Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
File:                     x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json)
Hash identifier:          xaJNZa/3w4dPjYrwR8AQYaOVvzuxlPdsvTMstExXCe4=
Subject key identifier:   5F:92:E0:73:81:DB:35:A1:33:65:14:EA:4D:0A:EE:E8:BD:F5:A6:6B
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Certificate issuer:       /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial:       01935689E97C5A2553CA6CD91BC68E5C0667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 01:01:38 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:38 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:38 +0000
Files and hashes:         1: IUWP9jNtWqP8xiP2q5umQuq_1VI.roa (hash: gqSmnweKTC8gzARl6YfBb7A+HWaF3Ss+mXrwxAMqnQI=)
                          2: MlQ8erQArbzDw4t7GS_Itj3jI6s.roa (hash: 9HYwfmdj1pDE7g5q4NPyVdJ5nogwlAmOXrWO5WxnTHQ=)
                          3: sBWPt9PRUi_RdQRVusUoDmPykus.roa (hash: M9e2uwY9dOT584hOh1NFj4bHzl64Xg4bMXyrijPxlFs=)
                          4: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: B7hOSuTnbT7mV2mZVIQ5JDO6PN0I9KsRkGp5Oal4vKQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:e9:7c:5a:25:53:ca:6c:d9:1b:c6:8e:5c:06:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
        Validity
            Not Before: Nov 23 01:01:38 2024 GMT
            Not After : Nov 24 01:01:38 2024 GMT
        Subject: CN=5f92e07381db35a1336514ea4d0aeee8bdf5a66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:10:ed:bc:8f:1c:ec:61:3d:f9:ad:a8:5e:
                    9e:68:34:f8:2a:f4:6a:f6:ab:a6:90:0d:2c:ed:67:
                    be:b4:ef:79:7b:11:34:f0:a6:18:4c:39:13:26:2b:
                    b4:97:8d:51:aa:f6:73:d2:1a:8b:c2:ec:43:b0:60:
                    9d:1b:de:25:5f:73:bd:51:37:21:35:ce:2f:61:43:
                    87:97:24:e2:80:cf:ce:d6:1e:a5:6f:e6:a5:3b:0e:
                    bf:9c:e2:7e:2b:17:9e:cb:de:bd:72:0b:14:53:21:
                    9d:55:22:1d:eb:41:f6:a4:89:73:e7:8e:2e:21:dd:
                    66:b3:9f:83:72:62:36:d2:9b:c7:86:f1:0c:5e:af:
                    22:b4:80:f6:cd:a9:82:75:c7:f7:96:a8:68:eb:29:
                    3b:a3:95:96:a1:83:a3:b2:40:bf:7f:c5:98:9e:02:
                    eb:cf:f5:52:2b:f4:d0:dc:79:a7:a5:03:d0:4f:a8:
                    20:43:54:96:5b:a7:92:dd:92:64:66:88:58:8f:8c:
                    7a:50:e4:e6:37:0b:cf:2b:4e:5a:99:1f:0b:7e:c1:
                    75:49:ca:2e:94:94:54:49:c7:ae:ce:b6:88:d0:3c:
                    89:ee:a2:8f:17:bc:80:37:96:c3:d9:1f:6c:e8:b1:
                    30:e5:1c:f3:d1:e5:b5:15:52:54:27:6e:a9:bd:e5:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:92:E0:73:81:DB:35:A1:33:65:14:EA:4D:0A:EE:E8:BD:F5:A6:6B
            X509v3 Authority Key Identifier:
                keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:3d:93:bc:3a:dd:a8:b7:02:c6:48:49:07:8b:ca:0b:c4:48:
         54:8f:de:1e:22:43:da:9a:a9:b1:ed:b4:9a:cb:c8:9f:c2:c8:
         75:4d:95:d1:86:43:62:48:ad:78:9a:c8:b2:2a:03:91:c8:ea:
         42:cd:f2:07:65:03:6d:04:f9:97:40:7a:4a:7c:08:7c:74:91:
         12:30:5e:63:96:f7:e0:db:5f:28:ff:18:73:19:7f:0b:e6:80:
         66:09:c1:e6:f3:55:04:81:16:21:32:c0:76:de:a1:c9:51:f7:
         23:4d:95:c1:6b:15:e9:56:ff:46:4d:3f:8b:d3:cc:08:65:b4:
         48:1c:d7:fe:fe:d8:e2:88:fc:2f:e1:4f:95:ea:f0:b0:9f:fe:
         4e:57:7c:7e:b7:73:c3:f1:b0:a6:0c:cb:5f:f1:f8:0d:d6:61:
         4c:97:77:0b:7c:f6:46:68:fe:d6:82:06:c9:1d:d3:98:db:77:
         5c:91:28:f4:df:74:0a:08:bd:f3:68:6c:39:a7:ac:af:a8:74:
         73:a3:57:18:b2:f0:29:3e:1f:60:12:79:47:99:7f:08:6a:63:
         74:3c:02:00:47:35:11:02:72:72:54:82:c8:b0:9d:d6:68:dc:
         20:f6:c5:ab:1b:db:f4:65:52:9f:0d:6f:9c:4c:fe:bb:7b:9e:
         9b:f6:32:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWiel8WiVTymzZG8aOXAZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZThkOTU5ZjFjOTU2NGEzM2YyOGZlNDRhYjYxNGI4ZjYy
YjAwMWIwHhcNMjQxMTIzMDEwMTM4WhcNMjQxMTI0MDEwMTM4WjAzMTEwLwYDVQQD
Eyg1ZjkyZTA3MzgxZGIzNWExMzM2NTE0ZWE0ZDBhZWVlOGJkZjVhNjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW0Q7byPHOxhPfmtqF6eaDT4KvRq
9qumkA0s7We+tO95exE08KYYTDkTJiu0l41RqvZz0hqLwuxDsGCdG94lX3O9UTch
Nc4vYUOHlyTigM/O1h6lb+alOw6/nOJ+Kxeey969cgsUUyGdVSId60H2pIlz544u
Id1ms5+DcmI20pvHhvEMXq8itID2zamCdcf3lqho6yk7o5WWoYOjskC/f8WYngLr
z/VSK/TQ3HmnpQPQT6ggQ1SWW6eS3ZJkZohYj4x6UOTmNwvPK05amR8LfsF1Scou
lJRUSceuzraI0DyJ7qKPF7yAN5bD2R9s6LEw5Rzz0eW1FVJUJ26pveXGRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+S4HOB2zWhM2UU6k0K7ui99aZrMB8GA1UdIwQY
MBaAFMfo2VnxyVZKM/KP5Eq2FLj2KwAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNGUzMjctNzY1OC00NjNjLTg5OTAt
YjFjOWI3ODlhYWE5LzEveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNGUzMjctNzY1OC00NjNjLTg5OTAtYjFjOWI3ODlhYWE5
LzEveC1qWldmSEpWa296OG9fa1NyWVV1UFlyQUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaj2TvDrd
qLcCxkhJB4vKC8RIVI/eHiJD2pqpse20msvIn8LIdU2V0YZDYkiteJrIsioDkcjq
Qs3yB2UDbQT5l0B6SnwIfHSREjBeY5b34NtfKP8Ycxl/C+aAZgnB5vNVBIEWITLA
dt6hyVH3I02VwWsV6Vb/Rk0/i9PMCGW0SBzX/v7Y4oj8L+FPlerwsJ/+Tld8frdz
w/GwpgzLX/H4DdZhTJd3C3z2Rmj+1oIGyR3TmNt3XJEo9N90Cgi982hsOaesr6h0
c6NXGLLwKT4fYBJ5R5l/CGpjdDwCAEc1EQJyclSCyLCd1mjcIPbFqxvb9GVSnw1v
nEz+u3uem/Yy1g==
-----END CERTIFICATE-----