Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
File:                     aHcm04_PKn-7t7_CjWP-NXntIR0.mft (raw, json)
Hash identifier:          Wd6LyqKcWyYvxZ8vnQ8oDZHK9Zx4smbC28lUOi8hAEw=
Subject key identifier:   7E:50:76:EB:4C:E7:BB:05:E4:7F:1D:98:48:79:2D:A8:C7:58:9D:1C
Authority key identifier: 68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D
Certificate issuer:       /CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
Certificate serial:       018FB835E7A5968F9FE74F7B8E9DBCF5C742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
Manifest number:          0CC3
Signing time:             Mon 27 May 2024 04:01:31 +0000
Manifest this update:     Mon 27 May 2024 04:01:31 +0000
Manifest next update:     Tue 28 May 2024 04:01:31 +0000
Files and hashes:         1: 6HJrB7Y0SkZfX623WS-7YabsKZk.roa (hash: VPStwrVDj/kFOECMivR/2K5xJRvViLnvgsJXPF9mchs=)
                          2: QaPuRMvXJV--Fw9AVsI5ZPkc8hY.roa (hash: TYXifRDvYSCNyCSvzG/CTgQtlnVhQgEvsEV2BNAGxx0=)
                          3: aHcm04_PKn-7t7_CjWP-NXntIR0.crl (hash: Szjkf0A5cUX95fXoUy/8wOaeLY4W/dQfP0IVC7zv31c=)
                          4: iaCAd2vAvedXHDGP1lUH_E_KM8A.roa (hash: dyOOxLshxZ5tzdjQv2bDDgrD+ZI8YY4RTwLw+T09ohs=)
                          5: w6DeLFJdEk1mZKidt4FQMQDxlTI.roa (hash: k009oTB069ImDw02164BGVARnKaYelZo+nyAt+vgSgU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b8:35:e7:a5:96:8f:9f:e7:4f:7b:8e:9d:bc:f5:c7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687726d38fcf2a7fbbb7bfc28d63fe3579ed211d
        Validity
            Not Before: May 27 04:01:31 2024 GMT
            Not After : May 28 04:01:31 2024 GMT
        Subject: CN=7e5076eb4ce7bb05e47f1d9848792da8c7589d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:33:a7:af:97:1a:fe:47:69:80:26:4d:3c:3d:
                    7f:85:a4:07:8c:3e:62:e4:e8:5e:a0:7f:ce:3e:0d:
                    ee:a1:73:8f:8f:0a:66:b4:ac:9f:2a:33:e8:39:cc:
                    83:80:c0:11:1a:93:23:88:dd:ce:2d:25:93:16:76:
                    26:ae:4c:47:a4:53:ac:1a:e5:1a:b0:8a:c8:4c:99:
                    34:3c:0a:26:72:25:4f:33:26:ee:6b:c9:0b:f8:c7:
                    2b:b6:b3:6d:67:0a:5c:eb:18:4d:7c:db:08:dd:7e:
                    b5:a1:73:18:91:fa:c8:de:f0:0c:2c:38:aa:82:56:
                    39:99:9e:50:3d:43:2d:ec:4e:96:7c:df:0e:f0:2e:
                    fd:e7:55:83:43:6c:e9:19:1d:3e:e9:71:31:92:cd:
                    71:a4:f6:fe:e8:b8:e4:97:4c:45:26:89:1d:1c:1d:
                    a4:b2:91:c2:e5:ed:79:2d:e2:62:76:cd:ff:b4:9b:
                    cb:e3:44:0d:3b:7c:63:2e:57:f7:e7:74:77:bd:7c:
                    d4:94:fd:f9:72:27:f5:aa:94:ac:74:d8:81:f0:fd:
                    2c:2f:c8:f6:a4:35:4f:68:3a:0d:ad:bd:bc:57:4c:
                    ba:5d:d6:3f:7b:c2:ba:3f:b5:dc:54:72:d3:e7:94:
                    ad:ad:1b:c4:9f:cc:f7:ec:bf:74:9f:88:c8:06:1b:
                    fe:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:50:76:EB:4C:E7:BB:05:E4:7F:1D:98:48:79:2D:A8:C7:58:9D:1C
            X509v3 Authority Key Identifier:
                keyid:68:77:26:D3:8F:CF:2A:7F:BB:B7:BF:C2:8D:63:FE:35:79:ED:21:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHcm04_PKn-7t7_CjWP-NXntIR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e71e27-c687-4fd7-8180-4b2da197a7e6/1/aHcm04_PKn-7t7_CjWP-NXntIR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1a:c9:25:bf:0a:53:45:03:7a:a4:a4:98:4f:ba:c1:b4:96:
         af:ea:7b:40:f8:a2:6f:5f:bb:bb:fb:e5:11:c5:7e:e5:c4:60:
         47:00:f1:3d:25:98:c7:13:6b:20:b7:47:2e:f4:5e:6d:3f:f9:
         23:b4:21:a1:d9:4c:a1:38:e1:72:0a:44:36:2e:a3:51:58:f0:
         43:99:2b:c0:10:f0:8b:66:8c:1c:f0:36:80:66:62:c4:f4:c1:
         67:10:91:f1:67:bf:e9:b5:9b:b9:1c:28:0a:ba:1d:4c:fc:2b:
         43:0b:30:57:c5:4f:62:2e:b2:ee:6c:e2:04:e6:ee:2f:c2:08:
         f5:e2:96:87:23:36:ed:5d:c7:6f:07:c2:99:98:25:3a:3a:b0:
         7d:0f:8b:31:2f:4f:a6:dc:2f:45:97:33:98:64:80:d4:74:d6:
         21:6e:52:29:66:54:bc:b5:7f:41:30:e0:8b:1e:03:63:51:a2:
         15:37:bb:f1:49:ea:bd:58:ce:99:14:02:fa:16:7a:6e:bf:22:
         e1:5d:08:c9:a8:cf:e0:64:5e:db:4a:4b:bb:48:4a:da:11:89:
         bd:11:7d:91:c7:a3:84:0a:1e:f3:fa:be:f6:da:b5:30:72:b6:
         c5:de:d8:bc:e4:6b:1c:a0:bd:c4:6b:f3:69:33:df:5d:f6:45:
         17:fb:aa:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+4Neello+f5097jp289cdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NzcyNmQzOGZjZjJhN2ZiYmI3YmZjMjhkNjNmZTM1Nzll
ZDIxMWQwHhcNMjQwNTI3MDQwMTMxWhcNMjQwNTI4MDQwMTMxWjAzMTEwLwYDVQQD
Eyg3ZTUwNzZlYjRjZTdiYjA1ZTQ3ZjFkOTg0ODc5MmRhOGM3NTg5ZDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDOnr5ca/kdpgCZNPD1/haQHjD5i
5OheoH/OPg3uoXOPjwpmtKyfKjPoOcyDgMARGpMjiN3OLSWTFnYmrkxHpFOsGuUa
sIrITJk0PAomciVPMybua8kL+McrtrNtZwpc6xhNfNsI3X61oXMYkfrI3vAMLDiq
glY5mZ5QPUMt7E6WfN8O8C7951WDQ2zpGR0+6XExks1xpPb+6Ljkl0xFJokdHB2k
spHC5e15LeJids3/tJvL40QNO3xjLlf353R3vXzUlP35cif1qpSsdNiB8P0sL8j2
pDVPaDoNrb28V0y6XdY/e8K6P7XcVHLT55StrRvEn8z37L90n4jIBhv++QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5QdutM57sF5H8dmEh5LajHWJ0cMB8GA1UdIwQY
MBaAFGh3JtOPzyp/u7e/wo1j/jV57SEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAt
NGIyZGExOTdhN2U2LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lNzFlMjctYzY4Ny00ZmQ3LTgxODAtNGIyZGExOTdhN2U2
LzEvYUhjbTA0X1BLbi03dDdfQ2pXUC1OWG50SVIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxrJJb8K
U0UDeqSkmE+6wbSWr+p7QPiib1+7u/vlEcV+5cRgRwDxPSWYxxNrILdHLvRebT/5
I7QhodlMoTjhcgpENi6jUVjwQ5krwBDwi2aMHPA2gGZixPTBZxCR8We/6bWbuRwo
CrodTPwrQwswV8VPYi6y7mziBObuL8II9eKWhyM27V3HbwfCmZglOjqwfQ+LMS9P
ptwvRZczmGSA1HTWIW5SKWZUvLV/QTDgix4DY1GiFTe78UnqvVjOmRQC+hZ6br8i
4V0IyajP4GRe20pLu0hK2hGJvRF9kcejhAoe8/q+9tq1MHK2xd7YvORrHKC9xGvz
aTPfXfZFF/uq0A==
-----END CERTIFICATE-----