Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
File:                     sQw889xTylScA-T19G2RzpC44HA.mft (raw, json)
Hash identifier:          aUjDzTSntYXrwc5ygRWPitv9M/mJfX9vxbOpuaf6AAc=
Subject key identifier:   45:CA:8F:5B:0A:00:5D:74:B7:10:BA:C9:8D:D6:BB:C0:38:95:DC:61
Authority key identifier: B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70
Certificate issuer:       /CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
Certificate serial:       018F87497A9869D2DA72A25897F3521EC15A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
Manifest number:          1186
Signing time:             Fri 17 May 2024 16:01:30 +0000
Manifest this update:     Fri 17 May 2024 16:01:30 +0000
Manifest next update:     Sat 18 May 2024 16:01:30 +0000
Files and hashes:         1: 3BOZNJ-2kC-d8EzLy5nX9x-ScRQ.roa (hash: a+Oh5ahOCNKAdA/5GuQ66pz5RpbQcqtqPfHB2+576A8=)
                          2: 9aNUmEK1IgzXGz6LjR_S1BBD9cw.roa (hash: vhkPXB+B8ThjGV27Ak3en0JwWEnvVkP3ibBIICc0FpU=)
                          3: VALHxZOTsQi_N5aOfwC1kzLEXc8.roa (hash: wXkPaxjjS4SDlRJBcCFsbOam5GaFPjHsjUtvRJ0/Gvw=)
                          4: qOm-eMcbGZJGYWxHhOEV14qAGI4.roa (hash: oMXbviUR5nPHM66byWv1zeqe5rChaKihwHw740K7kDs=)
                          5: sQw889xTylScA-T19G2RzpC44HA.crl (hash: 4b7wK6ySkrmrjPo2WY6KfXa62p4ENoYf2KL0zeokJUc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:7a:98:69:d2:da:72:a2:58:97:f3:52:1e:c1:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b10c3cf3dc53ca549c03e4f5f46d91ce90b8e070
        Validity
            Not Before: May 17 16:01:30 2024 GMT
            Not After : May 18 16:01:30 2024 GMT
        Subject: CN=45ca8f5b0a005d74b710bac98dd6bbc03895dc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e5:d0:74:fa:28:5b:10:77:81:6f:4c:47:1c:
                    fd:38:e4:d0:21:07:8a:20:1b:c1:11:f2:61:56:18:
                    47:75:63:e9:37:ab:3e:1e:12:26:d0:10:40:a0:26:
                    2c:98:f0:83:c2:6d:a3:ee:7e:d1:f8:bf:04:b7:e4:
                    be:e9:ba:a0:7b:e6:63:98:91:72:05:e5:b1:75:5a:
                    cf:1e:1a:df:2b:38:7b:45:0b:6e:d0:1b:2f:04:39:
                    96:d9:2e:99:59:39:33:d1:04:25:b5:21:a7:3e:cb:
                    3a:07:c8:84:5d:fb:ae:4e:2a:2d:f4:7c:51:d5:ec:
                    d5:e1:c9:81:36:2f:75:7b:e5:67:46:2b:93:76:05:
                    93:2e:0b:bd:33:91:cb:2e:c0:6a:b1:9f:ad:68:53:
                    fb:ef:69:96:0e:73:8c:7d:c0:b4:0d:01:0d:11:1b:
                    84:34:13:1b:72:56:26:d9:64:eb:57:e7:cd:4e:5e:
                    97:fb:55:a1:06:67:41:11:d2:27:04:9e:80:56:9d:
                    64:ca:a3:42:1b:2b:0e:94:da:47:2e:3a:53:0b:0f:
                    df:87:b1:94:47:56:cf:fc:5e:20:1a:e4:4e:36:eb:
                    9b:f1:bd:62:c2:c2:26:de:41:4d:a7:a9:d6:2a:10:
                    c6:33:e2:d6:1f:ec:2e:ce:a7:54:7e:9c:7a:fd:fa:
                    3a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CA:8F:5B:0A:00:5D:74:B7:10:BA:C9:8D:D6:BB:C0:38:95:DC:61
            X509v3 Authority Key Identifier:
                keyid:B1:0C:3C:F3:DC:53:CA:54:9C:03:E4:F5:F4:6D:91:CE:90:B8:E0:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQw889xTylScA-T19G2RzpC44HA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/25cdb4-e508-4b37-81bc-36f82bd379bd/1/sQw889xTylScA-T19G2RzpC44HA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:37:68:b8:a2:4f:94:ef:28:35:6f:11:5f:45:4d:20:8f:c4:
         ec:a2:77:e6:fc:81:d4:f0:53:4c:bb:65:49:8b:2e:8b:50:76:
         fc:d3:0b:05:2f:7d:12:07:2b:28:38:b9:a0:17:45:37:1d:c1:
         91:12:3f:f2:14:92:14:54:86:f6:cf:13:49:97:e8:1a:b8:9c:
         ae:fd:6b:74:dd:53:9f:ac:62:f1:47:c1:04:4f:c3:a3:a3:fb:
         37:dd:4e:4f:9c:db:43:a1:dd:45:ec:05:7b:dc:e5:0b:51:b9:
         76:54:7f:f6:0a:3e:6f:2b:a9:cf:8b:41:fc:c3:58:8f:6b:75:
         41:d2:a6:5e:4b:64:a1:9d:48:b5:69:05:f0:b0:21:91:aa:c6:
         d0:77:fb:c7:c6:ef:cc:8a:40:8e:74:42:7e:b1:99:41:c7:88:
         70:33:2b:25:71:8c:51:45:98:54:b7:4d:b7:8b:7f:99:eb:f2:
         80:99:31:eb:da:e3:be:c9:23:48:d2:0f:73:b8:39:00:3b:c8:
         dc:a3:80:cb:dc:e1:eb:2e:21:af:ef:93:8a:97:4f:3e:ad:7d:
         15:6f:d8:32:cf:2e:b0:0d:c9:d1:20:78:2a:2b:93:d0:e3:99:
         9b:5e:9d:92:23:f7:f4:a5:1c:4f:6f:41:61:f7:df:a5:5f:ee:
         24:1c:3b:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSXqYadLacqJYl/NSHsFaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMGMzY2YzZGM1M2NhNTQ5YzAzZTRmNWY0NmQ5MWNlOTBi
OGUwNzAwHhcNMjQwNTE3MTYwMTMwWhcNMjQwNTE4MTYwMTMwWjAzMTEwLwYDVQQD
Eyg0NWNhOGY1YjBhMDA1ZDc0YjcxMGJhYzk4ZGQ2YmJjMDM4OTVkYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uXQdPooWxB3gW9MRxz9OOTQIQeK
IBvBEfJhVhhHdWPpN6s+HhIm0BBAoCYsmPCDwm2j7n7R+L8Et+S+6bqge+ZjmJFy
BeWxdVrPHhrfKzh7RQtu0BsvBDmW2S6ZWTkz0QQltSGnPss6B8iEXfuuTiot9HxR
1ezV4cmBNi91e+VnRiuTdgWTLgu9M5HLLsBqsZ+taFP772mWDnOMfcC0DQENERuE
NBMbclYm2WTrV+fNTl6X+1WhBmdBEdInBJ6AVp1kyqNCGysOlNpHLjpTCw/fh7GU
R1bP/F4gGuRONuub8b1iwsIm3kFNp6nWKhDGM+LWH+wuzqdUfpx6/fo6jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXKj1sKAF10txC6yY3Wu8A4ldxhMB8GA1UdIwQY
MBaAFLEMPPPcU8pUnAPk9fRtkc6QuOBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMt
MzZmODJiZDM3OWJkLzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yNWNkYjQtZTUwOC00YjM3LTgxYmMtMzZmODJiZDM3OWJk
LzEvc1F3ODg5eFR5bFNjQS1UMTlHMlJ6cEM0NEhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjdouKJP
lO8oNW8RX0VNII/E7KJ35vyB1PBTTLtlSYsui1B2/NMLBS99EgcrKDi5oBdFNx3B
kRI/8hSSFFSG9s8TSZfoGricrv1rdN1Tn6xi8UfBBE/Do6P7N91OT5zbQ6HdRewF
e9zlC1G5dlR/9go+byupz4tB/MNYj2t1QdKmXktkoZ1ItWkF8LAhkarG0Hf7x8bv
zIpAjnRCfrGZQceIcDMrJXGMUUWYVLdNt4t/mevygJkx69rjvskjSNIPc7g5ADvI
3KOAy9zh6y4hr++TipdPPq19FW/YMs8usA3J0SB4KiuT0OOZm16dkiP39KUcT29B
YfffpV/uJBw7/A==
-----END CERTIFICATE-----