Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
File:                     ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft (raw, json)
Hash identifier:          tY6v86TmPUiIqbtvMWQ/WiVpuA9q06RmpuYSANLoejw=
Subject key identifier:   4D:B1:C5:C1:77:F0:9D:35:00:98:24:AD:14:D8:87:B2:1D:45:0E:4C
Authority key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
Certificate issuer:       /CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Certificate serial:       0194BBCE7C67F88BCCE72DBFA7753BE87E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
Manifest number:          03C4
Signing time:             Fri 31 Jan 2025 10:00:59 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:59 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:59 +0000
Files and hashes:         1: ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl (hash: yHpg9UrcSoMUtyS1D5Yr4btNP2XbdjspzqS02WWTXOM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 01 Feb 2025 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:7c:67:f8:8b:cc:e7:2d:bf:a7:75:3b:e8:7e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
        Validity
            Not Before: Jan 31 10:00:59 2025 GMT
            Not After : Feb  1 10:00:59 2025 GMT
        Subject: CN=4db1c5c177f09d35009824ad14d887b21d450e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:61:87:f0:78:a7:a1:14:3c:8b:8f:29:ba:
                    51:88:42:39:26:40:52:4b:e4:e9:a9:a1:5c:5a:f1:
                    53:83:f0:dd:11:80:d5:d6:1e:28:d6:90:56:8f:95:
                    43:f0:21:b5:56:58:e7:f2:fe:bd:18:ee:08:ff:66:
                    d8:db:f9:2e:9c:bf:74:76:e8:0f:14:c1:86:7e:06:
                    60:a1:91:e6:65:a0:79:ae:69:cb:fc:bd:d1:a0:0e:
                    72:e6:bb:9d:25:a6:9b:d2:fd:7d:cf:f0:3b:de:3a:
                    12:9a:fa:a9:2c:31:9d:bc:a8:ee:cd:2a:f1:a6:db:
                    08:4c:32:e4:6d:7f:56:15:77:c2:b7:92:60:a8:31:
                    93:4c:20:c9:3e:f6:0a:8c:af:03:f9:e5:49:e6:6e:
                    56:d3:93:03:a0:96:7b:de:a6:bb:1c:60:63:ca:ed:
                    98:ad:6b:08:37:c8:0a:72:c9:51:a2:5f:21:7d:e1:
                    d3:95:ba:7b:28:49:7f:5d:03:49:85:2d:c9:38:3c:
                    80:0e:57:86:fe:22:94:73:3a:f8:8c:29:3a:e4:b1:
                    eb:0a:64:6b:1c:9a:33:dd:46:f8:14:dd:7e:80:0e:
                    37:f0:66:8a:27:7b:97:02:c3:59:86:73:08:8e:fd:
                    e0:a0:fb:97:49:98:e2:e8:d6:e0:65:5f:96:99:25:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B1:C5:C1:77:F0:9D:35:00:98:24:AD:14:D8:87:B2:1D:45:0E:4C
            X509v3 Authority Key Identifier:
                keyid:64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:a1:87:a9:96:a6:da:44:49:fb:a8:ef:14:c7:3e:5c:4e:a5:
         5d:5f:67:b7:28:fc:1b:d0:c2:73:f7:6c:0f:0b:35:90:5d:ad:
         ea:fc:60:0c:1d:18:ec:76:e6:0f:d1:fd:53:60:64:93:d3:1a:
         67:13:e3:51:52:2c:c3:32:fe:6a:31:9a:6c:7c:8f:53:3c:a0:
         4d:00:eb:8e:f3:94:4f:3a:4a:0a:de:5f:dc:8f:a1:de:c0:12:
         6f:69:3e:72:9a:e8:27:25:6b:b9:23:5f:a9:f9:a1:55:8a:ac:
         a2:00:81:d4:6a:ea:bd:30:3c:11:aa:44:07:27:9b:2c:01:50:
         ee:1d:83:c7:e8:c4:0c:9f:ca:1b:ad:a0:68:a4:7f:33:8b:c2:
         a2:48:c0:b0:2d:91:3a:62:8a:ee:9d:8d:3d:fd:63:4e:1a:8d:
         b9:a6:a5:1d:c8:a3:39:f4:4c:c5:af:33:00:dd:90:bc:a7:4c:
         68:fa:72:6b:f4:e6:6f:4c:ed:c2:5c:bb:a6:17:a0:97:c4:b5:
         19:91:62:d6:1a:b0:74:e8:ea:70:d4:cc:59:99:21:6f:63:1b:
         79:49:8e:6d:1d:fb:73:60:26:54:d3:c9:5a:4b:d7:e4:21:27:
         b1:0d:d2:95:f7:b6:40:27:1e:d3:31:8d:2c:ef:a7:31:aa:ae:
         14:73:d5:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znxn+IvM5y2/p3U76H5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NzhiZGVjZmJkMzVkM2YxN2MzOTA2ZTYyZjkzZWIyYmIx
MTNlNWQwHhcNMjUwMTMxMTAwMDU5WhcNMjUwMjAxMTAwMDU5WjAzMTEwLwYDVQQD
Eyg0ZGIxYzVjMTc3ZjA5ZDM1MDA5ODI0YWQxNGQ4ODdiMjFkNDUwZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruZhh/B4p6EUPIuPKbpRiEI5JkBS
S+TpqaFcWvFTg/DdEYDV1h4o1pBWj5VD8CG1Vljn8v69GO4I/2bY2/kunL90dugP
FMGGfgZgoZHmZaB5rmnL/L3RoA5y5rudJaab0v19z/A73joSmvqpLDGdvKjuzSrx
ptsITDLkbX9WFXfCt5JgqDGTTCDJPvYKjK8D+eVJ5m5W05MDoJZ73qa7HGBjyu2Y
rWsIN8gKcslRol8hfeHTlbp7KEl/XQNJhS3JODyADleG/iKUczr4jCk65LHrCmRr
HJoz3Ub4FN1+gA438GaKJ3uXAsNZhnMIjv3goPuXSZji6NbgZV+WmSXWsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2xxcF38J01AJgkrRTYh7IdRQ5MMB8GA1UdIwQY
MBaAFGR4vez7010/F8OQbmL5PrK7ET5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zODM5MjItYmNhMy00OGU3LWE0ZTgt
NmZlNThjMzYzNjRkLzEvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8zODM5MjItYmNhMy00OGU3LWE0ZTgtNmZlNThjMzYzNjRk
LzEvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKGHqZam
2kRJ+6jvFMc+XE6lXV9ntyj8G9DCc/dsDws1kF2t6vxgDB0Y7HbmD9H9U2Bkk9Ma
ZxPjUVIswzL+ajGabHyPUzygTQDrjvOUTzpKCt5f3I+h3sASb2k+cproJyVruSNf
qfmhVYqsogCB1GrqvTA8EapEByebLAFQ7h2Dx+jEDJ/KG62gaKR/M4vCokjAsC2R
OmKK7p2NPf1jThqNuaalHcijOfRMxa8zAN2QvKdMaPpya/Tmb0ztwly7phegl8S1
GZFi1hqwdOjqcNTMWZkhb2MbeUmObR37c2AmVNPJWkvX5CEnsQ3Slfe2QCce0zGN
LO+nMaquFHPV+w==
-----END CERTIFICATE-----