Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
File:                     2DcT_XtM36bLoBaofq-LMciRvrA.mft (raw, json)
Hash identifier:          e3h1K++Kb04XYBN2cZLAmNQ+kAyfc5BnhflFXVUmtzo=
Subject key identifier:   19:51:A8:8E:D5:D8:74:86:73:1D:56:A3:91:63:EC:EA:08:90:2B:4E
Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0
Certificate issuer:       /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
Certificate serial:       0191FAED2FD3DC739ACFBEE5549615C5A65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
Manifest number:          063D
Signing time:             Mon 16 Sep 2024 13:02:13 +0000
Manifest this update:     Mon 16 Sep 2024 13:02:13 +0000
Manifest next update:     Tue 17 Sep 2024 13:02:13 +0000
Files and hashes:         1: 2DcT_XtM36bLoBaofq-LMciRvrA.crl (hash: sfbQZGyEUyjpbxs0bv1q5Kat+OEVzO+BIVlRZGbfobw=)
                          2: 92aLXAqYnMDYvrZfDyWaEYw4sG8.roa (hash: gnIFbmCuSAA+tHTPdUP2Pj11seC+cyx+rSZvoo4t7cw=)
                          3: DVwTkrk_WqZKzjQozaLhpaSO6Q8.roa (hash: yCqnlu+N0ghb3IrBZlFqA6Cj/UwVETFEr/P4xxmEfG0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ed:2f:d3:dc:73:9a:cf:be:e5:54:96:15:c5:a6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0
        Validity
            Not Before: Sep 16 13:02:13 2024 GMT
            Not After : Sep 17 13:02:13 2024 GMT
        Subject: CN=1951a88ed5d87486731d56a39163ecea08902b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:00:27:1c:11:fb:d6:c6:ad:a6:6e:b2:92:
                    7c:b6:a5:25:c9:6c:46:4a:c5:01:eb:37:fb:c9:68:
                    a4:fe:50:74:34:b7:17:58:54:bb:dc:c6:7d:80:e4:
                    44:ce:5b:85:6f:f6:ac:19:c3:32:6e:1e:18:ba:97:
                    9e:2d:10:e1:96:03:7c:87:c0:33:65:2d:44:d4:4c:
                    51:6b:29:f2:e2:96:6f:38:75:a9:73:e4:a0:e6:e3:
                    0a:58:43:be:6e:44:b9:b0:86:9d:a9:55:fd:df:f6:
                    84:63:46:a9:b6:5f:04:02:f7:c5:3e:12:e9:2a:c5:
                    aa:e8:34:d1:20:e2:4d:fe:83:a8:9a:a9:61:d8:5b:
                    d7:cc:b1:e8:d6:91:c9:80:53:61:89:f0:ba:ca:fc:
                    34:84:65:3e:6f:d6:03:86:e3:ef:ff:54:28:9a:fa:
                    87:60:e9:33:6b:23:5d:e6:33:40:5d:99:9c:bf:71:
                    04:1f:66:4e:05:db:f8:48:8d:d3:2a:9c:7d:2c:ee:
                    5e:7a:9f:45:7a:c2:5b:1e:33:96:11:31:14:d9:4e:
                    f7:cb:dc:fb:2d:b5:16:0a:22:b8:15:f2:dc:c4:96:
                    f5:2d:8f:e2:6d:02:34:e5:bd:95:e2:95:8d:b6:77:
                    e9:fb:d2:09:18:29:1a:db:99:4a:5f:eb:fa:6a:c3:
                    96:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:51:A8:8E:D5:D8:74:86:73:1D:56:A3:91:63:EC:EA:08:90:2B:4E
            X509v3 Authority Key Identifier:
                keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:09:2a:c2:bc:bd:61:48:04:e9:e5:0e:db:36:97:5f:28:a5:
         68:f7:86:a5:6a:9b:21:03:89:2a:ea:60:85:53:74:dc:3d:c6:
         73:24:16:bc:e0:fa:b1:f1:78:31:1b:20:f4:62:8f:fd:68:bf:
         03:8f:85:01:0c:30:92:83:2c:91:1e:1c:81:18:7c:dc:5b:5a:
         24:24:76:25:0c:5b:c1:0a:32:98:df:e0:5c:e8:c9:89:fc:66:
         69:7f:bb:67:b0:97:a0:ff:e5:85:ab:6e:9e:1e:79:8d:55:95:
         d4:1f:e6:f2:37:9a:76:cf:6c:dc:be:bf:2e:c6:90:3b:84:4b:
         16:24:bb:ef:d1:fc:e5:4e:de:e8:f3:1e:96:18:57:4c:eb:8d:
         66:b2:44:30:24:3c:42:c7:ff:01:5b:34:a2:2b:0b:da:fd:53:
         ca:f3:3b:39:e2:d8:21:5d:a5:f0:76:f1:ae:12:91:9f:32:16:
         97:96:5c:4d:73:05:bf:d3:fe:44:42:db:ae:0c:de:2b:0e:ee:
         b0:d0:6a:97:d7:a2:62:11:f4:00:8c:19:9b:48:4b:69:28:0f:
         cc:eb:e7:9f:9b:61:27:87:68:6e:7d:28:7c:56:67:04:b1:b1:
         80:78:a8:fd:89:de:4e:80:9e:8f:b2:3e:87:d4:35:3b:2a:17:
         e5:22:ba:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH67S/T3HOaz77lVJYVxaZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzcxM2ZkN2I0Y2RmYTZjYmEwMTZhODdlYWY4YjMxYzg5
MWJlYjAwHhcNMjQwOTE2MTMwMjEzWhcNMjQwOTE3MTMwMjEzWjAzMTEwLwYDVQQD
EygxOTUxYTg4ZWQ1ZDg3NDg2NzMxZDU2YTM5MTYzZWNlYTA4OTAyYjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriUAJxwR+9bGraZuspJ8tqUlyWxG
SsUB6zf7yWik/lB0NLcXWFS73MZ9gOREzluFb/asGcMybh4YupeeLRDhlgN8h8Az
ZS1E1ExRayny4pZvOHWpc+Sg5uMKWEO+bkS5sIadqVX93/aEY0aptl8EAvfFPhLp
KsWq6DTRIOJN/oOomqlh2FvXzLHo1pHJgFNhifC6yvw0hGU+b9YDhuPv/1QomvqH
YOkzayNd5jNAXZmcv3EEH2ZOBdv4SI3TKpx9LO5eep9FesJbHjOWETEU2U73y9z7
LbUWCiK4FfLcxJb1LY/ibQI05b2V4pWNtnfp+9IJGCka25lKX+v6asOW7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlRqI7V2HSGcx1Wo5Fj7OoIkCtOMB8GA1UdIwQY
MBaAFNg3E/17TN+my6AWqH6vizHIkb6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMt
MDU4Nzg1YjRhOTZlLzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMtMDU4Nzg1YjRhOTZl
LzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdgkqwry9
YUgE6eUO2zaXXyilaPeGpWqbIQOJKupghVN03D3GcyQWvOD6sfF4MRsg9GKP/Wi/
A4+FAQwwkoMskR4cgRh83FtaJCR2JQxbwQoymN/gXOjJifxmaX+7Z7CXoP/lhatu
nh55jVWV1B/m8jeads9s3L6/LsaQO4RLFiS779H85U7e6PMelhhXTOuNZrJEMCQ8
Qsf/AVs0oisL2v1TyvM7OeLYIV2l8HbxrhKRnzIWl5ZcTXMFv9P+RELbrgzeKw7u
sNBql9eiYhH0AIwZm0hLaSgPzOvnn5thJ4dobn0ofFZnBLGxgHio/YneToCej7I+
h9Q1OyoX5SK6DQ==
-----END CERTIFICATE-----