Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
File:                     Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft (raw, json)
Hash identifier:          bJTBNYF0RpKe5Gx7j/jOTIIPn1sIQuFdZtexC2GJugc=
Subject key identifier:   75:94:84:0E:97:86:8A:B8:4D:04:C4:24:9C:73:F0:CE:A7:00:12:29
Authority key identifier: 63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0
Certificate issuer:       /CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
Certificate serial:       01936B2280B32A6D7BFD2A6C523A8EBFB2F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
Manifest number:          137A
Signing time:             Wed 27 Nov 2024 01:00:43 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:43 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:43 +0000
Files and hashes:         1: QBOzbcmhgix3Y9qdGoRrRkaT240.roa (hash: x/ZH1IQtZ3qGQeu7P5P99pSYnaFZbJjIigAlZX+2o+0=)
                          2: Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl (hash: x1rJozChWqNWRF3BMfaPkv2NQNy+3V7rUpzSF203gl4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:80:b3:2a:6d:7b:fd:2a:6c:52:3a:8e:bf:b2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e2caa7e18af2dfbdb3a6269da2e06dedcb6cf0
        Validity
            Not Before: Nov 27 01:00:43 2024 GMT
            Not After : Nov 28 01:00:43 2024 GMT
        Subject: CN=7594840e97868ab84d04c4249c73f0cea7001229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1d:df:0a:d2:5b:37:cd:3b:ed:72:2d:4a:0c:
                    ae:78:73:dd:12:35:a9:8e:6d:52:eb:86:f3:86:c6:
                    5d:03:db:9f:23:55:11:fe:cc:63:ba:7c:9e:8f:f5:
                    ca:52:4a:a9:ae:16:0f:e8:31:02:92:7d:61:13:67:
                    8f:1c:21:e9:93:b1:30:fa:32:b9:8b:3c:58:46:86:
                    4d:4e:e0:aa:02:39:95:74:d8:b9:99:0e:1a:1b:a7:
                    94:ff:50:1a:84:2e:f9:2f:be:29:ea:01:a5:11:9d:
                    3a:1c:58:51:4e:31:cc:41:b2:e6:ea:ba:f0:21:01:
                    10:74:ee:fb:07:e3:93:af:b0:f7:be:e4:7b:26:52:
                    c9:b8:09:c9:64:0c:9b:ec:86:17:40:f7:d3:b5:6e:
                    c9:4f:fa:0c:f7:d1:74:a3:3f:23:0c:60:97:2b:fa:
                    ac:e2:d0:82:7f:1a:ad:f5:b7:43:7b:4a:15:01:19:
                    a9:5f:e0:42:10:0b:86:93:57:5c:a5:4a:b5:73:c5:
                    d5:28:5d:43:5d:ea:26:89:60:e9:1d:dc:1b:71:cb:
                    68:b5:31:2d:b6:44:e1:21:4d:e8:c6:ff:ad:c1:1d:
                    a9:84:3e:e8:34:2e:bf:bb:35:b4:68:d5:19:d4:d6:
                    c8:a2:ec:3f:80:39:08:e8:1e:5e:30:d7:46:f0:de:
                    30:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:94:84:0E:97:86:8A:B8:4D:04:C4:24:9C:73:F0:CE:A7:00:12:29
            X509v3 Authority Key Identifier:
                keyid:63:E2:CA:A7:E1:8A:F2:DF:BD:B3:A6:26:9D:A2:E0:6D:ED:CB:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/099705-4a3b-4a68-b6bd-538af1017509/1/Y-LKp-GK8t-9s6YmnaLgbe3LbPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:43:bf:71:7f:33:ac:b0:a6:4b:bc:ed:70:cd:32:2f:9a:a7:
         ea:5c:8f:f6:1c:f8:cc:b3:84:67:99:a3:53:3a:6f:1a:c6:e1:
         94:c4:95:6f:9b:8c:2d:c3:ab:39:d6:91:e5:fb:88:6c:7b:60:
         1d:25:4e:2c:53:e4:5e:84:f9:97:ce:d7:7b:c4:6e:55:8f:df:
         64:cc:8e:90:5b:ea:31:fa:ec:c7:e8:39:b7:ca:8f:45:eb:cc:
         4e:5b:8f:ec:ec:f6:89:59:d2:f7:e1:de:be:7d:ba:76:82:c4:
         8e:d6:38:52:99:68:e3:e9:2d:09:40:a4:cd:65:c0:a5:c1:42:
         90:8f:b7:84:28:14:38:29:08:d5:1f:2a:b7:1a:ea:e8:72:1e:
         13:ef:34:3f:11:72:f3:a2:8a:2b:da:70:29:58:10:f4:d4:a4:
         e4:6d:6c:7b:b2:e3:1f:0f:af:bb:42:f5:c1:2d:20:8e:c3:bd:
         b1:a2:24:d4:78:b9:a5:a5:cb:25:0b:94:ca:db:29:96:c5:0b:
         9f:29:81:aa:0c:19:1a:4e:ff:a7:a6:4d:37:88:22:b3:ab:5d:
         1e:a4:c3:c7:19:4c:e1:33:5f:42:59:ce:e0:45:2d:fb:60:cf:
         4b:0f:38:3c:46:25:47:2b:e6:66:e5:8c:96:79:eb:c2:65:c2:
         cc:3f:c3:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNrIoCzKm17/SpsUjqOv7L3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTJjYWE3ZTE4YWYyZGZiZGIzYTYyNjlkYTJlMDZkZWRj
YjZjZjAwHhcNMjQxMTI3MDEwMDQzWhcNMjQxMTI4MDEwMDQzWjAzMTEwLwYDVQQD
Eyg3NTk0ODQwZTk3ODY4YWI4NGQwNGM0MjQ5YzczZjBjZWE3MDAxMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R3fCtJbN8077XItSgyueHPdEjWp
jm1S64bzhsZdA9ufI1UR/sxjunyej/XKUkqprhYP6DECkn1hE2ePHCHpk7Ew+jK5
izxYRoZNTuCqAjmVdNi5mQ4aG6eU/1AahC75L74p6gGlEZ06HFhRTjHMQbLm6rrw
IQEQdO77B+OTr7D3vuR7JlLJuAnJZAyb7IYXQPfTtW7JT/oM99F0oz8jDGCXK/qs
4tCCfxqt9bdDe0oVARmpX+BCEAuGk1dcpUq1c8XVKF1DXeomiWDpHdwbcctotTEt
tkThIU3oxv+twR2phD7oNC6/uzW0aNUZ1NbIouw/gDkI6B5eMNdG8N4wqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWUhA6Xhoq4TQTEJJxz8M6nABIpMB8GA1UdIwQY
MBaAFGPiyqfhivLfvbOmJp2i4G3ty2zwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQt
NTM4YWYxMDE3NTA5LzEvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wOTk3MDUtNGEzYi00YTY4LWI2YmQtNTM4YWYxMDE3NTA5
LzEvWS1MS3AtR0s4dC05czZZbW5hTGdiZTNMYlBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEO/cX8z
rLCmS7ztcM0yL5qn6lyP9hz4zLOEZ5mjUzpvGsbhlMSVb5uMLcOrOdaR5fuIbHtg
HSVOLFPkXoT5l87Xe8RuVY/fZMyOkFvqMfrsx+g5t8qPRevMTluP7Oz2iVnS9+He
vn26doLEjtY4Uplo4+ktCUCkzWXApcFCkI+3hCgUOCkI1R8qtxrq6HIeE+80PxFy
86KKK9pwKVgQ9NSk5G1se7LjHw+vu0L1wS0gjsO9saIk1Hi5paXLJQuUytsplsUL
nymBqgwZGk7/p6ZNN4gis6tdHqTDxxlM4TNfQlnO4EUt+2DPSw84PEYlRyvmZuWM
lnnrwmXCzD/DsA==
-----END CERTIFICATE-----