Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
File:                     S2jh-6e0SntmYjayElPX1jYtDYM.mft (raw, json)
Hash identifier:          jW9CER1mC+YXxMnJ+IVvc8Fj67+wVu9d+Vi6/qRIvkE=
Subject key identifier:   E0:4E:09:F2:FF:A9:0D:BE:CA:F1:49:86:07:BA:A9:99:F3:87:E0:69
Authority key identifier: 4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83
Certificate issuer:       /CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
Certificate serial:       01920DCE138124B25A06A14E029B6E6A8E9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
Manifest number:          0B
Signing time:             Fri 20 Sep 2024 05:01:02 +0000
Manifest this update:     Fri 20 Sep 2024 05:01:02 +0000
Manifest next update:     Sat 21 Sep 2024 05:01:02 +0000
Files and hashes:         1: S2jh-6e0SntmYjayElPX1jYtDYM.crl (hash: GiANauRDqfccbC5EEdIGJHX4yqL5cEg2nW++jlyuQls=)
                          2: mkUV2uL7S8SkDEP-tvvSkuYTZPc.roa (hash: L5Tc4xaU93X5XoN2VhSBG5I1ZhMco297PerrS8Pt9IQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Sep 2024 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:0d:ce:13:81:24:b2:5a:06:a1:4e:02:9b:6e:6a:8e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b68e1fba7b44a7b666236b21253d7d6362d0d83
        Validity
            Not Before: Sep 20 05:01:02 2024 GMT
            Not After : Sep 21 05:01:02 2024 GMT
        Subject: CN=e04e09f2ffa90dbecaf1498607baa999f387e069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:5a:b3:f1:fa:7e:3b:88:c3:cb:5f:3b:03:
                    ee:fa:19:59:95:1b:03:e1:1d:92:a6:9a:cd:6d:27:
                    28:c6:f8:67:51:fc:7a:5f:76:2e:cb:d7:74:e5:aa:
                    49:d9:c3:d0:9a:15:6c:44:d0:4b:0d:b1:a0:cc:9e:
                    4e:61:48:ec:1b:7a:b9:ac:89:3b:a1:b8:6d:f8:c8:
                    cd:e0:4c:ad:75:62:fc:c8:9e:e5:1c:b9:0b:e5:3c:
                    ca:84:9f:cb:41:07:7e:f2:31:a7:74:79:1c:00:4e:
                    0a:75:89:0a:81:f9:1e:94:84:16:16:cf:e8:5b:a4:
                    9a:4f:11:7a:0b:9a:a0:07:19:57:4b:17:11:24:01:
                    d7:e6:28:f6:e4:13:8f:14:76:c5:cb:e3:fa:99:0c:
                    04:7f:0a:4e:cc:cb:a3:e7:5d:7f:ca:a8:b5:a0:01:
                    d7:a2:60:a1:03:09:82:68:4d:9d:73:60:a8:3a:75:
                    63:89:2b:96:2d:13:6b:b0:4e:b3:31:46:e5:4f:3f:
                    68:95:66:4e:86:2b:1d:73:12:80:8b:55:15:d7:0a:
                    de:2f:d3:e8:59:19:b2:d7:e8:1b:1d:cb:ef:5f:98:
                    0d:7a:d6:ef:8d:eb:da:fc:58:c4:9d:f9:15:3c:6c:
                    c4:66:05:a5:c4:83:55:d4:c7:17:6a:42:91:6a:20:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4E:09:F2:FF:A9:0D:BE:CA:F1:49:86:07:BA:A9:99:F3:87:E0:69
            X509v3 Authority Key Identifier:
                keyid:4B:68:E1:FB:A7:B4:4A:7B:66:62:36:B2:12:53:D7:D6:36:2D:0D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2jh-6e0SntmYjayElPX1jYtDYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f14079-4114-4bec-879c-8b06ec564a1b/1/S2jh-6e0SntmYjayElPX1jYtDYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6f:e2:fd:20:72:0a:e8:b7:4d:da:9c:41:21:b6:92:32:ae:
         85:6c:e9:c8:58:5f:01:58:5c:dd:57:1f:3d:67:a7:5c:9a:16:
         fe:76:b9:24:f1:6d:7d:3f:51:a2:f5:60:69:12:ba:ad:2b:8e:
         b7:01:03:96:1d:fa:4b:f7:7b:00:e8:23:c9:00:e9:7d:8d:8a:
         ca:b5:7e:50:ff:89:7b:fa:5f:25:e1:e4:40:7b:d8:d0:28:46:
         d4:3e:ba:11:17:c0:92:a5:71:0a:db:18:6d:2a:57:c0:b0:ab:
         0e:9d:2a:f8:a9:0e:42:df:bc:e2:98:82:b3:e0:ce:de:4a:c2:
         fe:79:ee:63:cd:ea:52:11:1a:fc:8b:0d:1e:88:6e:7e:35:7d:
         9b:96:ea:03:ed:7c:c2:12:e0:26:21:84:53:e4:56:46:2a:1f:
         30:50:14:13:ac:40:e0:19:0b:ee:a1:d3:80:b4:d9:b5:18:55:
         c1:26:e8:86:37:af:c5:70:80:71:91:52:a3:52:c9:ba:8b:bf:
         1f:cd:5b:31:97:27:d6:7d:28:a4:03:db:93:04:f8:97:51:46:
         f9:e4:75:38:8a:2d:34:06:e5:94:af:69:3b:56:95:0b:95:41:
         52:09:b2:ab:a4:f0:93:d3:20:18:2c:a3:71:2e:df:b9:28:fe:
         6d:74:52:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZINzhOBJLJaBqFOAptuao6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNjhlMWZiYTdiNDRhN2I2NjYyMzZiMjEyNTNkN2Q2MzYy
ZDBkODMwHhcNMjQwOTIwMDUwMTAyWhcNMjQwOTIxMDUwMTAyWjAzMTEwLwYDVQQD
EyhlMDRlMDlmMmZmYTkwZGJlY2FmMTQ5ODYwN2JhYTk5OWYzODdlMDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt9as/H6fjuIw8tfOwPu+hlZlRsD
4R2SpprNbScoxvhnUfx6X3Yuy9d05apJ2cPQmhVsRNBLDbGgzJ5OYUjsG3q5rIk7
obht+MjN4EytdWL8yJ7lHLkL5TzKhJ/LQQd+8jGndHkcAE4KdYkKgfkelIQWFs/o
W6SaTxF6C5qgBxlXSxcRJAHX5ij25BOPFHbFy+P6mQwEfwpOzMuj511/yqi1oAHX
omChAwmCaE2dc2CoOnVjiSuWLRNrsE6zMUblTz9olWZOhisdcxKAi1UV1wreL9Po
WRmy1+gbHcvvX5gNetbvjeva/FjEnfkVPGzEZgWlxINV1McXakKRaiB/mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOBOCfL/qQ2+yvFJhge6qZnzh+BpMB8GA1UdIwQY
MBaAFEto4funtEp7ZmI2shJT19Y2LQ2DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMt
OGIwNmVjNTY0YTFiLzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mMTQwNzktNDExNC00YmVjLTg3OWMtOGIwNmVjNTY0YTFi
LzEvUzJqaC02ZTBTbnRtWWpheUVsUFgxall0RFlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAom/i/SBy
Cui3TdqcQSG2kjKuhWzpyFhfAVhc3VcfPWenXJoW/na5JPFtfT9RovVgaRK6rSuO
twEDlh36S/d7AOgjyQDpfY2KyrV+UP+Je/pfJeHkQHvY0ChG1D66ERfAkqVxCtsY
bSpXwLCrDp0q+KkOQt+84piCs+DO3krC/nnuY83qUhEa/IsNHohufjV9m5bqA+18
whLgJiGEU+RWRiofMFAUE6xA4BkL7qHTgLTZtRhVwSbohjevxXCAcZFSo1LJuou/
H81bMZcn1n0opAPbkwT4l1FG+eR1OIotNAbllK9pO1aVC5VBUgmyq6Twk9MgGCyj
cS7fuSj+bXRSXQ==
-----END CERTIFICATE-----