Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b3c215-d866-42d0-a6c3-20677d80e838/1/zKdQ_MdtDdddc4HjbRveTt3cPlE.mft
File:                     zKdQ_MdtDdddc4HjbRveTt3cPlE.mft (raw, json)
Hash identifier:          NgJCJdeMRsQd5oc0/Xx6smGazn2HJDOZwCjkdsDBnho=
Subject key identifier:   24:A3:FB:6E:44:39:F6:01:95:EF:BA:21:C7:48:08:96:55:E4:B1:CA
Authority key identifier: CC:A7:50:FC:C7:6D:0D:D7:5D:73:81:E3:6D:1B:DE:4E:DD:DC:3E:51
Certificate issuer:       /CN=cca750fcc76d0dd75d7381e36d1bde4edddc3e51
Certificate serial:       01936BC86EC9EB9FAA856B8C40D45DA33182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zKdQ_MdtDdddc4HjbRveTt3cPlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/b3c215-d866-42d0-a6c3-20677d80e838/1/zKdQ_MdtDdddc4HjbRveTt3cPlE.mft
Manifest number:          137B
Signing time:             Wed 27 Nov 2024 04:01:57 +0000
Manifest this update:     Wed 27 Nov 2024 04:01:57 +0000
Manifest next update:     Thu 28 Nov 2024 04:01:57 +0000
Files and hashes:         1: GuBACEaaLKhTCHhpo7PwnylCeoo.roa (hash: 3ronfCmYjtmN+/+EkbeU7iN1AnMSSHYPaQV8ZiLOJls=)
                          2: NRqEkvjaiHLhP7YwHQ36JqAydNk.roa (hash: mB6VxHbr/RL8KejIdKmX57CLVnFYDSmKf/lzdowTd/Y=)
                          3: zKdQ_MdtDdddc4HjbRveTt3cPlE.crl (hash: NaUPkGJs13uxvMlnpI6Xpn2JIDlFYXWz0l9HV3UVs8o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/b3c215-d866-42d0-a6c3-20677d80e838/1/zKdQ_MdtDdddc4HjbRveTt3cPlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/b3c215-d866-42d0-a6c3-20677d80e838/1/zKdQ_MdtDdddc4HjbRveTt3cPlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zKdQ_MdtDdddc4HjbRveTt3cPlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 23:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:c8:6e:c9:eb:9f:aa:85:6b:8c:40:d4:5d:a3:31:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cca750fcc76d0dd75d7381e36d1bde4edddc3e51
        Validity
            Not Before: Nov 27 04:01:57 2024 GMT
            Not After : Nov 28 04:01:57 2024 GMT
        Subject: CN=24a3fb6e4439f60195efba21c748089655e4b1ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1a:d4:b5:ea:f7:6a:cb:3f:e1:b0:d8:13:a7:
                    27:cd:55:ff:72:0a:90:b4:9c:38:ee:68:42:b4:6d:
                    d5:ac:ad:90:46:a7:00:cd:23:2f:68:de:5f:96:62:
                    b3:c3:43:8d:47:d8:f9:c4:72:95:36:0a:74:78:df:
                    11:d3:80:1b:26:8f:70:14:e2:f8:e1:0d:16:ad:67:
                    5f:42:57:b3:6d:2f:bb:38:79:bb:c9:4c:3a:fb:a0:
                    ef:b1:c9:31:25:b3:c1:37:4d:b9:af:89:c0:29:5f:
                    7a:8c:98:c7:8a:a7:1b:8b:0c:04:f2:0e:cd:c8:f6:
                    97:e9:a0:d2:0a:03:fd:32:f3:98:2e:61:0d:f8:ad:
                    77:60:51:35:22:6f:eb:30:97:f0:c5:4d:a9:74:7e:
                    2d:55:94:25:22:cd:1c:fb:0b:52:53:ec:b4:cf:d5:
                    c0:e1:97:e6:f6:df:d0:7f:72:b8:ac:b4:46:af:f0:
                    89:ff:21:b6:b6:6a:52:61:09:1e:2c:6c:e6:08:cb:
                    09:64:7b:b4:b0:c8:fb:02:8f:49:4b:ec:58:c0:ac:
                    ba:67:14:e7:04:ef:2f:b6:6b:94:4b:0f:fb:61:2e:
                    75:c9:dc:48:29:22:7f:35:ab:f1:9a:3e:22:5f:e8:
                    d2:50:bd:08:9a:82:36:b8:9a:43:19:3e:71:45:e3:
                    c5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A3:FB:6E:44:39:F6:01:95:EF:BA:21:C7:48:08:96:55:E4:B1:CA
            X509v3 Authority Key Identifier:
                keyid:CC:A7:50:FC:C7:6D:0D:D7:5D:73:81:E3:6D:1B:DE:4E:DD:DC:3E:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKdQ_MdtDdddc4HjbRveTt3cPlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b3c215-d866-42d0-a6c3-20677d80e838/1/zKdQ_MdtDdddc4HjbRveTt3cPlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b3c215-d866-42d0-a6c3-20677d80e838/1/zKdQ_MdtDdddc4HjbRveTt3cPlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:4e:9b:1d:ca:74:d3:d8:0d:c3:26:3c:bc:39:9f:a1:6b:5e:
         0d:8e:0e:2a:a3:bf:83:ee:a0:76:7c:84:81:dc:f8:14:0f:6b:
         54:4a:4e:41:ef:eb:b2:eb:39:f1:98:98:ef:b0:f9:96:7a:58:
         41:80:14:58:8a:6b:2d:d3:21:19:34:43:ce:45:c9:5d:46:c4:
         be:92:fd:04:e6:5d:8d:b8:50:70:b9:f2:c0:40:86:11:e1:c2:
         2d:c5:10:cf:fe:c3:08:8e:88:fd:0a:a4:0e:35:24:ee:91:cb:
         1f:4e:3e:28:50:07:80:63:16:ed:50:74:bc:b7:27:d0:f8:82:
         dd:6e:58:ca:08:fc:c0:00:7a:67:86:89:fb:0a:16:28:01:1d:
         18:93:38:02:f6:3f:1e:21:ab:95:fb:50:72:8e:3d:cf:7a:da:
         cc:5f:18:8b:6d:d5:bb:e4:28:4e:64:f5:9d:a0:cb:d8:a6:5b:
         ae:59:de:22:88:91:f8:ce:a4:33:19:d2:ba:51:0d:0a:34:4e:
         71:33:7f:a0:39:ae:db:cb:52:1a:8c:87:ce:65:7c:65:f2:c3:
         48:95:6a:91:61:74:d4:ac:30:9d:de:c9:50:cc:30:bd:b2:9f:
         1c:42:3f:30:7c:a4:e2:94:6a:ad:60:4f:29:85:4f:22:e3:3f:
         14:86:6e:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNryG7J65+qhWuMQNRdozGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjYTc1MGZjYzc2ZDBkZDc1ZDczODFlMzZkMWJkZTRlZGRk
YzNlNTEwHhcNMjQxMTI3MDQwMTU3WhcNMjQxMTI4MDQwMTU3WjAzMTEwLwYDVQQD
EygyNGEzZmI2ZTQ0MzlmNjAxOTVlZmJhMjFjNzQ4MDg5NjU1ZTRiMWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBrUter3ass/4bDYE6cnzVX/cgqQ
tJw47mhCtG3VrK2QRqcAzSMvaN5flmKzw0ONR9j5xHKVNgp0eN8R04AbJo9wFOL4
4Q0WrWdfQlezbS+7OHm7yUw6+6DvsckxJbPBN025r4nAKV96jJjHiqcbiwwE8g7N
yPaX6aDSCgP9MvOYLmEN+K13YFE1Im/rMJfwxU2pdH4tVZQlIs0c+wtSU+y0z9XA
4Zfm9t/Qf3K4rLRGr/CJ/yG2tmpSYQkeLGzmCMsJZHu0sMj7Ao9JS+xYwKy6ZxTn
BO8vtmuUSw/7YS51ydxIKSJ/Navxmj4iX+jSUL0ImoI2uJpDGT5xRePFlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCSj+25EOfYBle+6IcdICJZV5LHKMB8GA1UdIwQY
MBaAFMynUPzHbQ3XXXOB420b3k7d3D5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvektkUV9NZHREZGRkYzRIamJSdmVUdDNjUGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iM2MyMTUtZDg2Ni00MmQwLWE2YzMt
MjA2NzdkODBlODM4LzEvektkUV9NZHREZGRkYzRIamJSdmVUdDNjUGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iM2MyMTUtZDg2Ni00MmQwLWE2YzMtMjA2NzdkODBlODM4
LzEvektkUV9NZHREZGRkYzRIamJSdmVUdDNjUGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjE6bHcp0
09gNwyY8vDmfoWteDY4OKqO/g+6gdnyEgdz4FA9rVEpOQe/rsus58ZiY77D5lnpY
QYAUWIprLdMhGTRDzkXJXUbEvpL9BOZdjbhQcLnywECGEeHCLcUQz/7DCI6I/Qqk
DjUk7pHLH04+KFAHgGMW7VB0vLcn0PiC3W5Yygj8wAB6Z4aJ+woWKAEdGJM4AvY/
HiGrlftQco49z3razF8Yi23Vu+QoTmT1naDL2KZbrlneIoiR+M6kMxnSulENCjRO
cTN/oDmu28tSGoyHzmV8ZfLDSJVqkWF01Kwwnd7JUMwwvbKfHEI/MHyk4pRqrWBP
KYVPIuM/FIZuGA==
-----END CERTIFICATE-----