Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
File:                     VJWo5etsnoxrNjVBB3DzG5kDSCA.mft (raw, json)
Hash identifier:          cbkIMHyPJfnkYG9r43pjPYQT6GJQZ7jzNdm3zMjKEks=
Subject key identifier:   10:0F:B4:C9:6D:BE:35:A5:27:FE:85:E6:81:C9:ED:04:08:72:29:74
Authority key identifier: 54:95:A8:E5:EB:6C:9E:8C:6B:36:35:41:07:70:F3:1B:99:03:48:20
Certificate issuer:       /CN=5495a8e5eb6c9e8c6b3635410770f31b99034820
Certificate serial:       0191F9349CD8BFBBCBF608A9A235987EE8D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VJWo5etsnoxrNjVBB3DzG5kDSCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
Manifest number:          0153
Signing time:             Mon 16 Sep 2024 05:01:00 +0000
Manifest this update:     Mon 16 Sep 2024 05:01:00 +0000
Manifest next update:     Tue 17 Sep 2024 05:01:00 +0000
Files and hashes:         1: VJWo5etsnoxrNjVBB3DzG5kDSCA.crl (hash: E6YNFB2r6Ekgl0LnfS90t8KsjA+barRBspkx1+70puY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VJWo5etsnoxrNjVBB3DzG5kDSCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 05:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:34:9c:d8:bf:bb:cb:f6:08:a9:a2:35:98:7e:e8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5495a8e5eb6c9e8c6b3635410770f31b99034820
        Validity
            Not Before: Sep 16 05:01:00 2024 GMT
            Not After : Sep 17 05:01:00 2024 GMT
        Subject: CN=100fb4c96dbe35a527fe85e681c9ed0408722974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1b:39:3d:01:80:be:19:fe:8e:d8:3c:af:fe:
                    09:64:c5:c4:b0:d5:ac:8a:33:8c:62:cf:fc:ba:9c:
                    af:f9:b5:e4:70:f3:ef:1b:68:f3:8c:7b:01:d2:80:
                    35:d1:da:cf:3a:31:ad:ad:ee:a9:c8:dd:e6:95:4f:
                    97:e9:d0:86:db:e4:3a:c2:55:70:1b:b7:1f:78:86:
                    ab:7d:95:78:d6:0d:77:b4:16:72:01:8b:bd:5a:59:
                    0d:dd:c7:14:2b:11:9d:3c:e7:58:72:55:15:dd:e5:
                    29:7e:44:95:5d:b9:9e:3e:df:a5:d5:06:e7:7b:ff:
                    60:81:1e:33:89:48:6e:11:73:ae:b2:9b:a3:02:9a:
                    5f:24:22:b6:2f:9c:02:72:64:cc:83:1f:d8:a1:15:
                    0d:12:2c:ef:fd:d0:7e:0e:9a:6b:c7:1c:14:6b:d8:
                    61:de:aa:c2:d9:07:33:46:cb:19:5e:bb:78:ff:59:
                    65:df:8a:c5:7b:b5:88:a0:26:19:58:68:61:eb:02:
                    61:2e:18:a9:18:45:82:02:0c:9a:75:cd:4a:cf:5e:
                    a0:5e:57:d5:b0:86:33:42:0c:83:ca:2b:b1:d7:2e:
                    2a:96:06:93:52:00:b0:4e:4f:f6:73:23:00:70:a8:
                    a5:ad:07:e7:fb:41:52:09:c8:ec:ac:86:ab:0e:23:
                    8b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:0F:B4:C9:6D:BE:35:A5:27:FE:85:E6:81:C9:ED:04:08:72:29:74
            X509v3 Authority Key Identifier:
                keyid:54:95:A8:E5:EB:6C:9E:8C:6B:36:35:41:07:70:F3:1B:99:03:48:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJWo5etsnoxrNjVBB3DzG5kDSCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2c9419-b1f8-48f0-94a3-14cbbba21798/1/VJWo5etsnoxrNjVBB3DzG5kDSCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c9:69:34:9a:ef:3a:be:b4:7a:22:43:41:08:a5:d9:64:7e:
         54:c8:b7:5b:b5:1f:95:eb:40:89:67:9a:9f:d9:52:6b:c8:e5:
         d2:a1:64:6c:45:3e:c9:0a:b2:f0:78:1d:9f:de:72:9e:89:37:
         c2:64:84:ac:cb:a1:cc:d6:68:6b:58:39:db:7f:cb:81:ba:2e:
         55:c3:7d:16:ed:ce:32:03:ab:63:b9:6b:d1:c1:44:bd:2a:ad:
         d7:28:11:9b:41:a7:15:fb:a3:fd:74:57:89:1d:26:00:d8:e4:
         63:2d:3b:4d:2d:6e:d3:d5:d2:18:14:40:79:0e:70:3e:02:70:
         ef:47:f6:ae:e1:bd:c6:96:c4:95:17:ee:a5:52:4c:9a:5d:ca:
         67:46:ad:8a:35:1a:46:18:75:09:27:87:cd:c6:e4:a2:02:40:
         b5:9b:51:58:64:34:7c:e0:28:c5:c3:29:1f:f8:ec:35:9e:e3:
         1c:85:f1:fd:70:18:91:bc:a9:67:6d:09:3a:8a:84:90:11:fb:
         51:8a:f2:fa:bc:66:b3:ca:13:49:74:9b:6b:8a:80:51:89:8e:
         e3:08:3d:96:06:a2:e2:02:44:6f:4c:ae:9f:87:eb:b2:15:01:
         be:2a:a9:d5:61:3e:45:a8:2d:10:b0:76:d9:aa:09:2e:39:33:
         56:84:2a:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZH5NJzYv7vL9gipojWYfujRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OTVhOGU1ZWI2YzllOGM2YjM2MzU0MTA3NzBmMzFiOTkw
MzQ4MjAwHhcNMjQwOTE2MDUwMTAwWhcNMjQwOTE3MDUwMTAwWjAzMTEwLwYDVQQD
EygxMDBmYjRjOTZkYmUzNWE1MjdmZTg1ZTY4MWM5ZWQwNDA4NzIyOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBs5PQGAvhn+jtg8r/4JZMXEsNWs
ijOMYs/8upyv+bXkcPPvG2jzjHsB0oA10drPOjGtre6pyN3mlU+X6dCG2+Q6wlVw
G7cfeIarfZV41g13tBZyAYu9WlkN3ccUKxGdPOdYclUV3eUpfkSVXbmePt+l1Qbn
e/9ggR4ziUhuEXOuspujAppfJCK2L5wCcmTMgx/YoRUNEizv/dB+DpprxxwUa9hh
3qrC2QczRssZXrt4/1ll34rFe7WIoCYZWGhh6wJhLhipGEWCAgyadc1Kz16gXlfV
sIYzQgyDyiux1y4qlgaTUgCwTk/2cyMAcKilrQfn+0FSCcjsrIarDiOLlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAPtMltvjWlJ/6F5oHJ7QQIcil0MB8GA1UdIwQY
MBaAFFSVqOXrbJ6MazY1QQdw8xuZA0ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkpXbzVldHNub3hyTmpWQkIzRHpHNWtEU0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yYzk0MTktYjFmOC00OGYwLTk0YTMt
MTRjYmJiYTIxNzk4LzEvVkpXbzVldHNub3hyTmpWQkIzRHpHNWtEU0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yYzk0MTktYjFmOC00OGYwLTk0YTMtMTRjYmJiYTIxNzk4
LzEvVkpXbzVldHNub3hyTmpWQkIzRHpHNWtEU0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEMlpNJrv
Or60eiJDQQil2WR+VMi3W7UfletAiWean9lSa8jl0qFkbEU+yQqy8Hgdn95ynok3
wmSErMuhzNZoa1g523/LgbouVcN9Fu3OMgOrY7lr0cFEvSqt1ygRm0GnFfuj/XRX
iR0mANjkYy07TS1u09XSGBRAeQ5wPgJw70f2ruG9xpbElRfupVJMml3KZ0atijUa
Rhh1CSeHzcbkogJAtZtRWGQ0fOAoxcMpH/jsNZ7jHIXx/XAYkbypZ20JOoqEkBH7
UYry+rxms8oTSXSba4qAUYmO4wg9lgai4gJEb0yun4frshUBviqp1WE+RagtELB2
2aoJLjkzVoQq/w==
-----END CERTIFICATE-----