Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File:                     insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier:          LFz+qG2nOvucfwHR6aROz3sX5nw8ZAOV9RNOWmmvH+M=
Subject key identifier:   5B:83:06:3B:75:F9:45:76:B0:58:79:5D:1A:BC:C7:78:D5:99:9F:98
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer:       /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial:       019234DB87C15AFB41B38AD143EFFF7F2D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number:          12DB
Signing time:             Fri 27 Sep 2024 19:00:55 +0000
Manifest this update:     Fri 27 Sep 2024 19:00:55 +0000
Manifest next update:     Sat 28 Sep 2024 19:00:55 +0000
Files and hashes:         1: d-wnIbCJjngA0QwyINvW9vKSHek.roa (hash: oJmqZkQBA0jEBQPwuKyR87NtKFHqt+VcNWj0qwC1DxY=)
                          2: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: rvVIlPILNSHSIOERM4srqTjiE4xgK52ht+PbVuF+iic=)
                          3: ynWUBIiGRTnEPy0g31Meau9WVhU.roa (hash: 2mBGuJK6iOkh0sWAywik4dzxE4/NsZAu/zzrRQUcmKE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:34:db:87:c1:5a:fb:41:b3:8a:d1:43:ef:ff:7f:2d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
        Validity
            Not Before: Sep 27 19:00:55 2024 GMT
            Not After : Sep 28 19:00:55 2024 GMT
        Subject: CN=5b83063b75f94576b058795d1abcc778d5999f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:d6:5d:2e:ba:38:ab:cf:f2:67:1a:1b:ec:
                    42:ec:f3:33:21:17:64:bc:bb:ed:5c:38:bc:6a:cd:
                    f7:06:ce:34:e7:e0:25:64:76:24:55:2f:7f:b7:ba:
                    d8:ed:31:75:d3:9f:92:c7:0c:44:27:7a:45:c1:4d:
                    35:a1:91:4d:40:7a:1e:a6:96:b3:18:22:ac:6e:46:
                    2f:3a:8d:8e:97:0f:23:f4:f6:ac:54:76:99:0a:ca:
                    56:0e:81:16:4c:bf:cc:bf:9c:74:96:69:24:1f:30:
                    1b:7c:af:b8:2b:f5:9b:e4:5c:25:d8:8e:b0:91:60:
                    84:58:5f:06:4f:96:fa:f9:79:63:d3:30:39:ef:33:
                    16:94:1a:06:d1:25:a6:95:70:66:67:91:73:4a:73:
                    0c:ee:b6:95:ee:a0:78:83:f0:ff:80:24:e4:84:5b:
                    75:9d:59:80:e0:b9:02:67:a0:dc:6a:c6:59:d2:a7:
                    e6:e9:18:ea:8d:3c:a6:d6:e1:ab:7b:a1:82:4c:72:
                    28:15:bf:95:fe:08:f8:47:94:1f:dd:4b:37:0d:60:
                    d8:fc:6e:2d:47:59:bd:18:7f:bc:51:22:6c:39:2a:
                    31:28:61:ec:ea:32:d4:55:20:d5:fc:d8:cd:0c:63:
                    f2:a5:6a:50:cd:37:6f:22:cc:2b:2f:68:22:2e:1c:
                    fc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:83:06:3B:75:F9:45:76:B0:58:79:5D:1A:BC:C7:78:D5:99:9F:98
            X509v3 Authority Key Identifier:
                keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:03:0b:f9:52:82:cd:82:ea:68:c4:60:2b:e1:e0:71:e6:87:
         75:ba:da:a7:75:85:80:5b:82:3b:fe:8f:48:32:62:4a:4e:bb:
         c1:85:60:e1:23:ad:f7:f8:3b:1a:19:39:27:c7:4e:f8:92:3c:
         28:58:ca:ba:73:a8:6a:d1:11:7d:58:65:9d:be:13:0d:90:b2:
         24:c4:45:aa:83:57:93:27:60:2d:0a:c1:4d:f5:59:34:d9:99:
         b5:17:3f:64:13:8d:f8:7f:44:2c:dc:4d:cd:8f:ca:c8:8c:ac:
         ab:47:5a:40:87:20:ec:dc:27:35:db:19:45:f0:69:35:c9:76:
         18:cc:e7:0a:4a:08:50:25:5e:c2:1b:b1:1e:47:ef:91:d4:da:
         3f:74:5b:f7:5d:3a:cb:74:65:d4:5a:a5:4a:22:41:0c:88:da:
         d5:cb:5f:e0:97:3e:57:4c:38:2f:0b:1c:f9:ba:4b:5a:95:b0:
         85:74:12:fc:d6:da:59:58:01:95:42:01:60:9e:0c:ff:ad:64:
         e3:38:85:fc:d2:dd:dd:16:85:52:28:43:7d:31:cb:f8:0f:f3:
         77:f2:ec:aa:19:1d:19:39:27:a0:95:0e:ed:df:83:68:e1:56:
         8c:ad:3c:06:c1:79:de:7a:97:17:c8:ef:d9:34:cc:0c:f5:60:
         8d:a1:26:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZI024fBWvtBs4rRQ+//fy2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhN2IwOWFiNTQ1ODUxYzc4OWQyY2FhODk0MmJhMzljZWEx
M2U5M2UwHhcNMjQwOTI3MTkwMDU1WhcNMjQwOTI4MTkwMDU1WjAzMTEwLwYDVQQD
Eyg1YjgzMDYzYjc1Zjk0NTc2YjA1ODc5NWQxYWJjYzc3OGQ1OTk5Zjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxXWXS66OKvP8mcaG+xC7PMzIRdk
vLvtXDi8as33Bs405+AlZHYkVS9/t7rY7TF105+SxwxEJ3pFwU01oZFNQHoeppaz
GCKsbkYvOo2Olw8j9PasVHaZCspWDoEWTL/Mv5x0lmkkHzAbfK+4K/Wb5Fwl2I6w
kWCEWF8GT5b6+Xlj0zA57zMWlBoG0SWmlXBmZ5FzSnMM7raV7qB4g/D/gCTkhFt1
nVmA4LkCZ6DcasZZ0qfm6RjqjTym1uGre6GCTHIoFb+V/gj4R5Qf3Us3DWDY/G4t
R1m9GH+8USJsOSoxKGHs6jLUVSDV/NjNDGPypWpQzTdvIswrL2giLhz8LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuDBjt1+UV2sFh5XRq8x3jVmZ+YMB8GA1UdIwQY
MBaAFIp7CatUWFHHidLKqJQro5zqE+k+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMt
NWU3ZGM4MjhkMDVkLzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83MzFmNTYtYTJhMS00Yzc1LTk1YzMtNWU3ZGM4MjhkMDVk
LzEvaW5zSnExUllVY2VKMHNxb2xDdWpuT29UNlQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwML+VKC
zYLqaMRgK+HgceaHdbrap3WFgFuCO/6PSDJiSk67wYVg4SOt9/g7Ghk5J8dO+JI8
KFjKunOoatERfVhlnb4TDZCyJMRFqoNXkydgLQrBTfVZNNmZtRc/ZBON+H9ELNxN
zY/KyIysq0daQIcg7NwnNdsZRfBpNcl2GMznCkoIUCVewhuxHkfvkdTaP3Rb9106
y3Rl1FqlSiJBDIja1ctf4Jc+V0w4Lwsc+bpLWpWwhXQS/NbaWVgBlUIBYJ4M/61k
4ziF/NLd3RaFUihDfTHL+A/zd/LsqhkdGTknoJUO7d+DaOFWjK08BsF53nqXF8jv
2TTMDPVgjaEm7g==
-----END CERTIFICATE-----