Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File:                     xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier:          Unh99ozx0WEQnNGABuirUbNXfrI3III89GY6TGLtZ5o=
Subject key identifier:   97:81:5C:45:44:3F:D8:07:B4:07:8F:19:4F:9C:02:AA:D3:5E:8C:11
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer:       /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial:       019356891E1CC9A6BD066DA542ADD49D156D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number:          0467
Signing time:             Sat 23 Nov 2024 01:00:46 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:46 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:46 +0000
Files and hashes:         1: SDaAGGa7P44WOP-59lmGnbvdwg4.roa (hash: bnt5+2V1dCC0/yyQhlaphCL4OSQtO+nyad6SlymnaL8=)
                          2: SkLXC-IwkCdDd7Ft68afX9OTFOQ.roa (hash: FUvoPKZYazdZ9lozsLhh8do6qaj3RVjVNxSOgF5fcm0=)
                          3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: 0GLuPPFP32otVA0Nh5MgxL43AnqNwsdinuaF7Dcc/qw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:1e:1c:c9:a6:bd:06:6d:a5:42:ad:d4:9d:15:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
        Validity
            Not Before: Nov 23 01:00:46 2024 GMT
            Not After : Nov 24 01:00:46 2024 GMT
        Subject: CN=97815c45443fd807b4078f194f9c02aad35e8c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:a4:7f:30:c0:44:9a:33:2b:53:61:2c:1d:
                    7c:81:ac:3c:8f:e9:33:46:1d:0d:9e:79:e9:65:3e:
                    53:69:eb:ae:23:f9:b3:8a:06:d3:63:5c:fd:91:1c:
                    2a:6f:db:69:42:80:da:68:35:cc:e2:70:ee:17:bc:
                    e5:55:52:e8:2d:f3:9b:30:f9:d0:1b:7d:f2:43:6e:
                    c9:bf:e3:b7:6f:a4:0a:a4:58:5e:6b:bf:1b:88:a9:
                    61:e8:3e:b9:17:5a:a8:cd:ae:fb:aa:bc:e7:9c:0f:
                    e1:34:97:9c:3f:cf:ab:ab:d2:ba:d7:a3:11:24:13:
                    db:d5:87:f5:96:8d:14:6c:af:3c:2e:7d:d8:48:ea:
                    2d:ef:db:50:de:8f:3c:6e:b2:59:89:00:cf:23:65:
                    0c:0f:01:97:43:f1:d3:f7:e2:16:a7:66:eb:0f:ef:
                    81:52:47:94:c2:c0:16:27:d5:bd:e0:da:15:39:b2:
                    5f:6c:ce:00:7a:d9:9d:43:24:6d:86:84:f2:80:99:
                    3e:74:c3:26:e1:5c:d0:78:20:8b:9c:3b:3b:87:63:
                    e6:34:f8:52:7c:14:ea:c2:44:1e:ce:a7:7a:47:5c:
                    54:55:a7:1c:83:29:4f:22:d8:8c:b3:93:a9:e2:bc:
                    ee:6b:f3:38:d1:be:5b:5b:eb:17:c4:62:49:96:df:
                    fd:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:81:5C:45:44:3F:D8:07:B4:07:8F:19:4F:9C:02:AA:D3:5E:8C:11
            X509v3 Authority Key Identifier:
                keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:99:46:49:60:ad:9e:fd:9f:6d:bf:c3:5c:67:5e:a3:b5:a6:
         bd:ff:6f:de:5b:ef:66:96:6d:9d:02:d0:83:1c:88:23:c9:72:
         70:31:1c:5b:80:01:20:c3:95:21:b2:95:fb:04:6e:84:ac:a3:
         1d:8d:f4:6e:75:7b:ee:35:d4:f2:01:49:84:89:9d:63:87:68:
         b6:e5:ae:2e:45:cf:87:46:80:39:0b:9c:52:82:28:4a:51:f9:
         52:c8:9c:1a:d6:0f:3a:97:1e:34:77:3d:de:a1:42:73:e3:65:
         53:0c:18:1f:1f:74:c6:8c:54:91:84:e1:2d:6e:55:9d:b2:19:
         cb:27:4b:9d:41:fe:69:c7:76:9b:47:24:c0:c8:59:67:6b:11:
         38:15:d0:0c:3b:05:b7:50:8b:a5:33:42:36:f9:0a:98:d7:36:
         bf:55:07:05:61:83:b8:0f:83:af:9e:2b:37:40:f7:51:1c:3e:
         d4:ee:9a:de:53:01:64:a1:67:04:cc:1d:0f:ab:fa:21:74:0a:
         73:49:f7:42:61:fc:a8:04:59:ef:59:a1:94:b9:a4:22:0a:21:
         87:0d:ea:12:c2:65:d5:94:2d:04:5a:9e:a0:34:86:cd:20:b1:
         23:55:57:8d:65:f0:92:76:17:da:d2:7e:5f:9b:e4:ec:a0:3b:
         2d:02:e3:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiR4cyaa9Bm2lQq3UnRVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0Y2MwMmY4ZmE3NGNmMGRhODFlOGNlMjk0M2VhN2Y5ZWQy
YTg1ZjQwHhcNMjQxMTIzMDEwMDQ2WhcNMjQxMTI0MDEwMDQ2WjAzMTEwLwYDVQQD
Eyg5NzgxNWM0NTQ0M2ZkODA3YjQwNzhmMTk0ZjljMDJhYWQzNWU4YzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jikfzDARJozK1NhLB18gaw8j+kz
Rh0NnnnpZT5TaeuuI/mzigbTY1z9kRwqb9tpQoDaaDXM4nDuF7zlVVLoLfObMPnQ
G33yQ27Jv+O3b6QKpFhea78biKlh6D65F1qoza77qrznnA/hNJecP8+rq9K616MR
JBPb1Yf1lo0UbK88Ln3YSOot79tQ3o88brJZiQDPI2UMDwGXQ/HT9+IWp2brD++B
UkeUwsAWJ9W94NoVObJfbM4AetmdQyRthoTygJk+dMMm4VzQeCCLnDs7h2PmNPhS
fBTqwkQezqd6R1xUVaccgylPItiMs5Op4rzua/M40b5bW+sXxGJJlt/90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeBXEVEP9gHtAePGU+cAqrTXowRMB8GA1UdIwQY
MBaAFMTMAvj6dM8NqB6M4pQ+p/ntKoX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTIt
MjE5ZTc5ZDg0ZTQzLzEveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTItMjE5ZTc5ZDg0ZTQz
LzEveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEplGSWCt
nv2fbb/DXGdeo7Wmvf9v3lvvZpZtnQLQgxyII8lycDEcW4ABIMOVIbKV+wRuhKyj
HY30bnV77jXU8gFJhImdY4dotuWuLkXPh0aAOQucUoIoSlH5UsicGtYPOpceNHc9
3qFCc+NlUwwYHx90xoxUkYThLW5VnbIZyydLnUH+acd2m0ckwMhZZ2sROBXQDDsF
t1CLpTNCNvkKmNc2v1UHBWGDuA+Dr54rN0D3URw+1O6a3lMBZKFnBMwdD6v6IXQK
c0n3QmH8qARZ71mhlLmkIgohhw3qEsJl1ZQtBFqeoDSGzSCxI1VXjWXwknYX2tJ+
X5vk7KA7LQLj/g==
-----END CERTIFICATE-----