Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File:                     3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier:          E3CIXhdEUf+McP92H8FvEorciJGFB2ihSbwftPq+vhI=
Subject key identifier:   30:76:0C:4C:F2:89:70:9D:76:02:7E:2D:86:23:A2:9C:1C:07:86:76
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer:       /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial:       01936AB4D81CBAC2D0533A9286F56A9ED436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number:          0C7D
Signing time:             Tue 26 Nov 2024 23:00:56 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:56 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:56 +0000
Files and hashes:         1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: CR9hQ+9J1bil09fbI2tOPVnBM0K2AcrzYY4DnGj1hp4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:d8:1c:ba:c2:d0:53:3a:92:86:f5:6a:9e:d4:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
        Validity
            Not Before: Nov 26 23:00:56 2024 GMT
            Not After : Nov 27 23:00:56 2024 GMT
        Subject: CN=30760c4cf289709d76027e2d8623a29c1c078676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:cd:f1:52:30:60:1c:7a:96:5c:d6:20:3b:
                    90:e2:09:98:90:cb:e4:d3:2f:4c:af:50:50:17:17:
                    98:fb:b2:2a:b7:b0:11:d4:ec:b5:1e:2e:09:1b:ba:
                    d8:47:51:4c:ba:56:eb:57:9b:80:23:46:f5:11:74:
                    fe:f2:45:e2:20:b9:51:48:58:d0:c1:9f:95:6b:87:
                    b4:74:bf:2d:fe:ad:c7:fa:7f:f8:df:3c:e9:2b:e7:
                    b5:0f:e8:47:28:9e:3b:a1:72:05:4d:81:05:ab:10:
                    e8:a4:fd:48:70:03:57:76:cd:02:f5:fd:32:2e:c7:
                    e3:08:36:e2:c9:ac:bf:85:5b:c7:b9:e5:ad:a1:c9:
                    09:51:12:52:e0:91:3a:f0:b3:3f:0a:a6:d5:6e:a9:
                    dd:dd:e5:75:b7:4c:9f:f5:cc:bd:b7:42:c8:34:64:
                    5a:69:80:60:dd:4a:3e:b9:97:1c:04:20:05:3d:ab:
                    ab:b6:0b:3d:84:2e:60:fd:04:1c:2c:01:18:cc:77:
                    fe:01:e7:dd:17:4c:a0:a6:1c:e9:03:57:96:b9:db:
                    ae:fa:97:54:28:39:74:7d:1c:ab:2b:6e:95:04:50:
                    6f:cf:a3:6a:a2:69:ac:47:43:6b:eb:24:e7:64:5c:
                    7a:a6:cd:9e:07:51:3a:b3:8c:0e:59:a3:09:6f:80:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:76:0C:4C:F2:89:70:9D:76:02:7E:2D:86:23:A2:9C:1C:07:86:76
            X509v3 Authority Key Identifier:
                keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:70:a6:f9:fd:86:a4:12:7a:03:24:bd:d2:f1:ee:62:79:b7:
         65:37:49:28:f0:1c:59:4c:f4:ff:dd:d1:b0:ef:0e:77:be:aa:
         32:9d:f6:17:a8:59:f4:42:a5:7d:4f:a9:36:c2:4f:d3:09:84:
         27:b8:c6:e7:b3:8f:fa:5b:79:75:01:b4:1e:ad:31:e5:c0:90:
         66:97:68:db:6d:ea:0b:f3:00:35:f7:8e:8d:12:ab:28:5d:b3:
         3d:66:66:16:10:c8:52:ce:08:68:c4:8b:23:23:2f:1d:3c:c9:
         a9:c4:00:a0:9a:ef:74:25:e0:d6:f3:e6:5c:56:89:a5:63:c2:
         02:08:f9:ad:2b:2d:cb:94:6c:b8:56:8a:51:0c:bc:4d:00:56:
         d9:9a:59:14:04:9d:e8:ba:69:50:2e:c3:9f:dd:19:21:b7:e9:
         6f:65:3b:15:3c:d1:81:aa:cf:b4:b4:46:db:c6:6f:8d:31:b6:
         7e:c0:d7:1a:9d:1e:16:bf:a2:8e:f8:d5:41:96:48:00:e8:35:
         2a:0b:c1:92:a1:a6:55:8c:38:f2:ce:23:30:20:8a:b0:eb:b2:
         25:4c:48:6b:e0:c1:c2:82:e5:bd:16:60:59:5c:3b:42:e6:ae:
         30:0a:a9:b0:03:41:35:78:72:fd:b1:69:49:21:f9:75:12:d9:
         aa:b5:b4:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtNgcusLQUzqShvVqntQ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzNiZTM4N2FmNTUyOTcwY2Y2MmY2OTUxN2UzZjNjOWMx
MmQyZjYwHhcNMjQxMTI2MjMwMDU2WhcNMjQxMTI3MjMwMDU2WjAzMTEwLwYDVQQD
EygzMDc2MGM0Y2YyODk3MDlkNzYwMjdlMmQ4NjIzYTI5YzFjMDc4Njc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIDN8VIwYBx6llzWIDuQ4gmYkMvk
0y9Mr1BQFxeY+7Iqt7AR1Oy1Hi4JG7rYR1FMulbrV5uAI0b1EXT+8kXiILlRSFjQ
wZ+Va4e0dL8t/q3H+n/43zzpK+e1D+hHKJ47oXIFTYEFqxDopP1IcANXds0C9f0y
LsfjCDbiyay/hVvHueWtockJURJS4JE68LM/CqbVbqnd3eV1t0yf9cy9t0LINGRa
aYBg3Uo+uZccBCAFPaurtgs9hC5g/QQcLAEYzHf+AefdF0ygphzpA1eWuduu+pdU
KDl0fRyrK26VBFBvz6NqommsR0Nr6yTnZFx6ps2eB1E6s4wOWaMJb4CYMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDB2DEzyiXCddgJ+LYYjopwcB4Z2MB8GA1UdIwQY
MBaAFNxzvjh69VKXDPYvaVF+PzycEtL2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81YmJkMzItYTU0MC00NzA4LTk5MjUt
YzcxZjE3YWZjNzQ5LzEvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81YmJkMzItYTU0MC00NzA4LTk5MjUtYzcxZjE3YWZjNzQ5
LzEvM0hPLU9IcjFVcGNNOWk5cFVYNF9QSndTMHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXCm+f2G
pBJ6AyS90vHuYnm3ZTdJKPAcWUz0/93RsO8Od76qMp32F6hZ9EKlfU+pNsJP0wmE
J7jG57OP+lt5dQG0Hq0x5cCQZpdo223qC/MANfeOjRKrKF2zPWZmFhDIUs4IaMSL
IyMvHTzJqcQAoJrvdCXg1vPmXFaJpWPCAgj5rSsty5RsuFaKUQy8TQBW2ZpZFASd
6LppUC7Dn90ZIbfpb2U7FTzRgarPtLRG28ZvjTG2fsDXGp0eFr+ijvjVQZZIAOg1
KgvBkqGmVYw48s4jMCCKsOuyJUxIa+DBwoLlvRZgWVw7QuauMAqpsANBNXhy/bFp
SSH5dRLZqrW0ow==
-----END CERTIFICATE-----