Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
File:                     WLPteKcQZof2-2jvIG7dzw696bM.mft (raw, json)
Hash identifier:          TOco5q0PjGJjzDmlXof0xQn9ccdgIKDlmrjF0orGB5Y=
Subject key identifier:   D9:23:78:03:8A:7D:E5:0C:CB:23:5F:63:79:B2:03:2A:4F:02:3A:C9
Authority key identifier: 58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3
Certificate issuer:       /CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
Certificate serial:       01936B22B1FBF526905125CE1CA3D1D81770
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
Manifest number:          0876
Signing time:             Wed 27 Nov 2024 01:00:56 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:56 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:56 +0000
Files and hashes:         1: WLPteKcQZof2-2jvIG7dzw696bM.crl (hash: Fu9oo55Bb5HCZF1NZhVd17qqAK+th3WOoHyXOadboBQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:b1:fb:f5:26:90:51:25:ce:1c:a3:d1:d8:17:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
        Validity
            Not Before: Nov 27 01:00:56 2024 GMT
            Not After : Nov 28 01:00:56 2024 GMT
        Subject: CN=d92378038a7de50ccb235f6379b2032a4f023ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d4:b4:1d:7a:83:3d:a9:cf:f7:dd:fd:07:7c:
                    7f:06:91:be:d9:ac:6f:41:f8:57:82:dd:db:1e:da:
                    d3:59:6d:87:a0:52:1b:82:b2:0a:13:16:29:29:6c:
                    92:5b:b2:14:49:5d:98:d4:15:71:e0:12:52:4d:f5:
                    d3:14:b5:b4:42:aa:bf:00:b2:48:18:41:3f:7d:94:
                    d7:7b:e4:5f:0d:51:d3:1d:7b:52:f1:8d:c9:97:cd:
                    23:d3:83:b5:1b:d5:7e:0b:a8:1d:d0:b3:8d:20:58:
                    5b:6f:6a:6d:d2:c0:a6:fe:95:8e:ce:7f:f0:2f:ee:
                    9c:3c:e7:76:66:31:c7:cc:f9:9c:fa:a8:70:f6:2f:
                    ef:5b:25:1b:27:24:68:76:e2:4a:f2:d0:3a:6b:a2:
                    ed:46:d9:99:4e:49:3b:e0:52:c9:45:41:e1:4c:0a:
                    47:3f:db:8b:ce:0f:f8:9d:c8:fd:3f:f4:17:b0:9e:
                    4f:13:d2:c6:54:ad:7d:1a:38:9c:56:38:a5:f2:0c:
                    97:54:0b:7b:61:71:f3:45:12:aa:6b:61:5e:11:47:
                    f4:d5:51:84:57:56:53:a4:ae:48:36:aa:55:0d:ef:
                    b4:6a:70:65:2a:e8:35:ac:dc:40:f5:24:de:99:68:
                    3f:09:d5:03:5f:97:5e:4d:2d:cb:d3:f5:65:ae:3b:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:23:78:03:8A:7D:E5:0C:CB:23:5F:63:79:B2:03:2A:4F:02:3A:C9
            X509v3 Authority Key Identifier:
                keyid:58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c3:57:c9:46:6f:25:2d:d4:01:b5:10:84:de:dc:0d:be:d9:
         c8:05:43:b6:0e:d0:8a:37:19:b6:45:d6:70:4d:71:21:e9:24:
         95:14:c4:94:48:e1:49:b5:f3:ed:54:25:d2:b2:56:5d:24:60:
         50:44:35:f5:94:e2:4f:5c:94:87:f6:e6:4f:dd:b2:18:7a:27:
         02:e3:02:a4:29:66:36:5e:44:61:23:d5:48:d3:3d:45:76:d2:
         94:92:13:dd:05:0d:bc:98:19:c3:a0:1d:e5:0d:49:4e:66:d6:
         b2:3b:0a:49:d7:37:de:6b:ae:9c:d3:f8:e9:2a:75:59:53:57:
         20:39:ec:a7:a3:53:9f:46:6c:ec:66:ff:5e:9e:30:e0:7a:1c:
         c1:44:aa:7f:45:09:f8:08:a2:7d:aa:9f:3f:c3:6f:29:aa:22:
         88:cd:a5:48:8c:a8:b6:b1:0e:91:81:1c:44:de:8c:2d:58:17:
         2b:b4:31:cf:a7:8f:c9:85:15:89:ea:dc:ee:5d:c4:58:b9:5d:
         fa:bb:a9:d2:bf:e0:5f:cc:a5:49:40:b3:94:16:71:ea:58:31:
         2d:b1:21:98:56:99:43:b2:ac:2d:f9:91:e3:85:b3:c6:38:31:
         cd:34:60:45:a8:79:dc:21:90:d6:a7:1d:ed:3a:83:b3:fe:77:
         49:ff:d3:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIrH79SaQUSXOHKPR2BdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNlZDc4YTcxMDY2ODdmNmZiNjhlZjIwNmVkZGNmMGVi
ZGU5YjMwHhcNMjQxMTI3MDEwMDU2WhcNMjQxMTI4MDEwMDU2WjAzMTEwLwYDVQQD
EyhkOTIzNzgwMzhhN2RlNTBjY2IyMzVmNjM3OWIyMDMyYTRmMDIzYWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNS0HXqDPanP9939B3x/BpG+2axv
QfhXgt3bHtrTWW2HoFIbgrIKExYpKWySW7IUSV2Y1BVx4BJSTfXTFLW0Qqq/ALJI
GEE/fZTXe+RfDVHTHXtS8Y3Jl80j04O1G9V+C6gd0LONIFhbb2pt0sCm/pWOzn/w
L+6cPOd2ZjHHzPmc+qhw9i/vWyUbJyRoduJK8tA6a6LtRtmZTkk74FLJRUHhTApH
P9uLzg/4ncj9P/QXsJ5PE9LGVK19GjicVjil8gyXVAt7YXHzRRKqa2FeEUf01VGE
V1ZTpK5INqpVDe+0anBlKug1rNxA9STemWg/CdUDX5deTS3L0/VlrjuScQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNkjeAOKfeUMyyNfY3myAypPAjrJMB8GA1UdIwQY
MBaAFFiz7XinEGaH9vto7yBu3c8OvemzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQdGVLY1Fab2YyLTJqdklHN2R6dzY5NmJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82NTcxMmItOTU4YS00ZTZmLWIwNTQt
YmY3NDVlYWI5NTdkLzEvV0xQdGVLY1Fab2YyLTJqdklHN2R6dzY5NmJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82NTcxMmItOTU4YS00ZTZmLWIwNTQtYmY3NDVlYWI5NTdk
LzEvV0xQdGVLY1Fab2YyLTJqdklHN2R6dzY5NmJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMNXyUZv
JS3UAbUQhN7cDb7ZyAVDtg7QijcZtkXWcE1xIekklRTElEjhSbXz7VQl0rJWXSRg
UEQ19ZTiT1yUh/bmT92yGHonAuMCpClmNl5EYSPVSNM9RXbSlJIT3QUNvJgZw6Ad
5Q1JTmbWsjsKSdc33muunNP46Sp1WVNXIDnsp6NTn0Zs7Gb/Xp4w4HocwUSqf0UJ
+AiifaqfP8NvKaoiiM2lSIyotrEOkYEcRN6MLVgXK7Qxz6ePyYUVierc7l3EWLld
+rup0r/gX8ylSUCzlBZx6lgxLbEhmFaZQ7KsLfmR44WzxjgxzTRgRah53CGQ1qcd
7TqDs/53Sf/TFA==
-----END CERTIFICATE-----