Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
File:                     TBikTVSkel6pfe39Xtg3nX7qAtA.mft (raw, json)
Hash identifier:          zmmuoTZ0eEQyijmU5L/aFB+/PReg+0si7mtxo9JnD9A=
Subject key identifier:   33:21:B0:2B:7A:DC:BF:ED:B6:C4:7C:2F:E7:17:6C:12:80:A4:47:E0
Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0
Certificate issuer:       /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
Certificate serial:       018F885ADD61B2681FE0994F4B69277C9BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
Manifest number:          0AB1
Signing time:             Fri 17 May 2024 21:00:07 +0000
Manifest this update:     Fri 17 May 2024 21:00:07 +0000
Manifest next update:     Sat 18 May 2024 21:00:07 +0000
Files and hashes:         1: M-0j-NcJ2NEH-PNn7bmJfyKmROw.roa (hash: MLH/T6u9gFnu15XrKQDNcVM/JsBzvts9w+14/nXF4YU=)
                          2: OQdfkxEcsWjXzTOwsgApkDeMGOE.roa (hash: mkBzJGb8TqL2Q7+yGwEXk2J0+R45tCdOpSYCsrsDld8=)
                          3: TBikTVSkel6pfe39Xtg3nX7qAtA.crl (hash: XaldsqtEmGZVAgmHrGj05JWtEoeFafm9yxUW15GcRgA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:dd:61:b2:68:1f:e0:99:4f:4b:69:27:7c:9b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0
        Validity
            Not Before: May 17 21:00:07 2024 GMT
            Not After : May 18 21:00:07 2024 GMT
        Subject: CN=3321b02b7adcbfedb6c47c2fe7176c1280a447e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:e9:51:62:ee:d2:2e:d4:d7:1a:3c:bd:8f:
                    36:ea:8b:46:ae:de:21:16:13:8a:50:32:31:15:97:
                    bd:f8:3e:79:da:c1:74:d3:9f:7b:10:50:b6:21:75:
                    28:de:31:e1:59:9b:a0:4a:5a:df:cc:de:a8:2c:58:
                    67:12:d8:d3:b0:3a:8e:c8:09:7d:88:95:3d:98:3f:
                    5b:19:d1:69:81:27:f8:7e:13:b4:5b:b0:81:03:df:
                    9d:50:b7:48:e9:9b:00:36:e3:bc:ac:4b:e2:6c:b3:
                    dc:15:37:b3:e0:29:0c:fe:3e:04:8f:c6:0f:54:f6:
                    17:62:5e:0a:5d:07:04:80:12:5b:e0:bc:28:3a:de:
                    2b:2f:46:45:2d:dd:f0:cc:52:ae:be:b2:d1:3b:9e:
                    76:20:d3:f2:e2:09:06:27:8f:9b:4a:0c:70:a8:78:
                    ed:e1:e3:27:0f:4a:21:b2:ab:9b:31:e1:6d:5b:f7:
                    cb:60:25:d0:a1:ea:68:9a:f5:c9:47:5f:35:37:cc:
                    6c:18:a3:e1:53:b3:4b:28:5f:05:e2:97:9d:bf:07:
                    9d:26:74:23:b7:d1:77:8b:cc:5d:a3:e2:3b:59:fa:
                    d2:ca:08:a5:ac:1f:52:1e:66:65:ea:50:b6:63:6e:
                    02:97:7c:8a:9a:64:49:5b:7d:df:72:3c:2f:80:30:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:21:B0:2B:7A:DC:BF:ED:B6:C4:7C:2F:E7:17:6C:12:80:A4:47:E0
            X509v3 Authority Key Identifier:
                keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:53:1d:3f:14:e1:3b:12:e4:25:c2:13:21:b5:5b:f4:ee:e6:
         f5:f5:7d:69:83:5d:96:bd:6e:b0:23:52:3b:a6:15:69:be:6d:
         23:74:f3:6a:9d:fe:d3:df:3e:62:31:4b:8a:d9:88:d3:81:f2:
         db:11:bb:e0:4c:50:0f:e3:38:cc:15:9a:22:01:16:16:39:a5:
         9b:74:9e:68:79:3e:13:98:ce:ef:64:d7:51:aa:da:99:20:b8:
         61:1c:76:40:ca:6a:37:4c:28:5d:5a:80:b7:19:f8:96:3a:cf:
         bb:2a:01:05:e6:2f:9b:b4:83:03:c5:05:4c:47:1d:5f:be:bb:
         01:3f:16:f3:18:07:b9:44:a2:01:4d:33:31:bd:7d:43:dc:8d:
         7e:99:cd:22:9d:b3:05:aa:64:19:b6:2f:66:82:5c:95:77:68:
         0c:ab:97:09:b2:35:45:9b:eb:8c:3f:04:15:80:5e:c3:e3:84:
         ef:9b:2f:4f:e3:25:6a:7f:0f:dd:7e:ce:fb:08:58:31:67:a4:
         8b:65:d6:7a:93:4f:25:73:87:20:48:58:b9:2f:4d:9a:e9:be:
         41:40:96:b0:ec:47:ba:91:b6:72:e3:26:dc:6a:3b:63:45:2f:
         b4:6c:c6:70:c0:c2:05:5b:41:e1:5d:28:1b:67:ed:67:4f:80:
         e2:02:0c:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWt1hsmgf4JlPS2knfJvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMThhNDRkNTRhNDdhNWVhOTdkZWRmZDVlZDgzNzlkN2Vl
YTAyZDAwHhcNMjQwNTE3MjEwMDA3WhcNMjQwNTE4MjEwMDA3WjAzMTEwLwYDVQQD
EygzMzIxYjAyYjdhZGNiZmVkYjZjNDdjMmZlNzE3NmMxMjgwYTQ0N2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGHpUWLu0i7U1xo8vY826otGrt4h
FhOKUDIxFZe9+D552sF00597EFC2IXUo3jHhWZugSlrfzN6oLFhnEtjTsDqOyAl9
iJU9mD9bGdFpgSf4fhO0W7CBA9+dULdI6ZsANuO8rEvibLPcFTez4CkM/j4Ej8YP
VPYXYl4KXQcEgBJb4LwoOt4rL0ZFLd3wzFKuvrLRO552INPy4gkGJ4+bSgxwqHjt
4eMnD0ohsqubMeFtW/fLYCXQoepomvXJR181N8xsGKPhU7NLKF8F4pedvwedJnQj
t9F3i8xdo+I7WfrSygilrB9SHmZl6lC2Y24Cl3yKmmRJW33fcjwvgDDaYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDMhsCt63L/ttsR8L+cXbBKApEfgMB8GA1UdIwQY
MBaAFEwYpE1UpHpeqX3t/V7YN51+6gLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQt
ZjIxMzYzMDcxNTkxLzEvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQtZjIxMzYzMDcxNTkx
LzEvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVMdPxTh
OxLkJcITIbVb9O7m9fV9aYNdlr1usCNSO6YVab5tI3Tzap3+098+YjFLitmI04Hy
2xG74ExQD+M4zBWaIgEWFjmlm3SeaHk+E5jO72TXUaramSC4YRx2QMpqN0woXVqA
txn4ljrPuyoBBeYvm7SDA8UFTEcdX767AT8W8xgHuUSiAU0zMb19Q9yNfpnNIp2z
BapkGbYvZoJclXdoDKuXCbI1RZvrjD8EFYBew+OE75svT+Mlan8P3X7O+whYMWek
i2XWepNPJXOHIEhYuS9Nmum+QUCWsOxHupG2cuMm3Go7Y0UvtGzGcMDCBVtB4V0o
G2ftZ0+A4gIMyA==
-----END CERTIFICATE-----