Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File:                     5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier:          Vojwmg2GSnEJN1BaCHisysIl7zq6btVB4wRjTKmsl+U=
Subject key identifier:   1D:43:06:DA:64:79:25:A0:7A:8C:4E:59:06:B3:43:C6:82:4D:C5:4F
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer:       /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial:       019351D0B478734FA62983B4977671BC8C59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number:          107C
Signing time:             Fri 22 Nov 2024 03:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:52 +0000
Files and hashes:         1: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: GSQWfYE4e5U33FsrhPXfG2gZXols+wlZp3oPYbE2/0A=)
                          2: gp4U2hMpTAKHtfcyqBBjZJamCK0.roa (hash: ICWPRJnN0aZWedngGzSQkOX15DYmTAB/y21b53D2iLQ=)
                          3: xfvKPMdDGsdPIRbt-zpv6kJEsR8.roa (hash: KmvPqG/QG3nANjFID7xOEueQj0zspuRhxWIUwA+UGJA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:b4:78:73:4f:a6:29:83:b4:97:76:71:bc:8c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
        Validity
            Not Before: Nov 22 03:00:52 2024 GMT
            Not After : Nov 23 03:00:52 2024 GMT
        Subject: CN=1d4306da647925a07a8c4e5906b343c6824dc54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c9:ad:e8:90:23:51:b3:85:71:7b:5b:8c:6f:
                    d6:bd:29:af:94:06:7c:a5:7a:a3:4f:8b:36:4d:af:
                    82:aa:96:6d:20:4e:df:05:b0:e2:35:44:9b:4c:6f:
                    7d:b2:76:b5:53:73:c2:05:1c:f5:11:cb:c1:c3:56:
                    74:20:31:b4:2b:93:80:b8:1e:2b:de:08:67:dc:20:
                    2c:1c:48:00:65:98:78:b4:70:84:3e:9f:01:9c:a3:
                    98:07:23:61:1a:9c:86:4b:24:f1:f5:eb:9d:60:ff:
                    1c:40:e6:92:8f:ee:74:bc:ca:2f:a8:1b:e9:8f:ba:
                    e8:ef:53:e4:9d:7c:61:56:95:a9:86:37:85:e3:ae:
                    1a:4e:b3:d0:ae:37:68:ba:ff:e7:eb:d2:5a:b1:f3:
                    32:ae:d2:c1:41:fb:cb:22:34:c0:88:58:d7:cf:41:
                    16:06:07:f1:e7:9f:5d:5b:ad:91:98:36:fe:25:67:
                    d6:7a:23:0d:69:b8:be:75:d3:fe:62:87:81:7c:cd:
                    b8:c1:bd:4e:3f:e3:1a:08:2c:68:2c:58:92:25:b5:
                    f8:35:56:e5:04:f7:2d:e4:74:d2:ad:20:df:fa:1c:
                    bb:a8:6a:ee:a0:e2:99:0b:d4:23:1c:1c:a7:e9:b0:
                    95:6c:2a:9f:fa:68:b9:31:f4:28:93:2d:b8:fa:1e:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:43:06:DA:64:79:25:A0:7A:8C:4E:59:06:B3:43:C6:82:4D:C5:4F
            X509v3 Authority Key Identifier:
                keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:e9:72:9c:0b:05:35:aa:7b:d7:25:67:ae:82:29:d4:24:db:
         33:4f:17:c7:80:40:b5:23:95:db:44:10:e0:18:00:3a:27:73:
         73:e8:9e:17:00:29:3f:07:b5:d2:c4:1d:bc:59:7d:a1:bf:6d:
         75:12:8c:50:73:81:de:b1:cf:4b:eb:e5:38:85:d9:8d:7e:4e:
         ee:85:1e:1a:53:2c:34:96:9f:dd:20:9f:40:b7:26:3b:a5:dd:
         0e:49:a5:bf:d9:da:26:de:61:2f:0d:fa:3b:a1:6c:35:9f:a7:
         d9:91:ab:50:2f:20:05:36:91:8c:55:21:15:e9:14:e0:ae:4a:
         d1:b9:66:0c:57:88:83:2a:9e:2b:6a:66:4e:67:29:57:98:08:
         92:7f:08:ad:5e:ee:e8:0d:de:92:74:81:03:17:42:bf:9f:ed:
         1e:55:4b:b4:88:87:02:6e:9a:9c:71:2b:88:95:c8:8f:c9:44:
         14:56:c0:b5:71:f5:f9:17:64:c0:c8:18:2e:4d:61:1f:80:23:
         58:e6:f0:29:98:dc:dc:d2:14:83:a9:88:7b:d6:01:a0:fa:c1:
         ba:e4:ac:fe:ad:28:49:fa:81:6b:73:d2:bf:29:ca:de:31:22:
         9f:bc:d1:f5:4e:59:99:aa:10:6d:6c:c9:d8:62:90:9b:51:e0:
         2e:75:c4:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNR0LR4c0+mKYO0l3ZxvIxZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NmEzZjgzODY4ODg0Mzc1OGQyODA1NzAwN2RjNmNkMjg5
OGVjY2EwHhcNMjQxMTIyMDMwMDUyWhcNMjQxMTIzMDMwMDUyWjAzMTEwLwYDVQQD
EygxZDQzMDZkYTY0NzkyNWEwN2E4YzRlNTkwNmIzNDNjNjgyNGRjNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsmt6JAjUbOFcXtbjG/WvSmvlAZ8
pXqjT4s2Ta+CqpZtIE7fBbDiNUSbTG99sna1U3PCBRz1EcvBw1Z0IDG0K5OAuB4r
3ghn3CAsHEgAZZh4tHCEPp8BnKOYByNhGpyGSyTx9eudYP8cQOaSj+50vMovqBvp
j7ro71PknXxhVpWphjeF464aTrPQrjdouv/n69JasfMyrtLBQfvLIjTAiFjXz0EW
Bgfx559dW62RmDb+JWfWeiMNabi+ddP+YoeBfM24wb1OP+MaCCxoLFiSJbX4NVbl
BPct5HTSrSDf+hy7qGruoOKZC9QjHByn6bCVbCqf+mi5MfQoky24+h4c9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1DBtpkeSWgeoxOWQazQ8aCTcVPMB8GA1UdIwQY
MBaAFORqP4OGiIQ3WNKAVwB9xs0omOzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMt
YTNiMDZkNGU0Nzc1LzEvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC81MmNmOTktZTc5OC00Y2FiLWEzMDMtYTNiMDZkNGU0Nzc1
LzEvNUdvX2c0YUloRGRZMG9CWEFIM0d6U2lZN01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlulynAsF
Nap71yVnroIp1CTbM08Xx4BAtSOV20QQ4BgAOidzc+ieFwApPwe10sQdvFl9ob9t
dRKMUHOB3rHPS+vlOIXZjX5O7oUeGlMsNJaf3SCfQLcmO6XdDkmlv9naJt5hLw36
O6FsNZ+n2ZGrUC8gBTaRjFUhFekU4K5K0blmDFeIgyqeK2pmTmcpV5gIkn8IrV7u
6A3eknSBAxdCv5/tHlVLtIiHAm6anHEriJXIj8lEFFbAtXH1+RdkwMgYLk1hH4Aj
WObwKZjc3NIUg6mIe9YBoPrBuuSs/q0oSfqBa3PSvynK3jEin7zR9U5ZmaoQbWzJ
2GKQm1HgLnXEdg==
-----END CERTIFICATE-----