Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
File:                     1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft (raw, json)
Hash identifier:          TzjIh/lRdWpax4bL8o4XTV4optk32gEUVArqaby1YCI=
Subject key identifier:   A3:82:17:43:5A:53:2E:7D:EB:A3:3C:39:88:D9:D2:C8:38:0E:A8:AE
Authority key identifier: D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85
Certificate issuer:       /CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
Certificate serial:       0193519949CE9C5FF98B846D801DB0BC17E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
Manifest number:          0637
Signing time:             Fri 22 Nov 2024 02:00:20 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:20 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:20 +0000
Files and hashes:         1: 1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl (hash: Lgwlv0dhRqW37u0AcSlFMsryZ151ZG9fGNRbyKtv3DU=)
                          2: PVgLB-qRDOCGIGdYGny7A0cNCzs.roa (hash: cdzb9evWHk4AegHxHwXP9MEfgZPBDfnw+ED/wcjSoss=)
                          3: dDVgS3_2OFGjHmNtR2PDYSZYiuU.roa (hash: xmHjzP+INJyiPf4usvTRn5d7rtbTtGR/jl+rlhcANlk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:49:ce:9c:5f:f9:8b:84:6d:80:1d:b0:bc:17:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7301f772753d80a7b62c2d213d347a3b9ebe885
        Validity
            Not Before: Nov 22 02:00:20 2024 GMT
            Not After : Nov 23 02:00:20 2024 GMT
        Subject: CN=a38217435a532e7deba33c3988d9d2c8380ea8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:15:e8:1f:d3:ee:c6:44:07:0f:27:71:f1:
                    9a:01:1c:93:a7:58:25:16:3a:63:e4:b4:de:92:7f:
                    11:a9:0e:46:32:85:aa:e9:45:54:c3:15:85:74:44:
                    65:89:4f:89:db:19:e1:17:38:de:a2:06:a4:d8:de:
                    9c:5b:a7:46:a7:c7:5e:e5:45:ed:c6:09:d8:45:73:
                    03:77:89:d0:71:7c:c3:e1:ff:f9:4e:79:2e:e6:ca:
                    4f:3c:67:a1:ea:b0:fe:d6:53:e7:01:a3:7d:fe:73:
                    76:cc:12:be:ee:37:46:88:06:fc:4b:8a:6f:6d:b6:
                    d1:5c:8d:3a:30:81:ed:ea:50:65:53:e3:70:bf:fa:
                    ea:e4:e5:90:50:0b:46:a5:3d:ab:ed:97:ad:3b:de:
                    83:55:c1:b3:35:fd:bd:f7:d3:7f:5e:8b:f4:97:9f:
                    d8:27:9b:14:85:c2:31:4a:84:31:b5:6c:1a:39:57:
                    b2:d6:65:04:2a:2b:f9:1f:db:16:76:76:15:0f:d1:
                    a8:3d:5a:d5:c1:72:e9:7a:15:22:fe:95:40:4e:48:
                    2e:b0:17:f5:99:de:c8:50:b3:d0:15:ec:8d:8f:f1:
                    29:43:95:52:e9:b0:d1:52:52:e9:a8:10:15:06:ca:
                    b4:c6:7e:b1:01:ba:72:1c:73:79:79:20:db:cc:10:
                    71:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:82:17:43:5A:53:2E:7D:EB:A3:3C:39:88:D9:D2:C8:38:0E:A8:AE
            X509v3 Authority Key Identifier:
                keyid:D7:30:1F:77:27:53:D8:0A:7B:62:C2:D2:13:D3:47:A3:B9:EB:E8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zAfdydT2Ap7YsLSE9NHo7nr6IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/77d6ee-a8e1-4b01-83cb-2f6769e75f24/1/1zAfdydT2Ap7YsLSE9NHo7nr6IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:a3:f3:4b:3e:52:05:33:ed:25:fb:1f:e4:85:42:f2:95:81:
         76:b3:a0:e0:f5:c1:c4:0a:bf:ff:70:e4:e9:12:f0:d0:c8:82:
         24:de:9d:08:ba:b9:60:ff:a9:71:19:3c:3a:57:26:90:b3:88:
         52:5d:5a:d5:51:b4:f7:b7:de:b9:6d:12:ea:6c:56:6d:c2:43:
         5d:aa:d7:1c:1a:1b:dd:c9:9f:09:a2:e9:16:ea:da:55:27:69:
         6b:58:51:c3:ff:3f:66:0e:63:f8:75:b5:38:72:e1:4a:0c:c5:
         8a:7c:ab:73:63:69:c0:38:da:8e:3e:ac:d4:06:c3:45:d9:67:
         3c:6f:12:cc:9a:34:e6:7d:01:51:6d:33:98:27:82:c5:82:ac:
         01:63:f6:33:b0:14:57:bf:0d:0d:08:49:ac:b6:06:4b:72:a5:
         4a:0e:bc:2e:72:b2:2b:29:a4:9d:da:85:58:6d:f2:ef:2e:ef:
         38:c1:94:b7:9c:8c:4e:94:dc:1e:c2:2b:85:63:6e:60:5b:ab:
         46:fc:f6:e6:af:72:43:2e:8b:3e:b1:dd:af:bb:97:71:d6:40:
         93:67:a9:28:bb:05:b3:ab:58:07:68:96:70:ea:22:c6:92:87:
         ad:64:e4:8d:c0:32:cc:66:a5:2c:40:6d:72:6e:ec:b8:35:73:
         5a:d6:1f:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmUnOnF/5i4RtgB2wvBfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MzAxZjc3Mjc1M2Q4MGE3YjYyYzJkMjEzZDM0N2EzYjll
YmU4ODUwHhcNMjQxMTIyMDIwMDIwWhcNMjQxMTIzMDIwMDIwWjAzMTEwLwYDVQQD
EyhhMzgyMTc0MzVhNTMyZTdkZWJhMzNjMzk4OGQ5ZDJjODM4MGVhOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVMV6B/T7sZEBw8ncfGaARyTp1gl
Fjpj5LTekn8RqQ5GMoWq6UVUwxWFdERliU+J2xnhFzjeogak2N6cW6dGp8de5UXt
xgnYRXMDd4nQcXzD4f/5Tnku5spPPGeh6rD+1lPnAaN9/nN2zBK+7jdGiAb8S4pv
bbbRXI06MIHt6lBlU+Nwv/rq5OWQUAtGpT2r7ZetO96DVcGzNf2999N/Xov0l5/Y
J5sUhcIxSoQxtWwaOVey1mUEKiv5H9sWdnYVD9GoPVrVwXLpehUi/pVATkgusBf1
md7IULPQFeyNj/EpQ5VS6bDRUlLpqBAVBsq0xn6xAbpyHHN5eSDbzBBxbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOCF0NaUy5966M8OYjZ0sg4DqiuMB8GA1UdIwQY
MBaAFNcwH3cnU9gKe2LC0hPTR6O56+iFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2It
MmY2NzY5ZTc1ZjI0LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83N2Q2ZWUtYThlMS00YjAxLTgzY2ItMmY2NzY5ZTc1ZjI0
LzEvMXpBZmR5ZFQyQXA3WXNMU0U5TkhvN25yNklVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqPzSz5S
BTPtJfsf5IVC8pWBdrOg4PXBxAq//3Dk6RLw0MiCJN6dCLq5YP+pcRk8OlcmkLOI
Ul1a1VG097feuW0S6mxWbcJDXarXHBob3cmfCaLpFuraVSdpa1hRw/8/Zg5j+HW1
OHLhSgzFinyrc2NpwDjajj6s1AbDRdlnPG8SzJo05n0BUW0zmCeCxYKsAWP2M7AU
V78NDQhJrLYGS3KlSg68LnKyKymkndqFWG3y7y7vOMGUt5yMTpTcHsIrhWNuYFur
Rvz25q9yQy6LPrHdr7uXcdZAk2epKLsFs6tYB2iWcOoixpKHrWTkjcAyzGalLEBt
cm7suDVzWtYfyg==
-----END CERTIFICATE-----