Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
File:                     itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft (raw, json)
Hash identifier:          dYiID1QGxrn08D6Y8CDutVBOOTxhUjcZHdgqKq1JK8Q=
Subject key identifier:   A5:16:91:1D:27:95:DB:8D:30:90:D3:A4:45:CD:F8:16:44:59:A6:FD
Authority key identifier: 8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37
Certificate issuer:       /CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
Certificate serial:       018F980530DCCAE221709F2D7DD416B6138A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
Manifest number:          10C6
Signing time:             Mon 20 May 2024 22:00:27 +0000
Manifest this update:     Mon 20 May 2024 22:00:27 +0000
Manifest next update:     Tue 21 May 2024 22:00:27 +0000
Files and hashes:         1: WnrDoywytSaPAQBWNaGR3G4IOo0.roa (hash: edK+15G8Q2TQbY0o9RRcOTSVBnp/+O2AO257L93gDNI=)
                          2: fO1H1JGHzbdzDDgaUN1o8TMdGOM.roa (hash: lyaewYIlSUNjqGCMWE3zgRd4QOnkzTRIsX3Qr+HMdZ8=)
                          3: itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl (hash: /tSUdQfNo7CiRL13kAICzP3f2inbTYMQHUaSgNSBBoE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:98:05:30:dc:ca:e2:21:70:9f:2d:7d:d4:16:b6:13:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad47baa9aa6e0a20ad995a79c2a8de604f9aa37
        Validity
            Not Before: May 20 22:00:27 2024 GMT
            Not After : May 21 22:00:27 2024 GMT
        Subject: CN=a516911d2795db8d3090d3a445cdf8164459a6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:08:0f:19:37:60:4f:cf:fc:e1:f9:61:21:95:
                    dc:1e:35:e6:0e:ef:88:e0:76:08:a7:92:93:db:26:
                    55:3a:e0:be:7e:b8:32:82:82:76:2a:19:2d:2c:54:
                    0c:22:38:77:ab:8a:6a:18:b1:d8:fc:97:5b:f6:44:
                    c9:dc:2c:5e:ac:af:68:9a:00:0a:8a:1b:63:01:3e:
                    7d:55:3c:7b:0a:09:44:11:5c:f8:29:64:75:f7:a9:
                    b8:0d:eb:90:11:fb:10:5b:f1:1e:6f:7d:e8:6d:d8:
                    85:72:d1:7a:70:33:b5:74:bc:ca:bd:bb:3a:47:e9:
                    bf:92:42:c1:74:38:67:97:23:31:9d:54:ba:47:f7:
                    d2:3a:42:6f:30:21:64:60:aa:34:e5:f8:35:17:8a:
                    ab:a0:69:0b:17:da:cf:c4:11:38:2f:d7:2a:d6:9a:
                    a3:25:7a:a2:e0:71:78:43:60:61:67:9b:b0:50:b2:
                    b0:df:2d:d4:7a:da:f8:e5:a3:61:23:1c:6e:74:38:
                    84:ad:97:ea:59:dd:3a:3d:8a:3e:f0:4d:61:36:80:
                    60:1c:4f:82:d3:11:c4:14:d6:f7:a9:aa:2c:e5:21:
                    95:89:08:9a:52:1a:4d:69:85:1f:dc:47:27:c7:0e:
                    9c:d1:9b:08:f3:bd:f3:fa:e1:ff:a3:44:91:63:b7:
                    e0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:16:91:1D:27:95:DB:8D:30:90:D3:A4:45:CD:F8:16:44:59:A6:FD
            X509v3 Authority Key Identifier:
                keyid:8A:D4:7B:AA:9A:A6:E0:A2:0A:D9:95:A7:9C:2A:8D:E6:04:F9:AA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itR7qpqm4KIK2ZWnnCqN5gT5qjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9355b9-73d4-4c4c-9601-f01a2f58ef88/1/itR7qpqm4KIK2ZWnnCqN5gT5qjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:1b:85:c8:c5:fd:78:cc:a1:b5:83:73:27:44:bd:5e:26:cb:
         b1:7f:1e:dc:7e:fb:a3:85:b6:e4:88:33:5d:60:d7:6c:32:bf:
         7e:ad:de:5b:07:20:15:d0:92:0d:a3:35:a2:2c:41:c6:d8:51:
         ef:92:1a:7c:1e:ea:ea:48:ee:b6:78:f1:bb:66:f2:62:f6:ad:
         ec:e1:28:3c:db:64:ec:32:e1:42:ed:f7:58:30:08:18:d6:38:
         aa:0d:11:a2:c3:f4:76:e2:23:d8:d6:88:91:2a:7f:af:8e:ac:
         13:66:65:ee:d4:5b:16:76:f1:84:9f:6b:92:4c:ae:f7:ab:d0:
         37:dd:b9:89:5b:fb:8f:24:aa:10:67:7e:b6:61:83:6a:64:6e:
         3b:1d:22:b3:98:b9:20:b5:19:2d:44:e8:74:ee:65:1b:f3:7d:
         be:24:46:2b:1c:7b:c9:b1:3d:a7:ec:5a:c8:a8:eb:e8:72:a4:
         ae:30:31:99:f0:1d:00:4c:87:1b:ef:f7:56:f6:26:05:5c:6c:
         ff:cd:a3:0b:73:bb:c3:20:6b:93:16:3c:c3:f2:76:82:53:79:
         ae:af:b9:57:24:2f:d1:7a:aa:49:09:d3:ae:2d:da:f6:4e:69:
         99:b5:e0:34:bd:6b:42:e1:12:04:f2:a9:a8:44:f8:d1:80:10:
         33:7e:ac:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+YBTDcyuIhcJ8tfdQWthOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZDQ3YmFhOWFhNmUwYTIwYWQ5OTVhNzljMmE4ZGU2MDRm
OWFhMzcwHhcNMjQwNTIwMjIwMDI3WhcNMjQwNTIxMjIwMDI3WjAzMTEwLwYDVQQD
EyhhNTE2OTExZDI3OTVkYjhkMzA5MGQzYTQ0NWNkZjgxNjQ0NTlhNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAgPGTdgT8/84flhIZXcHjXmDu+I
4HYIp5KT2yZVOuC+frgygoJ2KhktLFQMIjh3q4pqGLHY/Jdb9kTJ3CxerK9omgAK
ihtjAT59VTx7CglEEVz4KWR196m4DeuQEfsQW/Eeb33obdiFctF6cDO1dLzKvbs6
R+m/kkLBdDhnlyMxnVS6R/fSOkJvMCFkYKo05fg1F4qroGkLF9rPxBE4L9cq1pqj
JXqi4HF4Q2BhZ5uwULKw3y3Uetr45aNhIxxudDiErZfqWd06PYo+8E1hNoBgHE+C
0xHEFNb3qaos5SGViQiaUhpNaYUf3Ecnxw6c0ZsI873z+uH/o0SRY7fgXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUWkR0nlduNMJDTpEXN+BZEWab9MB8GA1UdIwQY
MBaAFIrUe6qapuCiCtmVp5wqjeYE+ao3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEt
ZjAxYTJmNThlZjg4LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MzU1YjktNzNkNC00YzRjLTk2MDEtZjAxYTJmNThlZjg4
LzEvaXRSN3FwcW00S0lLMlpXbm5DcU41Z1Q1cWpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBuFyMX9
eMyhtYNzJ0S9XibLsX8e3H77o4W25IgzXWDXbDK/fq3eWwcgFdCSDaM1oixBxthR
75IafB7q6kjutnjxu2byYvat7OEoPNtk7DLhQu33WDAIGNY4qg0RosP0duIj2NaI
kSp/r46sE2Zl7tRbFnbxhJ9rkkyu96vQN925iVv7jySqEGd+tmGDamRuOx0is5i5
ILUZLUTodO5lG/N9viRGKxx7ybE9p+xayKjr6HKkrjAxmfAdAEyHG+/3VvYmBVxs
/82jC3O7wyBrkxY8w/J2glN5rq+5VyQv0XqqSQnTri3a9k5pmbXgNL1rQuESBPKp
qET40YAQM36sUg==
-----END CERTIFICATE-----