Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File:                     vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier:          jQamduV3NQseW7RguuX42FmnAFJ1A04SpHRytohCms0=
Subject key identifier:   81:74:1C:4C:C0:4D:31:FB:E3:2A:78:09:C9:58:FB:83:0A:AB:D8:36
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer:       /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial:       019369DAC95FA9C4F9A170248A38B8D128E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number:          077C
Signing time:             Tue 26 Nov 2024 19:02:46 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:46 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:46 +0000
Files and hashes:         1: GgJdPsHuLCIf8BTIcMaxNdkYmhQ.roa (hash: RyQQafLZSrOi6/IKrK3H/U2Ad0d57drO+N5Q6T96vkE=)
                          2: hi0YC7IdH6Z6d3YOsc_nfai7K7Y.roa (hash: B4unnEaHFiR3fW0gwbSwsWm95UOF2faY9g12yuUAF10=)
                          3: npZk_DsmLHG4lKguA5kZdCZ2iAg.roa (hash: voZZjwP91UbnQk5UTSLktPRGQBsjJTeT9M0gsM16tVk=)
                          4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: fglydXlBPZxW3o9Ug1dGyChakOO7+YcgDFx3gxHWnXw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:c9:5f:a9:c4:f9:a1:70:24:8a:38:b8:d1:28:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
        Validity
            Not Before: Nov 26 19:02:46 2024 GMT
            Not After : Nov 27 19:02:46 2024 GMT
        Subject: CN=81741c4cc04d31fbe32a7809c958fb830aabd836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:45:df:fd:ae:d9:47:11:cc:ab:84:28:92:
                    02:f2:95:c8:c3:61:50:c5:cb:70:9f:95:1b:ff:fe:
                    96:33:9d:ed:9d:cc:79:54:5e:f9:83:84:c2:40:cc:
                    ca:8b:04:31:f7:72:b3:15:83:e2:87:40:ef:80:cf:
                    b2:e2:dc:45:97:64:d7:9c:17:e6:93:07:d0:d0:95:
                    9b:9c:26:4c:fc:d6:1e:10:48:5e:87:bf:89:ee:10:
                    8f:55:61:fc:40:a9:11:b3:68:d0:ae:69:64:11:7d:
                    15:e2:3a:9c:b9:a4:25:7a:ed:cd:ed:e0:23:b4:61:
                    6d:e2:ea:64:5a:da:d9:31:c9:8e:0d:41:70:84:f8:
                    b7:0a:cf:b6:10:37:35:1f:17:71:eb:4e:4d:a6:9f:
                    47:54:77:e5:30:be:55:de:ff:c2:8b:04:92:5e:92:
                    ae:20:00:44:68:38:9c:1a:ee:1b:b7:0c:e0:ab:03:
                    c1:64:03:26:7b:5c:58:1b:d8:49:24:64:af:c9:b2:
                    11:a8:ff:b1:d4:7f:61:1d:76:81:f2:f2:0f:52:45:
                    63:ed:e8:0d:83:52:b8:9c:f5:e0:0a:76:d6:4c:9e:
                    57:8a:45:66:e8:4b:1e:04:35:07:f7:7a:bc:26:92:
                    95:d1:74:86:23:a3:9b:c7:4b:d3:84:a0:3c:fa:a6:
                    97:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:74:1C:4C:C0:4D:31:FB:E3:2A:78:09:C9:58:FB:83:0A:AB:D8:36
            X509v3 Authority Key Identifier:
                keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6b:5b:d4:2e:e6:ba:d7:80:02:9a:6f:84:a3:07:5f:93:82:
         51:47:4e:c3:57:7b:50:62:fd:82:3b:84:89:85:2c:b7:71:d6:
         c7:b7:60:fc:db:ec:78:34:62:e9:b7:b1:22:f7:f6:1f:29:c3:
         54:c6:43:f8:c3:a0:64:ac:d0:17:1e:f6:bf:b1:20:77:a2:db:
         10:d7:b1:7d:19:7e:0b:d0:72:3a:db:bf:50:b3:af:c9:fb:46:
         ba:9c:bc:be:93:0e:3e:a1:b3:5a:fd:65:bc:4f:4d:bb:66:c3:
         1c:ea:cf:58:69:40:83:ca:d9:4b:e1:4c:7f:c2:30:ce:74:e5:
         31:6f:38:aa:94:95:1d:46:36:d8:0d:4b:58:4b:00:d9:82:1f:
         49:e9:31:17:74:49:ba:27:39:fd:53:28:64:02:ad:f4:78:1f:
         47:18:99:e8:cd:0f:cf:76:e8:45:23:7b:4b:dd:01:5b:fc:89:
         16:62:df:b5:8c:05:c9:24:3b:25:61:6b:50:07:70:3d:a1:32:
         2c:66:21:98:5a:96:1a:6d:fc:c4:4e:85:b7:3f:4d:dd:f9:c3:
         2f:fe:d6:6f:f7:d1:b7:fd:c6:64:a0:36:63:1e:5d:cb:fb:23:
         4d:26:14:9d:02:98:e8:60:aa:d2:83:87:47:20:09:f3:47:11:
         ac:db:cb:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNp2slfqcT5oXAkiji40SjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMzdjNzBmMWM2N2VjYTE3NzVhNzA5YzkyMzVkNmEyZjU1
NTE2YjgwHhcNMjQxMTI2MTkwMjQ2WhcNMjQxMTI3MTkwMjQ2WjAzMTEwLwYDVQQD
Eyg4MTc0MWM0Y2MwNGQzMWZiZTMyYTc4MDljOTU4ZmI4MzBhYWJkODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtapF3/2u2UcRzKuEKJIC8pXIw2FQ
xctwn5Ub//6WM53tncx5VF75g4TCQMzKiwQx93KzFYPih0DvgM+y4txFl2TXnBfm
kwfQ0JWbnCZM/NYeEEheh7+J7hCPVWH8QKkRs2jQrmlkEX0V4jqcuaQleu3N7eAj
tGFt4upkWtrZMcmODUFwhPi3Cs+2EDc1Hxdx605Npp9HVHflML5V3v/CiwSSXpKu
IABEaDicGu4btwzgqwPBZAMme1xYG9hJJGSvybIRqP+x1H9hHXaB8vIPUkVj7egN
g1K4nPXgCnbWTJ5XikVm6EseBDUH93q8JpKV0XSGI6Obx0vThKA8+qaX8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIF0HEzATTH74yp4CclY+4MKq9g2MB8GA1UdIwQY
MBaAFL43xw8cZ+yhd1pwnJI11qL1VRa4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQt
YzhlYjA4Y2U5MDg5LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS85NzM0MzEtNWFlNC00NTIxLTk0NTQtYzhlYjA4Y2U5MDg5
LzEvdmpmSER4eG43S0YzV25DY2tqWFdvdlZWRnJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmtb1C7m
uteAAppvhKMHX5OCUUdOw1d7UGL9gjuEiYUst3HWx7dg/NvseDRi6bexIvf2HynD
VMZD+MOgZKzQFx72v7Egd6LbENexfRl+C9ByOtu/ULOvyftGupy8vpMOPqGzWv1l
vE9Nu2bDHOrPWGlAg8rZS+FMf8IwznTlMW84qpSVHUY22A1LWEsA2YIfSekxF3RJ
uic5/VMoZAKt9HgfRxiZ6M0Pz3boRSN7S90BW/yJFmLftYwFySQ7JWFrUAdwPaEy
LGYhmFqWGm38xE6Ftz9N3fnDL/7Wb/fRt/3GZKA2Yx5dy/sjTSYUnQKY6GCq0oOH
RyAJ80cRrNvLNA==
-----END CERTIFICATE-----