Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File:                     B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier:          kj+V/d5SDr77FpymXstOyaMPVDZBc5MPCCYGjc316Ao=
Subject key identifier:   E5:C8:95:29:1D:3B:C2:17:93:22:FF:4D:9E:BB:68:71:66:84:FA:97
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer:       /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial:       018F324FF59144CB05A2BB3AD0A847A9BA77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number:          1149
Signing time:             Wed 01 May 2024 04:00:51 +0000
Manifest this update:     Wed 01 May 2024 04:00:51 +0000
Manifest next update:     Thu 02 May 2024 04:00:51 +0000
Files and hashes:         1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: EhVzQg8Wq4QDeHKIoJCovOPmdsvlCVuQdUY76GZFcsk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:32:4f:f5:91:44:cb:05:a2:bb:3a:d0:a8:47:a9:ba:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
        Validity
            Not Before: May  1 04:00:51 2024 GMT
            Not After : May  2 04:00:51 2024 GMT
        Subject: CN=e5c895291d3bc2179322ff4d9ebb68716684fa97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:61:5a:fa:6b:3e:a4:6c:b7:83:ce:fa:d7:
                    c4:2b:d9:1c:2a:1e:f8:79:48:65:20:18:4f:c4:e3:
                    7c:94:e8:f0:7b:95:cb:8b:47:7d:7d:20:45:d6:9e:
                    14:7f:25:8f:9d:ac:d2:a0:43:e9:c5:d0:46:eb:05:
                    0b:65:2e:cb:e6:e1:4a:f4:5e:0b:33:67:d3:39:6a:
                    29:c2:0e:58:c4:3a:c7:a5:ed:b1:8c:ed:c7:7b:ae:
                    0a:07:d5:94:b8:04:7f:9c:66:71:b9:db:62:70:38:
                    4d:84:3f:cc:c6:fa:56:f5:5a:d9:2e:0f:4f:5d:74:
                    64:4b:62:be:f7:94:18:0e:6f:b2:8a:bd:0f:9b:6e:
                    b9:65:5d:f9:a7:c3:4b:16:40:a2:87:9b:ee:cb:8a:
                    29:08:f0:e6:4b:e3:71:f4:02:ca:72:ce:4d:fa:9c:
                    ab:c2:76:82:cf:37:4a:f4:e8:64:c3:e3:1f:d0:af:
                    95:18:d0:92:20:51:8e:97:63:cc:00:7e:09:c3:da:
                    a9:ea:22:64:22:8d:c3:0f:43:d4:6c:aa:c9:aa:e6:
                    63:53:04:f4:a9:78:ad:73:94:5a:66:22:45:19:e9:
                    1a:8f:8d:eb:af:b3:ea:d4:98:50:7e:c2:7e:f3:16:
                    df:5b:ea:7a:4a:08:aa:25:51:49:5c:9f:bd:4e:04:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C8:95:29:1D:3B:C2:17:93:22:FF:4D:9E:BB:68:71:66:84:FA:97
            X509v3 Authority Key Identifier:
                keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f5:70:98:24:cc:33:fa:c1:94:19:16:8c:80:78:a8:eb:48:
         fa:d9:0b:4e:5a:67:57:12:74:2a:b2:c6:5b:e6:b1:17:88:be:
         87:8f:9f:3c:38:56:da:58:76:94:52:a0:75:6b:f2:7c:fd:e2:
         a2:e2:18:59:ac:f4:ae:cb:d1:09:84:b1:4b:54:ab:25:ed:0c:
         f0:96:a1:fd:4f:85:e4:98:17:23:8a:59:ab:07:36:81:96:a0:
         f3:66:55:0d:ec:74:9c:5b:d8:89:bc:1a:c5:34:ff:9d:36:de:
         0b:3e:b5:7e:26:82:34:9a:d0:15:27:e5:4a:4f:33:79:f0:e8:
         d6:49:b1:29:c5:43:15:80:ee:d3:a4:bd:66:4a:92:3a:e6:0e:
         ba:eb:42:36:7f:59:0b:fa:28:88:c6:2f:76:79:2e:ec:90:28:
         58:8d:6e:7d:99:3e:ed:b8:a7:b8:55:84:7d:f4:a7:67:02:78:
         1e:98:0f:ba:6f:fe:0f:eb:fa:f2:36:80:c3:b7:de:78:60:21:
         a9:3b:3b:d9:d9:6e:a5:8e:56:d0:c7:8c:16:a5:03:f7:d9:28:
         db:e1:2c:aa:ca:a0:03:44:2a:67:40:c4:2d:c2:20:78:27:6d:
         6b:79:f3:f6:d0:17:7d:5a:d1:90:dc:58:f6:ea:b5:da:f6:6e:
         88:db:a7:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY8yT/WRRMsFors60KhHqbp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZWE1MjNlYzdmOTM3N2ExYTllNWQ2ZmE4NjgxN2VkM2Q2
YzBhODIwHhcNMjQwNTAxMDQwMDUxWhcNMjQwNTAyMDQwMDUxWjAzMTEwLwYDVQQD
EyhlNWM4OTUyOTFkM2JjMjE3OTMyMmZmNGQ5ZWJiNjg3MTY2ODRmYTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxJhWvprPqRst4PO+tfEK9kcKh74
eUhlIBhPxON8lOjwe5XLi0d9fSBF1p4UfyWPnazSoEPpxdBG6wULZS7L5uFK9F4L
M2fTOWopwg5YxDrHpe2xjO3He64KB9WUuAR/nGZxudticDhNhD/MxvpW9VrZLg9P
XXRkS2K+95QYDm+yir0Pm265ZV35p8NLFkCih5vuy4opCPDmS+Nx9ALKcs5N+pyr
wnaCzzdK9Ohkw+Mf0K+VGNCSIFGOl2PMAH4Jw9qp6iJkIo3DD0PUbKrJquZjUwT0
qXitc5RaZiJFGekaj43rr7Pq1JhQfsJ+8xbfW+p6SgiqJVFJXJ+9TgQ0gwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXIlSkdO8IXkyL/TZ67aHFmhPqXMB8GA1UdIwQY
MBaAFAfqUj7H+Td6Gp5db6hoF+09bAqCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQi1wU1BzZjVOM29hbmwxdnFHZ1g3VDFzQ29JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ZGZjZDUtMDdkNi00YWQ4LWFkMWQt
YjYwZmQ2Nzk5N2JiLzEvQi1wU1BzZjVOM29hbmwxdnFHZ1g3VDFzQ29JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85ZGZjZDUtMDdkNi00YWQ4LWFkMWQtYjYwZmQ2Nzk5N2Ji
LzEvQi1wU1BzZjVOM29hbmwxdnFHZ1g3VDFzQ29JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/VwmCTM
M/rBlBkWjIB4qOtI+tkLTlpnVxJ0KrLGW+axF4i+h4+fPDhW2lh2lFKgdWvyfP3i
ouIYWaz0rsvRCYSxS1SrJe0M8Jah/U+F5JgXI4pZqwc2gZag82ZVDex0nFvYibwa
xTT/nTbeCz61fiaCNJrQFSflSk8zefDo1kmxKcVDFYDu06S9ZkqSOuYOuutCNn9Z
C/ooiMYvdnku7JAoWI1ufZk+7binuFWEffSnZwJ4HpgPum/+D+v68jaAw7feeGAh
qTs72dlupY5W0MeMFqUD99ko2+EsqsqgA0QqZ0DELcIgeCdta3nz9tAXfVrRkNxY
9uq12vZuiNunRg==
-----END CERTIFICATE-----