Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
File:                     jworuIE7dNeCg7Fyj9ubvF1XhF0.mft (raw, json)
Hash identifier:          FlB0stiBdHurg6eWGaue73bBpCmQU5z//PUD+0RvwLc=
Subject key identifier:   C1:DF:86:D8:0C:DE:66:DE:75:ED:7F:8D:E3:D5:BE:61:12:0C:2E:53
Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
Certificate issuer:       /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Certificate serial:       0193553F9F6C289021C0C96E554EFCC7B18F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
Manifest number:          01DF
Signing time:             Fri 22 Nov 2024 19:00:53 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:53 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:53 +0000
Files and hashes:         1: QnSnP31xxCVLIU5U3eaDKIY7iUw.roa (hash: itDad9GORNG1fe0ti2Ca/S8hEroJ3mPD4rpqgvFf0pA=)
                          2: jworuIE7dNeCg7Fyj9ubvF1XhF0.crl (hash: gPtKpU3FstazrikZfd4Sz2DyatDz17jikU/DxDQVq+A=)
                          3: qOfTk8fTv0wkZc-eSKwDM2xlEV0.roa (hash: XEGMnW6vAY0DnDcSzhpmwglayuuZWrBQK3MfSrX0OpM=)
                          4: rxBX3hreWRBP_Pdaw4fHOY_onkU.roa (hash: MM1mq7pEFWPBiaQCyF5ZAYI33l5PJWOouy6uz87UNbY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 19:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:9f:6c:28:90:21:c0:c9:6e:55:4e:fc:c7:b1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
        Validity
            Not Before: Nov 22 19:00:53 2024 GMT
            Not After : Nov 23 19:00:53 2024 GMT
        Subject: CN=c1df86d80cde66de75ed7f8de3d5be61120c2e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:74:61:a9:bd:81:d9:01:6b:06:f8:d9:04:75:
                    88:4c:35:21:8d:0f:64:c6:12:cd:a9:50:6f:91:0c:
                    d1:ee:04:22:ff:b3:3e:54:7f:8d:81:ea:c7:df:a5:
                    46:82:2f:16:a2:74:34:ae:a6:87:24:a9:a2:fd:c4:
                    58:89:cf:d3:87:2f:25:12:67:ca:c0:3f:0e:23:e1:
                    b7:09:57:f8:d7:03:d2:46:77:70:6a:18:e6:a1:05:
                    67:04:3f:43:20:ef:74:b0:9d:26:ff:97:6a:ce:b2:
                    18:5a:5c:fa:9b:10:84:e3:29:7d:47:c5:97:8d:66:
                    86:01:58:fa:6e:78:5a:35:c9:02:d9:7d:2b:46:60:
                    bb:d4:83:07:a7:39:c3:35:a3:6d:9d:76:34:a7:98:
                    68:43:34:b4:18:a8:be:63:7e:ca:9c:01:a7:c1:f1:
                    d5:dc:21:f2:df:2e:00:23:a3:3c:53:f9:c3:c0:cf:
                    e7:77:51:9e:b2:cc:c2:e2:18:05:e7:81:0b:93:c1:
                    3a:12:f3:c9:a2:76:9f:c6:41:f6:dc:ac:bd:5a:e4:
                    04:c8:89:a0:13:cc:21:81:c1:dc:7c:3a:a7:eb:6c:
                    ea:0b:f7:33:2e:ea:0d:7a:2c:8c:41:92:79:3d:83:
                    16:05:5b:c2:80:b1:2c:7c:80:84:43:7a:4d:c4:22:
                    a5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:DF:86:D8:0C:DE:66:DE:75:ED:7F:8D:E3:D5:BE:61:12:0C:2E:53
            X509v3 Authority Key Identifier:
                keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b2:41:da:16:d9:36:03:f4:22:85:b7:00:5f:4a:09:db:bd:
         a2:58:f8:5e:d5:95:55:6d:0f:1f:76:08:7e:91:49:1f:f8:25:
         9c:8b:9e:0f:b2:c3:c4:16:b8:73:02:b1:fd:2f:ba:b5:44:f3:
         90:91:91:b6:5d:f2:a4:09:d9:fb:b7:9e:af:f9:e2:88:0f:e7:
         b5:64:c6:8b:ff:1b:36:cb:38:19:58:28:57:e6:8f:7c:3e:2c:
         42:c3:67:d3:68:08:69:e8:f6:8f:63:0e:e2:6e:bb:ca:ef:fd:
         e4:07:d1:e9:0e:28:24:ca:16:3a:e8:77:5b:a4:59:1c:fb:02:
         6b:8d:d8:90:ca:a7:56:c5:a2:eb:07:d0:c8:81:18:67:f9:08:
         9e:ee:eb:1d:92:49:a8:e0:0c:49:0f:13:5d:a1:91:79:08:31:
         44:ee:92:d2:31:97:a9:85:3c:5a:ff:43:1d:49:fc:fd:49:a3:
         b7:ec:74:df:39:fd:79:b8:c2:c4:2b:05:b8:6e:86:76:b7:75:
         d3:3f:31:2e:97:b1:18:00:22:29:bc:52:da:16:e4:d6:9c:e8:
         e8:c1:b8:2c:dc:e8:9f:87:3e:fb:29:34:c4:20:67:19:68:59:
         84:6b:e8:45:de:58:eb:f5:f6:82:6c:72:1f:61:35:9f:f1:10:
         e5:ef:60:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP59sKJAhwMluVU78x7GPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGEyYmI4ODEzYjc0ZDc4MjgzYjE3MjhmZGI5YmJjNWQ1
Nzg0NWQwHhcNMjQxMTIyMTkwMDUzWhcNMjQxMTIzMTkwMDUzWjAzMTEwLwYDVQQD
EyhjMWRmODZkODBjZGU2NmRlNzVlZDdmOGRlM2Q1YmU2MTEyMGMyZTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XRhqb2B2QFrBvjZBHWITDUhjQ9k
xhLNqVBvkQzR7gQi/7M+VH+NgerH36VGgi8WonQ0rqaHJKmi/cRYic/Thy8lEmfK
wD8OI+G3CVf41wPSRndwahjmoQVnBD9DIO90sJ0m/5dqzrIYWlz6mxCE4yl9R8WX
jWaGAVj6bnhaNckC2X0rRmC71IMHpznDNaNtnXY0p5hoQzS0GKi+Y37KnAGnwfHV
3CHy3y4AI6M8U/nDwM/nd1GesszC4hgF54ELk8E6EvPJonafxkH23Ky9WuQEyImg
E8whgcHcfDqn62zqC/czLuoNeiyMQZJ5PYMWBVvCgLEsfICEQ3pNxCKl3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHfhtgM3mbede1/jePVvmESDC5TMB8GA1UdIwQY
MBaAFI8KK7iBO3TXgoOxco/bm7xdV4RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2Mt
YWEyYjNiZWEwOGJmLzEvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2MtYWEyYjNiZWEwOGJm
LzEvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7JB2hbZ
NgP0IoW3AF9KCdu9olj4XtWVVW0PH3YIfpFJH/glnIueD7LDxBa4cwKx/S+6tUTz
kJGRtl3ypAnZ+7eer/niiA/ntWTGi/8bNss4GVgoV+aPfD4sQsNn02gIaej2j2MO
4m67yu/95AfR6Q4oJMoWOuh3W6RZHPsCa43YkMqnVsWi6wfQyIEYZ/kInu7rHZJJ
qOAMSQ8TXaGReQgxRO6S0jGXqYU8Wv9DHUn8/Umjt+x03zn9ebjCxCsFuG6Gdrd1
0z8xLpexGAAiKbxS2hbk1pzo6MG4LNzon4c++yk0xCBnGWhZhGvoRd5Y6/X2gmxy
H2E1n/EQ5e9glw==
-----END CERTIFICATE-----