Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File:                     yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier:          4wxkb6SJMPiJ70unP+hwl9OQEko0OI4gsUcKtW8vro8=
Subject key identifier:   D9:3D:08:1C:19:B2:70:F6:EA:C3:7C:52:B6:7E:46:5D:B6:EE:5B:0E
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer:       /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial:       018F8823EAD412B8FB6C1CAE8A988678F481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 20:00:06 +0000
Manifest this update:     Fri 17 May 2024 20:00:06 +0000
Manifest next update:     Sat 18 May 2024 20:00:06 +0000
Files and hashes:         1: Uw0T9HAMb4KJumS2TUTy9DiW80g.roa (hash: 0b8UCTu2pMPMMq69i9oYTXSb0GtvAZ1rNv9l/nhef34=)
                          2: p7pjylcwBbPNmwGxAjUlCwTWYW8.roa (hash: 7zc0AT21s1IhQuIFGDGyxAoISI1ow5I42e0tXtGi1Yk=)
                          3: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: fqqqdIas968kIbcpo8NIe8R3t1zTg8TJM9d/6NB26XI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:23:ea:d4:12:b8:fb:6c:1c:ae:8a:98:86:78:f4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
        Validity
            Not Before: May 17 20:00:06 2024 GMT
            Not After : May 18 20:00:06 2024 GMT
        Subject: CN=d93d081c19b270f6eac37c52b67e465db6ee5b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dd:fa:cd:1c:a8:33:3b:8d:13:f3:ae:73:ce:
                    9c:2b:2e:67:0b:52:96:ad:3b:22:90:d5:e3:0d:51:
                    62:3a:ee:3d:ce:0d:9d:47:a2:e7:3c:fb:8c:59:9d:
                    57:6f:73:4d:c4:ec:52:0d:e3:d5:d2:b1:22:a9:5d:
                    b0:81:0e:75:dc:8a:b2:18:55:0b:1e:91:5d:f6:76:
                    22:7b:0a:82:9c:eb:81:c0:91:9b:e4:32:ae:fe:6f:
                    35:82:70:ab:9d:f9:16:f3:09:11:8b:44:c2:85:50:
                    5c:a2:ce:c2:1c:11:d3:2d:b5:d3:75:cb:cc:d2:39:
                    fb:a1:2c:6e:f9:d5:85:30:d1:44:08:4c:52:c8:67:
                    ce:c9:f9:f4:a1:06:31:eb:97:b6:97:74:bd:6f:62:
                    f8:32:74:13:3d:0f:e5:a2:38:1a:40:55:30:85:31:
                    3c:ba:b8:99:81:c1:12:d4:ac:03:83:2c:3f:6c:4f:
                    3c:f7:0b:e9:78:60:87:68:ad:08:4c:e3:c8:20:1d:
                    c6:9e:61:72:3d:72:71:7a:00:9b:ce:34:4b:17:04:
                    9b:05:a4:84:c2:8f:bc:42:5c:ab:63:42:f4:12:6c:
                    4e:fe:52:82:c0:9d:7a:ae:14:d8:4e:fc:86:0e:17:
                    cb:5e:80:89:45:29:7a:2f:4c:11:38:d1:28:1a:00:
                    b6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:3D:08:1C:19:B2:70:F6:EA:C3:7C:52:B6:7E:46:5D:B6:EE:5B:0E
            X509v3 Authority Key Identifier:
                keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:aa:65:c9:35:6a:40:26:b5:27:4a:5c:26:da:de:ac:61:2e:
         06:26:ef:1c:5f:f1:a0:a4:0f:45:c9:ea:99:0d:68:e6:f9:19:
         a6:b8:bc:6f:5e:e4:c7:f2:81:26:fb:62:33:41:02:9e:3d:06:
         5b:1c:1d:57:1f:63:02:fc:09:f4:af:54:ac:5d:9c:6b:4a:6f:
         d8:50:ef:7a:95:93:43:8f:c7:52:af:fa:8b:cd:c3:52:ed:9f:
         fa:8d:ae:fa:71:b4:2c:2d:b6:c7:f4:84:d0:2a:e7:4b:96:23:
         81:26:94:3b:40:21:ea:c7:ed:4d:3d:70:fd:e7:9b:f1:fc:91:
         31:42:d0:b1:2f:0e:e1:91:3e:85:98:44:52:0d:c4:60:e4:6f:
         58:8b:1f:b9:65:d9:27:be:77:3d:f4:8c:d8:a8:b9:7f:05:5a:
         72:c4:58:7f:b6:26:61:9d:e7:a6:24:9d:a9:f1:ec:ed:08:42:
         56:36:55:43:c1:87:f9:7f:38:6d:aa:a1:29:ab:6d:02:06:34:
         9b:4b:2f:d8:f7:05:79:6e:b4:6f:50:15:02:d4:6a:98:70:66:
         9c:f0:3d:db:51:d6:56:11:02:bb:69:2b:a9:39:81:fe:d4:15:
         18:38:b6:ca:6e:8e:76:4f:2c:ac:5d:16:74:76:61:17:55:fe:
         e4:a2:f8:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+II+rUErj7bByuipiGePSBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5OGExODZlOGVlYjg3MTRlZGNhNWIwZDcxNmU1MWQ2NmMx
NjhjZTEwHhcNMjQwNTE3MjAwMDA2WhcNMjQwNTE4MjAwMDA2WjAzMTEwLwYDVQQD
EyhkOTNkMDgxYzE5YjI3MGY2ZWFjMzdjNTJiNjdlNDY1ZGI2ZWU1YjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t36zRyoMzuNE/Ouc86cKy5nC1KW
rTsikNXjDVFiOu49zg2dR6LnPPuMWZ1Xb3NNxOxSDePV0rEiqV2wgQ513IqyGFUL
HpFd9nYiewqCnOuBwJGb5DKu/m81gnCrnfkW8wkRi0TChVBcos7CHBHTLbXTdcvM
0jn7oSxu+dWFMNFECExSyGfOyfn0oQYx65e2l3S9b2L4MnQTPQ/lojgaQFUwhTE8
uriZgcES1KwDgyw/bE889wvpeGCHaK0ITOPIIB3GnmFyPXJxegCbzjRLFwSbBaSE
wo+8QlyrY0L0EmxO/lKCwJ16rhTYTvyGDhfLXoCJRSl6L0wRONEoGgC2swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNk9CBwZsnD26sN8UrZ+Rl227lsOMB8GA1UdIwQY
MBaAFMmKGG6O64cU7cpbDXFuUdZsFozhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTkt
N2E1YThkMDk2N2M4LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iYTcyMTQtNTU2OC00YTQyLWE5OTktN2E1YThkMDk2N2M4
LzEveVlvWWJvN3JoeFR0eWxzTmNXNVIxbXdXak9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaplyTVq
QCa1J0pcJtrerGEuBibvHF/xoKQPRcnqmQ1o5vkZpri8b17kx/KBJvtiM0ECnj0G
WxwdVx9jAvwJ9K9UrF2ca0pv2FDvepWTQ4/HUq/6i83DUu2f+o2u+nG0LC22x/SE
0CrnS5YjgSaUO0Ah6sftTT1w/eeb8fyRMULQsS8O4ZE+hZhEUg3EYORvWIsfuWXZ
J753PfSM2Ki5fwVacsRYf7YmYZ3npiSdqfHs7QhCVjZVQ8GH+X84baqhKattAgY0
m0sv2PcFeW60b1AVAtRqmHBmnPA921HWVhECu2krqTmB/tQVGDi2ym6Odk8srF0W
dHZhF1X+5KL4Fw==
-----END CERTIFICATE-----