Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File:                     4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier:          L4c2lAezBgutt7p4SPap2BFO0n1msipOweeI3f4aZwg=
Subject key identifier:   B1:0B:20:00:DD:CF:FE:56:53:12:78:04:C0:04:E8:70:29:AA:A4:1F
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer:       /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial:       018F93BAE9559EB73C4BDDA3E5EC1D496014
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number:          1181
Signing time:             Mon 20 May 2024 02:00:51 +0000
Manifest this update:     Mon 20 May 2024 02:00:51 +0000
Manifest next update:     Tue 21 May 2024 02:00:51 +0000
Files and hashes:         1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: qAgOI7V74dgzyWT2+Uc+VJUYmqnGnVw2LMuSTnd22fo=)
                          2: XD0IOdIAc9z7i0eRQm6w5T3EWE8.roa (hash: uJnt+XL2TQRMHj6WXyHuFtXB9bzM1kEpoa8aaBsCmnc=)
                          3: r-gl5EE5IDM0I0py7QH_FPIAp4c.roa (hash: Gb2nmNm1YpHiI4H5L8h6JConx8fhjVg1Q4oM2d7/JcI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 19:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:ba:e9:55:9e:b7:3c:4b:dd:a3:e5:ec:1d:49:60:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
        Validity
            Not Before: May 20 02:00:51 2024 GMT
            Not After : May 21 02:00:51 2024 GMT
        Subject: CN=b10b2000ddcffe5653127804c004e87029aaa41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:a1:52:1b:d5:c0:d4:ce:90:b8:19:cc:65:
                    d3:e2:2e:32:bd:b8:20:8e:df:35:f3:97:9e:a9:21:
                    e7:74:16:11:84:8e:79:12:e3:ee:ba:35:f5:71:fc:
                    f1:f8:a9:c2:b9:c1:8f:22:b0:c1:af:ed:47:6b:b7:
                    fd:68:7d:63:d9:93:50:8b:31:46:0f:17:4b:ec:18:
                    9e:e0:7b:96:94:48:7c:80:2c:02:bb:3a:d6:fc:f5:
                    3a:da:27:f9:a5:0e:82:82:be:85:73:c9:26:06:59:
                    4c:fe:05:26:5d:1b:70:bf:ff:91:5a:db:ae:73:89:
                    3e:f9:c2:58:59:90:c1:4d:03:bd:fb:6e:70:d1:f6:
                    a9:50:82:b4:3f:d9:1c:31:17:26:5a:fc:c2:7c:d2:
                    7e:0e:47:05:9d:96:1d:61:e1:fa:79:d4:32:31:ef:
                    db:7b:89:fc:98:80:2a:74:fa:5c:03:00:8d:62:28:
                    0b:5e:4a:9d:e5:42:b6:30:57:e7:c8:29:c0:91:b5:
                    f9:ef:26:3d:98:d4:56:4c:6f:4b:c7:02:c9:78:5c:
                    c2:99:f6:28:88:4e:22:7c:a8:05:55:26:f5:04:d1:
                    12:06:37:72:03:bd:1b:20:a0:b0:2f:e9:1c:89:8e:
                    bd:7a:a2:f6:06:ad:0e:9a:a2:8a:4e:fb:2b:19:85:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:20:00:DD:CF:FE:56:53:12:78:04:C0:04:E8:70:29:AA:A4:1F
            X509v3 Authority Key Identifier:
                keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:cd:27:03:e5:b7:e6:d1:4b:06:11:fa:d7:41:98:27:58:97:
         84:3b:f8:16:80:2f:05:35:ca:80:5d:bc:b2:58:62:b2:68:d9:
         60:b8:ab:61:df:f9:58:d1:4f:6d:20:d2:b6:c7:9a:0f:52:c7:
         74:19:18:fb:7d:a2:2f:59:4e:20:de:62:0c:71:a2:ce:9d:72:
         b5:d2:c9:ba:b7:f7:c8:29:cd:af:07:b8:12:00:c4:fa:b5:a9:
         38:2e:aa:fb:1b:8e:15:68:cc:ed:d8:58:56:34:b9:4f:18:b6:
         8d:64:29:bd:a4:6b:8b:52:a2:32:00:e3:60:2b:95:15:fc:7c:
         51:47:6d:10:b0:69:43:33:fa:04:79:51:cd:8b:6b:cc:1f:f0:
         ba:7f:af:86:51:ef:a6:69:ec:f4:63:68:2f:d1:1e:4e:68:f3:
         07:bd:d4:b2:f1:d8:8a:51:07:ab:c5:2e:37:fc:4e:f5:4c:10:
         5d:e0:b5:0e:0f:f0:3a:6b:87:fa:72:7b:78:cd:63:da:8f:31:
         c3:77:07:4e:f4:d5:e3:9c:44:63:85:6d:ca:e2:82:4e:d0:5f:
         14:67:bb:61:47:c9:59:66:62:d8:4f:7d:af:0a:23:fb:c5:44:
         b8:05:89:3e:2b:47:69:66:3b:e4:44:aa:c5:67:9b:dd:8d:77:
         b6:fe:a4:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+TuulVnrc8S92j5ewdSWAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNjg5MzQwMjgzNzk0NDg5ZTQxYWM4NmFhZmE0NDE0Zjhh
NGQ2YmUwHhcNMjQwNTIwMDIwMDUxWhcNMjQwNTIxMDIwMDUxWjAzMTEwLwYDVQQD
EyhiMTBiMjAwMGRkY2ZmZTU2NTMxMjc4MDRjMDA0ZTg3MDI5YWFhNDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb+hUhvVwNTOkLgZzGXT4i4yvbgg
jt8185eeqSHndBYRhI55EuPuujX1cfzx+KnCucGPIrDBr+1Ha7f9aH1j2ZNQizFG
DxdL7Bie4HuWlEh8gCwCuzrW/PU62if5pQ6Cgr6Fc8kmBllM/gUmXRtwv/+RWtuu
c4k++cJYWZDBTQO9+25w0fapUIK0P9kcMRcmWvzCfNJ+DkcFnZYdYeH6edQyMe/b
e4n8mIAqdPpcAwCNYigLXkqd5UK2MFfnyCnAkbX57yY9mNRWTG9LxwLJeFzCmfYo
iE4ifKgFVSb1BNESBjdyA70bIKCwL+kciY69eqL2Bq0OmqKKTvsrGYWRJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLELIADdz/5WUxJ4BMAE6HApqqQfMB8GA1UdIwQY
MBaAFOBok0AoN5RInkGshqr6RBT4pNa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYt
N2JmYWViMTk1NDQ1LzEvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8wNWFiNjAtZGVhNi00M2EzLTg3ZWYtN2JmYWViMTk1NDQ1
LzEvNEdpVFFDZzNsRWllUWF5R3F2cEVGUGlrMXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYs0nA+W3
5tFLBhH610GYJ1iXhDv4FoAvBTXKgF28slhismjZYLirYd/5WNFPbSDStseaD1LH
dBkY+32iL1lOIN5iDHGizp1ytdLJurf3yCnNrwe4EgDE+rWpOC6q+xuOFWjM7dhY
VjS5Txi2jWQpvaRri1KiMgDjYCuVFfx8UUdtELBpQzP6BHlRzYtrzB/wun+vhlHv
pmns9GNoL9EeTmjzB73UsvHYilEHq8UuN/xO9UwQXeC1Dg/wOmuH+nJ7eM1j2o8x
w3cHTvTV45xEY4VtyuKCTtBfFGe7YUfJWWZi2E99rwoj+8VEuAWJPitHaWY75ESq
xWeb3Y13tv6kdw==
-----END CERTIFICATE-----