Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
File:                     CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft (raw, json)
Hash identifier:          D4BlpxHz9U5JyOCSoKJ/O7ogn0wW9JLHuGydwqUeKTc=
Subject key identifier:   87:17:68:38:0E:0C:82:83:32:98:21:75:68:24:69:91:E4:D0:3E:72
Authority key identifier: 09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7
Certificate issuer:       /CN=096e293ba380dcc75f00106443668f51002555b7
Certificate serial:       019351995B0747BD7481AB77E28CD417BB14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
Manifest number:          136F
Signing time:             Fri 22 Nov 2024 02:00:24 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:24 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:24 +0000
Files and hashes:         1: 00f52rJWZHoEhyAc0cMjhbELFdc.roa (hash: +FbHsbGVuLEvfW3rSyCrLs2JA4sUBc1RheZ4McGckEI=)
                          2: CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl (hash: Y+nmYHH3kTz/h2eeB/VNuFnr4sNIaHG4ovc3ihd9mas=)
                          3: qzolONgpdLduC_iwA77zEKUS2JM.roa (hash: D1Dg5EXj9ubiUMBjFgMweNEMaKLNb4xk3iFn1Ubg40Y=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:5b:07:47:bd:74:81:ab:77:e2:8c:d4:17:bb:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=096e293ba380dcc75f00106443668f51002555b7
        Validity
            Not Before: Nov 22 02:00:24 2024 GMT
            Not After : Nov 23 02:00:24 2024 GMT
        Subject: CN=871768380e0c82833298217568246991e4d03e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:f2:27:f4:3a:23:09:b9:31:88:b3:82:96:
                    3b:c4:1f:31:53:82:f6:76:dc:4c:b9:6d:24:3c:bc:
                    aa:73:bc:f1:f3:6e:da:a6:ff:91:41:84:18:da:91:
                    b7:cb:00:4a:cd:18:bd:b4:b4:8e:ec:8b:de:0f:bd:
                    9e:4f:0d:d8:66:2e:89:66:10:21:63:62:d2:06:b7:
                    f2:8b:cd:33:1c:92:8e:2a:dd:dc:21:dc:82:4f:47:
                    5b:d0:79:8f:f7:be:0d:44:94:27:52:2b:fb:59:4b:
                    86:f0:51:18:b6:b2:20:7f:e5:78:2a:1c:3a:a0:49:
                    c8:04:dd:55:29:f3:99:5f:dc:2d:c5:18:15:cb:05:
                    d5:66:fd:29:51:7c:15:37:86:ee:98:7e:0f:58:de:
                    ed:65:c8:28:57:43:d8:c4:bb:ab:82:cf:0a:30:38:
                    0c:50:0d:8b:cd:68:82:7b:92:2c:33:8b:c3:d5:06:
                    7a:b5:18:0a:f4:34:36:e7:82:1b:dd:ae:7c:7c:95:
                    4f:e9:2e:e8:f7:f8:75:c1:d2:a8:1d:77:3f:81:14:
                    4a:38:ca:dd:ce:32:9c:04:25:6a:73:8d:df:d3:39:
                    81:13:40:47:ed:31:c7:e0:46:36:f1:68:3f:2b:4e:
                    56:81:f3:70:aa:62:85:70:f5:75:cf:d0:61:e8:67:
                    40:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:17:68:38:0E:0C:82:83:32:98:21:75:68:24:69:91:E4:D0:3E:72
            X509v3 Authority Key Identifier:
                keyid:09:6E:29:3B:A3:80:DC:C7:5F:00:10:64:43:66:8F:51:00:25:55:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CW4pO6OA3MdfABBkQ2aPUQAlVbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bdaeb7-52d5-49ff-9a4b-df05d489da17/1/CW4pO6OA3MdfABBkQ2aPUQAlVbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:74:93:27:35:99:4d:56:ac:48:16:9a:c7:36:3f:a1:55:85:
         5b:4b:56:fe:6d:ae:f5:6a:b8:53:e8:72:e5:ef:85:7c:29:54:
         eb:52:da:7e:88:4b:aa:a5:8e:ab:06:9b:9f:65:5c:2c:3a:b4:
         c0:76:91:eb:2d:98:74:2c:f6:25:a3:f6:bb:04:53:9b:95:ed:
         80:fb:57:c1:7d:9d:ce:f4:6a:6d:c6:aa:37:30:98:af:e3:25:
         ca:44:59:4a:54:b9:a4:4b:96:14:8b:13:b9:03:5a:b1:03:f6:
         54:ef:1b:53:2f:bb:a0:89:88:a9:66:d4:99:16:18:85:67:f7:
         5e:fd:fa:79:67:5e:b8:d1:d4:4d:ae:ff:32:34:95:18:ef:f0:
         d8:14:1e:61:92:a5:82:47:19:bb:a8:77:eb:0e:96:60:d3:4e:
         ef:cb:08:c7:37:ff:08:18:f0:08:ff:cf:82:a5:06:85:d6:04:
         a6:89:18:04:a0:00:2d:c3:9b:b5:57:4b:fe:dc:ef:08:27:7b:
         1a:f6:c9:b0:4f:8e:6e:1b:8f:6b:7e:63:26:4f:35:ab:35:50:
         1d:f6:f0:33:8a:74:3c:eb:42:b6:37:0b:36:cc:75:7e:cd:e3:
         30:d9:fa:13:76:8f:0a:1c:fc:14:6c:eb:a7:72:63:2b:21:7f:
         25:b7:83:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmVsHR710gat34ozUF7sUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NmUyOTNiYTM4MGRjYzc1ZjAwMTA2NDQzNjY4ZjUxMDAy
NTU1YjcwHhcNMjQxMTIyMDIwMDI0WhcNMjQxMTIzMDIwMDI0WjAzMTEwLwYDVQQD
Eyg4NzE3NjgzODBlMGM4MjgzMzI5ODIxNzU2ODI0Njk5MWU0ZDAzZTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YTyJ/Q6Iwm5MYizgpY7xB8xU4L2
dtxMuW0kPLyqc7zx827apv+RQYQY2pG3ywBKzRi9tLSO7IveD72eTw3YZi6JZhAh
Y2LSBrfyi80zHJKOKt3cIdyCT0db0HmP974NRJQnUiv7WUuG8FEYtrIgf+V4Khw6
oEnIBN1VKfOZX9wtxRgVywXVZv0pUXwVN4bumH4PWN7tZcgoV0PYxLurgs8KMDgM
UA2LzWiCe5IsM4vD1QZ6tRgK9DQ254Ib3a58fJVP6S7o9/h1wdKoHXc/gRRKOMrd
zjKcBCVqc43f0zmBE0BH7THH4EY28Wg/K05WgfNwqmKFcPV1z9Bh6GdA7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcXaDgODIKDMpghdWgkaZHk0D5yMB8GA1UdIwQY
MBaAFAluKTujgNzHXwAQZENmj1EAJVW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGIt
ZGYwNWQ0ODlkYTE3LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9iZGFlYjctNTJkNS00OWZmLTlhNGItZGYwNWQ0ODlkYTE3
LzEvQ1c0cE82T0EzTWRmQUJCa1EyYVBVUUFsVmJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3STJzWZ
TVasSBaaxzY/oVWFW0tW/m2u9Wq4U+hy5e+FfClU61LafohLqqWOqwabn2VcLDq0
wHaR6y2YdCz2JaP2uwRTm5XtgPtXwX2dzvRqbcaqNzCYr+MlykRZSlS5pEuWFIsT
uQNasQP2VO8bUy+7oImIqWbUmRYYhWf3Xv36eWdeuNHUTa7/MjSVGO/w2BQeYZKl
gkcZu6h36w6WYNNO78sIxzf/CBjwCP/PgqUGhdYEpokYBKAALcObtVdL/tzvCCd7
GvbJsE+ObhuPa35jJk81qzVQHfbwM4p0POtCtjcLNsx1fs3jMNn6E3aPChz8FGzr
p3JjKyF/JbeDiw==
-----END CERTIFICATE-----