Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File:                     PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier:          KjtMVSs56ZnYAA9+mE22iV4QN4yTxvridnQF3DqgwL8=
Subject key identifier:   F4:B8:06:48:29:70:B3:1C:93:E0:55:8F:7A:EF:43:77:44:1B:3E:46
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer:       /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial:       019356F6E4DEE65CBBA04542564CDE15C131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number:          1377
Signing time:             Sat 23 Nov 2024 03:00:41 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:41 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:41 +0000
Files and hashes:         1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: vhmx1LNFjN1eFK8Guku6CCnYjjKESqCpGjLQyCvZmuc=)
                          2: Zx604G-uzIUj44LHdN_1Zs9_06Q.roa (hash: ZRfhJ4Cb49AJENwiSSIsNHEXfa/AvLm9bVdPeNe33yo=)
                          3: mc5JZ-DpOXUsJHV8vZI_IYal2O0.roa (hash: 3YbuI/DSiTlU2P9XIDTs9naRLCiV8r78p0U23as4B64=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:e4:de:e6:5c:bb:a0:45:42:56:4c:de:15:c1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
        Validity
            Not Before: Nov 23 03:00:41 2024 GMT
            Not After : Nov 24 03:00:41 2024 GMT
        Subject: CN=f4b806482970b31c93e0558f7aef4377441b3e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b2:3e:d5:a6:2d:d7:ee:e0:b2:88:97:d0:1e:
                    f3:e8:2c:7a:8e:4f:b4:cc:13:c7:cf:76:aa:d5:0a:
                    77:95:41:43:73:20:55:b1:7d:35:e6:93:1d:5b:e0:
                    f4:9e:8e:99:60:e9:b1:3b:e0:0c:4c:a7:44:e3:65:
                    5c:00:6d:30:54:6e:3c:45:76:07:83:cf:93:2d:e5:
                    f6:02:9b:52:08:bc:81:90:54:79:8f:85:3d:df:f9:
                    fa:cc:59:00:e6:d8:19:4a:fc:9b:d6:47:4c:e3:2a:
                    ea:8f:78:e9:7a:0f:d7:da:45:4a:b2:9e:b1:e9:b5:
                    94:68:50:87:cd:a8:e7:2a:2e:26:5f:1c:f4:3d:ea:
                    bf:00:2e:33:6e:0a:18:3b:4f:c4:8a:09:03:af:5f:
                    da:0e:46:21:7f:49:9a:e4:91:a6:94:e9:8c:b7:c8:
                    0c:c9:16:21:ae:c8:ee:be:8e:f5:88:01:3c:31:93:
                    bd:06:43:be:16:ae:f7:e1:48:ad:3b:89:82:34:f9:
                    e2:67:a0:83:82:01:0d:5a:60:11:a7:b8:09:b8:ca:
                    be:e8:01:af:bf:64:ed:97:ec:5f:51:f9:15:c9:2b:
                    b8:25:be:ef:33:a3:e0:ce:b5:12:60:d4:9c:96:64:
                    2c:26:fe:bb:12:47:56:5f:6d:1a:f2:60:60:5d:87:
                    4c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B8:06:48:29:70:B3:1C:93:E0:55:8F:7A:EF:43:77:44:1B:3E:46
            X509v3 Authority Key Identifier:
                keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d9:2b:b3:6b:6b:04:17:d1:2f:2b:e3:5e:14:87:65:7c:72:
         69:eb:92:a0:38:bd:69:39:1f:c4:de:84:18:4d:62:d8:20:dc:
         f9:81:76:00:bf:bc:96:3d:aa:c4:18:12:f5:27:8e:bb:13:30:
         66:7f:88:8a:7e:1d:68:52:28:6e:1c:b4:ec:61:7f:20:97:ea:
         7a:d7:58:82:b9:a2:17:f6:3d:24:13:d0:3a:fa:9e:45:61:95:
         7e:46:4f:43:87:0b:7f:81:ac:13:07:47:b5:1b:63:be:36:8b:
         56:a3:03:2f:2c:40:7f:52:d6:33:2e:17:37:74:32:d6:d9:60:
         6d:29:28:39:2e:6b:4a:09:75:5b:6a:6a:3e:74:9d:1d:ca:01:
         b8:f7:de:ad:e4:99:c8:5c:0e:b1:90:fa:ed:c1:df:37:74:fe:
         24:c8:f2:36:8a:0f:c6:d8:5b:3d:f4:5e:da:d3:16:a5:2a:9e:
         23:1f:a1:86:f7:73:6e:5e:27:ed:be:67:44:ec:8d:80:46:2c:
         e8:77:a2:29:c1:c5:61:fe:34:9c:8a:cb:de:df:b3:ce:79:36:
         d4:5a:da:2d:2e:00:35:c2:e1:2b:8d:37:eb:73:05:ea:9e:d1:
         f2:0f:bf:07:27:6c:b2:40:c0:80:3d:e3:36:62:76:e8:f6:46:
         d3:7c:31:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9uTe5ly7oEVCVkzeFcExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODAxMmZhMTRhY2U3YTBjM2JkMmU4MmUwYTI5ZDlhNDRi
ZmUyOTAwHhcNMjQxMTIzMDMwMDQxWhcNMjQxMTI0MDMwMDQxWjAzMTEwLwYDVQQD
EyhmNGI4MDY0ODI5NzBiMzFjOTNlMDU1OGY3YWVmNDM3NzQ0MWIzZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17I+1aYt1+7gsoiX0B7z6Cx6jk+0
zBPHz3aq1Qp3lUFDcyBVsX015pMdW+D0no6ZYOmxO+AMTKdE42VcAG0wVG48RXYH
g8+TLeX2AptSCLyBkFR5j4U93/n6zFkA5tgZSvyb1kdM4yrqj3jpeg/X2kVKsp6x
6bWUaFCHzajnKi4mXxz0Peq/AC4zbgoYO0/EigkDr1/aDkYhf0ma5JGmlOmMt8gM
yRYhrsjuvo71iAE8MZO9BkO+Fq734UitO4mCNPniZ6CDggENWmARp7gJuMq+6AGv
v2Ttl+xfUfkVySu4Jb7vM6PgzrUSYNSclmQsJv67EkdWX20a8mBgXYdM+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPS4BkgpcLMck+BVj3rvQ3dEGz5GMB8GA1UdIwQY
MBaAFD2AEvoUrOegw70uguCinZpEv+KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgt
NzdmODRjNTYyYTVmLzEvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgtNzdmODRjNTYyYTVm
LzEvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNkrs2tr
BBfRLyvjXhSHZXxyaeuSoDi9aTkfxN6EGE1i2CDc+YF2AL+8lj2qxBgS9SeOuxMw
Zn+Iin4daFIobhy07GF/IJfqetdYgrmiF/Y9JBPQOvqeRWGVfkZPQ4cLf4GsEwdH
tRtjvjaLVqMDLyxAf1LWMy4XN3Qy1tlgbSkoOS5rSgl1W2pqPnSdHcoBuPfereSZ
yFwOsZD67cHfN3T+JMjyNooPxthbPfRe2tMWpSqeIx+hhvdzbl4n7b5nROyNgEYs
6HeiKcHFYf40nIrL3t+zznk21FraLS4ANcLhK40363MF6p7R8g+/BydsskDAgD3j
NmJ26PZG03wx1A==
-----END CERTIFICATE-----