Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
File:                     HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft (raw, json)
Hash identifier:          m8EhqZh3MJ0SEyFbCk0QHdarE8xww0OHg2ZNl0gNWko=
Subject key identifier:   79:4B:21:15:8E:E9:CD:55:99:2C:F6:2B:EA:4C:BE:3B:74:23:54:5A
Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99
Certificate issuer:       /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
Certificate serial:       01936B222E659A864C7C07CB0EBE6047441A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
Manifest number:          137C
Signing time:             Wed 27 Nov 2024 01:00:22 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:22 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:22 +0000
Files and hashes:         1: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl (hash: GbmxiBXqrhm7WIVcjIZaz8JPYZKS8Uq1RoPlBxTgcCA=)
                          2: SL6POF68Ox1OynjD9-JJ5A-iE10.roa (hash: na5Tk13L5uIJFIcaqE8ZEaSFR5dm+WJxhVUqvLfiE+g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:2e:65:9a:86:4c:7c:07:cb:0e:be:60:47:44:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99
        Validity
            Not Before: Nov 27 01:00:22 2024 GMT
            Not After : Nov 28 01:00:22 2024 GMT
        Subject: CN=794b21158ee9cd55992cf62bea4cbe3b7423545a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:57:0d:8b:5f:99:65:7a:76:6b:b0:68:df:2a:
                    90:5f:29:08:76:db:0d:53:21:01:44:68:b9:46:b7:
                    26:aa:5a:c1:b1:48:4f:bc:aa:06:81:10:b4:b4:44:
                    c8:bd:ad:95:fa:0c:0f:b4:85:38:1b:c6:0b:81:f4:
                    68:bd:5d:6b:0b:ec:64:59:25:c1:93:2d:95:74:c2:
                    e7:92:21:af:da:7f:27:b3:f0:c8:b4:38:26:83:14:
                    70:ae:86:87:49:26:4c:0e:1f:3c:94:73:cf:9d:02:
                    7f:94:b0:b1:87:e7:60:cf:aa:96:d1:cb:3d:45:27:
                    86:98:4a:23:4f:56:94:67:9d:9f:4f:82:ab:35:cb:
                    ff:ce:ec:66:22:0d:f8:f0:29:7b:4e:f1:9d:8d:eb:
                    82:a7:f3:80:a6:6a:fb:f7:5b:e7:ec:27:fd:f5:05:
                    30:ac:91:ad:b0:dd:72:50:b7:dd:fe:86:02:a0:f3:
                    2e:51:88:b6:52:8e:12:f3:e6:3e:2c:91:03:4f:cf:
                    f9:ce:df:49:5f:03:8d:54:86:a6:c5:eb:e2:37:01:
                    d0:65:0a:70:13:44:dd:4b:9b:06:e9:09:6e:37:31:
                    59:47:e9:60:b9:43:7b:fe:1f:4a:11:8c:2e:95:f9:
                    ab:91:4a:0f:d8:40:7e:3e:00:5a:dd:68:2b:01:ee:
                    96:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4B:21:15:8E:E9:CD:55:99:2C:F6:2B:EA:4C:BE:3B:74:23:54:5A
            X509v3 Authority Key Identifier:
                keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:11:0a:eb:07:65:87:d9:d2:97:bc:eb:c8:93:29:3c:5b:bc:
         a0:f8:8d:16:1c:e1:00:49:99:66:67:63:15:bc:37:90:e6:f9:
         99:54:14:45:a2:9f:77:41:d4:85:15:fc:87:e3:af:a0:2c:17:
         61:1c:66:c3:ad:a4:a7:7b:70:b0:24:2e:0b:b9:6f:27:f6:a7:
         ac:17:fa:3f:72:b3:01:28:1c:e7:0a:83:db:80:32:e3:b8:43:
         9f:30:b7:7b:a8:e9:3b:f7:5c:ef:59:21:d4:6b:a3:7b:37:cc:
         cf:b4:76:31:a8:c2:ff:cf:9d:cc:c4:32:44:1a:29:10:c4:bc:
         2d:e9:ab:0f:94:3d:1d:3f:78:57:80:a6:71:8e:b1:bc:b2:85:
         a2:02:39:33:01:76:82:92:4d:f0:db:3e:70:97:f5:d1:30:17:
         96:f5:22:5b:db:0b:9d:22:8b:8e:02:1a:d5:2a:bc:64:84:f1:
         bf:a1:35:6f:0f:32:d1:6e:45:8c:8d:c1:55:c7:28:4a:00:e2:
         54:e5:f7:82:aa:7d:f5:63:ff:53:50:1c:cb:19:b8:c5:fa:d7:
         88:1c:c0:8d:fe:43:99:3a:f6:f6:2d:4a:2d:6c:f0:77:cd:88:
         df:8a:d5:f3:d0:11:43:bc:71:4e:ec:e4:18:e5:43:36:52:51:
         85:b7:b6:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIi5lmoZMfAfLDr5gR0QaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZmMyYjM2NTE0MTYzZDM4OWVlOGZlMThmOGUyMzQzZmE0
ZGRjOTkwHhcNMjQxMTI3MDEwMDIyWhcNMjQxMTI4MDEwMDIyWjAzMTEwLwYDVQQD
Eyg3OTRiMjExNThlZTljZDU1OTkyY2Y2MmJlYTRjYmUzYjc0MjM1NDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVcNi1+ZZXp2a7Bo3yqQXykIdtsN
UyEBRGi5RrcmqlrBsUhPvKoGgRC0tETIva2V+gwPtIU4G8YLgfRovV1rC+xkWSXB
ky2VdMLnkiGv2n8ns/DItDgmgxRwroaHSSZMDh88lHPPnQJ/lLCxh+dgz6qW0cs9
RSeGmEojT1aUZ52fT4KrNcv/zuxmIg348Cl7TvGdjeuCp/OApmr791vn7Cf99QUw
rJGtsN1yULfd/oYCoPMuUYi2Uo4S8+Y+LJEDT8/5zt9JXwONVIamxeviNwHQZQpw
E0TdS5sG6QluNzFZR+lguUN7/h9KEYwulfmrkUoP2EB+PgBa3WgrAe6WCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlLIRWO6c1VmSz2K+pMvjt0I1RaMB8GA1UdIwQY
MBaAFB38KzZRQWPTie6P4Y+OI0P6TdyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYt
MDFiZWQ4NzgyYzdmLzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYtMDFiZWQ4NzgyYzdm
LzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOhEK6wdl
h9nSl7zryJMpPFu8oPiNFhzhAEmZZmdjFbw3kOb5mVQURaKfd0HUhRX8h+OvoCwX
YRxmw62kp3twsCQuC7lvJ/anrBf6P3KzASgc5wqD24Ay47hDnzC3e6jpO/dc71kh
1GujezfMz7R2MajC/8+dzMQyRBopEMS8LemrD5Q9HT94V4CmcY6xvLKFogI5MwF2
gpJN8Ns+cJf10TAXlvUiW9sLnSKLjgIa1Sq8ZITxv6E1bw8y0W5FjI3BVccoSgDi
VOX3gqp99WP/U1Acyxm4xfrXiBzAjf5DmTr29i1KLWzwd82I34rV89ARQ7xxTuzk
GOVDNlJRhbe2Eg==
-----END CERTIFICATE-----