Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
File:                     YOdz2_t1lX8Mxchj_M52ylijkwg.mft (raw, json)
Hash identifier:          HrJUavS7IEvUvcqgLZYLIPWK3ur7rvTHSsFgtGPdAqg=
Subject key identifier:   9C:16:A4:6E:9E:FA:71:4B:31:12:0C:CC:0B:69:86:E7:DB:BC:6A:4E
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Certificate issuer:       /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial:       0193535129789B4F107C8B85D8B46434B5AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
Manifest number:          0637
Signing time:             Fri 22 Nov 2024 10:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:47 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:47 +0000
Files and hashes:         1: 1_IjVWydWR9ywxbg1UF8TuyhWwA.roa (hash: zjzYmCiHOSdzjS23qgg1XP65NfZhBkHXYk5l3es6fXw=)
                          2: HgaGHfo0YnP0WW5ZHRN0mb9AFdA.roa (hash: E0/ntGAZIW1vx6NM43GlgZakUwk13kau5y4eSuSnCls=)
                          3: YOdz2_t1lX8Mxchj_M52ylijkwg.crl (hash: ilWR05dQXrjI+UIzqls0TSba1ynwsbL8MwLuHVeRYNI=)
                          4: by0UOno_Q6jR8ZDPrInUVJJb9rU.roa (hash: VpjjA4j1cYOeyFlo4m/Ty9wwE31eZds5SxSxGGmrJhg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:29:78:9b:4f:10:7c:8b:85:d8:b4:64:34:b5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
        Validity
            Not Before: Nov 22 10:00:47 2024 GMT
            Not After : Nov 23 10:00:47 2024 GMT
        Subject: CN=9c16a46e9efa714b31120ccc0b6986e7dbbc6a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:c5:ff:96:5c:53:cb:e6:b7:f5:68:27:27:
                    21:e6:60:33:c3:43:a4:7f:f1:c6:17:af:62:23:f6:
                    96:e4:d1:76:89:39:c5:9e:d8:bc:3f:12:f9:b4:01:
                    66:a1:89:65:e1:47:fe:89:99:7a:84:25:08:3d:f1:
                    11:0d:25:75:83:71:37:6f:c5:1d:c4:f8:58:0d:37:
                    df:cf:24:48:04:16:bb:32:c7:bc:e8:a9:c7:28:bd:
                    ed:9c:4b:2f:4a:ea:50:61:6e:62:f2:2d:39:08:bd:
                    2d:35:1f:41:50:04:a5:16:47:2b:d1:ac:49:c4:ba:
                    fe:4d:62:5e:87:bc:e3:83:f6:80:8d:61:13:b5:b9:
                    20:79:c3:f8:ca:32:15:a3:0e:f2:9b:de:3f:94:b9:
                    f9:ff:ca:65:32:ad:48:98:ca:ed:7d:5f:b1:41:20:
                    1a:b3:4b:6c:b0:c8:78:df:94:65:ee:73:b7:59:70:
                    28:a3:a4:3e:a0:a6:87:b9:b8:da:ec:bc:fb:c7:f1:
                    41:7b:cf:00:49:1b:d6:b4:e0:bb:a6:96:72:32:ba:
                    8c:93:94:5f:08:50:a0:52:ad:a1:7c:cc:55:8f:9c:
                    5e:4e:62:6a:07:49:7f:9d:6a:ec:72:76:37:43:de:
                    80:a2:e2:de:5e:e3:c3:ff:c9:9f:11:5e:ff:3f:63:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:16:A4:6E:9E:FA:71:4B:31:12:0C:CC:0B:69:86:E7:DB:BC:6A:4E
            X509v3 Authority Key Identifier:
                keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:80:8c:c6:40:87:e9:e6:81:af:84:42:80:cf:8d:47:77:3d:
         5d:e1:c4:a3:8a:94:7a:10:cb:8a:ad:c4:f7:f2:b1:3c:6a:6c:
         35:4b:63:1e:e0:11:c8:f9:6f:52:4d:8b:fd:ab:d7:8e:3f:6d:
         cf:8c:4e:97:f0:11:da:51:cb:7f:01:74:a7:17:f5:32:cc:ce:
         5a:73:a6:9f:0b:67:4c:0b:dc:22:f3:d7:45:8a:94:6c:39:29:
         62:cf:0e:01:d4:2b:f4:38:61:c4:54:03:e0:4f:70:4b:84:33:
         fb:5c:c6:f0:a6:0e:8e:04:fd:58:18:8d:55:3e:d4:a0:eb:2d:
         f0:ac:b8:25:19:76:0b:1b:ee:5c:6d:7c:6c:22:db:2e:23:06:
         3f:d2:33:d8:d7:23:cb:d6:1c:96:60:4a:a9:07:57:e0:87:26:
         21:e8:88:5f:c3:9b:90:f6:f5:63:9e:3c:26:fd:ec:56:b5:2c:
         f3:fe:98:92:2a:4f:61:3f:6e:0b:4d:02:03:89:4c:93:60:5a:
         ac:39:16:ed:82:9c:6f:0a:9a:c5:ec:6d:e3:b2:2d:3b:4a:cd:
         ae:31:f0:8d:d8:b6:d3:5e:d1:e8:ce:8f:27:8c:89:5e:60:eb:
         20:93:47:5b:45:54:fa:17:f0:4e:6a:49:b3:15:97:a9:fb:88:
         3e:33:28:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNTUSl4m08QfIuF2LRkNLWvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTc3M2RiZmI3NTk1N2YwY2M1Yzg2M2ZjY2U3NmNhNThh
MzkzMDgwHhcNMjQxMTIyMTAwMDQ3WhcNMjQxMTIzMTAwMDQ3WjAzMTEwLwYDVQQD
Eyg5YzE2YTQ2ZTllZmE3MTRiMzExMjBjY2MwYjY5ODZlN2RiYmM2YTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomvF/5ZcU8vmt/VoJych5mAzw0Ok
f/HGF69iI/aW5NF2iTnFnti8PxL5tAFmoYll4Uf+iZl6hCUIPfERDSV1g3E3b8Ud
xPhYDTffzyRIBBa7Mse86KnHKL3tnEsvSupQYW5i8i05CL0tNR9BUASlFkcr0axJ
xLr+TWJeh7zjg/aAjWETtbkgecP4yjIVow7ym94/lLn5/8plMq1ImMrtfV+xQSAa
s0tssMh435Rl7nO3WXAoo6Q+oKaHubja7Lz7x/FBe88ASRvWtOC7ppZyMrqMk5Rf
CFCgUq2hfMxVj5xeTmJqB0l/nWrscnY3Q96AouLeXuPD/8mfEV7/P2MXQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwWpG6e+nFLMRIMzAtphufbvGpOMB8GA1UdIwQY
MBaAFGDnc9v7dZV/DMXIY/zOdspYo5MIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9kejJfdDFsWDhNeGNoal9NNTJ5bGlqa3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTlkNmYtODJlZS00NzY4LTgwNWIt
NDc2ZDdlNjJjZWY2LzEvWU9kejJfdDFsWDhNeGNoal9NNTJ5bGlqa3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jOTlkNmYtODJlZS00NzY4LTgwNWItNDc2ZDdlNjJjZWY2
LzEvWU9kejJfdDFsWDhNeGNoal9NNTJ5bGlqa3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoCMxkCH
6eaBr4RCgM+NR3c9XeHEo4qUehDLiq3E9/KxPGpsNUtjHuARyPlvUk2L/avXjj9t
z4xOl/AR2lHLfwF0pxf1MszOWnOmnwtnTAvcIvPXRYqUbDkpYs8OAdQr9DhhxFQD
4E9wS4Qz+1zG8KYOjgT9WBiNVT7UoOst8Ky4JRl2CxvuXG18bCLbLiMGP9Iz2Ncj
y9YclmBKqQdX4IcmIeiIX8ObkPb1Y548Jv3sVrUs8/6YkipPYT9uC00CA4lMk2Ba
rDkW7YKcbwqaxext47ItO0rNrjHwjdi2017R6M6PJ4yJXmDrIJNHW0VU+hfwTmpJ
sxWXqfuIPjMogQ==
-----END CERTIFICATE-----