Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
File:                     lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft (raw, json)
Hash identifier:          E1lg5advOBe5WlpN1LlVTZBynv25HibY0cH5Z/jTd0c=
Subject key identifier:   FA:DA:B2:2A:C8:05:7E:8E:9A:03:D8:28:14:5C:78:E4:05:F1:9A:F4
Authority key identifier: 94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56
Certificate issuer:       /CN=94948e5f2fa04b222a6e96883b840f7124531556
Certificate serial:       018FA8F9909FC620C7314F993F115B393729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
Manifest number:          1196
Signing time:             Fri 24 May 2024 05:01:18 +0000
Manifest this update:     Fri 24 May 2024 05:01:18 +0000
Manifest next update:     Sat 25 May 2024 05:01:18 +0000
Files and hashes:         1: 1-8r0Snwsfvao5A0oz_oJCcOPIgc.roa (hash: hawxFVDKJdbQL1r4WBg9v13skX4gkNJM/TcjmA9VAIY=)
                          2: R_xoVkKstrxm7a5MrA05LJrLvKU.roa (hash: OcAWDrFsHDbr/iw3JojGUbO2jTx8QJMqs361ZQSRTAw=)
                          3: lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl (hash: gipf5S17+/kZuX+79L/wcuHgjz4p9gVCe/Jqb6PeX74=)
                          4: pjo_cDOOq6Z0EodmsdfcPdffXPI.roa (hash: 0PYwlcJAr20IVZA7CTNFirAsFoOtksCPJDlJ+zwar1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 May 2024 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a8:f9:90:9f:c6:20:c7:31:4f:99:3f:11:5b:39:37:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94948e5f2fa04b222a6e96883b840f7124531556
        Validity
            Not Before: May 24 05:01:18 2024 GMT
            Not After : May 25 05:01:18 2024 GMT
        Subject: CN=fadab22ac8057e8e9a03d828145c78e405f19af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f6:06:a5:db:1a:36:7a:dc:11:3b:19:26:7e:
                    a0:f3:21:ee:64:aa:09:ee:16:9f:26:f6:67:42:ba:
                    27:f9:03:f7:8f:71:88:ad:c5:fd:c6:05:bd:85:60:
                    71:3a:a4:7a:6e:e9:17:25:a8:12:6b:14:24:28:4d:
                    33:92:a6:51:45:d7:7a:49:61:90:51:17:d0:c4:3e:
                    0d:b0:ba:0e:52:f1:c0:07:de:80:5e:0c:ca:af:03:
                    1c:fc:0c:66:1e:fe:f4:ca:13:1d:b2:f6:1e:9e:8a:
                    80:c9:7c:da:1c:5a:f7:d7:e4:44:3f:c3:fc:51:53:
                    a0:ea:21:54:8d:3d:bd:c6:5f:4e:54:a5:10:02:48:
                    a0:a7:60:3f:c8:f1:3e:7c:5c:9b:ad:0b:d7:90:48:
                    ee:b4:8e:7c:b7:d2:ad:80:2e:81:94:1b:11:05:d3:
                    e3:82:29:df:59:e0:d9:6a:52:0a:10:56:89:22:de:
                    5e:65:e9:41:25:96:1c:b0:a4:f3:be:4b:01:fe:2f:
                    9b:e9:31:c0:84:24:1b:48:73:7a:20:1b:5a:a5:62:
                    73:a9:1c:b6:15:03:70:6c:9b:8e:4a:5d:9e:1b:32:
                    6a:ac:4e:54:d5:8b:3a:78:56:d4:18:3e:63:cf:66:
                    2e:2c:65:e9:28:ce:e9:d4:bf:ba:f8:7e:74:67:44:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DA:B2:2A:C8:05:7E:8E:9A:03:D8:28:14:5C:78:E4:05:F1:9A:F4
            X509v3 Authority Key Identifier:
                keyid:94:94:8E:5F:2F:A0:4B:22:2A:6E:96:88:3B:84:0F:71:24:53:15:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJSOXy-gSyIqbpaIO4QPcSRTFVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ec48be-9250-4f7c-9c87-641b8e60d3e2/1/lJSOXy-gSyIqbpaIO4QPcSRTFVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:47:e1:33:3f:b3:57:ad:b6:75:b9:75:aa:8f:c2:83:53:9f:
         a4:3a:48:61:c3:e9:8d:87:eb:bf:4b:69:db:af:cc:b6:60:ad:
         ce:af:d5:85:83:d4:85:70:d9:f8:a3:e6:e8:88:c9:4c:bd:b4:
         f4:63:77:eb:ff:d4:b8:58:e5:ed:af:3a:97:11:c9:40:29:2c:
         d7:05:27:13:fc:34:8d:0a:4f:1f:8e:9c:69:b8:5c:52:e6:33:
         77:af:37:76:6e:75:ee:a0:ff:2a:99:6c:11:a1:4e:e4:62:83:
         8e:fe:be:32:dd:88:50:ba:02:30:78:cf:00:da:58:9f:2e:0a:
         b6:e8:cd:9d:c6:c2:3e:8c:e0:24:02:db:3f:5a:39:14:44:3a:
         82:88:1e:3a:4c:3b:cc:2f:c3:fe:c8:ce:9b:78:f5:09:68:c8:
         81:ef:18:e0:7a:89:6d:49:ec:77:2a:7e:32:65:ce:d1:d2:65:
         25:40:95:8f:04:52:9a:0c:5b:0f:ee:18:77:b3:8c:ad:52:b4:
         46:05:f5:a2:c5:44:e0:ba:8f:1c:39:29:cd:d2:c5:1f:1b:a1:
         e0:63:fe:6a:1f:12:e7:0b:66:34:11:74:f4:00:92:ef:9d:e7:
         35:a6:00:bf:fc:17:44:61:1f:71:84:b4:70:8c:63:b6:6e:39:
         83:ea:23:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+o+ZCfxiDHMU+ZPxFbOTcpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0OTQ4ZTVmMmZhMDRiMjIyYTZlOTY4ODNiODQwZjcxMjQ1
MzE1NTYwHhcNMjQwNTI0MDUwMTE4WhcNMjQwNTI1MDUwMTE4WjAzMTEwLwYDVQQD
EyhmYWRhYjIyYWM4MDU3ZThlOWEwM2Q4MjgxNDVjNzhlNDA1ZjE5YWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvYGpdsaNnrcETsZJn6g8yHuZKoJ
7hafJvZnQron+QP3j3GIrcX9xgW9hWBxOqR6bukXJagSaxQkKE0zkqZRRdd6SWGQ
URfQxD4NsLoOUvHAB96AXgzKrwMc/AxmHv70yhMdsvYenoqAyXzaHFr31+REP8P8
UVOg6iFUjT29xl9OVKUQAkigp2A/yPE+fFybrQvXkEjutI58t9KtgC6BlBsRBdPj
ginfWeDZalIKEFaJIt5eZelBJZYcsKTzvksB/i+b6THAhCQbSHN6IBtapWJzqRy2
FQNwbJuOSl2eGzJqrE5U1Ys6eFbUGD5jz2YuLGXpKM7p1L+6+H50Z0RlNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrasirIBX6OmgPYKBRceOQF8Zr0MB8GA1UdIwQY
MBaAFJSUjl8voEsiKm6WiDuED3EkUxVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODct
NjQxYjhlNjBkM2UyLzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9lYzQ4YmUtOTI1MC00ZjdjLTljODctNjQxYjhlNjBkM2Uy
LzEvbEpTT1h5LWdTeUlxYnBhSU80UVBjU1JURlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAUfhMz+z
V622dbl1qo/Cg1OfpDpIYcPpjYfrv0tp26/MtmCtzq/VhYPUhXDZ+KPm6IjJTL20
9GN36//UuFjl7a86lxHJQCks1wUnE/w0jQpPH46cabhcUuYzd683dm517qD/Kpls
EaFO5GKDjv6+Mt2IULoCMHjPANpYny4KtujNncbCPozgJALbP1o5FEQ6gogeOkw7
zC/D/sjOm3j1CWjIge8Y4HqJbUnsdyp+MmXO0dJlJUCVjwRSmgxbD+4Yd7OMrVK0
RgX1osVE4LqPHDkpzdLFHxuh4GP+ah8S5wtmNBF09ACS753nNaYAv/wXRGEfcYS0
cIxjtm45g+ojuQ==
-----END CERTIFICATE-----