Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
File:                     U2xMlP7U-ouQP29vtTQEhMDkpNM.mft (raw, json)
Hash identifier:          3Ykna08RnjtkDrADWuDYDfi+SE972Tv9dc61tDda6lo=
Subject key identifier:   79:A6:CE:24:E1:F2:F5:30:1B:CA:3D:49:61:75:CC:F5:8D:50:A1:A4
Authority key identifier: 53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3
Certificate issuer:       /CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
Certificate serial:       019369DA464D93B5749B78D9E2339FA0A48E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
Manifest number:          137E
Signing time:             Tue 26 Nov 2024 19:02:12 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:12 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:12 +0000
Files and hashes:         1: U2xMlP7U-ouQP29vtTQEhMDkpNM.crl (hash: JJAo6f5sa43uy6ItPiG/ADbIM/rcvV/G1id7kkdAv2o=)
                          2: VRLooAuNDUdh-wSutITLeYLqpnc.roa (hash: /x7ItC88yuLZKgYkv/Au8BExfWdqpe2Hr+9tAx9YpiM=)
                          3: wlzZQL88IIxLHHl-mFMbchjVJQE.roa (hash: y9izXhtcbrntyVqGEpWTsY9QMWCCIQTisjiJG7fFCuc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:46:4d:93:b5:74:9b:78:d9:e2:33:9f:a0:a4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=536c4c94fed4fa8b903f6f6fb5340484c0e4a4d3
        Validity
            Not Before: Nov 26 19:02:12 2024 GMT
            Not After : Nov 27 19:02:12 2024 GMT
        Subject: CN=79a6ce24e1f2f5301bca3d496175ccf58d50a1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d5:28:94:a8:8c:b0:77:9c:60:57:ed:39:c2:
                    87:b3:85:d2:aa:39:7d:70:a4:19:65:93:f4:4b:d9:
                    79:0d:b4:25:e0:a7:04:36:dd:74:0f:30:f7:53:69:
                    cf:72:82:b3:5f:17:19:db:6a:40:b5:20:05:d8:46:
                    8a:04:46:f7:d7:54:22:af:6f:8d:d7:5c:92:33:dd:
                    a4:e1:81:a7:fd:cd:ec:0f:a0:a0:d2:f5:93:52:6c:
                    d2:23:38:7f:12:28:5d:e5:f3:84:bf:e4:7e:c6:1d:
                    33:68:85:bb:fc:31:50:89:d3:64:41:56:e0:34:13:
                    12:ed:b0:b6:3b:5a:5a:99:50:c8:49:c2:05:38:85:
                    86:d1:94:9e:3c:95:0d:78:b8:b2:92:bd:cd:6f:3a:
                    12:46:0c:37:86:bc:36:61:12:41:3d:eb:86:a1:1b:
                    64:06:01:97:a1:01:a8:4d:63:d6:c1:33:8c:e3:49:
                    4e:26:78:df:c6:79:87:1b:f2:72:50:84:1c:c9:f4:
                    7b:cb:1f:80:c0:14:f1:7e:99:e0:e7:30:9d:fc:5a:
                    7b:1e:ca:bf:c0:9a:e4:b7:f1:44:30:f3:8b:e6:d4:
                    35:f3:66:16:47:f0:f7:14:43:c1:8e:54:8b:73:c1:
                    de:56:0e:69:02:6c:ce:a7:55:10:0f:a5:25:1d:78:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A6:CE:24:E1:F2:F5:30:1B:CA:3D:49:61:75:CC:F5:8D:50:A1:A4
            X509v3 Authority Key Identifier:
                keyid:53:6C:4C:94:FE:D4:FA:8B:90:3F:6F:6F:B5:34:04:84:C0:E4:A4:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2xMlP7U-ouQP29vtTQEhMDkpNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d502-c5d8-4b14-9836-a67f95f2de5e/1/U2xMlP7U-ouQP29vtTQEhMDkpNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:3e:78:fb:6e:25:16:d0:50:f4:d8:2f:c6:4c:0e:85:fb:4e:
         07:e2:3b:f8:cf:e6:51:78:68:17:87:e7:98:fe:5c:01:20:9c:
         a9:0e:a7:fd:38:0d:2f:92:28:fe:e8:92:8c:e8:37:79:f6:3b:
         3e:00:ef:3e:f2:94:ff:26:ec:51:18:f8:1b:45:a4:11:ab:ee:
         ac:bd:70:0e:ff:b7:2c:74:ff:7c:ff:80:df:c8:fa:c5:2e:29:
         4a:d8:05:e1:5b:7c:43:d6:48:7f:0c:21:0b:04:38:52:91:a5:
         ed:b6:5b:63:cd:ab:cc:5f:83:1e:a4:46:e2:75:59:74:eb:13:
         10:48:70:c9:85:37:9b:45:11:54:6e:aa:48:e3:f8:34:16:50:
         4b:f1:52:10:e3:66:10:82:e0:84:e2:de:1a:17:37:a4:48:c1:
         94:3d:e6:ee:97:bd:96:b7:4c:be:c4:42:5e:3e:a5:9a:6d:c7:
         dc:34:33:3d:45:95:a7:ed:4f:39:f4:43:2b:c6:e9:a0:b6:ce:
         d8:ec:a1:ee:9a:6e:17:39:91:6b:03:67:4d:bc:f2:8c:d3:ce:
         48:52:9d:89:b5:ad:c2:37:4c:1f:76:b4:fb:25:35:6e:d2:88:
         ee:7c:9f:c6:26:de:a3:89:df:9f:51:a4:63:ea:b1:13:96:bb:
         12:35:0b:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2kZNk7V0m3jZ4jOfoKSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNmM0Yzk0ZmVkNGZhOGI5MDNmNmY2ZmI1MzQwNDg0YzBl
NGE0ZDMwHhcNMjQxMTI2MTkwMjEyWhcNMjQxMTI3MTkwMjEyWjAzMTEwLwYDVQQD
Eyg3OWE2Y2UyNGUxZjJmNTMwMWJjYTNkNDk2MTc1Y2NmNThkNTBhMWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldUolKiMsHecYFftOcKHs4XSqjl9
cKQZZZP0S9l5DbQl4KcENt10DzD3U2nPcoKzXxcZ22pAtSAF2EaKBEb311Qir2+N
11ySM92k4YGn/c3sD6Cg0vWTUmzSIzh/Eihd5fOEv+R+xh0zaIW7/DFQidNkQVbg
NBMS7bC2O1pamVDIScIFOIWG0ZSePJUNeLiykr3NbzoSRgw3hrw2YRJBPeuGoRtk
BgGXoQGoTWPWwTOM40lOJnjfxnmHG/JyUIQcyfR7yx+AwBTxfpng5zCd/Fp7Hsq/
wJrkt/FEMPOL5tQ182YWR/D3FEPBjlSLc8HeVg5pAmzOp1UQD6UlHXiuVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmmziTh8vUwG8o9SWF1zPWNUKGkMB8GA1UdIwQY
MBaAFFNsTJT+1PqLkD9vb7U0BITA5KTTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC81NmQ1MDItYzVkOC00YjE0LTk4MzYt
YTY3Zjk1ZjJkZTVlLzEvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC81NmQ1MDItYzVkOC00YjE0LTk4MzYtYTY3Zjk1ZjJkZTVl
LzEvVTJ4TWxQN1Utb3VRUDI5dnRUUUVoTURrcE5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfT54+24l
FtBQ9NgvxkwOhftOB+I7+M/mUXhoF4fnmP5cASCcqQ6n/TgNL5Io/uiSjOg3efY7
PgDvPvKU/ybsURj4G0WkEavurL1wDv+3LHT/fP+A38j6xS4pStgF4Vt8Q9ZIfwwh
CwQ4UpGl7bZbY82rzF+DHqRG4nVZdOsTEEhwyYU3m0URVG6qSOP4NBZQS/FSEONm
EILghOLeGhc3pEjBlD3m7pe9lrdMvsRCXj6lmm3H3DQzPUWVp+1POfRDK8bpoLbO
2Oyh7ppuFzmRawNnTbzyjNPOSFKdibWtwjdMH3a0+yU1btKI7nyfxibeo4nfn1Gk
Y+qxE5a7EjULHw==
-----END CERTIFICATE-----