Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
File:                     LxrJ8JTYMY8wiNymgwGGX0YF6do.mft (raw, json)
Hash identifier:          JytZbhGC7qgcg2/X8MicxaCYiCCVM2ntLBm/ZO3D80Y=
Subject key identifier:   23:26:95:3C:7B:04:8F:4E:C7:47:DA:79:1A:58:59:80:4B:DA:2D:78
Authority key identifier: 2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA
Certificate issuer:       /CN=2f1ac9f094d8318f3088dca68301865f4605e9da
Certificate serial:       019352ADBE1512619E590FFB62434E6ED015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
Manifest number:          0D36
Signing time:             Fri 22 Nov 2024 07:02:18 +0000
Manifest this update:     Fri 22 Nov 2024 07:02:18 +0000
Manifest next update:     Sat 23 Nov 2024 07:02:18 +0000
Files and hashes:         1: LxrJ8JTYMY8wiNymgwGGX0YF6do.crl (hash: xQaaPVwPYKvac0LUgYy5vmiHL5JcBKnLNb4J+xkaD7g=)
                          2: flYUnFHtE11OgRObrdls_FgzaqY.roa (hash: iciFNOGdK04xgdVLRFzyUsKLiw72tiOtOd+GQNcT2qc=)
                          3: k-3vUH34vLe1WFsY9O5Sk2db2-M.roa (hash: zYReHdNwuKPDWpAz/tFF6+liS1NvueEVS+1dHnk0/x8=)
                          4: oq9WwQoDM4mn2rgc9J2iFM1675Q.roa (hash: ocL6Gihhi5XWfwinp2SSm69wUvXXHQtCsSqzsmLm+es=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:be:15:12:61:9e:59:0f:fb:62:43:4e:6e:d0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f1ac9f094d8318f3088dca68301865f4605e9da
        Validity
            Not Before: Nov 22 07:02:18 2024 GMT
            Not After : Nov 23 07:02:18 2024 GMT
        Subject: CN=2326953c7b048f4ec747da791a5859804bda2d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d3:78:36:59:a8:ef:b8:0d:d3:02:80:8a:eb:
                    3c:c3:f7:0e:dc:39:d5:2e:50:73:57:9a:44:bd:61:
                    ce:af:31:a3:9b:9f:3a:26:94:1e:ef:68:4a:22:76:
                    1f:2f:5e:ab:09:3c:a7:85:3f:94:5c:f4:28:00:1f:
                    9b:6b:9e:fd:01:d7:0a:da:3a:86:cf:27:4b:18:a4:
                    e8:58:4a:30:ad:aa:63:8d:df:33:c0:00:cf:86:a9:
                    04:6a:af:1f:37:df:d4:54:fa:93:61:42:19:bd:67:
                    5e:f6:1b:4e:99:e9:14:a2:2c:f6:b1:f8:c3:b1:7c:
                    4c:af:00:a6:07:a1:f1:55:2d:7b:d6:29:51:bc:3d:
                    18:97:d7:83:3a:94:3b:aa:90:23:d0:bf:8a:fa:e8:
                    d0:e0:c8:9b:ac:40:ac:17:be:4f:72:73:c6:59:ed:
                    ee:ee:8f:96:b0:0d:0e:ea:8e:8c:2f:8f:d7:86:da:
                    f1:0f:9b:bd:ba:f8:7d:04:57:0f:16:0f:d2:21:ce:
                    67:93:f1:b1:dd:81:27:5e:91:fb:0b:ff:34:56:e5:
                    d7:fd:9e:c7:20:fa:c5:5c:d5:51:a0:4e:87:72:cf:
                    a7:a9:88:5d:75:6a:fd:9a:82:dc:7c:7d:58:32:3e:
                    01:93:2f:b7:8e:9b:a7:0c:32:36:84:06:5e:6d:e2:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:26:95:3C:7B:04:8F:4E:C7:47:DA:79:1A:58:59:80:4B:DA:2D:78
            X509v3 Authority Key Identifier:
                keyid:2F:1A:C9:F0:94:D8:31:8F:30:88:DC:A6:83:01:86:5F:46:05:E9:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LxrJ8JTYMY8wiNymgwGGX0YF6do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/041968-15eb-4388-985a-c23c829db937/1/LxrJ8JTYMY8wiNymgwGGX0YF6do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:0e:26:6f:18:ee:ff:2b:e6:48:e6:5b:45:f4:4c:b8:69:d4:
         6a:75:28:98:10:31:2f:f3:f3:2f:a5:d4:68:64:99:e6:91:5d:
         43:f5:ee:ec:24:7b:80:82:6b:c0:e5:e8:54:e6:42:ff:0f:02:
         3c:1c:d8:e3:3d:1f:25:7c:1c:55:74:96:68:7f:fd:a9:c4:45:
         5a:70:ee:d7:e3:1d:6d:79:8c:1d:96:ff:1d:4c:f9:cd:60:d4:
         fa:d4:3f:51:a1:13:14:e8:d7:7a:52:05:62:68:68:35:3d:f7:
         1f:bb:bc:59:f7:de:1b:60:d9:5e:32:1c:0f:93:23:32:78:10:
         4a:40:1a:cd:7b:77:db:80:d5:c4:e2:c7:73:11:3e:ac:24:91:
         8a:8b:97:9f:09:06:84:fa:3b:fa:a8:09:89:ca:bd:a8:0f:de:
         50:ab:0b:c3:23:16:c0:24:1a:59:a1:79:12:d3:f9:a9:88:21:
         c1:22:e3:f6:ca:a3:cc:fe:50:6a:e4:d2:25:95:38:88:a1:52:
         27:87:40:55:61:e8:67:24:73:b3:7a:7a:b6:a2:46:d3:38:fa:
         71:91:04:93:2c:e9:5c:36:3f:77:86:80:15:fb:8a:af:94:a5:
         f6:c6:6f:9d:f4:40:75:d1:d3:de:13:07:0e:69:77:6d:67:b1:
         ac:30:07:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----