Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File:                     IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier:          c7fkx179ZDuHOGqaT9u5fz2CkjgxLp6tAGCkFqaEFFY=
Subject key identifier:   B2:D5:64:30:D2:1D:E7:E6:C7:7E:E1:F1:61:D5:C8:61:B3:2F:20:7F
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer:       /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial:       0193576456BA0675C1DCCBED697672A2B6EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number:          0291
Signing time:             Sat 23 Nov 2024 05:00:13 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:13 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:13 +0000
Files and hashes:         1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: Lfy12CDd70Nk8dqKT77rePh0K2dipYIvktmZ1wedvAI=)
                          2: PmxA-hRmVnPg-n1blpcraycVnOE.roa (hash: bYAKl1ZVm7V9IFPA/5gWuq8P0kAitknVPX6TJUI+No8=)
                          3: w3CgoF7l6g6nY6myE4jfmWURNe8.roa (hash: QQ2Y4XksmHFCCOhDUdNxNBn6+ux8H258WAIhCJS010Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:56:ba:06:75:c1:dc:cb:ed:69:76:72:a2:b6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
        Validity
            Not Before: Nov 23 05:00:13 2024 GMT
            Not After : Nov 24 05:00:13 2024 GMT
        Subject: CN=b2d56430d21de7e6c77ee1f161d5c861b32f207f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:30:d5:c2:92:5f:53:c7:04:32:1e:93:33:12:
                    24:ea:46:d4:df:9e:ad:63:e6:e5:12:7d:c9:49:1d:
                    59:7b:22:6f:b3:b4:68:c7:aa:e2:40:c2:ec:da:ce:
                    d2:68:aa:4b:69:64:fc:dc:cf:7b:6f:9a:0b:d1:b3:
                    e8:ca:7d:5b:fb:ba:d6:e6:6b:ca:a1:59:d6:75:63:
                    35:a4:69:29:f4:f3:c0:33:93:cf:ef:b5:a5:ff:21:
                    59:46:07:5e:a2:3d:b7:a6:d0:62:8b:ab:68:54:74:
                    8f:3f:3b:b8:76:1b:44:14:be:7f:21:94:8c:37:a4:
                    42:5d:cd:b2:c0:e7:aa:83:59:43:34:f6:18:cf:16:
                    5f:a9:0b:ec:b3:11:80:6d:17:f2:fd:91:56:b8:fb:
                    d1:04:2b:62:52:9f:24:d8:06:dc:62:ec:f2:fb:61:
                    75:cf:8b:bd:20:9d:da:76:a4:dc:7f:8d:14:2c:8c:
                    7b:77:96:34:62:7f:38:a5:f4:53:1c:a0:bc:69:33:
                    87:c0:38:f3:9f:a9:29:33:f9:c6:cd:1d:8b:af:61:
                    26:3c:3f:0d:46:da:1c:99:64:eb:14:c1:9f:91:7b:
                    15:bf:4e:9b:37:46:f5:41:7f:ba:2a:4d:4e:9b:b1:
                    c6:33:f9:7f:a2:c2:e1:45:36:a8:fa:30:1e:c5:51:
                    f1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D5:64:30:D2:1D:E7:E6:C7:7E:E1:F1:61:D5:C8:61:B3:2F:20:7F
            X509v3 Authority Key Identifier:
                keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f2:f9:f6:be:88:12:45:27:b1:4a:c1:6e:72:57:bb:8e:88:
         9e:45:b2:ff:e3:65:51:90:62:1e:df:24:ab:16:72:8a:a8:f4:
         12:b6:83:8a:f5:33:e1:35:3b:b8:d2:f9:8a:72:6d:7b:f3:3b:
         a3:1a:0d:b4:c4:dc:04:42:ec:d9:e7:cb:1c:b2:a6:ef:b9:87:
         43:b2:f6:13:73:61:79:6b:88:44:7e:25:a4:5d:d3:c4:45:de:
         d8:0b:4e:05:81:7c:ea:c4:7a:be:92:92:4c:3d:7c:a7:ab:7c:
         c7:aa:ff:04:a8:9f:65:15:1b:a4:0e:b7:de:e4:6c:23:39:66:
         1e:8f:e1:19:91:98:af:f9:af:db:fe:80:10:0a:ae:ec:7e:87:
         d3:6d:19:de:17:fc:69:71:bb:6c:45:14:50:93:df:54:93:52:
         c7:8f:86:1c:61:d8:02:b6:27:58:9f:22:08:9b:41:bc:d0:45:
         85:61:c2:a7:61:79:be:14:ce:7a:cc:43:db:7c:f9:44:01:c8:
         b9:80:8c:5a:60:47:26:37:4e:ff:3b:fe:46:2d:27:b1:47:d8:
         6b:ec:f4:a2:b4:68:31:61:5b:e4:42:6f:76:76:1b:69:db:4d:
         1a:4a:eb:ab:ae:e7:52:f6:93:8b:92:3e:1f:ee:2f:5f:4e:ca:
         a1:63:9e:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZFa6BnXB3MvtaXZyorbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYTE5ZWQ4NWEyYzBjZmM0ZjUwYmVhZDE2ZmM5ZjZmMTQ2
NWFkMTEwHhcNMjQxMTIzMDUwMDEzWhcNMjQxMTI0MDUwMDEzWjAzMTEwLwYDVQQD
EyhiMmQ1NjQzMGQyMWRlN2U2Yzc3ZWUxZjE2MWQ1Yzg2MWIzMmYyMDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjDVwpJfU8cEMh6TMxIk6kbU356t
Y+blEn3JSR1ZeyJvs7Rox6riQMLs2s7SaKpLaWT83M97b5oL0bPoyn1b+7rW5mvK
oVnWdWM1pGkp9PPAM5PP77Wl/yFZRgdeoj23ptBii6toVHSPPzu4dhtEFL5/IZSM
N6RCXc2ywOeqg1lDNPYYzxZfqQvssxGAbRfy/ZFWuPvRBCtiUp8k2AbcYuzy+2F1
z4u9IJ3adqTcf40ULIx7d5Y0Yn84pfRTHKC8aTOHwDjzn6kpM/nGzR2Lr2EmPD8N
RtocmWTrFMGfkXsVv06bN0b1QX+6Kk1Om7HGM/l/osLhRTao+jAexVHx5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLVZDDSHefmx37h8WHVyGGzLyB/MB8GA1UdIwQY
MBaAFCKhnthaLAz8T1C+rRb8n28UZa0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMt
ZDdiMmFkMDFhMWQ3LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9lN2VkZmYtODZkYS00NDlmLWI4OWMtZDdiMmFkMDFhMWQ3
LzEvSXFHZTJGb3NEUHhQVUw2dEZ2eWZieFJsclJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq/L59r6I
EkUnsUrBbnJXu46InkWy/+NlUZBiHt8kqxZyiqj0EraDivUz4TU7uNL5inJte/M7
oxoNtMTcBELs2efLHLKm77mHQ7L2E3NheWuIRH4lpF3TxEXe2AtOBYF86sR6vpKS
TD18p6t8x6r/BKifZRUbpA633uRsIzlmHo/hGZGYr/mv2/6AEAqu7H6H020Z3hf8
aXG7bEUUUJPfVJNSx4+GHGHYArYnWJ8iCJtBvNBFhWHCp2F5vhTOesxD23z5RAHI
uYCMWmBHJjdO/zv+Ri0nsUfYa+z0orRoMWFb5EJvdnYbadtNGkrrq67nUvaTi5I+
H+4vX07KoWOe5A==
-----END CERTIFICATE-----