Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File:                     AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier:          hwlRt5ZVDEqPA4wQa62qrHbT9VIIsI/ZvLZvu1B2v9c=
Subject key identifier:   56:F9:1A:A6:42:B1:31:1E:A5:6B:98:F8:70:01:CD:D0:15:2F:CD:F3
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer:       /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial:       018FB790D49FAA4B3FAEDFFD399F9F8B98B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number:          04C3
Signing time:             Mon 27 May 2024 01:01:13 +0000
Manifest this update:     Mon 27 May 2024 01:01:13 +0000
Manifest next update:     Tue 28 May 2024 01:01:13 +0000
Files and hashes:         1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: ALf9J8RsxQC364MiK2RcP/Sreogf0LZtOIS5fQNI8hE=)
                          2: J1kFIiq0kqfgKh2Y8cf9Ru_vR1M.roa (hash: s8/4S6frVwd48pOV9mz4LYTZ3oP05UkLdfAmbnCM66Q=)
                          3: TR9Y8O6wUuYOkPBdRPs3ThewENs.roa (hash: 927gl/P5bMlZ+0yPBPh+Mj9eqGwC74x56ViwchQCB8M=)
                          4: _fHcdXZ-C8LmPe8AVxORvaYJSro.roa (hash: aMO7+ZDHkKQMFj6B/gZfNBK3afl7zCitfjMxrgvjewo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b7:90:d4:9f:aa:4b:3f:ae:df:fd:39:9f:9f:8b:98:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
        Validity
            Not Before: May 27 01:01:13 2024 GMT
            Not After : May 28 01:01:13 2024 GMT
        Subject: CN=56f91aa642b1311ea56b98f87001cdd0152fcdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:fb:55:bb:ed:f6:c1:50:1b:f8:32:35:0e:
                    f2:28:b2:ae:c3:f0:89:37:25:35:34:01:19:a6:84:
                    f2:e8:80:6f:d5:20:11:4a:1c:48:57:2c:10:4b:a5:
                    f0:ff:8b:0a:e9:f8:9b:fa:6e:7a:e4:a3:3c:5e:a0:
                    59:b3:9a:42:c1:85:95:8f:f7:09:a2:5a:6e:7b:2b:
                    d1:9c:fd:be:5a:f2:74:f7:a3:41:ab:fa:56:d7:a5:
                    83:a2:1c:d1:62:1b:2c:ed:57:70:64:d1:28:ca:0e:
                    7b:98:72:32:aa:6d:47:15:94:3d:28:0e:a7:07:84:
                    42:af:f1:75:59:1c:ce:6f:0b:28:7b:f5:c8:9c:39:
                    5c:84:45:29:5f:e4:03:35:60:62:2b:31:21:1a:57:
                    86:ed:4d:61:02:dc:1d:dd:53:b9:cc:b4:4b:a0:39:
                    74:b4:8b:ad:cb:79:8c:44:d1:04:29:bb:f0:43:87:
                    68:1b:64:72:ee:28:fa:02:49:55:39:bd:41:1f:73:
                    dd:4a:5b:4a:84:9c:e4:22:9c:d5:44:0a:98:7c:1e:
                    35:ce:68:e5:11:f1:01:2b:e2:ab:77:f7:1e:6c:6d:
                    50:4d:f0:eb:82:0c:52:c8:9e:78:84:d4:9f:e2:24:
                    a8:c2:f2:40:fd:61:d4:65:53:d0:cc:07:4c:4b:99:
                    d0:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F9:1A:A6:42:B1:31:1E:A5:6B:98:F8:70:01:CD:D0:15:2F:CD:F3
            X509v3 Authority Key Identifier:
                keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7d:e6:c1:40:b8:2e:9e:f5:bb:3d:84:34:bf:2d:a4:6b:62:
         e6:b0:27:41:31:6b:2f:1f:a3:42:6a:fc:4a:de:34:03:74:14:
         d0:73:f3:8a:a2:c3:dd:d5:7c:0a:0c:03:43:53:15:c1:fd:cf:
         7e:c3:d0:4b:ea:55:fe:ed:7e:2b:bf:0a:07:03:eb:b9:71:7e:
         3d:e5:b8:69:aa:04:4b:6e:0d:22:a3:1b:b4:29:9f:5f:6a:ef:
         93:0d:93:8e:0a:dc:b2:af:6a:2d:8e:cc:f6:d2:10:97:3e:58:
         bb:36:f6:c1:07:97:bb:d5:16:a4:cf:08:93:fd:99:de:d6:01:
         c2:bd:f1:6c:f6:76:4d:8a:d4:27:16:03:65:b6:6f:b6:3d:c7:
         5a:67:83:63:82:77:97:36:00:e9:b5:49:31:12:e7:dd:b4:e4:
         f1:c9:df:91:2c:5e:04:b6:a8:df:6f:c2:dd:24:03:d2:a4:b5:
         97:a7:60:3d:7a:d6:51:a8:16:f7:f1:8e:09:1d:fa:ea:42:1e:
         0d:87:b7:cb:f9:07:a0:58:3c:92:ea:38:53:c7:ed:da:25:62:
         50:91:72:68:e9:37:f1:52:73:2a:1b:6c:ad:e5:b7:4e:6e:9e:
         05:f0:94:62:a0:4d:ac:a1:f7:ad:bd:68:36:42:31:89:ac:99:
         42:13:82:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+3kNSfqks/rt/9OZ+fi5i0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNmIwNmI1ZDBmZjEwMDBlMTBjNDI3NmVlYTA4ODBhZjIw
OWQ3YTIwHhcNMjQwNTI3MDEwMTEzWhcNMjQwNTI4MDEwMTEzWjAzMTEwLwYDVQQD
Eyg1NmY5MWFhNjQyYjEzMTFlYTU2Yjk4Zjg3MDAxY2RkMDE1MmZjZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS77Vbvt9sFQG/gyNQ7yKLKuw/CJ
NyU1NAEZpoTy6IBv1SARShxIVywQS6Xw/4sK6fib+m565KM8XqBZs5pCwYWVj/cJ
olpueyvRnP2+WvJ096NBq/pW16WDohzRYhss7VdwZNEoyg57mHIyqm1HFZQ9KA6n
B4RCr/F1WRzObwsoe/XInDlchEUpX+QDNWBiKzEhGleG7U1hAtwd3VO5zLRLoDl0
tIuty3mMRNEEKbvwQ4doG2Ry7ij6AklVOb1BH3PdSltKhJzkIpzVRAqYfB41zmjl
EfEBK+Krd/cebG1QTfDrggxSyJ54hNSf4iSowvJA/WHUZVPQzAdMS5nQ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFb5GqZCsTEepWuY+HABzdAVL83zMB8GA1UdIwQY
MBaAFABrBrXQ/xAA4QxCdu6giAryCdeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQt
NTdjOTU1YzljODVkLzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80NzM3YzktZTI2My00NGU3LThmZWQtNTdjOTU1YzljODVk
LzEvQUdzR3RkRF9FQURoREVKMjdxQ0lDdklKMTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABX3mwUC4
Lp71uz2ENL8tpGti5rAnQTFrLx+jQmr8St40A3QU0HPziqLD3dV8CgwDQ1MVwf3P
fsPQS+pV/u1+K78KBwPruXF+PeW4aaoES24NIqMbtCmfX2rvkw2Tjgrcsq9qLY7M
9tIQlz5Yuzb2wQeXu9UWpM8Ik/2Z3tYBwr3xbPZ2TYrUJxYDZbZvtj3HWmeDY4J3
lzYA6bVJMRLn3bTk8cnfkSxeBLao32/C3SQD0qS1l6dgPXrWUagW9/GOCR366kIe
DYe3y/kHoFg8kuo4U8ft2iViUJFyaOk38VJzKhtsreW3Tm6eBfCUYqBNrKH3rb1o
NkIxiayZQhOCUg==
-----END CERTIFICATE-----