Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
File:                     UxZZCg6vSN8rGuI7nVWenKwlmX4.mft (raw, json)
Hash identifier:          IJSVH9HUybcZdfcgOgeJds4CuHTh4ClXrqLC+SGylvk=
Subject key identifier:   F2:F6:E1:C3:BC:E8:D1:05:E0:1C:5F:43:82:D3:1D:51:19:CE:1E:6A
Authority key identifier: 53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E
Certificate issuer:       /CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
Certificate serial:       01936A7D77CF4EE2E0AA6C3B40650AFCB284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
Manifest number:          137B
Signing time:             Tue 26 Nov 2024 22:00:27 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:27 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:27 +0000
Files and hashes:         1: 4McoBRYRAxA-sszpdy5KLxc-YnI.roa (hash: E1+30CAfZ1SFC059THB6+UgDRrJIfXOfJ4lVBHa6RCg=)
                          2: BQ1hGwQBqSTd8NJoub3HRH7en9A.roa (hash: gh91iBA7mMdChiyzJuTx1GllA3BhlkeHZaP3ssEigf0=)
                          3: UxZZCg6vSN8rGuI7nVWenKwlmX4.crl (hash: /Ss0SfpFZ/pJiXXV82Ez83TWTkb0JNqhxXtoWTx7xOI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:77:cf:4e:e2:e0:aa:6c:3b:40:65:0a:fc:b2:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5316590a0eaf48df2b1ae23b9d559e9cac25997e
        Validity
            Not Before: Nov 26 22:00:27 2024 GMT
            Not After : Nov 27 22:00:27 2024 GMT
        Subject: CN=f2f6e1c3bce8d105e01c5f4382d31d5119ce1e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:41:fe:69:2c:75:73:90:2e:62:11:f6:f5:
                    11:e0:75:88:e4:9f:12:5e:8c:6f:9b:db:64:fa:61:
                    9e:16:cf:d9:06:03:ef:26:6a:42:9c:a8:5d:4e:45:
                    5c:0e:13:af:7b:70:e4:a2:99:2e:0c:27:e1:5e:32:
                    84:1e:b9:b3:3c:4e:b5:36:e7:b5:a0:08:e4:fb:77:
                    33:5d:d4:74:ce:5e:c7:02:cf:ee:45:e9:5b:b6:a0:
                    19:13:56:f9:4f:5a:16:b4:04:aa:52:7e:4b:52:6c:
                    98:a1:dc:79:ef:fb:21:20:3d:87:5c:b2:db:a6:1d:
                    76:2d:10:50:96:a4:3b:79:39:3b:0a:ff:6c:24:a7:
                    38:d5:5f:f5:a4:cc:70:4d:8f:e3:bc:7d:c5:68:b1:
                    69:55:da:de:81:38:eb:fc:c3:c6:c1:ea:75:3f:c2:
                    32:c7:f1:bf:0d:4b:cf:63:80:11:b5:ce:d2:fa:51:
                    30:2c:3b:08:04:89:60:22:09:e1:cb:e3:07:73:67:
                    bf:9b:40:0c:30:d7:d7:a3:da:99:42:77:bd:de:8f:
                    df:a4:a3:63:45:7a:5c:6d:ad:d6:c1:19:1f:1f:c1:
                    42:f2:21:ab:07:68:d3:13:ae:d6:6c:d5:29:26:e7:
                    9f:d0:34:a3:80:8a:87:c7:37:46:6d:ad:73:cd:b7:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F6:E1:C3:BC:E8:D1:05:E0:1C:5F:43:82:D3:1D:51:19:CE:1E:6A
            X509v3 Authority Key Identifier:
                keyid:53:16:59:0A:0E:AF:48:DF:2B:1A:E2:3B:9D:55:9E:9C:AC:25:99:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxZZCg6vSN8rGuI7nVWenKwlmX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f9dd1c-317b-41c1-8fcb-7d9eabee15ac/1/UxZZCg6vSN8rGuI7nVWenKwlmX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:fb:a9:15:80:aa:21:c1:d9:f0:00:3a:a2:8b:85:90:e2:8c:
         11:66:50:0d:2f:e4:6a:16:bf:59:72:50:4c:c1:8b:a1:56:88:
         9c:7d:da:22:99:12:db:6b:ae:b9:c3:fd:bf:56:3a:9c:d6:9a:
         1b:30:29:f1:aa:98:65:0a:5e:2c:b3:8d:de:28:f9:16:e5:da:
         79:32:48:dd:74:3f:fb:ae:03:cb:39:9c:54:2d:56:07:fa:fb:
         c7:b8:95:4a:2d:29:25:ae:58:58:98:d9:78:b0:8e:ed:77:38:
         c9:0e:1b:a7:f0:e9:c9:a7:2c:a3:19:e6:c7:eb:b8:5e:96:58:
         27:88:45:e2:d1:83:59:76:f6:fe:9b:77:19:5c:78:0c:ab:de:
         cc:65:2a:50:64:95:ff:80:e1:8c:98:a6:70:31:ae:c3:a9:e7:
         b2:c1:04:58:ec:27:12:15:04:24:5a:23:e1:ea:e4:a3:c0:0a:
         15:bd:5e:7b:da:c2:2c:cc:e6:14:27:4c:c3:ec:d0:0f:bb:fc:
         9b:db:dd:56:98:96:9e:33:bc:32:f3:74:89:e8:d1:1b:83:28:
         aa:ac:cc:78:cc:cf:cb:0c:cc:e6:63:f0:68:59:92:18:ff:fb:
         26:4a:a3:40:c7:83:c3:bd:c3:81:5c:17:53:b0:f9:79:aa:9c:
         ee:ea:99:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqfXfPTuLgqmw7QGUK/LKEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMTY1OTBhMGVhZjQ4ZGYyYjFhZTIzYjlkNTU5ZTljYWMy
NTk5N2UwHhcNMjQxMTI2MjIwMDI3WhcNMjQxMTI3MjIwMDI3WjAzMTEwLwYDVQQD
EyhmMmY2ZTFjM2JjZThkMTA1ZTAxYzVmNDM4MmQzMWQ1MTE5Y2UxZTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QVB/mksdXOQLmIR9vUR4HWI5J8S
Xoxvm9tk+mGeFs/ZBgPvJmpCnKhdTkVcDhOve3DkopkuDCfhXjKEHrmzPE61Nue1
oAjk+3czXdR0zl7HAs/uRelbtqAZE1b5T1oWtASqUn5LUmyYodx57/shID2HXLLb
ph12LRBQlqQ7eTk7Cv9sJKc41V/1pMxwTY/jvH3FaLFpVdregTjr/MPGwep1P8Iy
x/G/DUvPY4ARtc7S+lEwLDsIBIlgIgnhy+MHc2e/m0AMMNfXo9qZQne93o/fpKNj
RXpcba3WwRkfH8FC8iGrB2jTE67WbNUpJuef0DSjgIqHxzdGba1zzbdnOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPL24cO86NEF4BxfQ4LTHVEZzh5qMB8GA1UdIwQY
MBaAFFMWWQoOr0jfKxriO51VnpysJZl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXhaWkNnNnZTTjhyR3VJN25WV2VuS3dsbVg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mOWRkMWMtMzE3Yi00MWMxLThmY2It
N2Q5ZWFiZWUxNWFjLzEvVXhaWkNnNnZTTjhyR3VJN25WV2VuS3dsbVg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9mOWRkMWMtMzE3Yi00MWMxLThmY2ItN2Q5ZWFiZWUxNWFj
LzEvVXhaWkNnNnZTTjhyR3VJN25WV2VuS3dsbVg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPupFYCq
IcHZ8AA6oouFkOKMEWZQDS/kaha/WXJQTMGLoVaInH3aIpkS22uuucP9v1Y6nNaa
GzAp8aqYZQpeLLON3ij5FuXaeTJI3XQ/+64DyzmcVC1WB/r7x7iVSi0pJa5YWJjZ
eLCO7Xc4yQ4bp/Dpyacsoxnmx+u4XpZYJ4hF4tGDWXb2/pt3GVx4DKvezGUqUGSV
/4DhjJimcDGuw6nnssEEWOwnEhUEJFoj4erko8AKFb1ee9rCLMzmFCdMw+zQD7v8
m9vdVpiWnjO8MvN0iejRG4MoqqzMeMzPywzM5mPwaFmSGP/7JkqjQMeDw73DgVwX
U7D5eaqc7uqZ2w==
-----END CERTIFICATE-----