Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
File:                     AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft (raw, json)
Hash identifier:          MCRYvlFlBgt8LmzBBGlwxxei+5buJ/Pd0j1WEDuMrRQ=
Subject key identifier:   09:DD:9D:8F:E5:A5:EF:40:14:CF:BA:D0:D9:AC:D4:4A:E5:5B:AD:DC
Authority key identifier: 00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86
Certificate issuer:       /CN=0007534eb77caa836f8f118630164e0236e5fe86
Certificate serial:       01901D465751B7F5E67C6EDF59A55BFCECA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
Manifest number:          06F3
Signing time:             Sat 15 Jun 2024 19:01:07 +0000
Manifest this update:     Sat 15 Jun 2024 19:01:07 +0000
Manifest next update:     Sun 16 Jun 2024 19:01:07 +0000
Files and hashes:         1: 8jTFWj-7WyOXu8o8cufUTnRLUaQ.roa (hash: PbPCIIH3Xlp6nqyuBcw/Vs19JKQ/vM70lZ8V9TZAnmY=)
                          2: AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl (hash: ck/OSVov8QcoFmQrIrTKABv6cvM3+mMvX4I3s7udmh8=)
                          3: N0fmsl61H2fdseJD22Bni4CrmHE.roa (hash: +lSjE4F+rlb87s7ls6DsV7q3KLZDx4imlhUDSiVJv4s=)
                          4: X3-6V0LawDB53I1EZS79NYW6bOY.roa (hash: 4ZngwnaMRMnL4sTKFE7pSU62kkMgFNgDLYQFQl6+Scw=)
                          5: qqXqCJ1D8o5IUPc1q-0ZJerHz9o.roa (hash: mtCZXf26GoOUXGn1Y+ce1KqUVRZmCKym2BPnkleEH3g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:57:51:b7:f5:e6:7c:6e:df:59:a5:5b:fc:ec:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0007534eb77caa836f8f118630164e0236e5fe86
        Validity
            Not Before: Jun 15 19:01:07 2024 GMT
            Not After : Jun 16 19:01:07 2024 GMT
        Subject: CN=09dd9d8fe5a5ef4014cfbad0d9acd44ae55baddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:40:fb:57:49:a1:f1:f2:5a:6e:30:bd:4c:
                    ea:a2:e8:2e:43:c9:8d:e5:e3:0c:f7:9b:37:cb:5b:
                    74:88:51:f7:1d:00:17:8c:a6:4c:00:78:f5:e0:30:
                    a2:1c:37:4c:d6:b7:35:8a:dc:1a:9c:a1:51:25:9d:
                    14:66:b4:62:5f:39:b4:60:17:22:12:88:a0:46:6a:
                    5e:21:68:ab:78:27:d5:48:ee:22:08:7b:e7:1f:ac:
                    d0:6b:81:84:dd:5b:63:4c:44:7a:df:49:e7:0b:5b:
                    8e:0e:b9:7f:40:bb:a1:89:1b:e3:f9:03:36:58:fb:
                    bd:23:35:21:d7:3a:3a:71:f1:f4:30:ce:a3:29:2a:
                    2c:f6:2d:98:99:45:4f:18:61:14:cf:d8:c6:e4:9b:
                    a5:78:ac:fb:28:7f:57:c3:a4:5e:a5:c4:2b:0d:7d:
                    5e:02:46:4f:1b:18:49:ca:cd:cd:d6:a9:f7:09:40:
                    ce:40:62:7e:1a:c7:42:86:b9:d3:8f:0e:52:b3:cd:
                    76:b3:24:f4:a1:66:20:a4:99:ac:55:a0:c6:d0:86:
                    85:d3:17:19:04:eb:8d:b9:ec:97:e5:64:55:d7:06:
                    18:b8:5b:c5:e6:8a:1d:fa:5a:d2:07:f2:e9:2f:64:
                    eb:c5:71:58:b7:d3:44:01:98:58:1c:01:bb:1e:b4:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:DD:9D:8F:E5:A5:EF:40:14:CF:BA:D0:D9:AC:D4:4A:E5:5B:AD:DC
            X509v3 Authority Key Identifier:
                keyid:00:07:53:4E:B7:7C:AA:83:6F:8F:11:86:30:16:4E:02:36:E5:FE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAdTTrd8qoNvjxGGMBZOAjbl_oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/41e90c-61cc-470c-a388-6d1c9b153cf0/1/AAdTTrd8qoNvjxGGMBZOAjbl_oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:b5:1a:df:72:b5:20:5b:81:81:26:71:f5:82:45:80:d7:
         61:44:94:01:21:d7:6b:a5:b3:bb:5c:d4:2a:61:dc:97:1f:a8:
         6d:61:25:18:03:4d:22:36:8b:bf:fa:4c:6d:2e:27:4b:5d:80:
         7b:49:c3:cc:aa:8f:ed:ce:44:b1:04:97:6b:9d:ca:da:09:a5:
         ff:43:5b:68:c2:55:5b:06:d7:27:2e:2d:3e:e7:09:68:d2:fe:
         42:ed:0a:23:fc:e6:5b:fd:66:ee:cd:63:68:d0:4e:ca:e4:ce:
         b9:12:40:91:c5:ee:fc:1d:c5:77:14:2f:df:1f:cf:99:40:7a:
         80:54:61:d7:ee:76:4e:9c:13:87:6d:20:8d:4d:19:9e:82:25:
         65:ed:15:e6:b9:27:f7:cb:f8:5c:0c:dd:c5:d6:14:b7:e4:d0:
         56:51:16:b6:67:cc:53:e2:09:3c:66:59:bc:cf:d9:a9:45:7f:
         95:10:e5:a1:3e:0f:e9:7f:ae:81:b7:5d:4d:a6:59:37:9f:0d:
         b8:7e:26:2f:52:6a:f9:22:11:4a:45:b1:3a:03:73:e4:94:e5:
         34:5c:98:a3:f1:e6:2e:5a:43:b5:38:af:c8:bb:72:12:30:46:
         b5:18:51:40:9f:19:13:4f:60:c7:03:7e:94:a9:f5:a0:84:16:
         15:3d:9a:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAdRldRt/XmfG7fWaVb/OyiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMDc1MzRlYjc3Y2FhODM2ZjhmMTE4NjMwMTY0ZTAyMzZl
NWZlODYwHhcNMjQwNjE1MTkwMTA3WhcNMjQwNjE2MTkwMTA3WjAzMTEwLwYDVQQD
EygwOWRkOWQ4ZmU1YTVlZjQwMTRjZmJhZDBkOWFjZDQ0YWU1NWJhZGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArahA+1dJofHyWm4wvUzqouguQ8mN
5eMM95s3y1t0iFH3HQAXjKZMAHj14DCiHDdM1rc1itwanKFRJZ0UZrRiXzm0YBci
EoigRmpeIWireCfVSO4iCHvnH6zQa4GE3VtjTER630nnC1uODrl/QLuhiRvj+QM2
WPu9IzUh1zo6cfH0MM6jKSos9i2YmUVPGGEUz9jG5JuleKz7KH9Xw6RepcQrDX1e
AkZPGxhJys3N1qn3CUDOQGJ+GsdChrnTjw5Ss812syT0oWYgpJmsVaDG0IaF0xcZ
BOuNueyX5WRV1wYYuFvF5ood+lrSB/LpL2TrxXFYt9NEAZhYHAG7HrRaawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAndnY/lpe9AFM+60Nms1ErlW63cMB8GA1UdIwQY
MBaAFAAHU063fKqDb48RhjAWTgI25f6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgt
NmQxYzliMTUzY2YwLzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80MWU5MGMtNjFjYy00NzBjLWEzODgtNmQxYzliMTUzY2Yw
LzEvQUFkVFRyZDhxb052anhHR01CWk9BamJsX29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATl21Gt9y
tSBbgYEmcfWCRYDXYUSUASHXa6Wzu1zUKmHclx+obWElGANNIjaLv/pMbS4nS12A
e0nDzKqP7c5EsQSXa53K2gml/0NbaMJVWwbXJy4tPucJaNL+Qu0KI/zmW/1m7s1j
aNBOyuTOuRJAkcXu/B3FdxQv3x/PmUB6gFRh1+52TpwTh20gjU0ZnoIlZe0V5rkn
98v4XAzdxdYUt+TQVlEWtmfMU+IJPGZZvM/ZqUV/lRDloT4P6X+ugbddTaZZN58N
uH4mL1Jq+SIRSkWxOgNz5JTlNFyYo/HmLlpDtTivyLtyEjBGtRhRQJ8ZE09gxwN+
lKn1oIQWFT2a9A==
-----END CERTIFICATE-----