Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
File:                     333WWWZzfOj2XkDvL-oc_6-xYrA.mft (raw, json)
Hash identifier:          Z50olEGRTQv5ue0GHE/jWm68OSxpxftmfNYXpCZXH5w=
Subject key identifier:   63:47:BF:F2:05:23:31:90:B8:F2:64:3D:80:B4:C1:FE:E4:E9:B9:73
Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
Certificate issuer:       /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Certificate serial:       019369D9C9725E40BE5D7DDB0A17409020EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
Manifest number:          137C
Signing time:             Tue 26 Nov 2024 19:01:40 +0000
Manifest this update:     Tue 26 Nov 2024 19:01:40 +0000
Manifest next update:     Wed 27 Nov 2024 19:01:40 +0000
Files and hashes:         1: 333WWWZzfOj2XkDvL-oc_6-xYrA.crl (hash: 8djeNwxY+48u+qBihyAgrJBEdTDF6JDXSv4NBqoR0QM=)
                          2: C3rZ7syzF0wu21u-o-RBtrmyrpc.roa (hash: WxrvCsPsEBGUd01QjkZBvkQgu8zopFqrX5g9PMiskqw=)
                          3: YXy7s8MmJPjCMgX9JWB11BbCRWU.roa (hash: Y3ROw8mCKN56ldprVQPPxkA3rtB5SlzvxrYqYk6rgO4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:d9:c9:72:5e:40:be:5d:7d:db:0a:17:40:90:20:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
        Validity
            Not Before: Nov 26 19:01:40 2024 GMT
            Not After : Nov 27 19:01:40 2024 GMT
        Subject: CN=6347bff205233190b8f2643d80b4c1fee4e9b973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:9d:30:5d:08:29:84:21:d4:73:00:50:12:
                    9e:e0:0c:c8:2a:8f:f1:0c:f6:3e:36:ae:25:28:9a:
                    3f:bf:72:96:fc:b3:4f:b8:e7:06:7b:7e:11:88:ef:
                    fb:78:d2:ce:91:a9:b3:6f:ac:c5:50:42:18:68:e8:
                    65:1b:45:4e:c3:c3:a5:7e:f8:2a:0b:45:52:b8:ca:
                    62:1c:9f:b6:74:be:48:eb:31:35:57:c6:86:82:d8:
                    6b:43:19:8c:e7:54:70:a2:c5:b2:1a:0a:43:c6:c7:
                    ed:ea:12:a2:9e:4b:cc:e6:3e:fb:65:f9:e2:b3:7b:
                    50:56:49:f6:35:ed:7e:61:ef:c3:e5:df:1b:01:38:
                    6f:96:ff:0f:2b:4c:19:04:59:53:52:00:c2:d3:bd:
                    58:11:fe:08:e5:2e:30:af:e5:ae:e5:15:e8:d8:89:
                    f0:40:7e:3f:6e:aa:cf:a1:69:e0:15:ae:38:70:d7:
                    44:32:b8:3d:c1:eb:af:ed:34:8e:67:06:44:79:f6:
                    d9:f3:ae:0b:43:8c:75:4e:ae:d1:0c:82:e2:a0:81:
                    b2:ee:71:fa:08:60:9d:ff:f4:06:0b:69:33:dc:14:
                    a8:c4:5c:d5:b4:9e:c1:b3:2a:4c:15:ba:6c:57:02:
                    5d:b5:93:74:a2:4b:9b:f0:58:35:c8:d5:ca:7f:f9:
                    85:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:47:BF:F2:05:23:31:90:B8:F2:64:3D:80:B4:C1:FE:E4:E9:B9:73
            X509v3 Authority Key Identifier:
                keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fc:55:09:5c:d8:84:05:89:a6:d2:26:ca:56:f7:ea:b2:ba:
         fe:ca:87:ca:5b:8d:1d:68:44:12:7f:24:6e:26:4a:d3:59:0e:
         d6:96:5d:63:9c:f4:45:31:20:4c:c8:55:50:82:7c:4d:11:4e:
         ce:52:d6:b8:74:bc:02:54:2d:ab:ff:ca:04:92:fd:5c:86:5c:
         79:ca:dd:51:68:4c:92:dc:c0:8f:33:7a:24:7f:f3:80:a1:79:
         2a:d3:c1:4f:09:95:e0:42:0f:10:a2:89:69:72:f0:35:96:4d:
         c1:ab:16:aa:b9:12:b5:d7:89:aa:1a:c1:d4:dd:8a:a8:a0:cc:
         c3:e6:b7:04:36:39:c3:21:8c:21:f9:a0:70:0e:dd:4f:a4:22:
         b0:4c:97:32:c2:b7:c5:1e:3a:d1:a7:c5:0e:64:54:02:1c:2d:
         27:a8:c8:81:13:62:fc:69:5a:e3:9e:c0:1d:00:da:5f:56:ad:
         50:48:c3:2c:b9:98:3c:38:56:9d:a5:48:24:16:f9:ea:3f:30:
         39:e6:2d:28:5a:fd:83:31:4f:05:6e:f8:1b:79:9e:be:3c:ab:
         e4:d8:d9:77:81:4e:4c:83:e8:d7:ad:2d:d6:fe:83:f5:45:ae:
         39:80:9d:28:f0:45:ef:9e:48:4c:a8:e4:02:4c:69:08:03:ea:
         a6:94:30:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2clyXkC+XX3bChdAkCDqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2RkNjU5NjY3MzdjZThmNjVlNDBlZjJmZWExY2ZmYWZi
MTYyYjAwHhcNMjQxMTI2MTkwMTQwWhcNMjQxMTI3MTkwMTQwWjAzMTEwLwYDVQQD
Eyg2MzQ3YmZmMjA1MjMzMTkwYjhmMjY0M2Q4MGI0YzFmZWU0ZTliOTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeadMF0IKYQh1HMAUBKe4AzIKo/x
DPY+Nq4lKJo/v3KW/LNPuOcGe34RiO/7eNLOkamzb6zFUEIYaOhlG0VOw8Olfvgq
C0VSuMpiHJ+2dL5I6zE1V8aGgthrQxmM51RwosWyGgpDxsft6hKinkvM5j77Zfni
s3tQVkn2Ne1+Ye/D5d8bAThvlv8PK0wZBFlTUgDC071YEf4I5S4wr+Wu5RXo2Inw
QH4/bqrPoWngFa44cNdEMrg9weuv7TSOZwZEefbZ864LQ4x1Tq7RDILioIGy7nH6
CGCd//QGC2kz3BSoxFzVtJ7BsypMFbpsVwJdtZN0okub8Fg1yNXKf/mFIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNHv/IFIzGQuPJkPYC0wf7k6blzMB8GA1UdIwQY
MBaAFN991llmc3zo9l5A7y/qHP+vsWKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9lMjgzYmItZDRkMy00YjNhLWIyYjMt
OGFjODk2NTcwOGJjLzEvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9lMjgzYmItZDRkMy00YjNhLWIyYjMtOGFjODk2NTcwOGJj
LzEvMzMzV1dXWnpmT2oyWGtEdkwtb2NfNi14WXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvxVCVzY
hAWJptImylb36rK6/sqHyluNHWhEEn8kbiZK01kO1pZdY5z0RTEgTMhVUIJ8TRFO
zlLWuHS8AlQtq//KBJL9XIZcecrdUWhMktzAjzN6JH/zgKF5KtPBTwmV4EIPEKKJ
aXLwNZZNwasWqrkStdeJqhrB1N2KqKDMw+a3BDY5wyGMIfmgcA7dT6QisEyXMsK3
xR460afFDmRUAhwtJ6jIgRNi/Gla457AHQDaX1atUEjDLLmYPDhWnaVIJBb56j8w
OeYtKFr9gzFPBW74G3mevjyr5NjZd4FOTIPo160t1v6D9UWuOYCdKPBF755ITKjk
AkxpCAPqppQw1w==
-----END CERTIFICATE-----