Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
File:                     aQvbGIma-yf-H_eAUW_MC5PIuA0.mft (raw, json)
Hash identifier:          IaYeIFEy4l4JB2GboN2QnWRnyf27l2sL5TZ+S40K/cE=
Subject key identifier:   6D:F0:2A:7A:F8:7A:97:CD:47:15:4C:1E:DF:3A:81:07:A9:22:C6:D3
Authority key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Certificate issuer:       /CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Certificate serial:       019355766EF45DCFD2D098A839BB7E15F572
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
Manifest number:          04F8
Signing time:             Fri 22 Nov 2024 20:00:45 +0000
Manifest this update:     Fri 22 Nov 2024 20:00:45 +0000
Manifest next update:     Sat 23 Nov 2024 20:00:45 +0000
Files and hashes:         1: aQvbGIma-yf-H_eAUW_MC5PIuA0.crl (hash: lZirtOr5uMdnVwne7GSFJOy9h3lOhr8SVhXZABsFIcc=)
                          2: d_-0kz4dtmk-IEet0yXsm2ww5kg.roa (hash: lWYjK8ht15UsDeKiO1M62oJV7xGkT0+7s+kwy9KI5wk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 20:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:76:6e:f4:5d:cf:d2:d0:98:a8:39:bb:7e:15:f5:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
        Validity
            Not Before: Nov 22 20:00:45 2024 GMT
            Not After : Nov 23 20:00:45 2024 GMT
        Subject: CN=6df02a7af87a97cd47154c1edf3a8107a922c6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:a7:08:97:b7:5d:12:9d:1d:47:68:28:b2:
                    10:48:84:7c:2e:c1:aa:b6:b4:66:e0:91:b8:af:57:
                    46:53:29:64:32:c6:b6:41:4f:fe:d0:c8:88:db:52:
                    ba:cb:41:37:71:07:cd:e8:33:b6:e2:aa:7f:a4:9a:
                    35:ce:eb:7a:f3:9e:c1:56:19:f6:6d:8a:b1:fc:a5:
                    c4:c7:80:1f:99:13:00:67:59:c1:c3:44:80:71:53:
                    f5:9d:ad:e5:46:e0:e4:a2:02:f3:70:a8:43:69:7d:
                    2d:d7:f2:49:8d:0b:71:55:0a:69:e5:76:44:a6:ef:
                    6f:70:af:84:59:38:9d:fb:2f:66:5a:cc:6f:31:5a:
                    ff:c9:7c:01:96:8c:c4:f6:e7:b4:fd:88:a9:19:8d:
                    0e:cf:ba:ec:2b:95:2e:86:98:67:13:11:a3:51:79:
                    c3:7f:02:c8:fc:60:58:8d:1c:d1:d2:0f:fd:75:d7:
                    94:06:da:17:2b:bb:27:da:42:50:47:76:6d:a2:25:
                    2d:56:a0:08:2e:6b:7c:67:20:79:8d:d5:1b:0f:71:
                    dd:85:49:16:55:3b:63:54:fc:59:90:c8:05:cb:ff:
                    b0:cb:c3:2f:c2:0c:9b:a4:d2:09:68:64:fc:cf:9b:
                    0c:1a:36:4b:b4:f1:90:e8:df:a6:08:0f:82:3e:1f:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F0:2A:7A:F8:7A:97:CD:47:15:4C:1E:DF:3A:81:07:A9:22:C6:D3
            X509v3 Authority Key Identifier:
                keyid:69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:67:53:08:ab:b8:a3:d8:14:e0:79:d8:48:2e:b0:d3:d0:1d:
         ec:d7:ce:ee:ba:78:51:1f:b5:3e:90:8c:86:a6:b7:58:19:5d:
         8f:82:50:a5:f4:aa:ca:5f:08:ad:be:44:77:34:5e:85:6e:ce:
         b1:23:fa:10:ff:f1:87:6e:0e:07:40:90:58:b7:cc:9e:d2:74:
         a5:a8:a3:3d:4b:ba:e1:64:b1:c5:5b:54:bb:9e:27:bd:00:b6:
         d8:10:b3:ec:8e:cf:8c:90:2f:1e:66:3d:e8:29:98:16:94:e7:
         f4:2a:ed:6e:4b:cd:13:22:be:b9:e6:61:87:be:3e:15:bc:3c:
         09:bf:50:42:35:de:cc:3e:2b:76:fe:31:b8:f2:9a:ee:04:ad:
         c9:81:5f:45:d6:bd:30:5d:c9:c8:84:89:0c:3b:f6:f2:b5:b5:
         cc:5a:b2:00:b6:5e:95:2d:e1:a9:32:b8:8c:e7:f9:cc:2c:4f:
         84:5b:8d:f5:dd:c4:09:ca:c9:aa:1a:61:9d:a1:ae:41:7d:11:
         24:44:97:92:5f:7b:21:42:49:4a:88:41:5c:24:d2:f3:04:d6:
         fa:ba:02:c6:be:2d:83:54:56:32:e3:98:9d:08:2a:bd:90:06:
         40:af:50:85:e2:49:49:85:a5:74:ef:c6:08:cb:a7:da:1e:e6:
         8f:99:1f:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVdm70Xc/S0JioObt+FfVyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGJkYjE4ODk5YWZiMjdmZTFmZjc4MDUxNmZjYzBiOTNj
OGI4MGQwHhcNMjQxMTIyMjAwMDQ1WhcNMjQxMTIzMjAwMDQ1WjAzMTEwLwYDVQQD
Eyg2ZGYwMmE3YWY4N2E5N2NkNDcxNTRjMWVkZjNhODEwN2E5MjJjNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fynCJe3XRKdHUdoKLIQSIR8LsGq
trRm4JG4r1dGUylkMsa2QU/+0MiI21K6y0E3cQfN6DO24qp/pJo1zut6857BVhn2
bYqx/KXEx4AfmRMAZ1nBw0SAcVP1na3lRuDkogLzcKhDaX0t1/JJjQtxVQpp5XZE
pu9vcK+EWTid+y9mWsxvMVr/yXwBlozE9ue0/YipGY0Oz7rsK5UuhphnExGjUXnD
fwLI/GBYjRzR0g/9ddeUBtoXK7sn2kJQR3ZtoiUtVqAILmt8ZyB5jdUbD3HdhUkW
VTtjVPxZkMgFy/+wy8MvwgybpNIJaGT8z5sMGjZLtPGQ6N+mCA+CPh9RgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3wKnr4epfNRxVMHt86gQepIsbTMB8GA1UdIwQY
MBaAFGkL2xiJmvsn/h/3gFFvzAuTyLgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82ZDg0NzAtNDg2MS00MTZkLWE3MmEt
MjhhZGVkOGRkZmFiLzEvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82ZDg0NzAtNDg2MS00MTZkLWE3MmEtMjhhZGVkOGRkZmFi
LzEvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGdTCKu4
o9gU4HnYSC6w09Ad7NfO7rp4UR+1PpCMhqa3WBldj4JQpfSqyl8Irb5EdzRehW7O
sSP6EP/xh24OB0CQWLfMntJ0paijPUu64WSxxVtUu54nvQC22BCz7I7PjJAvHmY9
6CmYFpTn9CrtbkvNEyK+ueZhh74+Fbw8Cb9QQjXezD4rdv4xuPKa7gStyYFfRda9
MF3JyISJDDv28rW1zFqyALZelS3hqTK4jOf5zCxPhFuN9d3ECcrJqhphnaGuQX0R
JESXkl97IUJJSohBXCTS8wTW+roCxr4tg1RWMuOYnQgqvZAGQK9QheJJSYWldO/G
CMun2h7mj5kfng==
-----END CERTIFICATE-----