Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
File:                     LpRuQzNsoql56Z31z11tXnFVgy0.mft (raw, json)
Hash identifier:          tIzuUmsCRTDyABZlyofYwm4CQ35VsTHEfma042iOkbE=
Subject key identifier:   66:64:04:5F:E2:6D:01:A6:01:D9:9C:04:8B:98:14:2A:61:8C:08:C4
Authority key identifier: 2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D
Certificate issuer:       /CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
Certificate serial:       019369DAC05F799F98C33C19330BF0963803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
Manifest number:          0613
Signing time:             Tue 26 Nov 2024 19:02:43 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:43 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:43 +0000
Files and hashes:         1: LpRuQzNsoql56Z31z11tXnFVgy0.crl (hash: u47noIFbI1nmO1qWaM7+GDCGSH/053WKk9hJMk+TOjc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:c0:5f:79:9f:98:c3:3c:19:33:0b:f0:96:38:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e946e43336ca2a979e99df5cf5d6d5e7155832d
        Validity
            Not Before: Nov 26 19:02:43 2024 GMT
            Not After : Nov 27 19:02:43 2024 GMT
        Subject: CN=6664045fe26d01a601d99c048b98142a618c08c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e6:e8:65:aa:5f:5f:05:6f:6b:08:d3:5c:84:
                    70:93:ba:e0:2d:5a:1b:b0:8d:f8:25:ea:cb:1d:e8:
                    50:3b:3b:67:d3:d7:98:1c:9c:50:66:94:be:87:6a:
                    08:73:29:71:94:9f:eb:9e:00:8a:44:73:07:79:59:
                    ac:44:a6:34:a2:10:c6:a9:49:66:59:37:7b:b5:f4:
                    ee:b2:06:5d:53:ca:7f:eb:23:a5:23:97:36:b0:7c:
                    8d:5d:cb:b8:3f:6c:83:b5:0b:5a:d1:2b:96:d0:13:
                    6d:33:c3:2b:12:a1:6d:45:e0:2f:b0:ac:03:5b:54:
                    c5:55:f1:bd:c1:49:4c:c1:a2:8a:4f:ab:3a:81:ab:
                    94:0f:6f:98:ac:ad:6c:c5:66:17:b0:8c:c0:f4:fa:
                    01:90:81:0e:cd:e6:a8:06:9f:89:d5:0e:5a:69:1c:
                    f6:2c:08:69:83:94:33:34:a2:ea:81:5b:0d:43:88:
                    9c:50:08:f3:13:89:79:f6:12:91:e0:84:e9:b2:3a:
                    7a:da:70:88:4d:ad:33:c7:1b:b1:61:42:f5:6f:2f:
                    2c:6f:2a:3e:b2:84:8f:0d:49:48:c3:38:fe:fa:36:
                    ad:d3:d0:bd:af:cb:3f:62:0c:39:e2:50:65:8c:ee:
                    24:5d:f6:57:74:c3:a3:e4:4c:cf:27:ba:44:02:4d:
                    ad:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:64:04:5F:E2:6D:01:A6:01:D9:9C:04:8B:98:14:2A:61:8C:08:C4
            X509v3 Authority Key Identifier:
                keyid:2E:94:6E:43:33:6C:A2:A9:79:E9:9D:F5:CF:5D:6D:5E:71:55:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpRuQzNsoql56Z31z11tXnFVgy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4f185a-3bb5-4d25-9dc8-ee28f96cf126/1/LpRuQzNsoql56Z31z11tXnFVgy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7b:40:a7:52:1c:10:1c:b6:e7:76:76:a6:86:40:91:00:2d:
         86:94:8f:96:e1:9f:0d:d7:5c:f4:69:ab:08:9d:53:4f:9e:d0:
         2b:0a:f2:29:dc:67:80:b9:11:5d:05:45:85:51:09:11:93:8e:
         19:4d:64:94:dc:b9:00:3a:34:33:14:94:a9:66:6b:a9:75:d6:
         aa:80:80:09:33:91:00:e6:69:65:8e:19:72:ee:51:f4:d9:88:
         02:73:b9:c7:1a:e6:f4:44:d2:66:7b:c6:cc:42:19:cb:aa:d5:
         ec:17:77:6f:1e:3b:1b:5d:a9:6a:3f:a6:5a:13:15:df:df:a0:
         3a:60:ca:61:7c:e7:af:c1:e7:07:34:1a:c7:19:c1:9c:97:4a:
         52:81:10:51:ca:e6:96:f0:79:85:b1:51:f6:9e:44:6d:44:38:
         90:82:14:98:83:cf:5c:41:70:16:49:ac:4a:3b:8f:1e:bb:60:
         87:1b:f5:47:22:67:9b:0c:86:48:2f:2f:e1:64:e6:a2:28:dc:
         c3:84:0c:ea:18:cb:4d:1f:f6:69:51:a6:ef:d1:44:ad:a3:b2:
         9d:4f:4a:e9:32:8c:0f:a7:96:57:64:4c:67:b9:63:6e:5d:ad:
         99:f1:30:12:57:dc:8b:68:d1:c4:2a:67:12:0d:04:e3:84:29:
         59:26:3b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----