Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File:                     xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier:          kkwje4E6phKaXfbmgmH9mUWvrSVtZDAuIO3hQIDcHzE=
Subject key identifier:   C7:F8:97:D3:9B:87:C2:ED:B0:62:FB:B3:D2:4A:7C:B4:23:88:F0:E9
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer:       /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial:       018F8749C7B5288BB87E63E86688454B2D32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number:          0FC1
Signing time:             Fri 17 May 2024 16:01:50 +0000
Manifest this update:     Fri 17 May 2024 16:01:50 +0000
Manifest next update:     Sat 18 May 2024 16:01:50 +0000
Files and hashes:         1: M4DdSHiOP6OMxH3GW2FACDVyPf8.roa (hash: IlPJn0dzlmwJqnqyCRY0JCRnNfi/eBmvdJ5LsquOJF0=)
                          2: n3_k8agOH5MINHyqWIzvVkTgwSI.roa (hash: K7y3JE14AGeUpK54EfwffyPsu6xPRvE+8GIAMKW3DTI=)
                          3: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: DLG2Ynhy1z0VTy7INwLgR8LF4bk5F4x5CLgndHcvpic=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:c7:b5:28:8b:b8:7e:63:e8:66:88:45:4b:2d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
        Validity
            Not Before: May 17 16:01:50 2024 GMT
            Not After : May 18 16:01:50 2024 GMT
        Subject: CN=c7f897d39b87c2edb062fbb3d24a7cb42388f0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:d5:b9:7f:89:6e:74:0f:33:77:a9:6c:27:
                    76:09:45:ae:d4:a4:12:fa:fd:57:dc:b2:61:69:50:
                    e2:81:66:bf:38:d2:ca:be:7a:26:97:5c:a4:b3:e5:
                    05:09:ea:fc:8a:e9:ed:5f:b7:e7:46:9f:ca:9b:54:
                    cf:9f:27:62:6b:f6:61:c3:1a:1f:21:98:f3:1f:ea:
                    1d:09:a6:bc:78:b4:8f:ab:1f:fb:47:42:ac:59:ac:
                    ca:2a:ee:04:d6:bd:65:a3:38:e8:74:a0:38:ed:91:
                    7b:42:49:80:b6:fa:32:35:40:99:39:0a:c9:ba:03:
                    e4:1c:a4:4f:c5:f8:3d:ab:c8:a8:52:9d:f0:70:65:
                    31:9b:55:88:16:0a:53:ec:dd:e5:1d:ab:f0:94:ea:
                    65:19:96:dd:e0:46:56:81:b8:61:92:c6:db:87:90:
                    fa:42:b1:13:66:4c:21:ca:7f:08:6d:41:64:1b:e4:
                    57:02:fa:43:ef:a2:5f:fb:a1:29:e7:d3:ec:36:6f:
                    55:68:ab:0f:16:ab:91:c1:dc:46:97:f6:e9:68:98:
                    74:c6:63:38:1d:81:33:fc:77:9d:7b:0d:74:6a:c3:
                    a9:34:d2:f2:8b:95:65:90:d3:49:c4:08:9b:5f:7f:
                    ec:6e:fa:87:70:5b:79:bf:68:76:89:f7:82:ca:21:
                    51:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F8:97:D3:9B:87:C2:ED:B0:62:FB:B3:D2:4A:7C:B4:23:88:F0:E9
            X509v3 Authority Key Identifier:
                keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:37:f0:d8:46:ab:e9:8c:64:1a:13:e7:7f:43:23:89:37:19:
         ad:38:42:fb:a6:15:74:3d:4d:e8:ba:2e:81:5a:25:57:e5:f6:
         c3:4d:20:bc:15:dd:f9:f0:7c:1b:15:dd:10:51:b6:a7:dd:25:
         a6:d1:e8:ea:95:55:06:7f:5a:0f:06:8d:dc:ac:c3:e6:df:a8:
         b9:e7:61:2b:9b:1c:4b:ab:16:2a:f5:46:3e:38:69:78:2e:04:
         e9:0d:be:f9:09:0c:06:2d:5e:71:97:cf:4e:a9:7a:82:68:3d:
         f3:62:34:2b:f6:ff:0b:07:e5:0b:48:77:7c:ee:bb:eb:2f:99:
         55:a6:11:40:8e:7b:4d:34:a4:78:3a:2a:5a:59:21:f8:76:3c:
         00:84:e0:e7:f4:ea:43:97:4d:f0:23:bd:2d:e9:49:19:5b:78:
         cd:11:bd:0d:e8:80:8d:89:a8:90:94:20:07:e8:c2:f7:7a:2d:
         3a:20:80:42:04:fb:35:e9:53:df:c0:e4:fd:69:bc:4d:80:81:
         a3:1f:b3:72:fd:5c:56:a9:76:6d:35:11:9d:c4:0e:31:48:2c:
         a9:11:58:70:eb:20:9c:e8:d1:59:07:fd:59:95:31:c6:a1:07:
         30:64:8e:e3:f3:03:8a:83:76:a9:bc:21:11:76:da:52:9b:f8:
         37:68:c9:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSce1KIu4fmPoZohFSy0yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj
ZmJmYWYwHhcNMjQwNTE3MTYwMTUwWhcNMjQwNTE4MTYwMTUwWjAzMTEwLwYDVQQD
EyhjN2Y4OTdkMzliODdjMmVkYjA2MmZiYjNkMjRhN2NiNDIzODhmMGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMPVuX+JbnQPM3epbCd2CUWu1KQS
+v1X3LJhaVDigWa/ONLKvnoml1yks+UFCer8iuntX7fnRp/Km1TPnydia/Zhwxof
IZjzH+odCaa8eLSPqx/7R0KsWazKKu4E1r1lozjodKA47ZF7QkmAtvoyNUCZOQrJ
ugPkHKRPxfg9q8ioUp3wcGUxm1WIFgpT7N3lHavwlOplGZbd4EZWgbhhksbbh5D6
QrETZkwhyn8IbUFkG+RXAvpD76Jf+6Ep59PsNm9VaKsPFquRwdxGl/bpaJh0xmM4
HYEz/Hedew10asOpNNLyi5VlkNNJxAibX3/sbvqHcFt5v2h2ifeCyiFRhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMf4l9Obh8LtsGL7s9JKfLQjiPDpMB8GA1UdIwQY
MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et
YTczMGNjZmRhZGM1LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1
LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDfw2Ear
6YxkGhPnf0MjiTcZrThC+6YVdD1N6LougVolV+X2w00gvBXd+fB8GxXdEFG2p90l
ptHo6pVVBn9aDwaN3KzD5t+ouedhK5scS6sWKvVGPjhpeC4E6Q2++QkMBi1ecZfP
Tql6gmg982I0K/b/CwflC0h3fO676y+ZVaYRQI57TTSkeDoqWlkh+HY8AITg5/Tq
Q5dN8CO9LelJGVt4zRG9DeiAjYmokJQgB+jC93otOiCAQgT7NelT38Dk/Wm8TYCB
ox+zcv1cVql2bTURncQOMUgsqRFYcOsgnOjRWQf9WZUxxqEHMGSO4/MDioN2qbwh
EXbaUpv4N2jJGA==
-----END CERTIFICATE-----