Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
File:                     LiSXk-WSSp8l86Co3ZlLN065N9I.mft (raw, json)
Hash identifier:          I/2S6D7vowXF1qDiYImXBhEM464AeOWv3hVIZ9TnksY=
Subject key identifier:   5B:A3:11:06:28:2F:88:DD:A6:E1:E7:D9:25:F6:B1:6A:3F:D0:6F:1C
Authority key identifier: 2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2
Certificate issuer:       /CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
Certificate serial:       018F87B6B56C131DDBAEC4259389D4532C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
Manifest number:          1150
Signing time:             Fri 17 May 2024 18:00:49 +0000
Manifest this update:     Fri 17 May 2024 18:00:49 +0000
Manifest next update:     Sat 18 May 2024 18:00:49 +0000
Files and hashes:         1: LiSXk-WSSp8l86Co3ZlLN065N9I.crl (hash: DR6jLc3KzBjrEE5ZJRE/K8QLjJYt11Qf5rVibeDlit0=)
                          2: fFgtbnHctJVUXeCViDihNjaAwbk.roa (hash: jsSCl8nzx07tptfUnKmO2wNC/yu+Cu6KesL4SpUardc=)
                          3: fyq7C57RYZBzlsjMBAhIwRXOIXE.roa (hash: 2wDNE0IkxGSv5FGJGagl1MR3dP0Xyal4mzFhIXOAwbM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:b5:6c:13:1d:db:ae:c4:25:93:89:d4:53:2c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e249793e5924a9f25f3a0a8dd994b374eb937d2
        Validity
            Not Before: May 17 18:00:49 2024 GMT
            Not After : May 18 18:00:49 2024 GMT
        Subject: CN=5ba31106282f88dda6e1e7d925f6b16a3fd06f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:16:aa:1a:da:3b:e0:cf:ab:bd:1c:a0:79:
                    e1:e7:36:00:fa:00:4f:92:47:a3:ea:fd:65:77:9b:
                    97:8f:d2:9e:23:78:a6:7c:fc:35:93:d5:2e:5f:8d:
                    69:35:41:d3:d7:60:38:65:cb:ef:c5:e1:ba:fd:31:
                    45:56:74:05:f7:73:1f:94:4d:17:86:fb:1b:32:14:
                    9c:73:92:43:3b:61:77:fb:84:e5:d3:78:c1:dc:07:
                    2c:e1:a1:c5:02:2d:26:21:aa:fe:7b:e1:7a:fa:00:
                    24:24:49:76:93:d3:79:06:0f:22:ef:c4:78:e5:3c:
                    4d:2e:54:fe:59:c2:4a:35:9d:da:6c:be:c9:ab:c8:
                    4a:24:c4:6b:3a:c6:34:55:74:d8:21:27:77:d2:63:
                    12:04:a7:f2:85:5d:c6:f2:ec:c4:63:9b:6b:2e:0d:
                    bd:e7:93:e7:02:74:1d:eb:35:95:3f:b3:07:a9:a4:
                    15:1e:bd:3b:ea:96:e4:31:f4:5d:f4:a2:1f:7d:a6:
                    f3:60:15:6a:ad:f2:5b:89:ae:63:d8:02:fd:b2:15:
                    c7:9c:ed:0c:d8:76:20:45:17:b3:b3:3a:9b:cd:3b:
                    b1:60:1a:36:94:c2:f8:d9:5e:c5:39:6b:e8:ec:90:
                    a7:27:6b:06:30:e7:7d:23:81:69:03:3b:96:89:e3:
                    46:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A3:11:06:28:2F:88:DD:A6:E1:E7:D9:25:F6:B1:6A:3F:D0:6F:1C
            X509v3 Authority Key Identifier:
                keyid:2E:24:97:93:E5:92:4A:9F:25:F3:A0:A8:DD:99:4B:37:4E:B9:37:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiSXk-WSSp8l86Co3ZlLN065N9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bfbc8e-eab5-4f20-8eea-96bf143eb452/1/LiSXk-WSSp8l86Co3ZlLN065N9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:da:cf:74:03:b4:c3:57:83:ab:f0:f1:b7:8b:7d:f5:1b:55:
         a9:ca:5c:16:23:5a:ee:b5:4b:b0:df:0a:5f:c0:af:b6:ad:20:
         7a:2b:8f:7a:07:07:95:26:91:2e:7d:2d:31:5f:41:11:f9:63:
         18:7b:bb:fe:e2:96:5a:3c:37:fb:fb:c2:ca:e2:dd:f3:a8:ae:
         cf:d3:55:3c:8d:0a:cc:8c:0e:28:fd:1d:75:07:81:95:05:1a:
         81:ee:47:b0:09:e5:cc:3c:83:8b:b4:eb:14:5b:8f:f6:05:33:
         e9:4f:dc:d5:ff:27:e9:a5:7c:9e:7c:80:d8:95:77:85:29:b9:
         66:5b:1f:8d:39:07:77:dc:8f:0a:64:a5:02:dd:1a:00:83:be:
         42:85:bc:94:c5:d1:d3:ab:54:23:3a:35:73:6d:c4:9d:11:3b:
         52:36:f9:0c:9a:13:73:73:6b:ea:32:02:e6:65:86:fa:96:bb:
         4f:d6:2b:90:3b:3d:29:ed:94:ab:ee:7a:7f:05:07:fe:b6:e1:
         ac:0c:1f:b0:ac:33:70:69:04:55:3f:6a:7b:a5:8e:6e:10:d1:
         c6:47:d0:33:1a:c2:71:a2:53:15:c8:20:fd:86:55:39:9a:4a:
         b9:d0:a7:cf:98:75:05:54:00:39:0a:65:76:ac:94:6d:d5:1f:
         0d:c4:dc:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HtrVsEx3brsQlk4nUUyxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMjQ5NzkzZTU5MjRhOWYyNWYzYTBhOGRkOTk0YjM3NGVi
OTM3ZDIwHhcNMjQwNTE3MTgwMDQ5WhcNMjQwNTE4MTgwMDQ5WjAzMTEwLwYDVQQD
Eyg1YmEzMTEwNjI4MmY4OGRkYTZlMWU3ZDkyNWY2YjE2YTNmZDA2ZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNAWqhraO+DPq70coHnh5zYA+gBP
kkej6v1ld5uXj9KeI3imfPw1k9UuX41pNUHT12A4ZcvvxeG6/TFFVnQF93MflE0X
hvsbMhScc5JDO2F3+4Tl03jB3Acs4aHFAi0mIar+e+F6+gAkJEl2k9N5Bg8i78R4
5TxNLlT+WcJKNZ3abL7Jq8hKJMRrOsY0VXTYISd30mMSBKfyhV3G8uzEY5trLg29
55PnAnQd6zWVP7MHqaQVHr076pbkMfRd9KIffabzYBVqrfJbia5j2AL9shXHnO0M
2HYgRRezszqbzTuxYBo2lML42V7FOWvo7JCnJ2sGMOd9I4FpAzuWieNGqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFujEQYoL4jdpuHn2SX2sWo/0G8cMB8GA1UdIwQY
MBaAFC4kl5PlkkqfJfOgqN2ZSzdOuTfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEt
OTZiZjE0M2ViNDUyLzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iZmJjOGUtZWFiNS00ZjIwLThlZWEtOTZiZjE0M2ViNDUy
LzEvTGlTWGstV1NTcDhsODZDbzNabExOMDY1TjlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9rPdAO0
w1eDq/Dxt4t99RtVqcpcFiNa7rVLsN8KX8Cvtq0geiuPegcHlSaRLn0tMV9BEflj
GHu7/uKWWjw3+/vCyuLd86iuz9NVPI0KzIwOKP0ddQeBlQUage5HsAnlzDyDi7Tr
FFuP9gUz6U/c1f8n6aV8nnyA2JV3hSm5ZlsfjTkHd9yPCmSlAt0aAIO+QoW8lMXR
06tUIzo1c23EnRE7Ujb5DJoTc3Nr6jIC5mWG+pa7T9YrkDs9Ke2Uq+56fwUH/rbh
rAwfsKwzcGkEVT9qe6WObhDRxkfQMxrCcaJTFcgg/YZVOZpKudCnz5h1BVQAOQpl
dqyUbdUfDcTc1Q==
-----END CERTIFICATE-----