Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
File:                     sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft (raw, json)
Hash identifier:          mDFnmi0+elmjCcwD8y/Sy1x3LGUF87M5nte+5Kw7HlU=
Subject key identifier:   D2:54:AC:FB:24:CA:0E:8B:27:F9:50:D5:03:CD:D1:9F:31:21:8D:69
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Certificate issuer:       /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial:       019351994E4BA78D49DEC157621AEFAA6FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
Manifest number:          0C78
Signing time:             Fri 22 Nov 2024 02:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 02:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 02:00:21 +0000
Files and hashes:         1: DHztZfL4dtQjbE6TuQn019RdJu4.roa (hash: uYfjSLlt77pEmD0BFO7YLQgzNVw9k6l/8UI7EWcBWKU=)
                          2: NZhq0mdPc_JLJgWl2SgxNhBbwF0.roa (hash: 1mMZgwde1TWO7cRW8PxujN3FHSPvyHjnCmfLTAjjmEM=)
                          3: bHXKiCnQcej3QzWyNriIFEFMmyA.roa (hash: 9ibCdCNmB8rA/jqv9Cew+WqOsPG+qSPH0RkGbzpSrKI=)
                          4: sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl (hash: hc9rWpJqyBUvznLLI6Nq5K1jEhlYLaTxl1Y3eQrbkmk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:99:4e:4b:a7:8d:49:de:c1:57:62:1a:ef:aa:6f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
        Validity
            Not Before: Nov 22 02:00:21 2024 GMT
            Not After : Nov 23 02:00:21 2024 GMT
        Subject: CN=d254acfb24ca0e8b27f950d503cdd19f31218d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:2c:eb:cd:05:6e:e2:f8:25:ea:a6:dd:86:
                    de:d2:6e:19:f5:c9:12:77:8c:a2:cf:66:cb:a0:8f:
                    1d:4f:3c:3e:7d:68:3b:f3:59:f7:e6:28:0f:36:54:
                    3d:75:43:3e:46:37:7e:6d:8f:8a:1e:08:29:1c:3c:
                    6c:f6:fa:c0:40:67:75:93:c7:67:c2:9e:c6:51:45:
                    18:d0:a4:2a:99:da:9a:4b:f0:61:bb:f2:98:a9:a1:
                    9b:67:34:17:18:62:9a:63:86:35:c5:26:02:49:43:
                    94:0a:cb:47:45:c5:c4:6c:37:78:57:03:ef:ce:10:
                    12:1e:2a:86:b4:8d:d7:e7:48:e7:41:8d:13:6b:f0:
                    74:69:4c:0b:45:10:0b:2e:b3:98:34:f9:a3:62:09:
                    e8:7f:87:40:e4:d1:c0:44:de:98:c0:43:03:cf:c4:
                    82:7b:a3:c5:53:78:ee:54:a5:fd:4a:3a:1f:3d:fb:
                    80:e4:aa:b7:78:23:a5:a5:4a:01:53:b7:3b:6a:27:
                    d3:6e:ce:50:ce:c2:2e:14:21:f9:e0:32:e7:ee:67:
                    3a:71:7b:a9:14:08:51:22:b8:e1:8d:58:d8:7f:a9:
                    1d:b7:fa:a8:d5:22:ce:18:a7:15:5f:f2:09:d9:3f:
                    52:60:34:0c:1b:ba:2b:5c:cb:83:02:1b:75:47:32:
                    63:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:54:AC:FB:24:CA:0E:8B:27:F9:50:D5:03:CD:D1:9F:31:21:8D:69
            X509v3 Authority Key Identifier:
                keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:3b:6f:16:4a:a2:fc:69:a5:95:bf:07:10:e3:b0:de:cc:79:
         4d:64:96:23:88:bb:86:2d:0b:8d:f7:43:94:fb:3c:88:76:a1:
         92:67:19:4e:ce:e0:ee:1b:ca:a0:5f:72:17:f5:ae:65:f2:a7:
         91:ba:45:fa:49:b1:9c:06:86:7c:5e:af:f5:df:23:15:d8:23:
         d8:f6:ed:24:b9:bf:9d:a8:3f:4f:c9:21:2a:9a:97:76:a0:10:
         22:1b:1b:94:d5:22:ed:25:54:06:31:19:51:53:6c:b2:3e:f8:
         c3:8f:f6:ec:e2:44:d2:81:9e:57:a3:17:3e:97:e3:ed:3d:e9:
         0e:cc:9d:f9:16:4d:02:5d:2c:c5:65:89:98:0a:29:f0:94:53:
         b9:c4:4c:8b:39:67:9e:90:8d:fe:d4:c9:06:72:04:8a:56:f8:
         38:3a:ab:7d:07:e3:89:8d:4d:9e:ac:3a:cd:9a:b4:e1:aa:a5:
         47:d8:9e:a9:2b:0d:55:f7:08:ae:16:e5:44:7b:31:1d:d3:1c:
         a4:c3:ba:0d:a0:35:c0:20:c4:de:e6:0e:3e:f8:d7:f3:c2:3d:
         68:d1:06:f1:45:1b:9f:86:da:66:e3:dc:5a:86:74:3b:0e:31:
         a9:a9:c1:f6:88:cc:f6:0d:6f:60:e4:3a:ca:9d:3d:75:ac:01:
         85:3e:00:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNRmU5Lp41J3sFXYhrvqm+7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxODE0YTI4YThjMWViZTBhZGMzM2ExNTE5Yjk4ODNlMzA4
NGJiNTkwHhcNMjQxMTIyMDIwMDIxWhcNMjQxMTIzMDIwMDIxWjAzMTEwLwYDVQQD
EyhkMjU0YWNmYjI0Y2EwZThiMjdmOTUwZDUwM2NkZDE5ZjMxMjE4ZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+Qs680FbuL4Jeqm3Ybe0m4Z9ckS
d4yiz2bLoI8dTzw+fWg781n35igPNlQ9dUM+Rjd+bY+KHggpHDxs9vrAQGd1k8dn
wp7GUUUY0KQqmdqaS/Bhu/KYqaGbZzQXGGKaY4Y1xSYCSUOUCstHRcXEbDd4VwPv
zhASHiqGtI3X50jnQY0Ta/B0aUwLRRALLrOYNPmjYgnof4dA5NHARN6YwEMDz8SC
e6PFU3juVKX9SjofPfuA5Kq3eCOlpUoBU7c7aifTbs5QzsIuFCH54DLn7mc6cXup
FAhRIrjhjVjYf6kdt/qo1SLOGKcVX/IJ2T9SYDQMG7orXMuDAht1RzJjNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJUrPskyg6LJ/lQ1QPN0Z8xIY1pMB8GA1UdIwQY
MBaAFLGBSiiowevgrcM6FRm5iD4whLtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGIt
ODFkYWJjODFjMDVjLzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8zZmJmZjYtNzNlZS00ODEyLThlNGItODFkYWJjODFjMDVj
LzEvc1lGS0tLakI2LUN0d3pvVkdibUlQakNFdTFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTtvFkqi
/Gmllb8HEOOw3sx5TWSWI4i7hi0LjfdDlPs8iHahkmcZTs7g7hvKoF9yF/WuZfKn
kbpF+kmxnAaGfF6v9d8jFdgj2PbtJLm/nag/T8khKpqXdqAQIhsblNUi7SVUBjEZ
UVNssj74w4/27OJE0oGeV6MXPpfj7T3pDsyd+RZNAl0sxWWJmAop8JRTucRMizln
npCN/tTJBnIEilb4ODqrfQfjiY1Nnqw6zZq04aqlR9ieqSsNVfcIrhblRHsxHdMc
pMO6DaA1wCDE3uYOPvjX88I9aNEG8UUbn4baZuPcWoZ0Ow4xqanB9ojM9g1vYOQ6
yp09dawBhT4AiQ==
-----END CERTIFICATE-----