Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File:                     OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier:          Rfd+bxiVLiZbp9OEgH5vaMjAhwc9lfPGtXHYeZQDEGw=
Subject key identifier:   75:25:A7:11:83:4C:38:ED:6A:24:40:93:E9:72:04:2B:78:D4:F7:84
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer:       /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial:       019358E55B9EDE8F7F92BA16896D9F632DCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number:          B1
Signing time:             Sat 23 Nov 2024 12:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:46 +0000
Files and hashes:         1: 839xkpeKNuy84i8X4AkiBw2GJS0.roa (hash: GdoZFHkiwsLL8gm2t0ibCuQsPTe00UKgY2KIRawUe7g=)
                          2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: 1Rm8jTvkxa5gVsI0wsNHKbljgGjiZ6pBBNga/hnctyk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e5:5b:9e:de:8f:7f:92:ba:16:89:6d:9f:63:2d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
        Validity
            Not Before: Nov 23 12:00:46 2024 GMT
            Not After : Nov 24 12:00:46 2024 GMT
        Subject: CN=7525a711834c38ed6a244093e972042b78d4f784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:bc:55:fc:ce:5e:96:79:3a:f8:90:32:3f:
                    5e:ef:b3:88:02:de:b4:0a:59:17:3b:de:ad:1b:cc:
                    fb:72:72:fa:ec:cb:cf:11:03:36:c6:b2:8a:93:a0:
                    ce:76:96:88:12:51:da:b5:c7:9b:ac:9f:4f:39:46:
                    f8:13:30:a7:d0:a3:5f:c8:a5:54:d9:ab:90:12:d6:
                    3f:9a:cf:fc:57:e8:63:95:b3:6a:55:41:6d:65:34:
                    aa:3b:2f:48:48:bb:31:4f:81:2e:99:ff:88:d3:eb:
                    26:d0:53:e6:24:90:c0:e2:ae:39:8a:15:e3:b3:e5:
                    02:ed:50:eb:bc:68:11:44:ff:26:ec:64:f1:6d:54:
                    39:c8:aa:0e:89:c9:54:d0:41:b7:57:08:b3:d6:cf:
                    b6:5b:df:fd:bf:ea:79:a5:17:d7:91:19:b6:5f:18:
                    53:7f:03:c9:de:f8:74:17:8e:1c:65:8e:9b:3b:fc:
                    09:4b:ef:22:a9:17:4a:00:7c:e9:2b:ab:4d:de:1c:
                    33:b5:ea:18:8b:e9:4f:c4:fe:30:18:31:bb:c6:ac:
                    9a:26:35:35:d3:0a:e6:a7:05:7c:4e:c7:ad:44:25:
                    e1:42:8c:02:94:4e:8e:02:13:3b:48:41:5f:37:2f:
                    c4:c1:66:39:fa:90:7f:b8:96:55:84:f8:c9:f9:b1:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:25:A7:11:83:4C:38:ED:6A:24:40:93:E9:72:04:2B:78:D4:F7:84
            X509v3 Authority Key Identifier:
                keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:b3:38:36:df:de:a4:c2:9b:08:b8:a4:80:c4:f9:09:4d:
         02:ca:82:98:e8:0e:86:cc:7e:42:ef:86:89:e8:6d:df:fc:5d:
         3c:42:0b:a4:39:83:fa:5e:4e:f8:61:b5:94:62:8e:e9:5e:34:
         76:26:fb:79:0b:df:c1:ce:2f:74:fe:89:d3:fe:ef:ad:d6:0d:
         cf:cd:cb:76:18:9b:8b:a4:8a:89:5c:49:c8:d9:d6:46:2e:69:
         fd:bb:cb:a8:a7:19:68:46:61:33:80:e4:9b:44:9a:04:6d:4f:
         11:6a:0b:aa:c7:20:d3:fa:5a:46:6c:57:74:8d:54:d8:8a:69:
         0a:40:29:9e:f9:11:99:38:48:41:30:4f:aa:b5:93:a8:82:8a:
         f5:3c:62:d8:f2:bb:1e:3f:68:44:10:18:1a:02:f3:23:3e:13:
         90:1e:92:cb:97:94:d1:a5:b5:5b:7c:5f:ee:47:c5:87:b4:5c:
         ef:ff:2b:ec:a6:88:69:33:b6:d0:78:44:9b:50:3a:fb:6a:63:
         7a:32:69:65:38:d2:0f:53:95:6d:51:e9:3b:9a:c9:93:c3:6d:
         1d:66:fe:f1:7c:b0:0c:d0:84:65:f6:99:cb:8d:27:bf:7c:85:
         55:5c:41:68:5d:c2:df:64:27:70:2e:5b:46:df:2d:1a:37:b4:
         1e:69:7f:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNY5Vue3o9/kroWiW2fYy3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MmY2ZWU2ZWUzNDZjMzE5MTJiNzYzMGRhYjE0Y2U1M2M0
ZTBjOTkwHhcNMjQxMTIzMTIwMDQ2WhcNMjQxMTI0MTIwMDQ2WjAzMTEwLwYDVQQD
Eyg3NTI1YTcxMTgzNGMzOGVkNmEyNDQwOTNlOTcyMDQyYjc4ZDRmNzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYS8VfzOXpZ5OviQMj9e77OIAt60
ClkXO96tG8z7cnL67MvPEQM2xrKKk6DOdpaIElHatcebrJ9POUb4EzCn0KNfyKVU
2auQEtY/ms/8V+hjlbNqVUFtZTSqOy9ISLsxT4Eumf+I0+sm0FPmJJDA4q45ihXj
s+UC7VDrvGgRRP8m7GTxbVQ5yKoOiclU0EG3Vwiz1s+2W9/9v+p5pRfXkRm2XxhT
fwPJ3vh0F44cZY6bO/wJS+8iqRdKAHzpK6tN3hwzteoYi+lPxP4wGDG7xqyaJjU1
0wrmpwV8TsetRCXhQowClE6OAhM7SEFfNy/EwWY5+pB/uJZVhPjJ+bEagQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUlpxGDTDjtaiRAk+lyBCt41PeEMB8GA1UdIwQY
MBaAFDkvbubuNGwxkSt2MNqxTOU8TgyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYt
OGE3MmExYjZhZjg1LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYtOGE3MmExYjZhZjg1
LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4qzODbf
3qTCmwi4pIDE+QlNAsqCmOgOhsx+Qu+Gieht3/xdPEILpDmD+l5O+GG1lGKO6V40
dib7eQvfwc4vdP6J0/7vrdYNz83Ldhibi6SKiVxJyNnWRi5p/bvLqKcZaEZhM4Dk
m0SaBG1PEWoLqscg0/paRmxXdI1U2IppCkApnvkRmThIQTBPqrWTqIKK9Txi2PK7
Hj9oRBAYGgLzIz4TkB6Sy5eU0aW1W3xf7kfFh7Rc7/8r7KaIaTO20HhEm1A6+2pj
ejJpZTjSD1OVbVHpO5rJk8NtHWb+8XywDNCEZfaZy40nv3yFVVxBaF3C32QncC5b
Rt8tGje0Hml/iQ==
-----END CERTIFICATE-----