Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
File:                     4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft (raw, json)
Hash identifier:          HY17MAoowyl8w7FvwIrZV/Th0i5zg/LaslyMXlzbMiA=
Subject key identifier:   7D:BE:41:E6:2C:E7:1F:DE:19:35:EC:09:87:57:1D:0D:88:BC:3D:E9
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Certificate issuer:       /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial:       0191FAEC52D2B2D8940728F1F2EB089ACF24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
Manifest number:          06D7
Signing time:             Mon 16 Sep 2024 13:01:17 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:17 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:17 +0000
Files and hashes:         1: 4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl (hash: FA6w01jzuLvHEPrG8spqL3C5MRYMxo+pgsKnjaBuBkw=)
                          2: 7xFb4pIWeKg18ylZXcy08Nqd3G4.roa (hash: je1YOaA6SMM0LYheUVhUQYVpHXV/W8OTnggiPAbs+f4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:52:d2:b2:d8:94:07:28:f1:f2:eb:08:9a:cf:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
        Validity
            Not Before: Sep 16 13:01:17 2024 GMT
            Not After : Sep 17 13:01:17 2024 GMT
        Subject: CN=7dbe41e62ce71fde1935ec0987571d0d88bc3de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:76:e6:fb:d9:ce:a6:09:c1:b2:f7:9c:22:
                    8c:57:a9:e2:dd:c8:e0:89:05:3e:f2:d4:aa:c5:a2:
                    6c:14:31:c2:54:7d:a8:00:b9:83:f2:b2:39:e9:d5:
                    f7:45:c7:56:8e:00:44:df:48:29:65:fb:e0:c0:dd:
                    e8:c0:ee:2c:27:f6:f1:23:65:fc:bf:23:17:90:8d:
                    f7:61:dc:e1:53:95:06:61:7f:b8:ff:44:37:79:a9:
                    9e:3e:dc:98:81:56:b5:cb:a7:73:89:23:bd:48:10:
                    0b:0f:41:bd:1a:49:5b:3d:f3:7b:92:00:3c:5b:b5:
                    ad:03:1b:c4:93:56:0a:14:55:f8:33:c6:4e:e7:49:
                    1c:c0:e7:03:6d:f7:0c:20:40:bb:b6:c6:d7:a2:ad:
                    a8:47:76:c2:ab:dc:3f:cc:2c:99:82:8e:d4:4c:7a:
                    f1:ac:36:da:64:d4:8e:bf:d8:0d:97:00:ed:5b:25:
                    b9:3d:29:0e:f1:a6:cc:b9:5b:99:91:e9:c8:f3:5c:
                    7f:58:0a:9a:9e:c0:06:3f:54:cb:ed:9f:f0:50:7f:
                    a7:67:e0:7d:fc:16:1d:b2:6b:ab:76:64:a6:2d:18:
                    fe:0d:fa:39:43:c4:ac:0c:18:fe:ef:f2:f2:00:c3:
                    fc:2f:5f:53:db:e4:0c:a0:a7:21:02:df:75:ce:09:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:BE:41:E6:2C:E7:1F:DE:19:35:EC:09:87:57:1D:0D:88:BC:3D:E9
            X509v3 Authority Key Identifier:
                keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ab:16:c5:4a:ee:6f:83:8c:fa:44:56:be:55:54:2e:05:57:
         c8:8f:0b:73:95:fb:b5:4e:0e:d6:38:99:44:72:74:21:22:b4:
         54:56:69:cc:58:73:3f:ba:34:6d:6c:3c:82:0e:e7:66:03:ed:
         06:99:ef:b9:a2:ff:47:2a:c9:e0:1a:06:fa:18:96:bf:b7:66:
         c6:0c:11:fe:b1:86:39:57:d2:fa:4d:7d:e1:df:cb:a1:ab:b6:
         ad:ed:67:09:7c:b3:45:b0:ba:05:ea:34:b5:37:63:85:bf:20:
         04:cd:19:c5:e7:12:27:1b:ce:62:8e:0d:52:c1:9f:c9:69:e1:
         12:e7:14:d9:46:e4:a3:b7:40:af:3c:31:1f:d4:47:4f:c7:05:
         2e:25:e9:8b:e3:08:ba:af:62:cd:59:45:19:b5:21:e4:60:54:
         71:a8:f7:3b:62:dc:54:2d:44:f4:33:74:ad:ef:56:33:55:e1:
         96:1e:65:27:f7:79:54:2f:68:86:e3:8d:0b:f7:77:24:96:58:
         3a:b1:62:33:8a:4c:8e:27:ad:c8:4a:61:04:08:c6:39:46:48:
         20:b5:e4:81:77:a3:31:af:18:a5:c4:7c:68:10:8f:74:32:66:
         ec:15:8d:fc:03:e7:86:8c:06:87:fb:c6:76:77:40:cc:43:dd:
         04:04:a2:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH67FLSstiUByjx8usIms8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTM5NzZkOWVjYjgzMDlhODE4MWZiZDAyNWNhNTJmZWYx
NjE5OTkwHhcNMjQwOTE2MTMwMTE3WhcNMjQwOTE3MTMwMTE3WjAzMTEwLwYDVQQD
Eyg3ZGJlNDFlNjJjZTcxZmRlMTkzNWVjMDk4NzU3MWQwZDg4YmMzZGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2J25vvZzqYJwbL3nCKMV6ni3cjg
iQU+8tSqxaJsFDHCVH2oALmD8rI56dX3RcdWjgBE30gpZfvgwN3owO4sJ/bxI2X8
vyMXkI33YdzhU5UGYX+4/0Q3eamePtyYgVa1y6dziSO9SBALD0G9GklbPfN7kgA8
W7WtAxvEk1YKFFX4M8ZO50kcwOcDbfcMIEC7tsbXoq2oR3bCq9w/zCyZgo7UTHrx
rDbaZNSOv9gNlwDtWyW5PSkO8abMuVuZkenI81x/WAqansAGP1TL7Z/wUH+nZ+B9
/BYdsmurdmSmLRj+Dfo5Q8SsDBj+7/LyAMP8L19T2+QMoKchAt91zgnEvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2+QeYs5x/eGTXsCYdXHQ2IvD3pMB8GA1UdIwQY
MBaAFODjl22ey4MJqBgfvQJcpS/vFhmZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9PWGJaN0xnd21vR0ItOUFseWxMLThXR1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9kNjEyYTMtNDYzMS00N2RlLTk0MGQt
OGJlMGQ5NzY4MmFiLzEvNE9PWGJaN0xnd21vR0ItOUFseWxMLThXR1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9kNjEyYTMtNDYzMS00N2RlLTk0MGQtOGJlMGQ5NzY4MmFi
LzEvNE9PWGJaN0xnd21vR0ItOUFseWxMLThXR1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqsWxUru
b4OM+kRWvlVULgVXyI8Lc5X7tU4O1jiZRHJ0ISK0VFZpzFhzP7o0bWw8gg7nZgPt
BpnvuaL/RyrJ4BoG+hiWv7dmxgwR/rGGOVfS+k194d/Loau2re1nCXyzRbC6Beo0
tTdjhb8gBM0ZxecSJxvOYo4NUsGfyWnhEucU2Ubko7dArzwxH9RHT8cFLiXpi+MI
uq9izVlFGbUh5GBUcaj3O2LcVC1E9DN0re9WM1Xhlh5lJ/d5VC9ohuONC/d3JJZY
OrFiM4pMjietyEphBAjGOUZIILXkgXejMa8YpcR8aBCPdDJm7BWN/APnhowGh/vG
dndAzEPdBASigw==
-----END CERTIFICATE-----