Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
File:                     U8dzEuDSzshFoEYThF-KG-Jjw5k.mft (raw, json)
Hash identifier:          q8kd3KTw8n6iiiiXqi9y+LlmJ4GrDjvvik/lNgH5bI4=
Subject key identifier:   6D:00:9B:20:73:32:0A:A1:04:8F:27:DF:19:A8:40:98:F9:7E:85:FB
Authority key identifier: 53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99
Certificate issuer:       /CN=53c77312e0d2cec845a04613845f8a1be263c399
Certificate serial:       0193576481439F9E1CAAFFFC94F5F2468B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
Manifest number:          1371
Signing time:             Sat 23 Nov 2024 05:00:24 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:24 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:24 +0000
Files and hashes:         1: ADOxB9Gim1uDJXbZwYcxLGFJZ_g.roa (hash: JXqzQjJ6IxxwVm9urG07jOEUwT52gCcGLVN7BoFOIM0=)
                          2: U8dzEuDSzshFoEYThF-KG-Jjw5k.crl (hash: vKhyt1CeoohQStyiBZOimeVI70paEjgK18Jco1HR9z0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:81:43:9f:9e:1c:aa:ff:fc:94:f5:f2:46:8b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c77312e0d2cec845a04613845f8a1be263c399
        Validity
            Not Before: Nov 23 05:00:24 2024 GMT
            Not After : Nov 24 05:00:24 2024 GMT
        Subject: CN=6d009b2073320aa1048f27df19a84098f97e85fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:e4:a4:92:be:66:a4:24:95:18:ff:c7:d2:
                    50:0d:79:17:db:91:3b:97:5e:4a:a2:31:4d:26:f3:
                    a3:35:23:b8:0b:18:70:d7:11:23:fc:39:58:a6:57:
                    f7:ca:53:b7:26:8b:81:c8:e2:9c:c1:c0:6e:46:1f:
                    c8:c5:ab:9e:29:5c:06:25:68:50:25:bc:d0:f9:8c:
                    8f:14:d1:4b:b2:d3:8c:75:83:96:e9:f1:e2:fe:4e:
                    c6:e5:20:ae:e3:1d:fc:cd:24:88:15:51:19:ed:45:
                    e6:89:07:f0:50:db:18:dd:d7:13:73:9d:af:08:8d:
                    1f:69:5a:dc:82:0f:0b:29:78:e9:e2:88:f5:12:ba:
                    07:45:14:e4:a8:02:50:05:a6:61:c3:57:46:7e:0d:
                    f5:21:28:8b:cc:cd:bb:ff:19:50:12:1a:82:30:13:
                    48:2b:97:e0:e2:0e:84:87:a7:46:a4:b9:7e:73:73:
                    44:9c:06:26:e8:3b:9c:8b:cd:03:9f:55:88:7d:6f:
                    5a:49:ae:29:8f:50:0b:7a:02:11:80:cd:ec:f0:a3:
                    64:d4:c9:18:6b:39:4c:5e:91:1a:7f:ab:ce:86:2e:
                    0e:53:c2:2c:8f:eb:19:b1:cc:3f:2f:b8:a5:d9:c3:
                    f0:18:ba:b2:75:10:3d:ca:3b:d8:ce:70:bf:1d:b3:
                    e7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:00:9B:20:73:32:0A:A1:04:8F:27:DF:19:A8:40:98:F9:7E:85:FB
            X509v3 Authority Key Identifier:
                keyid:53:C7:73:12:E0:D2:CE:C8:45:A0:46:13:84:5F:8A:1B:E2:63:C3:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8dzEuDSzshFoEYThF-KG-Jjw5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/dd981d-e1f5-4837-9027-c9bf55d9d1ba/1/U8dzEuDSzshFoEYThF-KG-Jjw5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0d:01:79:b8:7a:7c:50:48:75:be:ee:9f:88:f7:45:34:77:
         5d:87:5f:7f:a9:25:ec:67:a2:6b:98:76:87:f6:58:59:c8:eb:
         b7:0c:9f:32:a8:ad:be:84:ba:9c:f8:42:15:d4:c3:6f:0b:32:
         be:cb:37:27:7f:e6:13:47:41:64:38:73:72:f6:c8:da:c9:b0:
         6c:d5:0e:b7:c8:59:d5:f7:81:88:9f:22:2c:f9:4c:f5:1c:9a:
         bd:06:65:bd:ac:88:0b:87:1c:e6:18:1c:92:3e:2d:e5:bd:93:
         f1:dd:be:7b:c6:07:34:cf:a0:2a:c6:44:3d:89:21:38:60:4d:
         aa:ab:c1:ea:82:8f:e9:e5:62:62:3f:88:f0:6a:9e:79:45:d3:
         5b:21:3d:d6:73:76:86:f0:a6:b8:4f:f4:53:99:de:0e:99:ce:
         6a:93:f6:3b:bd:d0:55:44:1e:6c:17:0a:83:57:54:c9:4d:f7:
         73:c1:37:ba:39:d6:62:64:eb:a8:31:e5:54:f7:1e:5e:93:70:
         d1:9a:e1:c4:40:60:9e:ec:92:c7:d3:ea:a4:49:99:f5:d9:97:
         ed:bf:2d:d1:79:43:d4:ea:27:f4:53:35:60:9c:15:8b:7a:43:
         70:6f:8d:dd:ff:e5:a4:58:09:24:34:47:82:78:fd:61:2b:a5:
         ca:ea:5c:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZIFDn54cqv/8lPXyRossMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzc3MzEyZTBkMmNlYzg0NWEwNDYxMzg0NWY4YTFiZTI2
M2MzOTkwHhcNMjQxMTIzMDUwMDI0WhcNMjQxMTI0MDUwMDI0WjAzMTEwLwYDVQQD
Eyg2ZDAwOWIyMDczMzIwYWExMDQ4ZjI3ZGYxOWE4NDA5OGY5N2U4NWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2XkpJK+ZqQklRj/x9JQDXkX25E7
l15KojFNJvOjNSO4Cxhw1xEj/DlYplf3ylO3JouByOKcwcBuRh/IxaueKVwGJWhQ
JbzQ+YyPFNFLstOMdYOW6fHi/k7G5SCu4x38zSSIFVEZ7UXmiQfwUNsY3dcTc52v
CI0faVrcgg8LKXjp4oj1EroHRRTkqAJQBaZhw1dGfg31ISiLzM27/xlQEhqCMBNI
K5fg4g6Eh6dGpLl+c3NEnAYm6Duci80Dn1WIfW9aSa4pj1ALegIRgM3s8KNk1MkY
azlMXpEaf6vOhi4OU8Isj+sZscw/L7il2cPwGLqydRA9yjvYznC/HbPnvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0AmyBzMgqhBI8n3xmoQJj5foX7MB8GA1UdIwQY
MBaAFFPHcxLg0s7IRaBGE4RfihviY8OZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjct
YzliZjU1ZDlkMWJhLzEvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9kZDk4MWQtZTFmNS00ODM3LTkwMjctYzliZjU1ZDlkMWJh
LzEvVThkekV1RFN6c2hGb0VZVGhGLUtHLUpqdzVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQ0Bebh6
fFBIdb7un4j3RTR3XYdff6kl7Geia5h2h/ZYWcjrtwyfMqitvoS6nPhCFdTDbwsy
vss3J3/mE0dBZDhzcvbI2smwbNUOt8hZ1feBiJ8iLPlM9RyavQZlvayIC4cc5hgc
kj4t5b2T8d2+e8YHNM+gKsZEPYkhOGBNqqvB6oKP6eViYj+I8GqeeUXTWyE91nN2
hvCmuE/0U5neDpnOapP2O73QVUQebBcKg1dUyU33c8E3ujnWYmTrqDHlVPceXpNw
0ZrhxEBgnuySx9PqpEmZ9dmX7b8t0XlD1Oon9FM1YJwVi3pDcG+N3f/lpFgJJDRH
gnj9YSulyupcmQ==
-----END CERTIFICATE-----