Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File:                     oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier:          0md5QmY2P1/bp4WfJGwGZC0JYIZ+S4p6OluYWI+sb0Q=
Subject key identifier:   4E:C8:77:B3:71:B4:52:8D:42:6A:B0:D5:21:41:DE:4A:97:6D:7C:9A
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer:       /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial:       018F8749411065076411D3FABC2F99ABE855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number:          1178
Signing time:             Fri 17 May 2024 16:01:15 +0000
Manifest this update:     Fri 17 May 2024 16:01:15 +0000
Manifest next update:     Sat 18 May 2024 16:01:15 +0000
Files and hashes:         1: FAQuSbI56L6QHIPS0vEdrFS_yDI.roa (hash: XWyTiXLEvtehWEtRhB9iCPOfRfYsZz2IiRsZblvUlDE=)
                          2: oRCvveNgYPncbp2vKWeep3NWTQI.roa (hash: xqaJKJ3yYVNtKWxpvG/7brPoZc89LzH0tzPBNG7mZ1E=)
                          3: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: TGoEeYEKWnTOX0Lpld3dUgju2xy775+Sh9qMv1HZANk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:41:10:65:07:64:11:d3:fa:bc:2f:99:ab:e8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
        Validity
            Not Before: May 17 16:01:15 2024 GMT
            Not After : May 18 16:01:15 2024 GMT
        Subject: CN=4ec877b371b4528d426ab0d52141de4a976d7c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:15:4c:7c:91:00:9c:87:26:59:68:a4:9d:ff:
                    ea:13:21:64:dc:7e:9b:57:63:b5:2b:38:39:83:5b:
                    72:a6:47:16:04:26:66:2d:d0:38:4a:7c:d7:aa:ca:
                    b9:ba:11:ca:e4:8f:af:cb:1d:61:14:7e:72:c0:7f:
                    67:18:18:60:46:72:b2:44:5f:b4:27:d8:d7:5d:5d:
                    fb:c0:03:fd:99:bd:84:d9:57:21:6b:25:41:d9:88:
                    57:6a:65:d4:f8:14:31:55:44:7c:14:eb:3d:bd:1a:
                    38:b7:f6:df:df:16:d1:0d:5f:de:03:2a:b6:9a:a0:
                    92:a5:bd:b8:61:3c:7b:36:c2:74:48:ef:26:84:32:
                    0d:61:3e:a6:33:1b:3b:c4:a7:fb:ca:60:fb:63:7f:
                    ba:0a:c6:3f:54:b1:d8:f4:30:bf:8d:3e:09:1e:3c:
                    68:f1:06:2f:ca:67:27:40:ea:19:b7:3f:2b:19:55:
                    b0:7d:d5:56:81:70:51:49:57:09:23:21:97:60:3a:
                    ef:a5:74:43:16:2c:3f:28:5e:13:25:a8:6b:58:81:
                    79:88:4e:27:e3:0b:40:ae:c8:12:56:4b:4d:30:62:
                    78:04:1e:12:99:65:1a:27:e9:22:1c:53:a1:02:05:
                    81:0f:ba:aa:a0:e3:ce:ec:cb:15:c3:8b:5c:29:b3:
                    7a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C8:77:B3:71:B4:52:8D:42:6A:B0:D5:21:41:DE:4A:97:6D:7C:9A
            X509v3 Authority Key Identifier:
                keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:1e:f7:f7:a2:07:e7:02:6e:4e:c1:20:39:0a:f1:65:bf:
         ae:a0:19:12:4a:f7:9c:d1:c3:96:13:79:ad:db:00:13:26:75:
         c8:a2:71:0d:10:53:5c:2c:9d:0b:b9:71:e3:8e:8d:82:1c:11:
         c6:7e:d7:a2:e8:79:ea:81:6c:95:b3:81:ab:a8:8f:d8:33:5b:
         80:cf:32:a1:c7:e8:a7:f0:d5:5e:7a:6c:b6:38:41:39:31:3c:
         75:2f:73:ce:f4:38:97:3b:1b:b7:e6:55:2f:f1:ba:b9:30:ee:
         bb:09:c9:21:c5:ad:e0:d8:24:9b:03:13:17:83:e7:38:cd:14:
         1d:c4:71:75:4f:cb:80:9a:cb:e7:29:5c:20:29:67:06:90:c6:
         0a:b9:b2:e5:d4:83:be:a7:4a:60:84:10:89:6f:ef:87:9b:47:
         37:80:65:93:44:2b:87:42:a1:18:33:6d:0b:89:e9:ef:ba:6d:
         b4:34:d0:69:38:83:62:05:eb:3b:6a:ab:29:db:5c:48:46:48:
         27:22:08:b5:95:b1:28:ff:f5:5f:fa:12:1c:35:a1:5a:2d:51:
         03:a4:66:1c:f5:a6:d1:8d:b2:ba:fd:a7:19:4f:ab:de:37:77:
         60:5d:27:17:e0:16:34:4f:1e:80:a4:e3:42:e0:36:64:e7:e1:
         22:8e:6d:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSUEQZQdkEdP6vC+Zq+hVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODY0ZWRmYTQxMmQ3N2EwM2NiZjU5MTMxZTNmY2MwM2E2
MGUxODgwHhcNMjQwNTE3MTYwMTE1WhcNMjQwNTE4MTYwMTE1WjAzMTEwLwYDVQQD
Eyg0ZWM4NzdiMzcxYjQ1MjhkNDI2YWIwZDUyMTQxZGU0YTk3NmQ3YzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xVMfJEAnIcmWWiknf/qEyFk3H6b
V2O1Kzg5g1typkcWBCZmLdA4SnzXqsq5uhHK5I+vyx1hFH5ywH9nGBhgRnKyRF+0
J9jXXV37wAP9mb2E2VchayVB2YhXamXU+BQxVUR8FOs9vRo4t/bf3xbRDV/eAyq2
mqCSpb24YTx7NsJ0SO8mhDINYT6mMxs7xKf7ymD7Y3+6CsY/VLHY9DC/jT4JHjxo
8QYvymcnQOoZtz8rGVWwfdVWgXBRSVcJIyGXYDrvpXRDFiw/KF4TJahrWIF5iE4n
4wtArsgSVktNMGJ4BB4SmWUaJ+kiHFOhAgWBD7qqoOPO7MsVw4tcKbN6rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7Id7NxtFKNQmqw1SFB3kqXbXyaMB8GA1UdIwQY
MBaAFKGGTt+kEtd6A8v1kTHj/MA6YOGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1laTzM2UVMxM29EeV9XUk1lUDh3RHBnNFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84YzNkNWMtYTM2Yy00ZTNmLWEwNTkt
MWE1NTc5ZThjNmMwLzEvb1laTzM2UVMxM29EeV9XUk1lUDh3RHBnNFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84YzNkNWMtYTM2Yy00ZTNmLWEwNTktMWE1NTc5ZThjNmMw
LzEvb1laTzM2UVMxM29EeV9XUk1lUDh3RHBnNFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAAe9/ei
B+cCbk7BIDkK8WW/rqAZEkr3nNHDlhN5rdsAEyZ1yKJxDRBTXCydC7lx446NghwR
xn7Xouh56oFslbOBq6iP2DNbgM8yocfop/DVXnpstjhBOTE8dS9zzvQ4lzsbt+ZV
L/G6uTDuuwnJIcWt4NgkmwMTF4PnOM0UHcRxdU/LgJrL5ylcIClnBpDGCrmy5dSD
vqdKYIQQiW/vh5tHN4Blk0Qrh0KhGDNtC4np77pttDTQaTiDYgXrO2qrKdtcSEZI
JyIItZWxKP/1X/oSHDWhWi1RA6RmHPWm0Y2yuv2nGU+r3jd3YF0nF+AWNE8egKTj
QuA2ZOfhIo5t2A==
-----END CERTIFICATE-----