Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
File:                     lUBmkfLjdO43pkBJKjZN_FO6RBI.mft (raw, json)
Hash identifier:          mW+cxoc+olbnTq4Ni8qXx1n3bWFddTPxBq9VTSCkBF4=
Subject key identifier:   27:A8:D7:A6:DE:F8:C4:D2:C4:E2:1B:11:B0:E5:69:B1:B6:A2:B8:7F
Authority key identifier: 95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12
Certificate issuer:       /CN=95406691f2e374ee37a640492a364dfc53ba4412
Certificate serial:       019355E44665DA64383F04C0BFE0289E35DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
Manifest number:          1372
Signing time:             Fri 22 Nov 2024 22:00:43 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:43 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:43 +0000
Files and hashes:         1: MgovnyBuiQJnDJrFLNV-JS6Zatw.roa (hash: mbaOxBIV4Nsoc0MM1/Uy46D/rKsQE3Ree//AGKtAi8I=)
                          2: OCfk8a4AVa7fwNgkHNEQMnss8E4.roa (hash: aynvRDkjlUgqMpx+ScZgdMmALbmwshDelkQVQPOOxxY=)
                          3: lUBmkfLjdO43pkBJKjZN_FO6RBI.crl (hash: Yivea+Leuis7DhVHWoZ3tBQYIZLpK3obPBXNMuLpvyA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e4:46:65:da:64:38:3f:04:c0:bf:e0:28:9e:35:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95406691f2e374ee37a640492a364dfc53ba4412
        Validity
            Not Before: Nov 22 22:00:43 2024 GMT
            Not After : Nov 23 22:00:43 2024 GMT
        Subject: CN=27a8d7a6def8c4d2c4e21b11b0e569b1b6a2b87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:18:04:76:0d:a9:d6:03:5e:b1:b1:c7:6f:44:
                    a5:90:6f:3b:5b:eb:0c:06:71:8c:b8:bd:9c:fc:ed:
                    05:06:ec:45:6d:bb:ff:98:ea:59:97:50:07:3d:a4:
                    18:e7:53:5f:da:dc:b6:5b:5b:43:cc:d3:50:9c:13:
                    5d:94:fe:55:99:fa:83:2b:13:26:5b:2d:b4:1a:08:
                    12:64:35:bf:7e:d1:4e:d1:21:4d:ff:d1:ad:17:cf:
                    cc:d8:13:9b:00:e9:39:7c:eb:98:27:5f:cc:b4:06:
                    a5:7d:39:62:d0:f2:56:bf:5c:4d:ac:2b:1b:84:31:
                    2c:ce:9e:a5:15:cb:66:76:de:f5:5b:ee:ed:de:43:
                    e8:6e:1a:66:cf:04:55:7c:ba:7e:00:d9:af:8a:b7:
                    3a:7b:81:c1:2b:cb:5a:96:0b:65:5f:fa:13:f7:64:
                    d7:17:36:01:08:e1:39:89:05:96:e5:2e:5e:96:df:
                    5b:31:e0:8e:26:10:c1:eb:bf:e0:ba:4d:1f:01:7d:
                    11:c9:0d:25:28:9f:10:5f:5a:d6:6f:b7:42:41:5b:
                    9e:c6:c4:76:22:f6:1c:97:02:4d:b2:c2:a8:49:31:
                    cf:9d:f0:a3:a7:18:1d:66:62:c0:cc:4c:a6:db:c8:
                    fd:87:cf:a2:2f:46:65:58:0f:c6:ed:6f:91:8d:13:
                    40:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A8:D7:A6:DE:F8:C4:D2:C4:E2:1B:11:B0:E5:69:B1:B6:A2:B8:7F
            X509v3 Authority Key Identifier:
                keyid:95:40:66:91:F2:E3:74:EE:37:A6:40:49:2A:36:4D:FC:53:BA:44:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUBmkfLjdO43pkBJKjZN_FO6RBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0f4abf-4d90-4969-85ad-40159b5313d1/1/lUBmkfLjdO43pkBJKjZN_FO6RBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ba:30:91:c5:41:5f:02:ec:18:bf:73:33:c3:46:5b:98:5d:
         09:9f:b6:6c:4b:b5:59:21:3d:bd:a7:12:b4:a4:88:7b:ff:18:
         35:13:73:3d:02:d6:e0:45:ce:09:85:df:56:87:55:48:6c:07:
         64:6c:cc:4b:51:47:eb:de:ca:b1:e3:68:97:b6:86:21:ef:bd:
         95:7a:6b:f9:71:57:e0:55:b9:4d:03:2d:7f:6d:d5:d0:27:d9:
         04:db:4e:69:e7:32:67:fc:8d:ee:70:03:8d:1f:9f:ca:4b:18:
         b1:5e:8b:cb:e2:95:11:78:36:ad:d6:2d:bc:8a:72:f6:72:cd:
         6b:f1:4b:ec:a3:88:db:8b:6f:85:75:61:a9:dd:4b:49:0a:32:
         c6:e5:77:11:92:b0:fc:67:42:43:48:47:f6:3d:fd:57:78:e7:
         90:1a:04:92:a6:4c:50:16:7b:c1:df:e0:b9:a2:bf:c5:d5:96:
         24:d9:36:01:6a:9e:fa:92:53:9b:43:67:67:99:a7:62:46:89:
         e4:a3:c7:ca:0f:5e:7c:f6:ac:39:f7:78:8a:61:24:7f:ec:31:
         19:42:13:66:ef:3a:d4:78:92:57:27:4e:ed:bd:0c:8d:e3:8a:
         d2:3d:0a:59:d3:74:7b:0a:5e:6b:ce:0e:19:53:ff:0e:5c:3d:
         a9:26:3c:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNV5EZl2mQ4PwTAv+AonjXeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1NDA2NjkxZjJlMzc0ZWUzN2E2NDA0OTJhMzY0ZGZjNTNi
YTQ0MTIwHhcNMjQxMTIyMjIwMDQzWhcNMjQxMTIzMjIwMDQzWjAzMTEwLwYDVQQD
EygyN2E4ZDdhNmRlZjhjNGQyYzRlMjFiMTFiMGU1NjliMWI2YTJiODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphgEdg2p1gNesbHHb0SlkG87W+sM
BnGMuL2c/O0FBuxFbbv/mOpZl1AHPaQY51Nf2ty2W1tDzNNQnBNdlP5VmfqDKxMm
Wy20GggSZDW/ftFO0SFN/9GtF8/M2BObAOk5fOuYJ1/MtAalfTli0PJWv1xNrCsb
hDEszp6lFctmdt71W+7t3kPobhpmzwRVfLp+ANmvirc6e4HBK8talgtlX/oT92TX
FzYBCOE5iQWW5S5elt9bMeCOJhDB67/guk0fAX0RyQ0lKJ8QX1rWb7dCQVuexsR2
IvYclwJNssKoSTHPnfCjpxgdZmLAzEym28j9h8+iL0ZlWA/G7W+RjRNAtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeo16be+MTSxOIbEbDlabG2orh/MB8GA1UdIwQY
MBaAFJVAZpHy43TuN6ZASSo2TfxTukQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFVCbWtmTGpkTzQzcGtCSktqWk5fRk82UkJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wZjRhYmYtNGQ5MC00OTY5LTg1YWQt
NDAxNTliNTMxM2QxLzEvbFVCbWtmTGpkTzQzcGtCSktqWk5fRk82UkJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8wZjRhYmYtNGQ5MC00OTY5LTg1YWQtNDAxNTliNTMxM2Qx
LzEvbFVCbWtmTGpkTzQzcGtCSktqWk5fRk82UkJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbowkcVB
XwLsGL9zM8NGW5hdCZ+2bEu1WSE9vacStKSIe/8YNRNzPQLW4EXOCYXfVodVSGwH
ZGzMS1FH697KseNol7aGIe+9lXpr+XFX4FW5TQMtf23V0CfZBNtOaecyZ/yN7nAD
jR+fyksYsV6Ly+KVEXg2rdYtvIpy9nLNa/FL7KOI24tvhXVhqd1LSQoyxuV3EZKw
/GdCQ0hH9j39V3jnkBoEkqZMUBZ7wd/guaK/xdWWJNk2AWqe+pJTm0NnZ5mnYkaJ
5KPHyg9efPasOfd4imEkf+wxGUITZu861HiSVydO7b0MjeOK0j0KWdN0ewpea84O
GVP/Dlw9qSY85g==
-----END CERTIFICATE-----