Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File:                     b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier:          mDPyUr2pPDMOj9zF8TN0vCUmZ8Mv2/ZvKInyxaSqhK0=
Subject key identifier:   DA:55:01:4B:A3:8F:D5:9E:C2:8B:53:E5:C0:2D:06:D7:4C:C9:39:D4
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer:       /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial:       01901CD8B48773F620008AAAA2A2B61DDEF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 17:01:22 +0000
Manifest this update:     Sat 15 Jun 2024 17:01:22 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:22 +0000
Files and hashes:         1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: ZwxayBKnNqIINnejU0Mi4eeZGHRo2EhzbUJU6T42X6Y=)
                          2: uUWSm5VxIwXwseXJJkBBLZ0GkMw.roa (hash: FkccSqUaO8smuB5t646UhJjUwLBCtf8lDYPB4qzL2b0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:d8:b4:87:73:f6:20:00:8a:aa:a2:a2:b6:1d:de:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
        Validity
            Not Before: Jun 15 17:01:22 2024 GMT
            Not After : Jun 16 17:01:22 2024 GMT
        Subject: CN=da55014ba38fd59ec28b53e5c02d06d74cc939d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:51:10:e3:df:16:28:f8:a3:7d:bc:ee:d1:bf:
                    69:78:a7:2a:e1:ed:44:1c:9a:39:a2:28:fd:59:24:
                    cf:69:d8:96:1e:a2:0a:24:78:0c:2e:d8:7a:bb:80:
                    61:ca:4b:e1:f1:05:24:29:dd:42:5a:c1:c3:d5:8c:
                    94:47:7c:42:56:9c:09:b3:47:04:17:e4:e4:b3:e0:
                    c8:ca:0e:42:32:7b:48:62:5d:01:2e:7d:8c:52:c2:
                    ec:b8:cd:9b:9f:93:eb:d9:13:e6:9e:06:96:45:5f:
                    34:ac:18:f9:84:5e:24:49:ee:c9:ae:23:ba:a2:a3:
                    ca:e8:9e:33:a3:5f:ec:70:20:70:77:28:ed:ab:a6:
                    fb:e0:44:fc:aa:34:9c:c2:68:81:9e:1a:69:bb:2f:
                    2c:3f:d2:f5:e8:68:2a:b3:7a:42:14:a1:e5:bc:da:
                    6d:78:c5:cd:5d:e6:c5:0a:12:3c:05:ad:e0:be:d6:
                    03:46:d8:7f:5f:9d:0e:2a:07:5d:0d:1a:24:fe:a9:
                    72:bb:36:67:cf:00:01:d0:40:61:6a:c6:97:71:63:
                    3a:a4:27:fb:00:43:05:e2:fb:82:06:b8:c8:ba:9c:
                    00:41:9b:d6:e1:69:db:c9:65:52:e9:b5:52:9d:f4:
                    1f:a3:d4:26:e3:38:29:28:41:7e:34:c3:e0:a4:eb:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:55:01:4B:A3:8F:D5:9E:C2:8B:53:E5:C0:2D:06:D7:4C:C9:39:D4
            X509v3 Authority Key Identifier:
                keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6a:01:37:f1:4b:e3:a7:8c:db:f6:e8:69:6f:b4:8c:7c:de:
         fa:9f:12:42:63:a6:dc:db:d6:26:3f:5e:4e:d3:58:13:4b:18:
         82:98:52:25:85:9a:1c:1d:d8:56:b1:29:7a:13:1f:f7:85:3a:
         a0:50:ce:d1:14:6f:04:6a:8d:60:d7:3d:ac:8d:c2:1c:ad:02:
         04:e8:3a:10:02:57:18:9c:9c:1f:a4:65:97:10:f4:8a:99:4c:
         aa:b9:cb:33:e7:e6:30:f5:ca:fd:c1:c0:69:04:d0:2d:20:82:
         fa:60:21:a1:7e:f7:92:f0:43:53:65:2d:c3:1e:0c:48:9e:6e:
         0c:6c:98:69:9d:cc:b1:57:37:07:fd:0b:e9:21:22:12:5c:cb:
         68:3c:b9:8c:23:6d:2d:ab:38:53:70:41:f4:5d:85:c0:10:b3:
         f3:b3:e4:59:ef:e6:fc:48:85:f8:2f:c9:60:8c:86:68:d3:cf:
         f4:5d:31:95:f0:4d:05:52:60:72:05:9f:20:97:db:5c:eb:19:
         56:4a:65:e9:5d:0a:aa:31:43:ae:39:e9:78:a4:0a:fb:91:76:
         79:58:83:28:c3:5e:e2:70:9c:f4:e6:81:64:32:72:44:d0:6b:
         8f:10:7d:a2:3b:3f:09:d3:03:26:3e:d4:72:2a:a2:2c:1a:d7:
         a1:46:58:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAc2LSHc/YgAIqqoqK2Hd72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYWQ2YTcxZGVmZTU2MGEwZTVjMjFmZmJiNDAzOGZiNDEw
OTEyOTUwHhcNMjQwNjE1MTcwMTIyWhcNMjQwNjE2MTcwMTIyWjAzMTEwLwYDVQQD
EyhkYTU1MDE0YmEzOGZkNTllYzI4YjUzZTVjMDJkMDZkNzRjYzkzOWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFEQ498WKPijfbzu0b9peKcq4e1E
HJo5oij9WSTPadiWHqIKJHgMLth6u4Bhykvh8QUkKd1CWsHD1YyUR3xCVpwJs0cE
F+Tks+DIyg5CMntIYl0BLn2MUsLsuM2bn5Pr2RPmngaWRV80rBj5hF4kSe7JriO6
oqPK6J4zo1/scCBwdyjtq6b74ET8qjScwmiBnhppuy8sP9L16Ggqs3pCFKHlvNpt
eMXNXebFChI8Ba3gvtYDRth/X50OKgddDRok/qlyuzZnzwAB0EBhasaXcWM6pCf7
AEMF4vuCBrjIupwAQZvW4WnbyWVS6bVSnfQfo9Qm4zgpKEF+NMPgpOvF+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpVAUujj9WewotT5cAtBtdMyTnUMB8GA1UdIwQY
MBaAFG+tanHe/lYKDlwh/7tAOPtBCRKVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDct
OGNiNGUyNTNmMTc1LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8yOTM2OTgtOTQ5ZC00NjY1LWJhMDctOGNiNGUyNTNmMTc1
LzEvYjYxcWNkNy1WZ29PWENIX3UwQTQtMEVKRXBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmoBN/FL
46eM2/boaW+0jHze+p8SQmOm3NvWJj9eTtNYE0sYgphSJYWaHB3YVrEpehMf94U6
oFDO0RRvBGqNYNc9rI3CHK0CBOg6EAJXGJycH6RllxD0iplMqrnLM+fmMPXK/cHA
aQTQLSCC+mAhoX73kvBDU2Utwx4MSJ5uDGyYaZ3MsVc3B/0L6SEiElzLaDy5jCNt
Las4U3BB9F2FwBCz87PkWe/m/EiF+C/JYIyGaNPP9F0xlfBNBVJgcgWfIJfbXOsZ
Vkpl6V0KqjFDrjnpeKQK+5F2eViDKMNe4nCc9OaBZDJyRNBrjxB9ojs/CdMDJj7U
ciqiLBrXoUZYwQ==
-----END CERTIFICATE-----