Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File:                     Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier:          CL+TISHKhloaDTu8axSJOt5XRkUhUPRSQBKw9GmwXDA=
Subject key identifier:   FD:2E:7A:27:B0:BB:3F:80:C6:81:A8:0D:BC:E4:22:20:2C:27:9A:7F
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer:       /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial:       018F882462935F3D2C85C18F294AB0B6651E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number:          025D
Signing time:             Fri 17 May 2024 20:00:36 +0000
Manifest this update:     Fri 17 May 2024 20:00:36 +0000
Manifest next update:     Sat 18 May 2024 20:00:36 +0000
Files and hashes:         1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: rMo7P0lvdbfa1oQDwe5C1ri7EcIG0s0ZoxjlarFlQu0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:24:62:93:5f:3d:2c:85:c1:8f:29:4a:b0:b6:65:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
        Validity
            Not Before: May 17 20:00:36 2024 GMT
            Not After : May 18 20:00:36 2024 GMT
        Subject: CN=fd2e7a27b0bb3f80c681a80dbce422202c279a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:a9:db:18:91:e4:e9:40:06:72:b8:c0:ab:
                    5a:d7:47:23:f6:39:04:20:9e:93:12:d1:c5:0f:4c:
                    29:6e:dc:1e:3e:d9:d4:b0:00:cb:18:dc:1c:61:88:
                    5a:67:99:9d:c3:24:47:46:2b:7e:75:44:71:96:77:
                    a2:0c:56:da:19:68:72:2b:90:92:f7:04:82:36:5b:
                    3d:30:74:01:07:fd:b5:1c:67:1c:96:49:da:5c:8b:
                    f7:43:78:17:a1:0f:cb:10:cf:4e:bd:54:5b:dc:e8:
                    c9:74:5a:a6:1f:5c:4f:94:c3:ea:37:5e:96:23:33:
                    d3:ec:d0:f1:a1:13:08:c7:91:0d:8e:e4:7d:ab:53:
                    d0:5c:19:96:55:3a:db:87:f4:de:31:af:0a:33:78:
                    87:cf:c2:14:6a:8e:e1:bf:fd:c4:94:74:7e:c7:40:
                    f4:15:44:8d:2b:9e:78:b0:9e:dd:26:01:3d:d7:ba:
                    23:92:74:b8:50:9d:9f:a8:e1:67:7b:57:03:37:5e:
                    fe:5b:6b:54:96:5c:4b:e2:a0:cb:94:88:a1:53:13:
                    3d:3f:fc:d9:09:5f:ec:2d:0c:0e:af:35:5e:c9:e6:
                    8e:88:12:03:f6:6f:78:d8:38:d8:17:28:9a:1f:2f:
                    20:89:ed:b7:71:d5:d3:c5:fd:23:45:a9:3a:9e:0f:
                    29:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2E:7A:27:B0:BB:3F:80:C6:81:A8:0D:BC:E4:22:20:2C:27:9A:7F
            X509v3 Authority Key Identifier:
                keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6f:54:5d:39:8e:63:6d:2f:4c:a1:f2:fe:18:2e:1b:69:c9:
         30:64:4b:28:dc:58:c5:c9:72:ec:f6:91:3b:50:78:bf:cf:7f:
         5e:4c:58:ca:3e:17:2e:04:56:46:10:b5:1b:94:81:0b:c9:d8:
         6f:d6:06:62:f5:0d:f0:bf:da:b3:06:ef:8c:78:09:d1:d9:aa:
         e8:3d:82:56:6c:24:a3:38:79:d4:58:77:2b:ed:df:29:2a:06:
         cb:98:17:f0:a9:dd:35:6c:c6:e5:a8:ba:61:8a:dc:12:35:90:
         f2:8d:8a:63:b0:5b:ca:a9:19:f1:3c:5f:76:cf:44:6c:88:a7:
         da:b1:0e:1e:7f:de:cb:02:c9:e1:a4:ae:e3:1d:37:e3:ff:d0:
         79:13:3b:54:e2:c0:17:52:15:36:38:b4:66:50:1c:0e:4b:04:
         19:ab:cf:7f:b3:50:73:33:e9:2a:54:b3:bf:7e:e0:ff:59:49:
         80:41:93:f7:3a:68:05:0c:47:1d:e6:f1:f5:ee:48:8e:f8:c5:
         cf:2a:10:59:ae:85:9d:b0:60:72:25:6c:04:4a:7e:91:b2:0a:
         88:7b:2c:45:50:19:8f:81:0e:df:ce:ea:6f:f6:b0:e0:e3:0f:
         65:23:6c:78:e5:e2:9f:64:15:1f:9c:1e:3d:88:48:fd:b5:6f:
         3e:df:44:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IJGKTXz0shcGPKUqwtmUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhN2RmMzVkNDFiNDA2MmMxMGZjMTE4MTg5ZGU0N2RhMjcw
OTZkYjgwHhcNMjQwNTE3MjAwMDM2WhcNMjQwNTE4MjAwMDM2WjAzMTEwLwYDVQQD
EyhmZDJlN2EyN2IwYmIzZjgwYzY4MWE4MGRiY2U0MjIyMDJjMjc5YTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz12p2xiR5OlABnK4wKta10cj9jkE
IJ6TEtHFD0wpbtwePtnUsADLGNwcYYhaZ5mdwyRHRit+dURxlneiDFbaGWhyK5CS
9wSCNls9MHQBB/21HGcclknaXIv3Q3gXoQ/LEM9OvVRb3OjJdFqmH1xPlMPqN16W
IzPT7NDxoRMIx5ENjuR9q1PQXBmWVTrbh/TeMa8KM3iHz8IUao7hv/3ElHR+x0D0
FUSNK554sJ7dJgE917ojknS4UJ2fqOFne1cDN17+W2tUllxL4qDLlIihUxM9P/zZ
CV/sLQwOrzVeyeaOiBID9m942DjYFyiaHy8gie23cdXTxf0jRak6ng8pyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0ueiewuz+AxoGoDbzkIiAsJ5p/MB8GA1UdIwQY
MBaAFCp9811BtAYsEPwRgYneR9onCW24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEt
YTljYzg5ZDQ0YjI1LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEtYTljYzg5ZDQ0YjI1
LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG9UXTmO
Y20vTKHy/hguG2nJMGRLKNxYxcly7PaRO1B4v89/XkxYyj4XLgRWRhC1G5SBC8nY
b9YGYvUN8L/aswbvjHgJ0dmq6D2CVmwkozh51Fh3K+3fKSoGy5gX8KndNWzG5ai6
YYrcEjWQ8o2KY7BbyqkZ8Txfds9EbIin2rEOHn/eywLJ4aSu4x034//QeRM7VOLA
F1IVNji0ZlAcDksEGavPf7NQczPpKlSzv37g/1lJgEGT9zpoBQxHHebx9e5IjvjF
zyoQWa6FnbBgciVsBEp+kbIKiHssRVAZj4EO387qb/aw4OMPZSNseOXin2QVH5we
PYhI/bVvPt9Eeg==
-----END CERTIFICATE-----