Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
File:                     lirjRjk4sm-Dt28MTfgd-rsVpOs.mft (raw, json)
Hash identifier:          LJRUI9aurVgDUuLyIn0MUKMnJVl0MdgiNW+IQaRYRbI=
Subject key identifier:   7A:68:EC:50:49:4C:1B:0F:6F:11:78:8E:DC:9E:CC:1C:20:DA:2F:D9
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Certificate issuer:       /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial:       0193546346B566F9282F3715E4DFFDB55A9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
Manifest number:          1379
Signing time:             Fri 22 Nov 2024 15:00:12 +0000
Manifest this update:     Fri 22 Nov 2024 15:00:12 +0000
Manifest next update:     Sat 23 Nov 2024 15:00:12 +0000
Files and hashes:         1: 1-8MtB_IsJbZaPtuZSP3EN_Pe-f8.roa (hash: wJs4k78bf3DlE4Pmmrn94estyvnaNRYAwjdWEm2Qqno=)
                          2: lirjRjk4sm-Dt28MTfgd-rsVpOs.crl (hash: +I5Y+8YSbZr4ZOikgRwBQVkIPe+yH8koCg113VyAKuo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:63:46:b5:66:f9:28:2f:37:15:e4:df:fd:b5:5a:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
        Validity
            Not Before: Nov 22 15:00:12 2024 GMT
            Not After : Nov 23 15:00:12 2024 GMT
        Subject: CN=7a68ec50494c1b0f6f11788edc9ecc1c20da2fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:f6:28:b3:e2:fb:6a:3f:5d:ad:45:be:dc:
                    b9:c1:8a:b2:a1:f0:9f:00:5b:5f:57:02:e0:51:d3:
                    31:be:89:09:fc:46:39:bf:3e:74:9a:f4:53:90:f4:
                    25:bc:91:61:6b:38:23:69:88:f2:70:ce:d5:6a:b5:
                    6d:6b:60:0b:1b:24:a3:d1:44:ce:88:be:27:2b:17:
                    ce:70:0b:35:5d:dc:c5:15:cd:67:13:05:0f:da:d7:
                    d0:0b:92:ee:af:6a:3a:d6:af:2d:fd:07:be:09:dd:
                    1a:24:df:fa:a5:73:f0:89:aa:91:49:2e:3d:c5:0e:
                    9d:f5:68:4f:d6:71:a6:49:e9:9c:fe:1a:72:d7:ab:
                    d0:73:aa:9e:d7:ca:04:9b:c2:48:8c:ca:6b:ae:b7:
                    81:d5:dc:11:7b:b1:d4:9d:d2:9e:dc:f8:74:bf:3b:
                    69:b6:aa:7c:e0:8c:91:f9:c2:1f:59:6c:2b:21:88:
                    7f:e3:7a:fe:dd:fc:a2:88:c3:12:de:34:55:72:1b:
                    46:90:20:da:a9:03:3f:cf:25:38:2a:4b:36:e6:7b:
                    da:03:95:ee:50:24:7a:33:e0:d3:4e:74:e4:7f:39:
                    55:d6:94:7a:5f:45:da:40:cf:31:fc:11:27:b3:f2:
                    12:6a:50:4e:ba:95:46:2e:5a:4f:87:24:51:86:5a:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:68:EC:50:49:4C:1B:0F:6F:11:78:8E:DC:9E:CC:1C:20:DA:2F:D9
            X509v3 Authority Key Identifier:
                keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:79:a1:e7:fe:ec:ae:47:bf:0e:cb:dc:fe:cb:14:ba:f6:9f:
         49:89:02:50:21:90:c4:3e:c3:e4:53:70:85:c8:0b:51:d1:74:
         b7:32:8f:77:25:53:a8:c3:db:43:5d:67:df:26:fb:fe:78:8c:
         72:d2:dc:c3:9b:49:3e:59:d0:7d:1a:88:29:fe:64:09:89:6e:
         5f:93:cf:b5:8e:40:7c:09:ca:da:56:ec:7b:b6:45:ff:53:6e:
         14:8c:e2:00:3e:df:5f:22:5c:6f:d6:78:8c:0c:4a:9d:35:a3:
         87:18:bb:ab:62:69:aa:08:07:d8:f6:12:ce:29:99:fe:d0:84:
         12:bb:12:98:19:a0:c6:96:53:b6:8d:90:6c:ae:2a:f9:d6:6d:
         f8:1d:73:19:01:51:74:5f:a9:03:cd:f3:cb:3e:9e:9f:86:88:
         a7:24:1b:eb:16:0a:db:43:7a:7b:67:45:68:81:e0:5c:90:bc:
         94:08:c8:81:a3:19:1d:ac:58:92:eb:77:f2:77:d2:98:f5:d6:
         07:eb:25:2b:70:76:1b:da:27:25:aa:b1:e7:e0:01:b4:ae:c3:
         bf:23:71:75:d5:15:3c:41:1b:6d:65:01:ac:74:41:31:00:51:
         eb:a3:c0:77:2d:2a:97:1a:3d:80:38:b1:db:36:5d:be:52:1b:
         cb:33:29:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----