Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
File:                     pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft (raw, json)
Hash identifier:          2XJ2AibnyMQWBjjIrGkekheBEascKGbq9clSAUZMi8o=
Subject key identifier:   AE:37:E0:3C:98:DF:06:FD:D4:50:1D:86:84:2D:23:23:A5:21:42:13
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Certificate issuer:       /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial:       0193549C79F833AF35DA66D04D8C4553E206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
Manifest number:          09BC
Signing time:             Fri 22 Nov 2024 16:02:41 +0000
Manifest this update:     Fri 22 Nov 2024 16:02:41 +0000
Manifest next update:     Sat 23 Nov 2024 16:02:41 +0000
Files and hashes:         1: pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl (hash: PlUR2gyARAKT0OhXz5PIP/OkA0x7AUNDR8Kn8BrGHCc=)
                          2: uZWZeMXU7WD_LPcWVbMPmhHvUdE.roa (hash: 3WhVU6VFLhnf8q1ARJilFKVMPRRa0ukMFA83JeyXx0Q=)
                          3: vQqgl7NlOvNPcD5YyJRVXCifWV4.roa (hash: OmFHIJSjblewXqaQCXbtRyI0B8ruZybdO3EKk4q3WEU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9c:79:f8:33:af:35:da:66:d0:4d:8c:45:53:e2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
        Validity
            Not Before: Nov 22 16:02:41 2024 GMT
            Not After : Nov 23 16:02:41 2024 GMT
        Subject: CN=ae37e03c98df06fdd4501d86842d2323a5214213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1d:77:38:41:9f:54:63:c9:5e:4c:6a:f4:1c:
                    f1:7d:d6:87:ea:29:2d:f5:c7:07:e3:b2:6a:be:63:
                    80:c2:ea:f2:8b:43:e4:08:9a:ab:83:b4:b8:8b:67:
                    c3:87:5f:55:9d:35:39:d1:7c:8b:02:9b:a6:17:01:
                    89:8f:f8:d5:50:38:f1:b7:a8:c5:79:c7:d6:b5:10:
                    f4:69:ca:5d:c5:3b:24:c7:97:60:42:48:77:96:69:
                    59:89:c4:91:62:0a:4b:e2:64:66:9a:c8:d9:ab:c2:
                    a2:ec:dc:3e:09:33:7e:11:19:71:60:20:70:ac:87:
                    a4:6b:21:ae:f8:30:80:47:9d:21:66:5d:f8:02:0f:
                    df:0b:5c:8e:d1:2a:ff:68:c7:69:69:00:85:bc:78:
                    01:d8:b0:b3:c0:6a:c3:f8:bb:7c:57:be:2e:54:43:
                    02:74:7e:da:08:86:b6:51:ea:d8:46:e1:f3:36:33:
                    be:07:47:0a:b2:e8:5d:c4:42:0b:c0:0f:98:01:33:
                    60:77:f1:3b:93:52:76:8f:cd:65:09:e1:41:ba:a4:
                    83:57:5d:5c:58:8a:f4:81:47:03:6f:e7:c6:c5:70:
                    22:52:ed:56:b6:91:3a:b2:ae:8b:cf:90:1c:f1:43:
                    46:31:0d:1d:7b:90:c7:68:11:28:f6:4c:a6:b6:85:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:37:E0:3C:98:DF:06:FD:D4:50:1D:86:84:2D:23:23:A5:21:42:13
            X509v3 Authority Key Identifier:
                keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:03:f2:33:c4:12:ef:bd:ef:4a:a2:19:6f:e7:60:c7:1f:
         2f:7b:59:86:1b:76:c9:2a:d6:fe:c3:85:b2:6c:f5:a8:cb:b1:
         73:02:9d:2c:2a:3c:10:6b:b6:c9:78:d6:09:9d:f4:28:49:e7:
         a5:34:29:83:a3:2c:ce:ad:ca:30:87:d4:30:12:ac:dd:fa:ec:
         b5:ea:46:1d:d6:db:51:b1:41:6c:1e:04:f0:8e:0f:19:6e:cb:
         7c:9e:e5:a9:27:d8:de:33:fc:0a:b0:c8:2b:d0:1e:d2:7e:18:
         9c:9b:78:6d:f6:b9:bf:c9:c9:30:09:0d:57:8c:6f:9b:3d:a9:
         9b:e4:1d:b0:e6:3c:8f:30:48:3d:da:4b:d2:de:e8:33:b7:00:
         d7:93:99:15:98:e3:4f:74:ab:eb:ec:d6:ee:e7:f8:33:2a:ef:
         ea:1f:70:ef:cd:9b:e2:ed:b1:05:46:7a:38:84:f8:e1:60:f0:
         bd:27:ff:e8:44:6b:c2:7f:94:d3:32:a6:85:8d:7a:49:80:e2:
         7c:55:cf:eb:86:55:97:f4:60:7a:a1:cf:3f:34:f9:ff:f0:e7:
         34:eb:6c:cb:91:4d:65:48:a0:77:48:37:37:73:36:7b:34:c2:
         87:60:4e:90:f0:df:15:b2:d5:de:84:ea:fc:25:61:0a:16:f4:
         e7:05:4f:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNUnHn4M6812mbQTYxFU+IGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGU0NmQ2M2E3MTgzZjcwZGE0OTJmMDJiODA5OGMyYmZm
YzI4YmUwHhcNMjQxMTIyMTYwMjQxWhcNMjQxMTIzMTYwMjQxWjAzMTEwLwYDVQQD
EyhhZTM3ZTAzYzk4ZGYwNmZkZDQ1MDFkODY4NDJkMjMyM2E1MjE0MjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR13OEGfVGPJXkxq9BzxfdaH6ikt
9ccH47JqvmOAwuryi0PkCJqrg7S4i2fDh19VnTU50XyLApumFwGJj/jVUDjxt6jF
ecfWtRD0acpdxTskx5dgQkh3lmlZicSRYgpL4mRmmsjZq8Ki7Nw+CTN+ERlxYCBw
rIekayGu+DCAR50hZl34Ag/fC1yO0Sr/aMdpaQCFvHgB2LCzwGrD+Lt8V74uVEMC
dH7aCIa2UerYRuHzNjO+B0cKsuhdxEILwA+YATNgd/E7k1J2j81lCeFBuqSDV11c
WIr0gUcDb+fGxXAiUu1WtpE6sq6Lz5Ac8UNGMQ0de5DHaBEo9kymtoXk9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK434DyY3wb91FAdhoQtIyOlIUITMB8GA1UdIwQY
MBaAFKYORtY6cYP3DaSS8CuAmMK//Ci+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMt
M2I3ZWYyNWNmZTgzLzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMtM2I3ZWYyNWNmZTgz
LzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvMD8jPE
Eu+970qiGW/nYMcfL3tZhht2ySrW/sOFsmz1qMuxcwKdLCo8EGu2yXjWCZ30KEnn
pTQpg6Mszq3KMIfUMBKs3frstepGHdbbUbFBbB4E8I4PGW7LfJ7lqSfY3jP8CrDI
K9Ae0n4YnJt4bfa5v8nJMAkNV4xvmz2pm+QdsOY8jzBIPdpL0t7oM7cA15OZFZjj
T3Sr6+zW7uf4Myrv6h9w782b4u2xBUZ6OIT44WDwvSf/6ERrwn+U0zKmhY16SYDi
fFXP64ZVl/RgeqHPPzT5//DnNOtsy5FNZUigd0g3N3M2ezTCh2BOkPDfFbLV3oTq
/CVhChb05wVPBA==
-----END CERTIFICATE-----