Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File:                     LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier:          wRT9nLiKWBwA229hDkt3kNZjcIC2TJgNL4nMBoBWipc=
Subject key identifier:   BD:6F:60:76:B0:72:25:70:AD:4F:A7:11:F1:85:B5:5D:33:E4:A2:7A
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer:       /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial:       018FADEB0588950ED76A426528FCFC6BC385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number:          0B53
Signing time:             Sat 25 May 2024 04:03:31 +0000
Manifest this update:     Sat 25 May 2024 04:03:31 +0000
Manifest next update:     Sun 26 May 2024 04:03:31 +0000
Files and hashes:         1: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: awOCt+PTqG5G1Z5j77vgPwoDdLqpWs5Js5Zw1uDbCos=)
                          2: flYUnFHtE11OgRObrdls_FgzaqY.roa (hash: iciFNOGdK04xgdVLRFzyUsKLiw72tiOtOd+GQNcT2qc=)
                          3: k-3vUH34vLe1WFsY9O5Sk2db2-M.roa (hash: zYReHdNwuKPDWpAz/tFF6+liS1NvueEVS+1dHnk0/x8=)
                          4: oq9WwQoDM4mn2rgc9J2iFM1675Q.roa (hash: ocL6Gihhi5XWfwinp2SSm69wUvXXHQtCsSqzsmLm+es=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 May 2024 21:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ad:eb:05:88:95:0e:d7:6a:42:65:28:fc:fc:6b:c3:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
        Validity
            Not Before: May 25 04:03:31 2024 GMT
            Not After : May 26 04:03:31 2024 GMT
        Subject: CN=bd6f6076b0722570ad4fa711f185b55d33e4a27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:4a:99:43:74:c4:6f:52:e1:9c:9f:2a:73:
                    f6:9a:17:bc:46:9d:df:74:43:4a:fe:94:4e:58:c2:
                    f2:d4:56:c0:48:b0:36:df:f3:7f:63:96:29:2c:80:
                    40:c6:3c:ca:c6:db:63:c0:10:f1:8b:4d:73:08:20:
                    1f:32:05:86:25:ef:84:3d:67:6b:c9:82:3b:fc:30:
                    c7:54:23:56:60:40:f6:06:99:cb:38:b0:f3:44:e5:
                    3a:fc:3a:6b:bb:ba:27:88:34:78:e3:8c:d4:9c:59:
                    35:0b:ca:ed:0c:da:bf:34:d4:dc:c0:68:c4:dd:3e:
                    fe:2e:55:90:6a:10:db:9d:04:f7:8d:49:fc:f8:93:
                    19:a6:33:b5:3a:ed:ca:0f:cb:9c:39:b8:88:07:4c:
                    fe:53:e3:71:75:bc:31:27:c3:d2:10:64:f0:8b:91:
                    6d:01:46:b2:4a:c0:c2:5f:b9:49:ea:65:a0:e3:75:
                    9a:31:9f:a9:c4:c0:39:bf:e1:8e:c6:a0:38:aa:60:
                    df:fe:ef:d1:1d:d3:dd:89:53:68:18:a1:aa:c7:9b:
                    fb:4c:44:e8:df:0c:b3:0c:d3:bb:33:34:84:46:aa:
                    7b:aa:13:02:50:1c:26:6b:01:42:6b:81:0c:04:94:
                    f7:1f:ce:f5:d6:ac:f1:df:38:bb:b8:d3:33:bb:8a:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6F:60:76:B0:72:25:70:AD:4F:A7:11:F1:85:B5:5D:33:E4:A2:7A
            X509v3 Authority Key Identifier:
                keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a9:49:e3:4b:4b:78:fa:51:16:d9:19:a7:e4:d1:a5:f5:67:
         13:24:80:d3:38:62:47:d7:3b:a9:9e:f5:74:ec:a0:52:24:47:
         b5:51:d8:63:af:ec:e5:76:98:58:70:c2:49:74:4f:ef:79:50:
         39:79:db:77:b1:08:27:f9:cc:0b:5a:d7:e0:bf:52:13:f1:64:
         d7:54:85:0c:89:99:99:ad:b6:11:1d:69:47:8f:dd:76:8d:e7:
         97:df:13:50:64:3c:5c:93:9f:6f:44:7f:0b:e7:38:ac:4e:95:
         57:d1:a9:79:88:c6:cd:d1:1a:40:02:8d:9d:6e:66:fb:f8:53:
         19:4f:c8:b9:83:82:b7:68:f0:a8:37:ee:d0:cb:8a:2b:06:6e:
         e9:c9:55:39:aa:8f:90:a3:ce:59:9c:9a:ef:4f:81:50:62:54:
         8d:f6:c8:77:9d:5d:51:2a:6b:df:33:c4:1d:3d:36:80:74:5d:
         48:45:0f:aa:49:d5:c4:66:54:fd:bb:de:cf:d0:44:7b:f0:50:
         77:53:35:8b:96:7c:5a:1b:93:df:b6:d8:da:40:ce:58:19:48:
         9f:1c:ba:3c:c3:fc:b2:85:8e:1b:68:3e:7c:e4:cd:9e:c3:b1:
         6d:2c:2d:dc:5a:be:7f:d4:3c:81:4b:7a:55:94:50:56:08:d5:
         f8:ea:ff:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----