Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File:                     1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier:          5y15k5AFqu+1xnXUwzGeKDwEsCwNyeyJpq13HaSY7f4=
Subject key identifier:   11:FD:EA:95:84:C1:DB:0A:B0:4F:A8:0D:FB:4E:AB:42:55:FB:F8:51
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer:       /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial:       01935A663EF3B66AAAD957783B14F0CDA127
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 19:01:10 +0000
Manifest this update:     Sat 23 Nov 2024 19:01:10 +0000
Manifest next update:     Sun 24 Nov 2024 19:01:10 +0000
Files and hashes:         1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: CAg7gPWrIrB0ItO9+kJWPCoYG99mvGReR09i9xDl7mM=)
                          2: sF2mnJ-iH6aLVcQyfbC66Qtl_bE.roa (hash: zTijVMIeWz+AH0ZOWwEXPHzNtyHl9Gz8fbYEt0t2aIk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:66:3e:f3:b6:6a:aa:d9:57:78:3b:14:f0:cd:a1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
        Validity
            Not Before: Nov 23 19:01:10 2024 GMT
            Not After : Nov 24 19:01:10 2024 GMT
        Subject: CN=11fdea9584c1db0ab04fa80dfb4eab4255fbf851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f1:c6:f8:64:7f:24:2b:45:bb:a6:64:5d:ef:
                    79:72:47:93:19:bc:cb:a9:51:13:d6:6d:71:cf:bc:
                    66:a9:30:f0:ef:6b:7c:eb:e2:0e:4f:60:f5:60:c1:
                    c2:df:b5:1e:d2:3f:16:32:d6:47:2f:83:29:3e:73:
                    f1:0f:6a:f0:03:a6:b6:99:43:ad:72:e9:18:e5:2e:
                    c5:20:0c:1d:7d:88:71:50:13:06:1c:b9:f0:74:3f:
                    43:ed:e6:fe:4e:51:79:3e:fc:60:46:45:1e:22:0f:
                    7b:bd:ec:7a:77:52:e5:91:99:48:90:e6:b7:bc:4b:
                    46:38:58:c1:64:f9:61:25:62:4d:7e:6c:95:f7:e6:
                    60:47:43:09:00:f3:11:d8:67:b8:1c:85:3b:15:d9:
                    87:ae:0a:3e:42:ca:ed:39:96:b0:4e:72:06:31:9e:
                    6e:e5:d9:fc:4c:9b:48:9e:f3:bf:95:4c:a7:6a:bc:
                    6c:55:a1:6e:fd:3e:01:83:e6:13:0f:14:f2:c0:e3:
                    fa:0d:67:94:77:c1:14:e7:0f:8a:88:61:86:91:06:
                    5c:53:36:98:0b:6c:8e:58:51:e5:34:ed:1d:77:02:
                    39:4d:c4:19:73:33:f1:44:43:42:a4:48:1c:ac:41:
                    93:00:22:da:26:42:84:79:b0:fa:0c:71:71:49:02:
                    4c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FD:EA:95:84:C1:DB:0A:B0:4F:A8:0D:FB:4E:AB:42:55:FB:F8:51
            X509v3 Authority Key Identifier:
                keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:99:2f:19:ca:fc:a4:31:0e:49:53:84:48:0e:2d:41:1b:1a:
         36:43:32:cc:59:dc:cb:e5:fd:71:e6:16:b7:ce:c6:48:99:5a:
         2d:f7:44:01:cb:49:15:a0:1c:87:85:e1:9b:40:d0:de:9d:42:
         45:31:bf:3c:d3:53:fb:11:ce:6d:e7:54:01:fa:5c:f8:d9:1a:
         a9:db:04:62:84:00:08:63:8a:db:c2:2f:2a:c9:8f:88:d5:19:
         1a:4e:b9:c2:61:02:69:a8:62:8f:84:6e:51:e9:76:ac:1a:bb:
         55:65:51:ba:64:c1:cc:d2:51:fa:fb:2b:ea:f5:b5:bd:ac:ef:
         1f:7a:b7:2e:20:4c:55:d9:03:2d:df:34:99:10:c0:50:39:e2:
         41:ea:9b:9b:c7:d9:cf:c5:ee:cd:2b:d3:23:34:b0:20:dd:fe:
         55:6c:e4:43:7e:d4:72:a8:de:1f:9a:c4:49:8e:21:ba:92:cf:
         bc:2f:df:a9:31:a7:11:f0:c4:ac:26:5b:25:e3:02:6c:1b:c9:
         ee:46:22:4d:17:fb:33:2b:58:47:c5:b1:3b:8d:d7:78:7f:06:
         81:7d:78:5b:b3:20:a4:72:9a:b2:ef:e6:b8:04:60:9c:eb:3d:
         1c:b0:92:2a:ac:3e:29:66:e1:91:fa:7a:96:d1:52:1a:7d:53:
         d0:f0:77:7e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNaZj7ztmqq2Vd4OxTwzaEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OWFiZTQ1ZjIxZjEyZTRiODAyZjMwOTQ0NGMyNDc1OTAw
MGViY2YwHhcNMjQxMTIzMTkwMTEwWhcNMjQxMTI0MTkwMTEwWjAzMTEwLwYDVQQD
EygxMWZkZWE5NTg0YzFkYjBhYjA0ZmE4MGRmYjRlYWI0MjU1ZmJmODUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPHG+GR/JCtFu6ZkXe95ckeTGbzL
qVET1m1xz7xmqTDw72t86+IOT2D1YMHC37Ue0j8WMtZHL4MpPnPxD2rwA6a2mUOt
cukY5S7FIAwdfYhxUBMGHLnwdD9D7eb+TlF5PvxgRkUeIg97vex6d1LlkZlIkOa3
vEtGOFjBZPlhJWJNfmyV9+ZgR0MJAPMR2Ge4HIU7FdmHrgo+QsrtOZawTnIGMZ5u
5dn8TJtInvO/lUynarxsVaFu/T4Bg+YTDxTywOP6DWeUd8EU5w+KiGGGkQZcUzaY
C2yOWFHlNO0ddwI5TcQZczPxRENCpEgcrEGTACLaJkKEebD6DHFxSQJM5QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBH96pWEwdsKsE+oDftOq0JV+/hRMB8GA1UdIwQY
MBaAFPmavkXyHxLkuALzCURMJHWQAOvPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1acS1SZklmRXVTNEF2TUpSRXdrZFpBQTY4OC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjcvZDNlM2Q3LTAzNTctNDg3ZS05ZmVk
LWE4ZThiODkzMTU1Mi8xLzEtWnEtUmZJZkV1UzRBdk1KUkV3a2RaQUE2ODgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y3L2QzZTNkNy0wMzU3LTQ4N2UtOWZlZC1hOGU4Yjg5MzE1
NTIvMS8xLVpxLVJmSWZFdVM0QXZNSlJFd2tkWkFBNjg4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5kv
Gcr8pDEOSVOESA4tQRsaNkMyzFncy+X9ceYWt87GSJlaLfdEActJFaAch4Xhm0DQ
3p1CRTG/PNNT+xHObedUAfpc+NkaqdsEYoQACGOK28IvKsmPiNUZGk65wmECaahi
j4RuUel2rBq7VWVRumTBzNJR+vsr6vW1vazvH3q3LiBMVdkDLd80mRDAUDniQeqb
m8fZz8XuzSvTIzSwIN3+VWzkQ37UcqjeH5rESY4hupLPvC/fqTGnEfDErCZbJeMC
bBvJ7kYiTRf7MytYR8WxO43XeH8GgX14W7MgpHKasu/muARgnOs9HLCSKqw+KWbh
kfp6ltFSGn1T0PB3fg==
-----END CERTIFICATE-----