C9:9B:FA:DA:26:42:6C:0B
            X509v3 Authority Key Identifier:
                keyid:6D:D1:28:2A:77:E2:56:65:01:68:D2:E5:65:6A:EF:CE:9A:D6:A2:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdEoKnfiVmUBaNLlZWrvzprWouw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a773b1-5f36-4e80-a398-e0233b7c60aa/1/bdEoKnfiVmUBaNLlZWrvzprWouw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:3f:26:77:e6:7b:a0:60:75:b3:6f:d5:4a:11:47:d9:44:e4:
         03:f7:f1:e6:2a:ce:7e:ce:0a:8b:13:3f:af:dd:01:25:04:1e:
         e6:b5:f8:4b:1e:e6:4a:28:12:52:76:95:d5:b1:08:38:68:4c:
         44:af:bd:e2:2d:74:e2:b0:58:66:d3:71:e5:e0:da:c1:9a:00:
         b2:35:ae:75:69:4c:7d:03:c5:77:e7:a8:64:4a:4e:90:e6:bc:
         97:f6:26:bd:b1:e2:9a:13:b7:ae:ea:aa:57:ba:b7:90:b6:03:
         8b:1a:fa:47:13:b9:f4:4b:59:eb:dc:51:d6:63:ef:d5:d2:40:
         fc:a3:28:60:b4:27:de:af:73:9d:82:a1:05:07:8c:c7:27:08:
         b3:a8:e7:59:f6:58:1b:e0:42:99:ed:75:62:ee:87:fa:18:7c:
         78:58:33:0b:60:de:7f:53:8d:5b:7c:fd:a0:10:35:c0:54:31:
         b3:44:5b:ab:b9:fa:ea:81:7e:34:d0:1c:e1:1d:6c:00:d0:9e:
         85:9c:d8:7b:a2:e7:00:28:86:c3:d3:0e:09:09:83:fa:9d:ee:
         9b:c9:5d:45:d0:65:78:61:10:ce:c5:6a:f6:62:08:5e:1f:62:
         c5:a1:89:96:d8:d0:a3:3d:81:8e:a4:bf:22:92:74:f3:0f:84:
         a8:b9:71:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH7IwDmR0bjkiljb8FtL50DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZDEyODJhNzdlMjU2NjUwMTY4ZDJlNTY1NmFlZmNlOWFk
NmEyZWMwHhcNMjQwOTE2MTQwMTAwWhcNMjQwOTE3MTQwMTAwWjAzMTEwLwYDVQQD
EygzOGI4YmE5NjJlNDIyZjg5YjBjYzVmZjRjOTliZmFkYTI2NDI2YzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Iiilo3xeOcfQdoPRduQn7OIPK7W
FCiuH/7zfcyMXYGko2eAe0p5AhdkVirCDcSdQVELflEfiL7a70m4pG1E5+qe8yhr
mOTGsw56gY5KA4wCvblCrcguCZ+MaWrY7+5dWHxvU2oGX2fItKksSuTjMpy9wLVh
O3HVN6OZDCYvEmEintK/ViVwdvUCj+Y8/JO9f53FPYyAaVFsW+gENq/A2XG+jP8R
zU267tH6X0It0QrMshGrNkBr+LrWXycmpfwqJN4CYFtcJrPFDuzW/KmrDs/5kgs0
wF+/4CmzdO1gvgaF9UDzqdHj0YLN1qfW9MOccDEiajPcNdNd4hSi61iaAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDi4upYuQi+JsMxf9Mmb+tomQmwLMB8GA1UdIwQY
MBaAFG3RKCp34lZlAWjS5WVq786a1qLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRFb0tuZmlWbVVCYU5MbFpXcnZ6cHJXb3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hNzczYjEtNWYzNi00ZTgwLWEzOTgt
ZTAyMzNiN2M2MGFhLzEvYmRFb0tuZmlWbVVCYU5MbFpXcnZ6cHJXb3V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hNzczYjEtNWYzNi00ZTgwLWEzOTgtZTAyMzNiN2M2MGFh
LzEvYmRFb0tuZmlWbVVCYU5MbFpXcnZ6cHJXb3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUT8md+Z7
oGB1s2/VShFH2UTkA/fx5irOfs4KixM/r90BJQQe5rX4Sx7mSigSUnaV1bEIOGhM
RK+94i104rBYZtNx5eDawZoAsjWudWlMfQPFd+eoZEpOkOa8l/YmvbHimhO3ruqq
V7q3kLYDixr6RxO59EtZ69xR1mPv1dJA/KMoYLQn3q9znYKhBQeMxycIs6jnWfZY
G+BCme11Yu6H+hh8eFgzC2Def1ONW3z9oBA1wFQxs0Rbq7n66oF+NNAc4R1sANCe
hZzYe6LnACiGw9MOCQmD+p3um8ldRdBleGEQzsVq9mIIXh9ixaGJltjQoz2BjqS/
IpJ08w+EqLlxKA==
-----END CERTIFICATE-----