Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File:                     rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier:          Sj48/K/DAcfWGuFan9KJbUwuPgDeiK13TohcVHyZRJk=
Subject key identifier:   47:9F:F1:59:B1:50:61:0F:C2:FD:62:D1:43:73:3F:E6:27:E1:A4:1F
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer:       /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial:       01936A4679D199A3D09F897CD9362DA7B38E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number:          1125
Signing time:             Tue 26 Nov 2024 21:00:23 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:23 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:23 +0000
Files and hashes:         1: F0JTo65zzb-oMHVyHfFHPeMUNF4.roa (hash: uMagb04Koq3f87WHCKIxab1jGl3lFRPSxCFI4myZ2qY=)
                          2: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: ru1uV594eUafhe6JFVdlBKlkERM/9hmEIGJ5JBumfuk=)
                          3: tmqt1-3cEEF5pEaLnI5JGfGiR-Q.roa (hash: zFQLT0Sg2LlE1erjMpvEmbcuvRjY9Ydq+JFH133scfQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:79:d1:99:a3:d0:9f:89:7c:d9:36:2d:a7:b3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
        Validity
            Not Before: Nov 26 21:00:23 2024 GMT
            Not After : Nov 27 21:00:23 2024 GMT
        Subject: CN=479ff159b150610fc2fd62d143733fe627e1a41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8f:23:44:e8:fd:ca:18:8d:cc:ce:80:aa:e9:
                    93:87:7b:65:4a:e1:14:03:d2:12:31:e9:bc:ea:0c:
                    79:9e:c3:1c:e4:68:fb:5d:17:b9:09:fe:ca:a2:a7:
                    b5:65:0e:7f:7c:c5:c6:df:30:32:6d:27:3f:40:19:
                    32:08:22:41:9e:86:5e:b2:58:5d:32:0b:89:ff:9d:
                    92:42:21:fc:34:16:15:ae:8f:c9:0a:73:37:39:b3:
                    82:71:8c:ef:80:1b:92:05:f3:1b:96:3c:48:6c:6b:
                    61:bd:99:cf:2f:5a:88:24:8a:b0:e7:18:3f:20:ed:
                    a2:5d:d2:4b:5d:2a:95:fe:ad:c2:10:94:e3:03:94:
                    b7:ac:4d:b4:b7:ce:20:6d:cc:b2:4f:29:c2:43:32:
                    6d:2b:ce:5e:b7:3a:76:0c:e3:f7:0f:0b:01:bc:28:
                    5d:10:ec:35:e1:02:22:f5:37:b6:61:be:cf:a7:58:
                    29:40:40:7c:db:9d:66:d9:ee:6b:a5:cc:2c:98:b2:
                    b6:7f:61:60:36:a5:90:79:cb:54:6b:7b:c7:70:50:
                    c9:9b:6b:e4:16:5b:e1:2b:d5:fb:58:88:93:51:12:
                    cd:9d:6b:ad:87:a7:61:bb:18:ae:9f:6d:ad:bd:81:
                    56:6f:2c:34:ef:25:79:e1:96:cb:e4:29:8c:a7:9d:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9F:F1:59:B1:50:61:0F:C2:FD:62:D1:43:73:3F:E6:27:E1:A4:1F
            X509v3 Authority Key Identifier:
                keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:70:75:1d:e3:7f:3b:63:56:42:4b:09:5c:97:0a:ed:30:76:
         d9:06:78:0c:f1:ad:6d:c3:50:06:17:e0:8c:7c:cc:50:8b:c6:
         c6:20:e1:68:55:c3:50:80:a8:8c:c4:57:42:2c:01:a2:5b:0c:
         8d:1d:10:76:b4:66:86:2a:6c:0b:7d:1b:d3:76:b2:88:85:0b:
         d2:07:ad:0d:3e:fc:b8:27:a9:02:35:39:6e:88:0f:07:4c:ad:
         39:f5:f5:74:75:11:ec:7b:d8:97:ae:f1:e5:65:c4:81:30:e4:
         76:40:a7:3b:6d:1f:96:7a:db:0f:73:dc:a5:cc:86:8c:c4:14:
         ce:79:01:a3:a8:92:08:30:81:b5:7e:44:0a:3e:14:97:d1:8b:
         ea:a7:ee:8e:72:63:9f:8b:79:52:88:21:2d:89:c3:44:1b:29:
         76:18:91:e3:65:cc:d8:1a:08:5b:4f:d8:e2:79:7f:41:75:51:
         ba:b4:f9:f7:5a:ac:4f:c4:51:ab:06:59:fb:65:bf:c2:fa:8a:
         46:3d:27:4b:7d:08:6d:9d:8f:69:b5:c1:c2:cd:11:bf:03:a2:
         51:0d:dd:10:91:63:eb:61:51:75:d8:c8:b3:61:dd:6a:d6:08:
         74:6d:9b:2b:a5:5c:08:a7:59:a9:a5:34:d5:d9:a3:71:62:82:
         dd:dd:64:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqRnnRmaPQn4l82TYtp7OOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMGRjMTJiMGYxYjUzM2Q4ZDA0ZWM2MTE3ZDZiOWU1MTJm
Y2FhOWYwHhcNMjQxMTI2MjEwMDIzWhcNMjQxMTI3MjEwMDIzWjAzMTEwLwYDVQQD
Eyg0NzlmZjE1OWIxNTA2MTBmYzJmZDYyZDE0MzczM2ZlNjI3ZTFhNDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo8jROj9yhiNzM6AqumTh3tlSuEU
A9ISMem86gx5nsMc5Gj7XRe5Cf7Koqe1ZQ5/fMXG3zAybSc/QBkyCCJBnoZeslhd
MguJ/52SQiH8NBYVro/JCnM3ObOCcYzvgBuSBfMbljxIbGthvZnPL1qIJIqw5xg/
IO2iXdJLXSqV/q3CEJTjA5S3rE20t84gbcyyTynCQzJtK85etzp2DOP3DwsBvChd
EOw14QIi9Te2Yb7Pp1gpQEB8251m2e5rpcwsmLK2f2FgNqWQectUa3vHcFDJm2vk
FlvhK9X7WIiTURLNnWuth6dhuxiun22tvYFWbyw07yV54ZbL5CmMp50y3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEef8VmxUGEPwv1i0UNzP+Yn4aQfMB8GA1UdIwQY
MBaAFK8NwSsPG1M9jQTsYRfWueUS/KqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYt
YmM1YjY5MTQ0NTg3LzEvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9jMzE3NGEtYTc5NC00NGVlLThkMjYtYmM1YjY5MTQ0NTg3
LzEvcnczQkt3OGJVejJOQk94aEY5YTU1Ukw4cXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3B1HeN/
O2NWQksJXJcK7TB22QZ4DPGtbcNQBhfgjHzMUIvGxiDhaFXDUICojMRXQiwBolsM
jR0QdrRmhipsC30b03ayiIUL0getDT78uCepAjU5bogPB0ytOfX1dHUR7HvYl67x
5WXEgTDkdkCnO20flnrbD3PcpcyGjMQUznkBo6iSCDCBtX5ECj4Ul9GL6qfujnJj
n4t5UoghLYnDRBspdhiR42XM2BoIW0/Y4nl/QXVRurT591qsT8RRqwZZ+2W/wvqK
Rj0nS30IbZ2PabXBws0RvwOiUQ3dEJFj62FRddjIs2HdatYIdG2bK6VcCKdZqaU0
1dmjcWKC3d1kzw==
-----END CERTIFICATE-----