Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
File:                     lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft (raw, json)
Hash identifier:          LBT5/2Q1/eFrbX1Svh6aE0pfOZrLPaVS3xnNsNDYbas=
Subject key identifier:   91:60:3A:51:9A:A0:EB:03:E3:92:3D:5C:FD:D0:26:5C:72:16:16:01
Authority key identifier: 95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47
Certificate issuer:       /CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
Certificate serial:       0193568A1C4BED4A344DEC59F1C688056388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
Manifest number:          0A19
Signing time:             Sat 23 Nov 2024 01:01:51 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:51 +0000
Files and hashes:         1: 8rr5MVRPucM3C2YQxyB74DT4h90.roa (hash: SZa+MtG0FFtflm4B8rl9dZwQz3MH8IIY6pNzvy3i7Rc=)
                          2: JrnJrnx2M5Znft4D4VlSV8-xgtA.roa (hash: xLuNP1cXsSsGRrlaYcWl1ogQhnBjRd/jnaPmrBep/jg=)
                          3: lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl (hash: VMckw50vzYr45oVhJ0ws1XG78Hjl1M459MFjygmtqok=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8a:1c:4b:ed:4a:34:4d:ec:59:f1:c6:88:05:63:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9526fb681fb8754e4d9669b2dc6806ab284ce147
        Validity
            Not Before: Nov 23 01:01:51 2024 GMT
            Not After : Nov 24 01:01:51 2024 GMT
        Subject: CN=91603a519aa0eb03e3923d5cfdd0265c72161601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:dc:90:6b:10:6b:3a:d5:04:75:23:a9:0d:
                    ad:71:c9:64:75:cc:b5:9a:1a:46:af:3d:0b:a1:f6:
                    1d:93:3d:fc:f8:f3:f3:0a:fd:de:ea:e4:05:99:a5:
                    23:d3:11:e7:c5:3c:6c:08:af:ae:7d:bb:3b:b5:03:
                    58:b6:fe:e8:c9:4a:e1:40:f7:0d:1d:96:61:64:66:
                    62:84:d8:fc:fe:28:96:ce:82:7b:e7:18:8d:37:fb:
                    47:8f:14:05:81:b8:1e:80:a3:bb:52:bc:00:fe:c0:
                    87:e8:8a:8b:24:f6:da:7c:2c:72:0f:fb:e9:3d:56:
                    1a:10:ca:d5:0d:c4:40:0c:f6:2b:f5:5c:b6:f0:03:
                    5d:61:6b:e6:27:17:bd:8e:2c:de:a4:e3:eb:57:80:
                    44:3d:20:b8:6d:c4:4c:8e:44:e0:0e:d4:91:3c:4b:
                    e4:0f:02:05:d1:ac:bd:17:d1:36:89:0a:94:42:3b:
                    67:5b:c6:d0:64:74:a9:df:d2:35:5a:a6:d9:4f:b2:
                    1c:d7:8f:09:1d:4f:f6:ca:37:5f:47:83:62:98:10:
                    fe:28:fc:30:c2:39:6d:7e:d0:10:c2:96:7d:d7:c2:
                    20:bd:69:49:47:77:43:2f:4a:67:2b:6d:9e:7e:47:
                    58:e8:b0:3d:55:d8:af:96:be:de:f3:8b:fb:c7:83:
                    2a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:60:3A:51:9A:A0:EB:03:E3:92:3D:5C:FD:D0:26:5C:72:16:16:01
            X509v3 Authority Key Identifier:
                keyid:95:26:FB:68:1F:B8:75:4E:4D:96:69:B2:DC:68:06:AB:28:4C:E1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/c5cc6b-bfdf-402f-be6c-47755c63cc03/1/lSb7aB-4dU5Nlmmy3GgGqyhM4Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:d3:4c:7c:eb:59:f0:e6:76:af:dd:31:f5:2f:f7:15:83:
         1e:1e:fd:fc:8c:05:4b:dc:7e:64:19:48:16:ee:30:74:f8:1b:
         76:6e:d7:f2:1e:6d:cd:a0:81:25:58:9f:b6:57:22:a1:ed:8b:
         27:a8:5f:8b:ab:23:de:fd:57:f1:d9:ea:dc:65:94:93:ef:2e:
         4d:8b:62:1f:69:2d:af:05:84:33:f2:85:44:2f:3b:fd:1d:10:
         bd:b9:22:11:b6:16:ab:c6:87:bf:d8:e3:69:3f:a1:06:17:a3:
         28:e1:b1:7d:ab:dc:c5:a9:57:65:f1:f5:a4:59:07:37:76:0d:
         fc:ff:4e:b1:c3:c4:58:86:ac:0e:13:f1:a0:94:45:29:dd:59:
         69:52:2b:d0:d4:08:9f:00:51:1d:a8:e5:19:3f:10:8a:26:28:
         a9:4d:1a:2b:e5:84:92:98:0d:f9:3f:e7:dd:20:7f:d2:ca:c4:
         00:95:6c:7c:c7:5b:03:a5:40:05:c5:db:aa:40:94:9a:97:89:
         91:ac:9d:c8:cd:23:f8:2d:fa:88:26:af:cb:bd:23:7e:a8:c9:
         9b:4d:13:f1:af:de:bb:7a:97:c2:cb:c7:14:90:cd:d0:71:1d:
         72:5d:98:c8:18:16:4c:74:4d:2e:14:84:52:df:c9:5c:e1:a7:
         d5:40:6e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----