Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
File:                     46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json)
Hash identifier:          pYPdg2M7VvkpKjRvGdIco39iG+M1LYa+wLVNfj5xgKw=
Subject key identifier:   7B:70:B0:71:A1:AB:D1:4B:6E:7D:B6:8B:CF:30:FC:48:05:1F:3A:38
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Certificate issuer:       /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial:       01936AB4C5D2A3563A3622B1AED9CD2AFC44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
Manifest number:          08D3
Signing time:             Tue 26 Nov 2024 23:00:52 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:52 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:52 +0000
Files and hashes:         1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: bH37RfypPx4iQDB8XibuKxGLjUzDZY2rIEUWM/7qD8s=)
                          2: KvZ5C7GGXpsnDIXFK9w1aA1xkeQ.roa (hash: 2xkPC934TFyqLBsVBMeVEQzNzEo6Q8YWu+gSYwwm5GU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:c5:d2:a3:56:3a:36:22:b1:ae:d9:cd:2a:fc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
        Validity
            Not Before: Nov 26 23:00:52 2024 GMT
            Not After : Nov 27 23:00:52 2024 GMT
        Subject: CN=7b70b071a1abd14b6e7db68bcf30fc48051f3a38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:31:0f:45:4a:85:c4:39:9b:7c:42:16:84:
                    be:5a:4d:41:65:dc:51:f3:d5:98:23:6f:51:b2:25:
                    51:47:a6:d9:dc:e1:ae:fa:be:91:68:55:b8:74:52:
                    d6:05:20:40:2a:f9:14:07:95:ce:cb:4a:f4:39:c8:
                    1b:07:eb:ba:af:82:e0:21:4e:0f:5b:60:fb:45:1a:
                    06:f8:61:0d:5b:a4:1f:4f:92:cc:dc:4e:48:50:48:
                    ec:b1:0a:81:cf:a6:2e:77:e2:de:21:18:80:31:e8:
                    72:39:5c:a8:c9:4c:d5:cd:ea:86:f6:fc:23:09:23:
                    91:7b:e8:3a:c2:74:e0:1d:b4:b0:a8:9b:37:6f:e2:
                    91:eb:e7:7d:fd:48:5d:97:cc:9e:45:86:b6:eb:24:
                    09:7a:72:1d:36:f0:70:08:f5:e0:13:15:28:52:0d:
                    4a:77:ee:3f:eb:91:b8:77:b6:c3:c1:15:96:6d:00:
                    ef:21:7c:a3:d5:72:aa:3e:ea:e4:79:86:13:64:50:
                    c5:2b:62:31:05:3e:18:0d:12:dd:23:21:dc:13:e9:
                    cf:5c:7e:03:e2:68:4a:e4:c5:d7:b1:ae:af:fb:b3:
                    cd:85:bc:92:28:81:f4:1f:b1:c6:5b:3a:d4:71:49:
                    bd:17:63:f6:66:04:3c:27:a3:44:8f:c6:1c:7e:de:
                    96:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:70:B0:71:A1:AB:D1:4B:6E:7D:B6:8B:CF:30:FC:48:05:1F:3A:38
            X509v3 Authority Key Identifier:
                keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:df:e0:a1:14:af:cd:86:c0:e8:19:c3:98:7e:38:a1:2a:73:
         bd:9f:f2:01:76:cc:a6:16:09:2e:93:99:9b:88:8a:50:29:f6:
         f6:cc:eb:ee:80:13:15:f2:e3:b5:9c:1c:ca:d9:65:69:a2:33:
         ad:5d:7e:80:7b:12:75:b5:5d:79:0c:9c:2f:23:67:90:ce:55:
         ad:28:af:7c:8b:2d:f4:e7:e4:65:b7:97:1f:3a:36:bd:59:7d:
         09:ce:24:12:3c:8d:80:7d:91:69:3b:d0:5a:71:f1:25:09:06:
         5f:29:73:dd:5d:56:49:ac:1d:4f:22:a2:2b:21:bf:fb:97:05:
         cb:00:b4:bb:e6:b1:c7:34:11:aa:99:8a:2e:17:63:e2:f1:15:
         d2:1e:63:80:9a:a8:64:a6:4d:53:61:40:93:01:0d:da:c3:f8:
         0d:51:4f:6d:f0:48:41:f7:2a:d5:6a:a1:d4:cd:5f:e3:72:66:
         f5:85:54:7e:1e:f7:61:00:de:0d:c8:34:ff:1c:76:67:f6:8c:
         67:97:f9:31:86:aa:8d:a6:6a:e0:5a:d2:0b:0d:9d:8d:af:61:
         3a:6c:1a:9a:f7:f3:d8:37:63:17:22:c1:ca:31:39:d1:30:0d:
         96:a5:f6:13:9a:79:b3:a7:fc:bc:05:2e:a3:d7:8c:a3:19:dd:
         d0:dd:8e:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNqtMXSo1Y6NiKxrtnNKvxEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYTg5OGJhMTI1MGM4OTg5Y2M3NmQ5ZjhiNTNkMWRiYzYy
YjI4OTAwHhcNMjQxMTI2MjMwMDUyWhcNMjQxMTI3MjMwMDUyWjAzMTEwLwYDVQQD
Eyg3YjcwYjA3MWExYWJkMTRiNmU3ZGI2OGJjZjMwZmM0ODA1MWYzYTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYcxD0VKhcQ5m3xCFoS+Wk1BZdxR
89WYI29RsiVRR6bZ3OGu+r6RaFW4dFLWBSBAKvkUB5XOy0r0OcgbB+u6r4LgIU4P
W2D7RRoG+GENW6QfT5LM3E5IUEjssQqBz6Yud+LeIRiAMehyOVyoyUzVzeqG9vwj
CSORe+g6wnTgHbSwqJs3b+KR6+d9/Uhdl8yeRYa26yQJenIdNvBwCPXgExUoUg1K
d+4/65G4d7bDwRWWbQDvIXyj1XKqPurkeYYTZFDFK2IxBT4YDRLdIyHcE+nPXH4D
4mhK5MXXsa6v+7PNhbySKIH0H7HGWzrUcUm9F2P2ZgQ8J6NEj8Ycft6WawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtwsHGhq9FLbn22i88w/EgFHzo4MB8GA1UdIwQY
MBaAFOOomLoSUMiYnMdtn4tT0dvGKyiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iNjg4ZGEtNzY1Yy00NDgxLThlYjMt
NzMwMzgzMjExZjI1LzEvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iNjg4ZGEtNzY1Yy00NDgxLThlYjMtNzMwMzgzMjExZjI1
LzEvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANt/goRSv
zYbA6BnDmH44oSpzvZ/yAXbMphYJLpOZm4iKUCn29szr7oATFfLjtZwcytllaaIz
rV1+gHsSdbVdeQycLyNnkM5VrSivfIst9OfkZbeXHzo2vVl9Cc4kEjyNgH2RaTvQ
WnHxJQkGXylz3V1WSawdTyKiKyG/+5cFywC0u+axxzQRqpmKLhdj4vEV0h5jgJqo
ZKZNU2FAkwEN2sP4DVFPbfBIQfcq1Wqh1M1f43Jm9YVUfh73YQDeDcg0/xx2Z/aM
Z5f5MYaqjaZq4FrSCw2dja9hOmwamvfz2DdjFyLByjE50TANlqX2E5p5s6f8vAUu
o9eMoxnd0N2Onw==
-----END CERTIFICATE-----