Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
File:                     Elriz9MVwTEZNIRmWsrafAExY-w.mft (raw, json)
Hash identifier:          o5n1C/uuRLr0qm2kvMx6NinocTSyWAyDzJNT0R8pih0=
Subject key identifier:   7E:6D:E4:8F:36:18:39:54:A8:D5:F4:1C:E7:33:55:46:D9:E9:3A:94
Authority key identifier: 12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC
Certificate issuer:       /CN=125ae2cfd315c131193484665acada7c013163ec
Certificate serial:       01935A66E9ED1B08342DF9B8B5C68C502C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
Manifest number:          137B
Signing time:             Sat 23 Nov 2024 19:01:54 +0000
Manifest this update:     Sat 23 Nov 2024 19:01:54 +0000
Manifest next update:     Sun 24 Nov 2024 19:01:54 +0000
Files and hashes:         1: Elriz9MVwTEZNIRmWsrafAExY-w.crl (hash: Gxzfxaliv/RbmD2SkjIwVkM1NOEfztQpXdaEHWQSTSg=)
                          2: H9MiAvPpx52ZjvC0LlXQigS5I9c.roa (hash: o0OeVSa+0CyaJXInREQ6qcQMkvzB8CJ0iX+37ZwEzcA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:66:e9:ed:1b:08:34:2d:f9:b8:b5:c6:8c:50:2c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125ae2cfd315c131193484665acada7c013163ec
        Validity
            Not Before: Nov 23 19:01:54 2024 GMT
            Not After : Nov 24 19:01:54 2024 GMT
        Subject: CN=7e6de48f36183954a8d5f41ce7335546d9e93a94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a3:43:44:62:4e:65:c0:bf:51:5e:aa:c1:69:
                    4d:8b:4a:dd:b0:e4:37:84:39:e1:10:55:8c:26:2d:
                    3a:57:3a:b4:33:e8:d7:9c:c4:22:f9:59:ec:8c:9e:
                    62:2e:15:77:4c:34:fa:42:8d:13:d5:dc:a6:c0:51:
                    d8:dd:dc:a9:77:06:0b:1a:f4:3e:c4:0f:54:79:b4:
                    1e:60:c7:ed:da:9e:97:d3:ed:ec:5e:04:ec:ea:39:
                    b8:dd:ca:de:62:2b:a4:a0:7b:e7:f3:7c:2e:e0:e0:
                    c6:c5:b9:c8:e1:d6:76:54:14:8d:3d:27:60:7c:10:
                    03:3d:82:07:76:ae:bb:ed:a5:22:f2:35:83:01:09:
                    a8:64:60:aa:23:34:4f:4a:34:e7:5a:b6:0a:d3:52:
                    c6:81:c9:81:7a:73:35:ed:21:31:58:41:20:76:17:
                    9f:ab:de:d3:37:79:4e:04:58:cc:c1:59:dd:47:83:
                    53:c5:bd:d3:b5:a2:7a:33:7a:5c:10:39:0e:b3:32:
                    8f:4a:6d:67:7e:14:78:5a:4f:6d:48:ae:87:fc:e4:
                    9f:6f:2b:45:71:41:fe:74:c9:3b:63:c6:60:5c:be:
                    9c:ed:b4:5d:a1:de:23:16:bc:08:bc:88:5c:3a:88:
                    62:5d:4c:42:c7:05:5d:f0:4d:4a:ff:d0:da:87:8e:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:6D:E4:8F:36:18:39:54:A8:D5:F4:1C:E7:33:55:46:D9:E9:3A:94
            X509v3 Authority Key Identifier:
                keyid:12:5A:E2:CF:D3:15:C1:31:19:34:84:66:5A:CA:DA:7C:01:31:63:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Elriz9MVwTEZNIRmWsrafAExY-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/037adf-b9c2-4ad1-960a-4d403369d2a2/1/Elriz9MVwTEZNIRmWsrafAExY-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:fd:28:22:60:d5:8d:1b:8c:98:4c:0d:cf:ce:0e:36:76:c5:
         95:86:9d:b9:00:aa:ea:57:f0:a3:85:06:78:23:e9:1f:4a:5d:
         e4:08:c7:a1:4f:19:1e:c2:c7:ec:1e:26:63:ff:c5:fe:bc:0b:
         8d:ae:41:37:01:38:f1:63:4d:1f:3d:56:00:c2:d7:0e:d7:ee:
         f6:05:53:e2:44:f1:bf:10:6d:ce:64:3d:a4:c1:92:bb:2e:35:
         ea:e2:4f:5d:d8:ea:29:ae:18:b0:8f:e3:03:03:a3:6e:b2:e4:
         8d:6e:71:33:12:ad:bb:57:08:e6:5e:c9:96:86:05:ca:70:9f:
         83:ae:80:ad:d2:ef:04:00:bb:3f:1b:0d:f6:fa:c7:7c:3e:15:
         ea:53:3e:b1:77:79:7e:c4:7c:6b:99:6b:fc:22:34:18:69:49:
         b1:08:3c:12:bf:7e:c5:98:e9:1e:6c:64:3c:ae:70:04:d6:c8:
         13:90:64:b6:d7:65:b2:d5:5a:35:aa:19:e1:db:60:6d:2f:26:
         4c:7b:05:c4:fa:d0:c3:9d:27:8b:24:c4:eb:fb:69:d6:cf:bc:
         5c:d5:4c:90:01:03:21:1d:6a:f7:89:b2:53:51:08:c5:bb:c9:
         67:68:de:f7:a4:99:43:05:9c:74:d6:af:04:6b:00:bc:40:d6:
         97:aa:de:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNaZuntGwg0Lfm4tcaMUCxEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNWFlMmNmZDMxNWMxMzExOTM0ODQ2NjVhY2FkYTdjMDEz
MTYzZWMwHhcNMjQxMTIzMTkwMTU0WhcNMjQxMTI0MTkwMTU0WjAzMTEwLwYDVQQD
Eyg3ZTZkZTQ4ZjM2MTgzOTU0YThkNWY0MWNlNzMzNTU0NmQ5ZTkzYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaNDRGJOZcC/UV6qwWlNi0rdsOQ3
hDnhEFWMJi06Vzq0M+jXnMQi+VnsjJ5iLhV3TDT6Qo0T1dymwFHY3dypdwYLGvQ+
xA9UebQeYMft2p6X0+3sXgTs6jm43creYiukoHvn83wu4ODGxbnI4dZ2VBSNPSdg
fBADPYIHdq677aUi8jWDAQmoZGCqIzRPSjTnWrYK01LGgcmBenM17SExWEEgdhef
q97TN3lOBFjMwVndR4NTxb3TtaJ6M3pcEDkOszKPSm1nfhR4Wk9tSK6H/OSfbytF
cUH+dMk7Y8ZgXL6c7bRdod4jFrwIvIhcOohiXUxCxwVd8E1K/9Dah44qIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH5t5I82GDlUqNX0HOczVUbZ6TqUMB8GA1UdIwQY
MBaAFBJa4s/TFcExGTSEZlrK2nwBMWPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEt
NGQ0MDMzNjlkMmEyLzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8wMzdhZGYtYjljMi00YWQxLTk2MGEtNGQ0MDMzNjlkMmEy
LzEvRWxyaXo5TVZ3VEVaTklSbVdzcmFmQUV4WS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/0oImDV
jRuMmEwNz84ONnbFlYaduQCq6lfwo4UGeCPpH0pd5AjHoU8ZHsLH7B4mY//F/rwL
ja5BNwE48WNNHz1WAMLXDtfu9gVT4kTxvxBtzmQ9pMGSuy416uJPXdjqKa4YsI/j
AwOjbrLkjW5xMxKtu1cI5l7JloYFynCfg66ArdLvBAC7PxsN9vrHfD4V6lM+sXd5
fsR8a5lr/CI0GGlJsQg8Er9+xZjpHmxkPK5wBNbIE5BkttdlstVaNaoZ4dtgbS8m
THsFxPrQw50niyTE6/tp1s+8XNVMkAEDIR1q94myU1EIxbvJZ2je96SZQwWcdNav
BGsAvEDWl6relQ==
-----END CERTIFICATE-----