Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File:                     navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier:          n1XFNslD86ZxZE21fnFIVZzIfczulWf41PT09OMMWIY=
Subject key identifier:   AF:65:59:5F:E9:74:DE:43:3F:FB:0C:1C:E3:D9:12:D5:EE:26:AA:8E
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer:       /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial:       019352AD10F55AD4B481361EB03AFF2D65CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number:          1147
Signing time:             Fri 22 Nov 2024 07:01:33 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:33 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:33 +0000
Files and hashes:         1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: m9ozL0VdDIryenJm6DceqAyWL/8EzIcfg7EpsC2SiEc=)
                          2: s18d2DfVg2tuXgeI9Lzj83paPKM.roa (hash: yZIog1NH0ROthJvxGZq2+SWoRxKk/qizXdssQ5en6s0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:10:f5:5a:d4:b4:81:36:1e:b0:3a:ff:2d:65:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
        Validity
            Not Before: Nov 22 07:01:33 2024 GMT
            Not After : Nov 23 07:01:33 2024 GMT
        Subject: CN=af65595fe974de433ffb0c1ce3d912d5ee26aa8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:35:af:7a:d8:f1:85:88:68:0f:33:a1:82:
                    75:c2:c0:20:4e:ae:29:b2:28:20:34:2e:58:ae:a9:
                    82:77:30:43:b4:f0:0e:63:ea:d6:04:9d:f8:25:65:
                    98:3a:dc:82:d5:4e:85:70:08:ac:88:eb:30:cf:55:
                    35:17:20:83:f8:0d:9d:d5:06:1c:89:fd:10:c1:63:
                    32:4c:f5:27:d3:4b:d1:8d:74:a1:9e:1f:e3:58:38:
                    bf:7c:80:89:86:f7:03:2c:73:74:44:66:35:39:f8:
                    64:4c:3d:b4:bd:d3:4a:32:7d:10:4c:10:5b:a1:45:
                    ee:af:62:ab:e5:c1:14:6d:59:ef:ad:a8:75:0b:4c:
                    75:59:0e:50:3d:92:69:75:c1:6e:bb:17:39:04:fe:
                    ec:57:0b:ec:74:b1:c2:7a:26:a3:77:fe:18:bd:c9:
                    ce:50:ca:64:d0:93:a9:9d:93:fc:0b:f1:a2:c2:ea:
                    71:47:4e:c0:97:59:d1:58:c8:b3:98:d3:c4:40:d9:
                    2c:b3:32:38:9d:b2:6d:a8:81:14:d3:d4:18:3a:b9:
                    e6:67:fc:98:cf:f3:72:22:f8:94:55:1b:ed:6b:43:
                    6a:04:9e:dc:8f:90:49:a0:e6:8a:d7:49:d7:6c:f3:
                    66:e0:d6:c6:25:32:bb:f6:2f:3e:a1:4c:2d:34:42:
                    f8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:65:59:5F:E9:74:DE:43:3F:FB:0C:1C:E3:D9:12:D5:EE:26:AA:8E
            X509v3 Authority Key Identifier:
                keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:c6:36:cd:84:25:f2:f4:99:fb:8e:3d:51:7e:91:a0:bb:d4:
         d1:7a:40:5d:23:de:4d:10:99:2a:b0:3e:27:50:5c:52:f7:be:
         b7:be:0d:35:51:b7:62:e1:f2:f8:88:b4:01:14:f1:1c:b5:38:
         f7:94:b4:61:42:41:f9:28:65:73:0a:b6:60:22:0a:4f:e0:01:
         9f:5e:03:42:3f:cf:41:5c:10:eb:8d:e5:ae:c7:35:99:af:5a:
         71:0d:21:50:03:fd:ae:6f:a0:8f:6c:f7:53:9d:1c:3f:f9:f9:
         fd:76:34:fb:b5:f8:fc:2c:7d:b0:c9:30:3e:79:dd:6f:34:a8:
         ad:fb:b7:ea:00:dc:83:f8:6a:7f:83:06:87:25:32:cf:09:3c:
         1b:4b:a4:b7:ce:6e:8c:ee:b2:ea:e3:20:24:4b:fd:e7:58:56:
         bd:3b:20:67:bd:c8:8e:b6:18:f6:75:5b:6a:0f:a7:03:27:70:
         4b:2a:ac:a1:75:91:34:d0:ad:56:e6:f4:68:95:00:58:1c:5b:
         f0:81:bc:01:5a:10:ee:1e:2a:e4:5a:3f:26:3c:97:cf:95:4c:
         bf:20:1c:70:32:36:98:d1:5c:1d:60:85:bb:76:20:7d:56:54:
         51:ef:2a:44:11:47:ab:ba:76:ba:09:74:d4:69:88:cb:a4:9d:
         b8:11:ba:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrRD1WtS0gTYesDr/LWXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYWJjNjI2YWMyNjQwNjZiMWM1YzcwOWE0ODQ3N2YzNzg4
MzYxZGUwHhcNMjQxMTIyMDcwMTMzWhcNMjQxMTIzMDcwMTMzWjAzMTEwLwYDVQQD
EyhhZjY1NTk1ZmU5NzRkZTQzM2ZmYjBjMWNlM2Q5MTJkNWVlMjZhYThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteQ1r3rY8YWIaA8zoYJ1wsAgTq4p
siggNC5YrqmCdzBDtPAOY+rWBJ34JWWYOtyC1U6FcAisiOswz1U1FyCD+A2d1QYc
if0QwWMyTPUn00vRjXShnh/jWDi/fICJhvcDLHN0RGY1OfhkTD20vdNKMn0QTBBb
oUXur2Kr5cEUbVnvrah1C0x1WQ5QPZJpdcFuuxc5BP7sVwvsdLHCeiajd/4YvcnO
UMpk0JOpnZP8C/GiwupxR07Al1nRWMizmNPEQNksszI4nbJtqIEU09QYOrnmZ/yY
z/NyIviUVRvta0NqBJ7cj5BJoOaK10nXbPNm4NbGJTK79i8+oUwtNEL4BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9lWV/pdN5DP/sMHOPZEtXuJqqOMB8GA1UdIwQY
MBaAFJ2rxiasJkBmscXHCaSEd/N4g2HeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAt
MGI3ZTM4YTEyMmZlLzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8xOWIwMDgtYjZmOS00MjcxLWIxMzAtMGI3ZTM4YTEyMmZl
LzEvbmF2R0pxd21RR2F4eGNjSnBJUjM4M2lEWWQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAksY2zYQl
8vSZ+449UX6RoLvU0XpAXSPeTRCZKrA+J1BcUve+t74NNVG3YuHy+Ii0ARTxHLU4
95S0YUJB+Shlcwq2YCIKT+ABn14DQj/PQVwQ643lrsc1ma9acQ0hUAP9rm+gj2z3
U50cP/n5/XY0+7X4/Cx9sMkwPnndbzSorfu36gDcg/hqf4MGhyUyzwk8G0ukt85u
jO6y6uMgJEv951hWvTsgZ73IjrYY9nVbag+nAydwSyqsoXWRNNCtVub0aJUAWBxb
8IG8AVoQ7h4q5Fo/JjyXz5VMvyAccDI2mNFcHWCFu3YgfVZUUe8qRBFHq7p2ugl0
1GmIy6SduBG6rA==
-----END CERTIFICATE-----