Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
File:                     neeD6azVaZL1g1-0iCGDUAygPIM.mft (raw, json)
Hash identifier:          57qjX8N2D2jEtOjXaHCCVcbpCO5NmUe2Jlu56Pf6BNk=
Subject key identifier:   32:34:B0:84:AF:A4:92:3E:6D:DE:0A:B4:BF:1F:18:C4:7D:1D:74:AC
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Certificate issuer:       /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial:       019352ACA823B61288A89CB38F9182DF142E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
Manifest number:          0332
Signing time:             Fri 22 Nov 2024 07:01:07 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:07 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:07 +0000
Files and hashes:         1: XaWWZBk4rsy86KcAnJYbYnhmXwo.roa (hash: qGqvSsI+ugbd1LviYDIPi7IXegyhNoZarMHRT8VJFOM=)
                          2: neeD6azVaZL1g1-0iCGDUAygPIM.crl (hash: MkoNwzfM9FJqsDWOok3/2iRu5mzoSOzgmZRtQ6k4X6s=)
                          3: wM9uy_urNTrOFIHWrmFJW2ybvao.roa (hash: cTGkdLln7b0tJErvdp7U1g9vmevxBrnyzfqgckYITvc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ac:a8:23:b6:12:88:a8:9c:b3:8f:91:82:df:14:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
        Validity
            Not Before: Nov 22 07:01:07 2024 GMT
            Not After : Nov 23 07:01:07 2024 GMT
        Subject: CN=3234b084afa4923e6dde0ab4bf1f18c47d1d74ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:8e:d3:c5:a0:c8:43:6f:86:1d:78:37:63:
                    e2:5d:39:4e:87:0b:ec:5b:47:1e:60:31:67:34:2e:
                    be:ba:59:be:c0:67:85:4e:5d:80:f7:36:b5:93:0b:
                    45:90:d6:13:d1:4e:ae:d6:f0:c4:fb:8f:bd:80:a5:
                    43:ce:4d:20:01:e1:62:3a:eb:77:81:c1:a1:0b:4e:
                    0a:bb:df:c8:ff:d8:34:b9:5a:36:6f:00:3e:b0:09:
                    8a:84:26:0c:4b:ec:45:c3:22:ec:b8:23:d7:c4:98:
                    19:47:bf:65:aa:74:31:2f:4b:23:21:39:ae:57:a7:
                    5c:92:56:9d:0d:ec:4f:b0:8f:1d:96:f5:cb:4e:f2:
                    73:68:3b:1a:b6:6b:65:32:f2:4e:c6:78:14:2b:27:
                    73:30:59:88:40:3e:39:80:41:1b:f4:1f:4f:b1:7f:
                    b5:cf:91:86:92:99:ba:60:55:5a:80:4a:c6:62:2f:
                    64:09:bf:05:bf:06:7f:26:9a:c4:e6:1e:c2:ca:1c:
                    bb:07:f4:0b:9c:37:f3:ce:79:35:77:66:70:2f:f5:
                    43:93:78:cb:81:c5:86:36:ad:1b:d2:6d:d0:2a:85:
                    af:7a:43:55:fd:14:a1:8a:73:70:85:95:e8:d5:32:
                    44:2e:45:24:d6:55:a7:7e:c0:06:03:6c:da:2c:1f:
                    ea:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:34:B0:84:AF:A4:92:3E:6D:DE:0A:B4:BF:1F:18:C4:7D:1D:74:AC
            X509v3 Authority Key Identifier:
                keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:cb:3f:07:05:17:90:10:c4:b9:b0:b0:bd:50:8e:f7:8d:ee:
         c7:ab:a3:20:16:37:97:b4:8b:e7:0c:34:88:b3:99:dc:44:70:
         40:3e:e3:3a:84:6b:91:99:b8:ef:d4:cd:c5:e9:56:ef:46:cd:
         bf:ec:84:b0:fb:b1:8d:4b:8c:9a:29:a0:70:8a:54:e6:38:c9:
         c0:e3:e2:26:52:6b:f8:5a:72:4f:b5:69:09:bb:eb:d2:1e:5b:
         29:96:f3:52:3b:36:22:62:12:c9:6a:b4:73:3a:35:fe:60:6f:
         c7:89:3b:cf:9e:09:7e:89:9c:24:c6:a7:fe:32:86:cb:6c:97:
         46:bf:4a:59:b6:a3:88:c1:17:cf:e9:78:92:a8:46:d7:83:64:
         0e:56:d7:2f:47:ec:79:9b:9c:40:88:23:8f:4e:21:12:8d:ef:
         eb:7a:31:a4:f0:5b:e0:3a:c2:1e:14:d5:4d:0f:cd:8e:48:b8:
         ef:09:df:a6:30:73:f9:60:e2:75:d8:7d:9d:3a:8d:75:d8:68:
         af:eb:15:1c:c3:1b:83:13:b7:b7:ee:26:b9:bf:d3:80:fd:a3:
         62:76:4d:75:0d:54:18:e5:41:2a:2b:13:32:2f:48:f7:8c:66:
         f0:47:f7:17:e5:b0:ad:54:5e:8d:e5:69:12:d7:7a:3f:20:43:
         fc:fe:bf:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrKgjthKIqJyzj5GC3xQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZTc4M2U5YWNkNTY5OTJmNTgzNWZiNDg4MjE4MzUwMGNh
MDNjODMwHhcNMjQxMTIyMDcwMTA3WhcNMjQxMTIzMDcwMTA3WjAzMTEwLwYDVQQD
EygzMjM0YjA4NGFmYTQ5MjNlNmRkZTBhYjRiZjFmMThjNDdkMWQ3NGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+KO08WgyENvhh14N2PiXTlOhwvs
W0ceYDFnNC6+ulm+wGeFTl2A9za1kwtFkNYT0U6u1vDE+4+9gKVDzk0gAeFiOut3
gcGhC04Ku9/I/9g0uVo2bwA+sAmKhCYMS+xFwyLsuCPXxJgZR79lqnQxL0sjITmu
V6dckladDexPsI8dlvXLTvJzaDsatmtlMvJOxngUKydzMFmIQD45gEEb9B9PsX+1
z5GGkpm6YFVagErGYi9kCb8FvwZ/JprE5h7Cyhy7B/QLnDfzznk1d2ZwL/VDk3jL
gcWGNq0b0m3QKoWvekNV/RShinNwhZXo1TJELkUk1lWnfsAGA2zaLB/q9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI0sISvpJI+bd4KtL8fGMR9HXSsMB8GA1UdIwQY
MBaAFJ3ng+ms1WmS9YNftIghg1AMoDyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmVlRDZhelZhWkwxZzEtMGlDR0RVQXlnUElNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80ZjA1Y2UtYTM4Mi00OWEwLTk5OTkt
ZTUyZjcwYzA2YzI5LzEvbmVlRDZhelZhWkwxZzEtMGlDR0RVQXlnUElNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80ZjA1Y2UtYTM4Mi00OWEwLTk5OTktZTUyZjcwYzA2YzI5
LzEvbmVlRDZhelZhWkwxZzEtMGlDR0RVQXlnUElNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMs/BwUX
kBDEubCwvVCO943ux6ujIBY3l7SL5ww0iLOZ3ERwQD7jOoRrkZm479TNxelW70bN
v+yEsPuxjUuMmimgcIpU5jjJwOPiJlJr+FpyT7VpCbvr0h5bKZbzUjs2ImISyWq0
czo1/mBvx4k7z54JfomcJMan/jKGy2yXRr9KWbajiMEXz+l4kqhG14NkDlbXL0fs
eZucQIgjj04hEo3v63oxpPBb4DrCHhTVTQ/Njki47wnfpjBz+WDiddh9nTqNddho
r+sVHMMbgxO3t+4mub/TgP2jYnZNdQ1UGOVBKisTMi9I94xm8Ef3F+WwrVRejeVp
Etd6PyBD/P6/FA==
-----END CERTIFICATE-----