Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
File:                     5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft (raw, json)
Hash identifier:          inLWc2CvNBcksrQYNuIJu1pJAbxZu16N082hsdj0HgE=
Subject key identifier:   C0:4A:02:F7:CE:01:01:F3:06:B9:C9:71:D7:4D:6A:52:DB:0E:D8:64
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Certificate issuer:       /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial:       019352AD434E46521433810D2A1EE1C973B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
Manifest number:          0C36
Signing time:             Fri 22 Nov 2024 07:01:46 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:46 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:46 +0000
Files and hashes:         1: 5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl (hash: rBJmMVSJfhDL/o875AgQcw0C5OL7FsRp8Ia1GjX0mhQ=)
                          2: 8IDeUf5cvxDZXhkhTrEnG5EpQKw.roa (hash: PgIN0wQonf+Enh0uuXF3vdlG7GrtbtKhN8z/gJ+kAEA=)
                          3: JjXf-5KtW7by5IR3EL2k62x77vI.roa (hash: H91zW69bCmFl2EVi8MPcopjPKV2CFAjrVW7uCxbF5UE=)
                          4: y6zfrEDUrPLtL5-hDzN9cdO0UwM.roa (hash: mfP+77Te90BjbP7rmnyzdoS4rAjXtxVW5bkk6JAWHvs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:43:4e:46:52:14:33:81:0d:2a:1e:e1:c9:73:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
        Validity
            Not Before: Nov 22 07:01:46 2024 GMT
            Not After : Nov 23 07:01:46 2024 GMT
        Subject: CN=c04a02f7ce0101f306b9c971d74d6a52db0ed864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e8:96:69:7c:c0:b7:7e:84:9d:f5:85:5c:46:
                    cd:83:a1:8a:f7:6a:c1:2b:52:87:18:72:44:3f:62:
                    bc:85:b9:d5:7c:bc:f1:fd:e1:a3:c8:99:14:c1:4f:
                    49:54:d7:e4:22:3e:b9:e4:c3:19:38:25:cf:94:da:
                    c5:81:03:26:4b:2a:ba:b7:6a:fc:bc:5b:e6:97:e6:
                    ab:bc:a8:7a:6b:27:e2:1d:25:21:36:4c:56:e3:20:
                    31:09:be:d2:d4:f4:4c:23:bc:5e:d0:6a:ef:42:b2:
                    bf:e7:34:ce:a9:0e:83:38:99:ef:cb:39:7d:89:70:
                    75:79:54:96:19:77:6c:b0:fd:53:11:f9:45:f7:e7:
                    95:ae:b5:67:6a:f3:6f:41:d1:9f:ef:bd:84:3a:94:
                    b6:f3:fd:24:e0:5c:99:cb:fe:2d:33:36:58:71:c5:
                    2c:aa:b7:77:a6:9d:3d:61:40:f9:7e:3d:7d:59:a6:
                    ef:05:91:e3:08:fd:73:03:ab:1a:af:9a:20:e8:41:
                    71:8d:d5:ea:e5:76:db:4e:6d:bd:06:7d:77:de:71:
                    7f:6d:a9:05:1b:1e:71:e3:10:2a:18:2d:d2:39:f5:
                    f6:d0:88:fc:13:1b:2d:f6:60:39:e1:5c:d8:9c:3c:
                    37:1d:0c:f1:3f:4e:55:07:89:45:fb:21:f5:6d:76:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4A:02:F7:CE:01:01:F3:06:B9:C9:71:D7:4D:6A:52:DB:0E:D8:64
            X509v3 Authority Key Identifier:
                keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:69:2b:21:01:df:2b:b7:6d:8e:34:8d:f3:1c:8d:9a:c7:14:
         44:23:3f:3e:9d:10:00:52:4e:50:a3:29:82:7a:bc:f2:6e:4e:
         b3:1a:de:9d:cc:3f:6f:ea:35:60:37:6d:2b:df:b9:8f:e4:ad:
         43:f3:7e:4b:d4:32:1b:76:d8:bf:d0:29:92:a4:94:cd:cc:b5:
         b6:e8:b8:f9:c3:5f:37:5e:59:4a:0f:8b:aa:a9:f9:88:cb:25:
         20:a5:ea:05:58:c7:26:35:d3:cc:c4:ca:08:92:7b:5c:4c:31:
         6c:4c:96:a9:f0:b6:6b:5d:c1:e7:5e:bd:d3:8d:3d:0d:13:db:
         36:15:ac:ca:38:20:71:50:94:2d:31:73:a9:07:6f:4d:38:84:
         90:b0:30:b1:77:f5:e5:61:ad:2e:7b:76:b3:25:f3:09:2d:63:
         ea:68:2b:05:47:9a:c6:ac:f0:6b:cc:ff:10:f5:2e:57:18:f4:
         62:8c:32:c6:2f:9b:fa:fc:b7:b8:84:f8:dd:a8:1e:96:58:f6:
         04:ed:ea:93:c0:35:cc:bd:78:ab:2b:6e:ce:e3:ed:75:ce:b0:
         22:b8:e6:b5:10:89:89:b9:d4:90:de:02:bc:00:87:5d:66:b7:
         a6:4e:42:bb:3e:67:88:a9:12:1f:35:3f:5a:fb:dd:24:5e:dd:
         25:74:d9:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrUNORlIUM4ENKh7hyXO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZjFkZWRhZjRkYmRhNjBkYTk5MGQ2ODU2NTBlNjhjODg4
YzYxMDAwHhcNMjQxMTIyMDcwMTQ2WhcNMjQxMTIzMDcwMTQ2WjAzMTEwLwYDVQQD
EyhjMDRhMDJmN2NlMDEwMWYzMDZiOWM5NzFkNzRkNmE1MmRiMGVkODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuiWaXzAt36EnfWFXEbNg6GK92rB
K1KHGHJEP2K8hbnVfLzx/eGjyJkUwU9JVNfkIj655MMZOCXPlNrFgQMmSyq6t2r8
vFvml+arvKh6ayfiHSUhNkxW4yAxCb7S1PRMI7xe0GrvQrK/5zTOqQ6DOJnvyzl9
iXB1eVSWGXdssP1TEflF9+eVrrVnavNvQdGf772EOpS28/0k4FyZy/4tMzZYccUs
qrd3pp09YUD5fj19WabvBZHjCP1zA6sar5og6EFxjdXq5XbbTm29Bn133nF/bakF
Gx5x4xAqGC3SOfX20Ij8Exst9mA54VzYnDw3HQzxP05VB4lF+yH1bXZnCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBKAvfOAQHzBrnJcddNalLbDthkMB8GA1UdIwQY
MBaAFObx3tr029pg2pkNaFZQ5oyIjGEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYt
MjMxNjU3ODI5ZWY1LzEvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8yM2JhNDYtZmM3YS00Yjk3LThiNGYtMjMxNjU3ODI5ZWY1
LzEvNXZIZTJ2VGIybURhbVExb1ZsRG1qSWlNWVFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGkrIQHf
K7dtjjSN8xyNmscURCM/Pp0QAFJOUKMpgnq88m5Osxrencw/b+o1YDdtK9+5j+St
Q/N+S9QyG3bYv9ApkqSUzcy1tui4+cNfN15ZSg+Lqqn5iMslIKXqBVjHJjXTzMTK
CJJ7XEwxbEyWqfC2a13B51690409DRPbNhWsyjggcVCULTFzqQdvTTiEkLAwsXf1
5WGtLnt2syXzCS1j6mgrBUeaxqzwa8z/EPUuVxj0Yowyxi+b+vy3uIT43agellj2
BO3qk8A1zL14qytuzuPtdc6wIrjmtRCJibnUkN4CvACHXWa3pk5Cuz5niKkSHzU/
WvvdJF7dJXTZrw==
-----END CERTIFICATE-----