Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
File:                     LubVYKCKAT8_4OZtra9v0Cvq9D8.mft (raw, json)
Hash identifier:          v4xFz9XL0hLychcXT30v5knYpTbw5GO3zXZvpMOdjwU=
Subject key identifier:   40:31:32:24:44:98:A3:75:6E:15:E4:7D:03:83:87:3E:12:7A:4C:0D
Authority key identifier: 2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F
Certificate issuer:       /CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
Certificate serial:       01901D46A033F33AD1FB2566E35A414982F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
Manifest number:          11F7
Signing time:             Sat 15 Jun 2024 19:01:26 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:26 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:26 +0000
Files and hashes:         1: 8J4iOMMcJPfSkbMZKZUBEG7_ci8.roa (hash: BfpetzQagcd/YjYwV9JTPUZAg/uLbpBO9aIjUBzUYBM=)
                          2: 9-nb0qgUC5YkY5o3QAFJOjsu7QI.roa (hash: tWL5MlI2q0NK+huIj0ZbQVRn8fH5NaIoesc18kgFtVg=)
                          3: KekzUhfBQYFQZGcRuWebr8cRetc.roa (hash: RgHufRNf1yYjeGH+qNgQ32WSCe5JjAusvJl+PWgZIq0=)
                          4: LubVYKCKAT8_4OZtra9v0Cvq9D8.crl (hash: qV4HDOiD4Bx6hfLZV/XzHUkVODftqjdFEwHn0LYXGqU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:a0:33:f3:3a:d1:fb:25:66:e3:5a:41:49:82:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee6d560a08a013f3fe0e66dadaf6fd02beaf43f
        Validity
            Not Before: Jun 15 19:01:26 2024 GMT
            Not After : Jun 16 19:01:26 2024 GMT
        Subject: CN=403132244498a3756e15e47d0383873e127a4c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:c3:e7:99:ca:8e:3f:29:64:4c:6b:1d:40:
                    31:99:5c:29:e8:37:8c:ef:fd:a8:bb:a2:86:66:e4:
                    26:88:86:71:d6:0c:72:25:f0:19:3e:ee:1a:81:e0:
                    38:6d:8a:b1:03:8e:23:8f:14:62:65:58:9c:74:d2:
                    a9:31:ea:b8:87:80:cc:b3:fe:75:48:c9:f9:37:fc:
                    6f:77:51:19:c1:11:10:c8:c4:9d:12:42:38:5a:81:
                    e1:64:e1:27:c2:35:ff:7f:71:90:31:1c:fd:5f:de:
                    ef:42:f8:57:dd:84:92:13:00:1d:b5:60:f4:cb:5f:
                    d9:04:79:83:73:10:e6:e8:bd:f2:11:3d:95:ff:22:
                    23:ed:0e:31:c4:ff:f8:0d:44:13:6a:23:fb:da:5f:
                    a0:85:e3:ec:1c:87:af:9a:37:1e:5f:f1:17:b0:0e:
                    a4:a8:cc:da:86:90:b7:34:12:42:69:c1:76:ac:92:
                    bc:75:25:24:ca:ef:df:84:39:1b:55:fa:c8:94:9c:
                    9c:17:c9:16:b9:e3:5d:60:91:cf:2f:5a:c4:b4:0b:
                    71:11:22:5b:d3:d8:3e:7d:0e:76:db:38:78:2f:9b:
                    39:31:4e:5c:79:80:63:ef:56:6a:34:2c:1c:14:99:
                    c0:f8:5d:e1:96:1f:fa:01:ca:65:70:43:0d:dd:b4:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:31:32:24:44:98:A3:75:6E:15:E4:7D:03:83:87:3E:12:7A:4C:0D
            X509v3 Authority Key Identifier:
                keyid:2E:E6:D5:60:A0:8A:01:3F:3F:E0:E6:6D:AD:AF:6F:D0:2B:EA:F4:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LubVYKCKAT8_4OZtra9v0Cvq9D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c00a5b-6a59-41dd-b13b-73495fc08fc4/1/LubVYKCKAT8_4OZtra9v0Cvq9D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:42:ed:2a:c8:5d:ca:4c:e7:3b:ca:65:db:97:6f:3e:1d:9e:
         c9:2f:af:49:58:f7:75:ca:62:2f:d8:fa:05:9e:8e:ea:a2:f9:
         07:62:ca:47:c3:4f:b9:ed:ed:9f:15:10:ed:1e:83:96:47:60:
         3f:67:13:85:7a:61:ba:26:12:36:e3:62:2a:ae:0f:7f:f3:9b:
         ed:74:ef:d3:75:4c:7e:18:b7:2b:ba:99:23:bf:80:1b:0a:af:
         a2:0c:cd:3c:17:15:9e:5e:dc:97:22:18:05:81:a6:33:f9:36:
         04:b9:d9:df:97:bf:ed:16:b7:e3:f4:6a:35:c5:3b:9d:af:7d:
         01:6d:82:9e:61:97:30:02:8c:b4:55:bf:aa:8c:a3:c7:c9:c7:
         66:76:c5:0b:a4:c0:f6:00:35:33:1e:b0:33:86:0a:9f:af:02:
         e4:6c:28:4b:58:7c:62:a9:17:7a:f2:9b:73:0c:b3:6d:f8:8f:
         ed:7b:68:ba:eb:1c:6e:8e:c2:b2:66:93:dc:f7:45:60:00:f3:
         81:07:e1:27:dd:f5:83:fe:06:7c:af:36:93:2f:63:31:fc:c0:
         60:a9:d7:bd:1c:6d:1d:d4:c2:e6:1d:f0:14:0e:3e:00:cb:17:
         f5:0f:5b:ba:92:0a:d9:4c:f6:f6:ac:ed:8c:01:80:4d:a8:3e:
         16:72:e1:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRqAz8zrR+yVm41pBSYL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTZkNTYwYTA4YTAxM2YzZmUwZTY2ZGFkYWY2ZmQwMmJl
YWY0M2YwHhcNMjQwNjE1MTkwMTI2WhcNMjQwNjE2MTkwMTI2WjAzMTEwLwYDVQQD
Eyg0MDMxMzIyNDQ0OThhMzc1NmUxNWU0N2QwMzgzODczZTEyN2E0YzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVfD55nKjj8pZExrHUAxmVwp6DeM
7/2ou6KGZuQmiIZx1gxyJfAZPu4ageA4bYqxA44jjxRiZVicdNKpMeq4h4DMs/51
SMn5N/xvd1EZwREQyMSdEkI4WoHhZOEnwjX/f3GQMRz9X97vQvhX3YSSEwAdtWD0
y1/ZBHmDcxDm6L3yET2V/yIj7Q4xxP/4DUQTaiP72l+ghePsHIevmjceX/EXsA6k
qMzahpC3NBJCacF2rJK8dSUkyu/fhDkbVfrIlJycF8kWueNdYJHPL1rEtAtxESJb
09g+fQ522zh4L5s5MU5ceYBj71ZqNCwcFJnA+F3hlh/6AcplcEMN3bSicwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAxMiREmKN1bhXkfQODhz4SekwNMB8GA1UdIwQY
MBaAFC7m1WCgigE/P+Dmba2vb9Ar6vQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2It
NzM0OTVmYzA4ZmM0LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jMDBhNWItNmE1OS00MWRkLWIxM2ItNzM0OTVmYzA4ZmM0
LzEvTHViVllLQ0tBVDhfNE9adHJhOXYwQ3ZxOUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0LtKshd
ykznO8pl25dvPh2eyS+vSVj3dcpiL9j6BZ6O6qL5B2LKR8NPue3tnxUQ7R6Dlkdg
P2cThXphuiYSNuNiKq4Pf/Ob7XTv03VMfhi3K7qZI7+AGwqvogzNPBcVnl7clyIY
BYGmM/k2BLnZ35e/7Ra34/RqNcU7na99AW2CnmGXMAKMtFW/qoyjx8nHZnbFC6TA
9gA1Mx6wM4YKn68C5GwoS1h8YqkXevKbcwyzbfiP7Xtouuscbo7CsmaT3PdFYADz
gQfhJ931g/4GfK82ky9jMfzAYKnXvRxtHdTC5h3wFA4+AMsX9Q9bupIK2Uz29qzt
jAGATag+FnLhqg==
-----END CERTIFICATE-----