Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File:                     O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier:          9QOtlLUChjIkqw4MOQ3UH4nfdJmLvl35n9tEjzjfkpU=
Subject key identifier:   E5:EA:64:CD:9D:1E:55:CA:48:E9:42:29:34:3B:8F:93:1D:93:5E:B1
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer:       /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial:       01903B87BF6327EFD82427D7F6FE501DA2B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number:          0C0F
Signing time:             Fri 21 Jun 2024 16:01:10 +0000
Manifest this update:     Fri 21 Jun 2024 16:01:10 +0000
Manifest next update:     Sat 22 Jun 2024 16:01:10 +0000
Files and hashes:         1: Cszu9YwOA2k29SdB4TKWnltcP8c.roa (hash: QxzW9Z6K7yz49mSQYfp5LimBgxsKWqxFHyCeIDC9XzM=)
                          2: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: QTvW6MO0V+1KNgQNdb9OuZQ7yIY9Xg/tqtDDIrn2bAI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 13:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3b:87:bf:63:27:ef:d8:24:27:d7:f6:fe:50:1d:a2:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
        Validity
            Not Before: Jun 21 16:01:10 2024 GMT
            Not After : Jun 22 16:01:10 2024 GMT
        Subject: CN=e5ea64cd9d1e55ca48e94229343b8f931d935eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:4f:32:41:90:d2:a4:27:62:20:b7:e5:67:
                    42:24:f7:bb:2e:a4:fa:3f:da:7a:f2:24:01:f1:44:
                    28:57:ee:69:62:19:c5:01:96:79:b2:5e:56:53:be:
                    c6:3b:9b:e4:df:94:20:f8:a6:17:d1:d6:01:11:7e:
                    2f:a1:5a:0d:8d:27:f8:2d:f5:19:41:8a:7a:97:75:
                    98:19:b1:68:72:c1:1f:87:20:4e:05:53:f5:47:1f:
                    3e:e9:79:05:e9:7c:6f:14:1e:f5:2a:6e:58:29:33:
                    a7:1a:73:e7:53:29:11:3d:56:eb:9e:44:de:84:54:
                    1a:06:ac:c7:06:f4:a0:f7:59:55:a2:5f:38:18:a7:
                    dc:12:6c:1e:39:c5:8d:59:d7:32:1a:4d:de:1e:76:
                    31:b1:05:e2:5a:2b:b1:0b:b0:76:6d:13:0d:4d:1c:
                    60:c8:27:27:cb:b4:f3:31:43:5d:e6:52:83:95:93:
                    3f:fd:35:66:cf:77:e7:76:e0:ce:b0:e2:95:ce:52:
                    3b:bb:02:84:0b:ec:06:a4:21:36:35:97:52:35:ce:
                    de:61:d6:41:38:a8:f3:83:fa:fc:06:3e:7a:37:41:
                    8e:8f:2a:e2:d5:dc:76:2a:c8:22:b7:ed:47:5f:5d:
                    b3:20:39:af:79:1d:15:3a:80:e6:de:9a:0a:73:64:
                    51:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EA:64:CD:9D:1E:55:CA:48:E9:42:29:34:3B:8F:93:1D:93:5E:B1
            X509v3 Authority Key Identifier:
                keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:49:8f:46:36:e9:19:21:eb:ac:0f:0b:51:2c:4e:09:9f:89:
         76:ee:4c:71:c0:2d:87:d8:24:78:12:52:c9:89:c9:f9:04:de:
         c1:74:ca:80:bc:b6:45:56:1c:45:a9:9f:88:f1:70:90:22:a8:
         99:91:0c:58:4c:8f:53:82:fe:8f:64:c9:25:74:fd:f7:a7:86:
         64:15:5a:94:e8:d0:42:f4:89:f0:55:17:4f:a0:82:98:32:ed:
         10:75:32:7a:26:b3:2a:c2:95:5c:f5:82:a9:f2:4d:77:da:d7:
         8a:29:38:92:b5:a1:57:75:c4:da:1d:83:ad:08:4d:74:2a:b6:
         2f:67:7b:2a:e0:fd:1d:3e:71:94:de:8b:e1:ea:bf:07:84:df:
         10:77:38:3d:94:ca:5f:91:77:20:50:95:c7:f8:a0:4f:8d:f2:
         16:25:a1:bb:05:b5:c5:f1:2a:b2:d1:2b:bf:d6:bd:8a:e9:dc:
         97:08:cc:92:c7:80:4e:af:fe:ff:4f:00:4d:14:d5:d3:8c:85:
         13:aa:32:bb:57:2d:91:d5:87:ca:f3:ad:b5:85:a4:33:12:bd:
         fb:a5:79:6f:af:48:84:b7:11:12:dd:c7:e9:6c:52:b7:c3:60:
         bb:06:6f:fa:1c:5f:78:79:b3:8f:3d:61:36:b0:d0:60:c5:e4:
         7e:43:b7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZA7h79jJ+/YJCfX9v5QHaKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDU0M2QwNDY1ZWEyZjZmZWI4MjhmMTg1MDRiMDNmNDAz
YWM2NjkwHhcNMjQwNjIxMTYwMTEwWhcNMjQwNjIyMTYwMTEwWjAzMTEwLwYDVQQD
EyhlNWVhNjRjZDlkMWU1NWNhNDhlOTQyMjkzNDNiOGY5MzFkOTM1ZWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJdPMkGQ0qQnYiC35WdCJPe7LqT6
P9p68iQB8UQoV+5pYhnFAZZ5sl5WU77GO5vk35Qg+KYX0dYBEX4voVoNjSf4LfUZ
QYp6l3WYGbFocsEfhyBOBVP1Rx8+6XkF6XxvFB71Km5YKTOnGnPnUykRPVbrnkTe
hFQaBqzHBvSg91lVol84GKfcEmweOcWNWdcyGk3eHnYxsQXiWiuxC7B2bRMNTRxg
yCcny7TzMUNd5lKDlZM//TVmz3fnduDOsOKVzlI7uwKEC+wGpCE2NZdSNc7eYdZB
OKjzg/r8Bj56N0GOjyri1dx2Ksgit+1HX12zIDmveR0VOoDm3poKc2RRkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXqZM2dHlXKSOlCKTQ7j5Mdk16xMB8GA1UdIwQY
MBaAFDvVQ9BGXqL2/rgo8YUEsD9AOsZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmIt
ZGY0NTA1NGRkOTM0LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83OGZlYTktZWZhYy00OTgzLWFjMmItZGY0NTA1NGRkOTM0
LzEvTzlWRDBFWmVvdmItdUNqeGhRU3dQMEE2eG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUmPRjbp
GSHrrA8LUSxOCZ+Jdu5MccAth9gkeBJSyYnJ+QTewXTKgLy2RVYcRamfiPFwkCKo
mZEMWEyPU4L+j2TJJXT996eGZBValOjQQvSJ8FUXT6CCmDLtEHUyeiazKsKVXPWC
qfJNd9rXiik4krWhV3XE2h2DrQhNdCq2L2d7KuD9HT5xlN6L4eq/B4TfEHc4PZTK
X5F3IFCVx/igT43yFiWhuwW1xfEqstErv9a9iunclwjMkseATq/+/08ATRTV04yF
E6oyu1ctkdWHyvOttYWkMxK9+6V5b69IhLcREt3H6WxSt8NguwZv+hxfeHmzjz1h
NrDQYMXkfkO3NA==
-----END CERTIFICATE-----