Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
File:                     F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json)
Hash identifier:          taORG4SapJMKvLWq9FuedChbXUCZzFfgfsROHDdaoec=
Subject key identifier:   99:AD:35:00:3A:D0:4E:F8:D2:21:53:14:26:9C:A6:88:5E:47:43:F7
Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52
Certificate issuer:       /CN=177005177526d668e844b2a7a5a59ac64a495652
Certificate serial:       018F8937F0ECC9AEB871C2A160658BD93D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
Manifest number:          D4
Signing time:             Sat 18 May 2024 01:01:35 +0000
Manifest this update:     Sat 18 May 2024 01:01:35 +0000
Manifest next update:     Sun 19 May 2024 01:01:35 +0000
Files and hashes:         1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: 5aYN0MjEYDwFGV1Bb41gkqNSmHS3vyZmrMbv+UkQbaQ=)
                          2: uMTuLT7MUxRJ7VLoMlIsbUkboao.roa (hash: gXrGnlM9dbxa5RskE16yn3yk99wnBXw7Mucbzwb4b3U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:37:f0:ec:c9:ae:b8:71:c2:a1:60:65:8b:d9:3d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652
        Validity
            Not Before: May 18 01:01:35 2024 GMT
            Not After : May 19 01:01:35 2024 GMT
        Subject: CN=99ad35003ad04ef8d2215314269ca6885e4743f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a8:f4:72:83:41:7a:94:27:c9:53:30:9a:d3:
                    1b:9f:30:04:0b:0e:f9:e3:28:ea:c9:3c:54:fd:6e:
                    62:a3:4c:5f:1a:44:a4:25:36:f1:63:be:57:e8:60:
                    04:77:bc:1c:9d:7e:6b:c9:53:32:be:d2:b4:8e:80:
                    f6:48:dc:c0:2b:5c:d6:bf:ef:e0:0e:26:35:62:09:
                    e6:27:39:05:11:5c:4d:48:84:9c:cd:3d:59:0c:74:
                    3c:a5:18:e1:8c:a6:da:89:87:74:57:d3:8c:6e:81:
                    b3:8e:40:b8:14:a0:38:bb:59:34:b1:37:96:34:e9:
                    07:d7:f8:bd:11:75:06:02:e1:46:d7:a6:8e:3d:91:
                    62:11:60:b2:46:b8:8a:86:7a:07:8a:c7:03:f1:0e:
                    ea:25:7d:bf:f0:2a:74:ba:f2:d6:44:e0:be:45:73:
                    5a:c8:f9:18:6a:69:a2:21:62:02:75:60:45:99:ce:
                    38:c2:d7:be:99:fc:88:7f:4b:7b:4e:04:ac:2a:cb:
                    5e:17:9f:3f:f4:38:4a:3d:82:ce:b2:e6:cb:98:57:
                    a4:4a:0f:a3:7a:7a:dd:4a:49:c3:00:13:f8:95:68:
                    99:bf:db:26:a7:71:92:17:d0:1b:e7:6a:94:16:52:
                    f1:09:6d:b6:a2:43:84:2d:66:f0:cb:dc:04:82:66:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AD:35:00:3A:D0:4E:F8:D2:21:53:14:26:9C:A6:88:5E:47:43:F7
            X509v3 Authority Key Identifier:
                keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:5f:54:02:d3:ef:21:27:f0:b8:f4:0e:ce:9a:b7:db:33:c7:
         09:02:25:34:b8:87:53:68:76:3e:8a:54:df:62:57:2c:96:9e:
         86:86:f3:49:b1:64:b2:3a:30:9d:37:4b:4e:60:84:82:9b:0d:
         a8:0e:62:05:8b:48:70:47:2e:b5:50:1b:1d:23:03:bf:62:5c:
         85:8a:4e:6c:51:6c:9d:64:84:c9:6e:11:1c:5a:dc:50:7a:54:
         14:46:9e:11:ca:af:a7:11:22:fe:93:1c:c9:07:5c:e7:17:b8:
         75:1f:40:66:76:3e:00:81:c4:76:7e:99:1a:f5:66:2f:e2:5b:
         6e:f7:6f:df:1f:a4:e3:9c:3a:72:ae:2d:b4:24:94:33:b3:5c:
         da:dd:f5:e2:a3:56:aa:ca:00:5e:0a:31:17:b8:af:29:b3:06:
         fb:ab:13:b6:fd:00:60:02:af:a2:b9:34:68:81:e4:19:fb:de:
         f5:a4:0d:b6:61:80:82:2a:f6:39:cd:7e:fd:d9:6d:a9:ea:38:
         59:b0:68:81:f0:96:14:c8:b4:f0:3f:ae:03:63:e4:9d:1d:4a:
         e2:82:06:a8:f1:13:f4:18:1c:14:09:7d:ae:5c:66:26:82:ea:
         db:79:3c:3d:bb:79:11:7c:e6:04:6a:c2:c9:62:f3:27:8d:cf:
         80:06:6e:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+JN/Dsya64ccKhYGWL2T0kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzAwNTE3NzUyNmQ2NjhlODQ0YjJhN2E1YTU5YWM2NGE0
OTU2NTIwHhcNMjQwNTE4MDEwMTM1WhcNMjQwNTE5MDEwMTM1WjAzMTEwLwYDVQQD
Eyg5OWFkMzUwMDNhZDA0ZWY4ZDIyMTUzMTQyNjljYTY4ODVlNDc0M2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qj0coNBepQnyVMwmtMbnzAECw75
4yjqyTxU/W5io0xfGkSkJTbxY75X6GAEd7wcnX5ryVMyvtK0joD2SNzAK1zWv+/g
DiY1YgnmJzkFEVxNSISczT1ZDHQ8pRjhjKbaiYd0V9OMboGzjkC4FKA4u1k0sTeW
NOkH1/i9EXUGAuFG16aOPZFiEWCyRriKhnoHiscD8Q7qJX2/8Cp0uvLWROC+RXNa
yPkYammiIWICdWBFmc44wte+mfyIf0t7TgSsKsteF58/9DhKPYLOsubLmFekSg+j
enrdSknDABP4lWiZv9smp3GSF9Ab52qUFlLxCW22okOELWbwy9wEgmYg9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmtNQA60E740iFTFCacpoheR0P3MB8GA1UdIwQY
MBaAFBdwBRd1JtZo6ESyp6WlmsZKSVZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYWYxNTMtZWQwZC00OWMwLTk5ZGYt
MGNkZWZiZmM3ODdhLzEvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zYWYxNTMtZWQwZC00OWMwLTk5ZGYtMGNkZWZiZmM3ODdh
LzEvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdl9UAtPv
ISfwuPQOzpq32zPHCQIlNLiHU2h2PopU32JXLJaehobzSbFksjownTdLTmCEgpsN
qA5iBYtIcEcutVAbHSMDv2JchYpObFFsnWSEyW4RHFrcUHpUFEaeEcqvpxEi/pMc
yQdc5xe4dR9AZnY+AIHEdn6ZGvVmL+Jbbvdv3x+k45w6cq4ttCSUM7Nc2t314qNW
qsoAXgoxF7ivKbMG+6sTtv0AYAKvork0aIHkGfve9aQNtmGAgir2Oc1+/dltqeo4
WbBogfCWFMi08D+uA2PknR1K4oIGqPET9BgcFAl9rlxmJoLq23k8Pbt5EXzmBGrC
yWLzJ43PgAZuPA==
-----END CERTIFICATE-----