Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File:                     Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier:          dqtRt2Yse+//dMedJQ2+Lo4HInRBWUKQPN5O7auhrjw=
Subject key identifier:   17:0B:30:CB:0B:67:33:47:A7:95:3E:21:9A:D7:2A:70:D6:4E:16:13
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer:       /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial:       01936AB457F65564493439E55FA9C5483209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number:          0460
Signing time:             Tue 26 Nov 2024 23:00:24 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:24 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:24 +0000
Files and hashes:         1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: 4SAUFgAn+FPGdUxjhLHHKOjN57xsbwp2RDfcIO5fgJI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:57:f6:55:64:49:34:39:e5:5f:a9:c5:48:32:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
        Validity
            Not Before: Nov 26 23:00:24 2024 GMT
            Not After : Nov 27 23:00:24 2024 GMT
        Subject: CN=170b30cb0b673347a7953e219ad72a70d64e1613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:0e:c7:9e:ba:9f:46:91:a5:b2:26:bc:83:
                    22:d5:a4:09:a8:f8:8c:90:34:a7:54:2b:c4:29:d2:
                    8b:f6:40:26:66:31:42:09:e3:6b:d8:80:eb:64:df:
                    54:65:8e:50:56:1d:69:0c:2c:79:7c:67:21:2a:23:
                    9f:eb:02:22:4c:76:74:48:ad:38:6f:a3:a0:7c:b6:
                    c7:ac:4a:ef:fa:e9:2b:99:d7:18:53:22:0a:a8:8c:
                    a5:ca:a9:79:f6:1d:53:c3:33:a3:3b:73:19:2b:88:
                    a4:7c:e6:55:9d:b8:58:ce:61:87:bd:8b:9b:2b:cb:
                    4b:6d:b6:05:d3:76:b6:ed:89:8e:f0:51:55:cf:80:
                    5a:12:4c:3a:12:bf:51:a7:0c:e4:1a:a1:4b:c2:3c:
                    55:90:42:28:0b:99:1b:38:12:b7:ad:f9:0a:f5:c9:
                    cd:96:12:f6:2e:9b:ac:2c:18:cd:c5:d9:ef:6a:93:
                    4f:89:7e:78:fa:37:64:58:0b:a6:76:fc:0c:c0:6b:
                    61:a3:26:50:00:da:82:96:50:5a:8d:c5:84:4e:94:
                    51:8c:e1:45:2f:f8:30:47:3f:6b:fe:bb:00:3b:a2:
                    c4:45:f8:d5:65:4d:31:2a:bf:3b:75:a0:11:4c:80:
                    4a:2f:3b:d1:1e:d6:e0:9d:25:72:4c:b9:a3:83:39:
                    7f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0B:30:CB:0B:67:33:47:A7:95:3E:21:9A:D7:2A:70:D6:4E:16:13
            X509v3 Authority Key Identifier:
                keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2b:46:79:80:f3:c2:ca:b8:bc:ce:f6:50:09:c3:81:74:df:
         52:1a:0a:08:d2:64:cb:8b:57:00:49:5a:1d:af:5e:41:b8:12:
         a2:bc:d4:7f:8c:f7:6e:0d:da:8e:90:83:8e:c4:4d:1a:13:3f:
         55:8e:5b:39:c6:d2:b4:19:b2:18:ad:76:2f:cf:ac:f1:dd:b6:
         17:82:d0:92:31:f2:db:09:e2:53:9f:ab:54:2f:98:f7:91:b9:
         e1:de:d8:c7:32:99:d4:5d:3d:1b:01:bc:cb:4f:75:9d:29:52:
         03:bc:4b:ea:1c:66:03:4a:a2:95:af:86:f1:e7:be:f6:00:87:
         5b:fb:44:ad:c1:7b:06:0c:be:3f:50:42:73:27:5a:22:5b:60:
         e2:10:4f:44:4e:33:8b:90:46:8b:d5:7b:af:24:f5:f5:6c:b4:
         f9:f4:21:d8:49:3a:c9:84:c8:e9:03:85:63:ba:49:d7:f9:98:
         2d:2b:ca:7a:0a:c8:07:d6:c3:4f:6e:57:59:4d:0c:0e:1c:de:
         06:d2:92:7b:e8:be:c3:e6:d2:1b:2f:35:f5:9f:09:d0:6b:00:
         04:a9:4a:69:c5:c4:1a:fe:34:88:18:73:f5:00:26:13:00:08:
         df:4f:9e:c9:e3:51:e6:03:fb:07:fe:fe:64:d5:73:fa:bd:a6:
         47:79:73:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtFf2VWRJNDnlX6nFSDIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhN2RmMzVkNDFiNDA2MmMxMGZjMTE4MTg5ZGU0N2RhMjcw
OTZkYjgwHhcNMjQxMTI2MjMwMDI0WhcNMjQxMTI3MjMwMDI0WjAzMTEwLwYDVQQD
EygxNzBiMzBjYjBiNjczMzQ3YTc5NTNlMjE5YWQ3MmE3MGQ2NGUxNjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1sOx566n0aRpbImvIMi1aQJqPiM
kDSnVCvEKdKL9kAmZjFCCeNr2IDrZN9UZY5QVh1pDCx5fGchKiOf6wIiTHZ0SK04
b6OgfLbHrErv+ukrmdcYUyIKqIylyql59h1TwzOjO3MZK4ikfOZVnbhYzmGHvYub
K8tLbbYF03a27YmO8FFVz4BaEkw6Er9RpwzkGqFLwjxVkEIoC5kbOBK3rfkK9cnN
lhL2LpusLBjNxdnvapNPiX54+jdkWAumdvwMwGthoyZQANqCllBajcWETpRRjOFF
L/gwRz9r/rsAO6LERfjVZU0xKr87daARTIBKLzvRHtbgnSVyTLmjgzl/XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcLMMsLZzNHp5U+IZrXKnDWThYTMB8GA1UdIwQY
MBaAFCp9811BtAYsEPwRgYneR9onCW24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEt
YTljYzg5ZDQ0YjI1LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lZDMzNGMtZDc5Ny00MjVhLTkzYTEtYTljYzg5ZDQ0YjI1
LzEvS24zelhVRzBCaXdRX0JHQmlkNUgyaWNKYmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXitGeYDz
wsq4vM72UAnDgXTfUhoKCNJky4tXAElaHa9eQbgSorzUf4z3bg3ajpCDjsRNGhM/
VY5bOcbStBmyGK12L8+s8d22F4LQkjHy2wniU5+rVC+Y95G54d7YxzKZ1F09GwG8
y091nSlSA7xL6hxmA0qila+G8ee+9gCHW/tErcF7Bgy+P1BCcydaIltg4hBPRE4z
i5BGi9V7ryT19Wy0+fQh2Ek6yYTI6QOFY7pJ1/mYLSvKegrIB9bDT25XWU0MDhze
BtKSe+i+w+bSGy819Z8J0GsABKlKacXEGv40iBhz9QAmEwAI30+eyeNR5gP7B/7+
ZNVz+r2mR3lzcQ==
-----END CERTIFICATE-----