Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File:                     Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier:          7woRcSYGA3IgJS8zvCMzm+/uFO+E5wV/b1ILn6xsrOs=
Subject key identifier:   FB:53:0D:6E:E1:DC:2B:7A:D1:C4:AA:DD:05:AD:45:E7:CA:F6:6D:5B
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer:       /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial:       019355E41A0D54EAFAF6668DDA760096C7A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number:          0AD5
Signing time:             Fri 22 Nov 2024 22:00:32 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:32 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:32 +0000
Files and hashes:         1: 3_nN2t9qhaaMc4DY7CYSZUAQdVc.roa (hash: mxY9QZ578dZXi71vtkfvbUKbget3MJB+jraz+1GfPp4=)
                          2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: CnVo4Jc/ypQtD8RUMo41+qq+ZqZRW01KsPMyMmjyHYM=)
                          3: S2EoA7eTxSnk7elCJ8iGM32nxeE.roa (hash: VpS+WpGWK4lhbsrcqZs7x6V71tLpw8OObjpX9lVpXVk=)
                          4: c_or9aGupC_dgqEhY6nv2dp35cY.roa (hash: kvju3VJ5GnvyDoYv+e4yYS4ZLy3JnzP+ayWHjVgBpFI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:1a:0d:54:ea:fa:f6:66:8d:da:76:00:96:c7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
        Validity
            Not Before: Nov 22 22:00:32 2024 GMT
            Not After : Nov 23 22:00:32 2024 GMT
        Subject: CN=fb530d6ee1dc2b7ad1c4aadd05ad45e7caf66d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:c5:a5:d6:a4:35:43:8a:43:05:06:97:83:
                    34:8f:7e:06:31:1e:63:27:07:89:fe:98:18:4d:19:
                    9d:fe:4e:eb:a0:0d:ad:d5:06:cc:4f:6e:1c:b6:76:
                    b7:03:ce:40:54:8f:32:69:9e:90:8c:14:63:aa:1f:
                    36:78:15:35:78:18:74:4f:fd:f0:e5:72:c3:74:9c:
                    c8:a1:93:27:57:51:93:3e:a4:d3:02:00:55:6b:ff:
                    79:2e:76:26:10:87:43:9b:3b:e2:7d:3b:e3:96:0d:
                    21:58:65:af:c6:b0:a9:00:dc:10:5e:6c:26:98:5f:
                    52:01:f4:2c:5a:03:bb:a5:80:2e:07:51:fc:30:a9:
                    0c:a6:aa:eb:4d:91:1a:dd:00:0b:b0:73:fc:b2:24:
                    3d:4f:29:7a:b5:bd:e0:67:b3:48:6c:48:cf:08:47:
                    9d:8c:90:73:c2:c1:1f:e0:3d:6a:16:e0:ae:e6:0a:
                    2f:1f:e9:17:4a:c6:43:69:4b:9b:5e:d4:44:0c:83:
                    53:7c:ec:8b:30:73:21:0e:39:57:6b:c3:29:e2:12:
                    e7:67:d7:79:0d:d4:b0:3a:b1:ca:93:11:5f:08:e8:
                    64:63:24:3a:29:a7:eb:04:85:d4:a4:ab:d6:e3:47:
                    52:7d:5d:6b:4a:20:60:c3:c4:29:a9:c9:5a:67:83:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:53:0D:6E:E1:DC:2B:7A:D1:C4:AA:DD:05:AD:45:E7:CA:F6:6D:5B
            X509v3 Authority Key Identifier:
                keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d0:1b:20:a7:f8:03:69:32:72:9d:8c:64:fc:89:e2:c6:76:
         aa:32:d2:4f:0c:9c:e3:af:fd:50:20:c0:6f:19:8b:0d:8c:c4:
         23:c0:5d:fe:96:fe:27:83:75:d0:bb:fc:61:fc:5d:76:0c:ac:
         49:d4:b6:fb:47:d8:7f:6e:ba:35:18:40:c7:8a:8b:a5:9a:9a:
         12:0b:70:b8:97:a2:28:83:8d:f6:44:e5:6c:26:87:b7:74:5f:
         1f:5f:e6:5a:f6:fc:b1:77:31:ed:6a:3f:3e:69:91:29:a0:86:
         50:31:39:2a:98:71:1f:b3:5f:10:31:38:89:5d:20:a2:71:d7:
         70:75:9e:ba:35:3a:af:c6:ef:05:e4:ea:e1:c4:ec:eb:4b:9f:
         1d:76:41:e6:6d:33:5b:b2:dc:63:c6:79:59:3e:f9:e6:04:a9:
         5f:c3:53:f1:d8:16:15:cd:91:68:6b:c6:b7:9d:05:c4:d6:7f:
         5f:b5:52:97:4b:12:a8:6e:1a:f7:e6:f1:f5:2f:10:72:8e:20:
         3e:40:f7:02:c6:bb:42:24:fa:54:c6:ef:e6:65:22:46:37:06:
         e4:f9:03:4c:40:ab:b8:07:f7:d1:62:52:38:b9:80:80:1a:96:
         6e:d9:12:5a:b7:a4:d3:36:c2:ed:39:03:a5:e7:ef:2d:fc:fb:
         83:2c:60:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5BoNVOr69maN2nYAlsemMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YmQ1ZmZiY2U2YmY4NzA3ZmEzZTU5NjdlMGQzOGI0NTVk
OWQ0ZTEwHhcNMjQxMTIyMjIwMDMyWhcNMjQxMTIzMjIwMDMyWjAzMTEwLwYDVQQD
EyhmYjUzMGQ2ZWUxZGMyYjdhZDFjNGFhZGQwNWFkNDVlN2NhZjY2ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbjFpdakNUOKQwUGl4M0j34GMR5j
JweJ/pgYTRmd/k7roA2t1QbMT24ctna3A85AVI8yaZ6QjBRjqh82eBU1eBh0T/3w
5XLDdJzIoZMnV1GTPqTTAgBVa/95LnYmEIdDmzvifTvjlg0hWGWvxrCpANwQXmwm
mF9SAfQsWgO7pYAuB1H8MKkMpqrrTZEa3QALsHP8siQ9Tyl6tb3gZ7NIbEjPCEed
jJBzwsEf4D1qFuCu5govH+kXSsZDaUubXtREDINTfOyLMHMhDjlXa8Mp4hLnZ9d5
DdSwOrHKkxFfCOhkYyQ6KafrBIXUpKvW40dSfV1rSiBgw8QpqclaZ4NcewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtTDW7h3Ct60cSq3QWtRefK9m1bMB8GA1UdIwQY
MBaAFCa9X/vOa/hwf6Plln4NOLRV2dThMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMt
ZThjNTU5YzcxZDY2LzEvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mNDk4YTItZDg2ZC00Yzc1LWJmZDMtZThjNTU5YzcxZDY2
LzEvSnIxZi04NXItSEJfby1XV2ZnMDR0RlhaMU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACdAbIKf4
A2kycp2MZPyJ4sZ2qjLSTwyc46/9UCDAbxmLDYzEI8Bd/pb+J4N10Lv8Yfxddgys
SdS2+0fYf266NRhAx4qLpZqaEgtwuJeiKION9kTlbCaHt3RfH1/mWvb8sXcx7Wo/
PmmRKaCGUDE5KphxH7NfEDE4iV0gonHXcHWeujU6r8bvBeTq4cTs60ufHXZB5m0z
W7LcY8Z5WT755gSpX8NT8dgWFc2RaGvGt50FxNZ/X7VSl0sSqG4a9+bx9S8Qco4g
PkD3Asa7QiT6VMbv5mUiRjcG5PkDTECruAf30WJSOLmAgBqWbtkSWrek0zbC7TkD
pefvLfz7gyxgsg==
-----END CERTIFICATE-----