Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
File:                     dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json)
Hash identifier:          v5RALPl1ki2JQpuJl3R/olGcwm2B1yghbWfc9MZugU8=
Subject key identifier:   6F:F1:F6:94:1F:7D:69:93:92:A0:C1:03:48:7F:9A:80:0B:C3:E7:FF
Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84
Certificate issuer:       /CN=75905949e963d3577be076326ca0b91ff32f9684
Certificate serial:       018FB86CB8926EE8FB8F856636EDBD382D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
Manifest number:          02B5
Signing time:             Mon 27 May 2024 05:01:23 +0000
Manifest this update:     Mon 27 May 2024 05:01:23 +0000
Manifest next update:     Tue 28 May 2024 05:01:23 +0000
Files and hashes:         1: 1-MXZ_45rZqW8fbOEu3pAjmwnybU.roa (hash: D5V72LUbLlKACmoXF1YZz0Xb4llwr5TLbmDCXFhcPkY=)
                          2: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: 9woseALIx+ENhJF2Edwp7b3Q94AdernMxYkfcGA7Eyg=)
                          3: zqTbCR8XSG40tQD9X_vCC8OpRFw.roa (hash: 7nGfGNlVvXQd8XrB1CoaI8RSIawe6UmLoglhMQdgYl8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 May 2024 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b8:6c:b8:92:6e:e8:fb:8f:85:66:36:ed:bd:38:2d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684
        Validity
            Not Before: May 27 05:01:23 2024 GMT
            Not After : May 28 05:01:23 2024 GMT
        Subject: CN=6ff1f6941f7d699392a0c103487f9a800bc3e7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:63:88:e2:fe:0c:a6:00:29:da:8e:44:3e:
                    8b:55:01:28:11:a9:a7:e2:03:99:f0:68:4f:ea:32:
                    38:f4:d3:b5:36:0f:56:14:69:de:63:dd:6a:f9:fb:
                    c4:d8:c9:ed:ed:a7:61:ad:ff:e0:fb:a4:2d:ca:d8:
                    10:5c:8d:eb:42:3d:80:a8:ef:d7:f6:b6:de:5e:7d:
                    d1:b3:63:1f:c0:5c:d3:e2:fa:d2:36:cb:a3:62:fe:
                    b8:91:79:13:70:94:a7:6f:23:de:7d:1e:c3:11:8b:
                    13:1a:ce:d4:7a:5f:b4:3e:ef:44:b9:b3:fa:2f:66:
                    88:13:2e:a1:00:84:13:d0:48:2a:a4:9f:ca:d8:a3:
                    ba:bb:d5:5e:75:55:c9:97:47:24:a7:e9:a7:65:bf:
                    2c:b4:de:bc:5b:ff:82:79:86:9b:1b:27:23:8a:8f:
                    08:fc:0e:c8:87:1c:00:d2:75:85:4c:63:42:e1:7d:
                    cd:32:3c:3c:6a:dd:5c:88:25:09:11:39:6c:c5:a4:
                    94:6c:d8:ac:3a:9e:80:46:fc:f7:99:92:98:2e:4d:
                    63:a8:75:f8:4f:d4:c3:87:f3:8c:5d:34:8a:54:6c:
                    72:91:05:d8:3c:0b:98:e1:84:27:31:04:f4:76:69:
                    a5:27:27:2c:33:08:0a:0e:7a:5d:3d:04:04:5f:7e:
                    68:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F1:F6:94:1F:7D:69:93:92:A0:C1:03:48:7F:9A:80:0B:C3:E7:FF
            X509v3 Authority Key Identifier:
                keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:98:01:49:8d:c6:81:a7:c1:5a:90:fc:58:2e:31:8b:99:95:
         77:0e:a0:13:1e:17:92:24:05:17:e3:10:5d:01:37:22:91:f2:
         fa:6c:55:e3:3b:3e:88:d7:17:5a:b9:34:d7:97:cc:2f:13:88:
         cd:12:af:19:43:53:33:1d:ed:15:be:fa:01:6d:84:79:ae:c5:
         ee:05:a1:2f:46:e1:5c:c0:45:2b:ea:54:73:0e:bd:6c:04:8c:
         25:fd:d9:bd:ca:9c:11:7d:ff:7b:fc:b1:11:f6:f6:7d:ef:24:
         58:e8:ed:13:81:cd:06:64:97:59:8c:b7:32:74:99:5e:f9:4f:
         cd:31:44:fb:93:3c:9f:3e:b7:30:ac:17:a2:8c:d6:39:02:0d:
         01:82:81:8e:87:80:9c:30:12:31:f3:97:2b:43:d5:56:bb:a9:
         64:c4:84:3c:70:10:e1:25:81:e3:64:07:f2:6a:e7:9e:71:ba:
         49:78:b7:0d:04:f4:5e:40:88:3e:b8:a6:a1:04:b7:37:78:73:
         2d:09:da:4a:cd:9b:bc:41:88:3c:c5:d0:7c:01:d3:04:af:c2:
         f6:c2:de:cf:a4:f6:33:7a:fe:6a:53:d1:bb:fb:36:46:c7:ae:
         7f:6b:a4:bc:b3:86:a5:f3:da:ac:4b:b7:bb:cd:3c:ab:ce:19:
         d5:17:27:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+4bLiSbuj7j4VmNu29OC0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OTA1OTQ5ZTk2M2QzNTc3YmUwNzYzMjZjYTBiOTFmZjMy
Zjk2ODQwHhcNMjQwNTI3MDUwMTIzWhcNMjQwNTI4MDUwMTIzWjAzMTEwLwYDVQQD
Eyg2ZmYxZjY5NDFmN2Q2OTkzOTJhMGMxMDM0ODdmOWE4MDBiYzNlN2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwhjiOL+DKYAKdqORD6LVQEoEamn
4gOZ8GhP6jI49NO1Ng9WFGneY91q+fvE2Mnt7adhrf/g+6QtytgQXI3rQj2AqO/X
9rbeXn3Rs2MfwFzT4vrSNsujYv64kXkTcJSnbyPefR7DEYsTGs7Uel+0Pu9EubP6
L2aIEy6hAIQT0EgqpJ/K2KO6u9VedVXJl0ckp+mnZb8stN68W/+CeYabGycjio8I
/A7IhxwA0nWFTGNC4X3NMjw8at1ciCUJETlsxaSUbNisOp6ARvz3mZKYLk1jqHX4
T9TDh/OMXTSKVGxykQXYPAuY4YQnMQT0dmmlJycsMwgKDnpdPQQEX35o1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/x9pQffWmTkqDBA0h/moALw+f/MB8GA1UdIwQY
MBaAFHWQWUnpY9NXe+B2MmyguR/zL5aEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQt
MWE4MzAxYjdlNmRlLzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQtMWE4MzAxYjdlNmRl
LzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5gBSY3G
gafBWpD8WC4xi5mVdw6gEx4XkiQFF+MQXQE3IpHy+mxV4zs+iNcXWrk015fMLxOI
zRKvGUNTMx3tFb76AW2Eea7F7gWhL0bhXMBFK+pUcw69bASMJf3ZvcqcEX3/e/yx
Efb2fe8kWOjtE4HNBmSXWYy3MnSZXvlPzTFE+5M8nz63MKwXoozWOQINAYKBjoeA
nDASMfOXK0PVVrupZMSEPHAQ4SWB42QH8mrnnnG6SXi3DQT0XkCIPrimoQS3N3hz
LQnaSs2bvEGIPMXQfAHTBK/C9sLez6T2M3r+alPRu/s2Rseuf2ukvLOGpfParEu3
u808q84Z1Rcncg==
-----END CERTIFICATE-----