Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
File:                     LHXzXSVsxKW4gxm7fku7oynkk0E.mft (raw, json)
Hash identifier:          uAUhgKB1B5mpBVj/vSjdUA2/W6cW7BvSAMDGgpzo7cY=
Subject key identifier:   F3:DE:76:A9:32:94:8D:C3:2F:D6:38:37:6D:3C:78:B0:35:65:84:71
Authority key identifier: 2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41
Certificate issuer:       /CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
Certificate serial:       019358784A472527741667752B2E32415E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
Manifest number:          0B88
Signing time:             Sat 23 Nov 2024 10:01:38 +0000
Manifest this update:     Sat 23 Nov 2024 10:01:38 +0000
Manifest next update:     Sun 24 Nov 2024 10:01:38 +0000
Files and hashes:         1: LHXzXSVsxKW4gxm7fku7oynkk0E.crl (hash: rocEVZhMX3wSPcrPfhjrTwvlPfD1aBJT69Ro1eJTTP0=)
                          2: PipX-fEr0RLBb0-Q9kg46QNdhtI.roa (hash: g85sHlOfJ11WZWV/SAxtKYMmuHv2b1TdmnlDwy0sqPk=)
                          3: uZ_2kGUqrYABc9UpzcUk5SUW-DA.roa (hash: 3tkRKtQEoOboCbPUBaciYRb8PoiK3QI8nkTFwJzbNsY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:78:4a:47:25:27:74:16:67:75:2b:2e:32:41:5e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c75f35d256cc4a5b88319bb7e4bbba329e49341
        Validity
            Not Before: Nov 23 10:01:38 2024 GMT
            Not After : Nov 24 10:01:38 2024 GMT
        Subject: CN=f3de76a932948dc32fd638376d3c78b035658471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:35:e0:0b:9a:dd:dd:96:63:9f:18:ee:ba:13:
                    e4:d9:ae:fb:67:25:21:91:05:63:b5:3b:9d:5e:db:
                    67:d5:dd:b6:6e:71:87:9f:be:46:41:58:1d:24:52:
                    bf:82:aa:04:31:4d:86:ac:79:23:2e:8c:0e:2b:92:
                    de:52:f2:a1:08:9f:e0:0f:67:01:1b:5d:2d:5b:11:
                    7e:d0:7a:29:64:2e:a9:e2:89:8e:c6:8e:b0:c0:e1:
                    65:31:7c:1a:8d:d0:97:73:ac:d1:dd:cf:81:b0:d2:
                    18:eb:8a:23:a6:0f:9c:68:27:91:6d:0a:05:22:3d:
                    66:03:21:51:26:95:18:60:c1:ea:9a:c1:ec:d6:30:
                    b4:e2:86:b0:88:7b:0b:65:76:00:ea:f2:70:ca:32:
                    5a:6f:a2:f2:66:1b:98:dc:02:2f:50:1c:98:a3:89:
                    44:0d:7d:3c:fb:a0:7a:fd:3f:04:37:17:80:7c:ed:
                    48:f3:20:0f:94:22:a2:d2:6c:08:11:ac:db:a9:d0:
                    17:17:0a:b0:b7:f1:25:ee:ae:e2:fe:0e:0a:a5:60:
                    04:a9:47:9b:87:36:d8:c6:5a:6e:3e:95:64:c6:38:
                    d2:33:a5:c6:91:60:af:84:ba:c8:30:0c:4e:b5:3d:
                    00:2b:d3:09:c0:5f:6d:4f:28:0d:31:3a:08:91:af:
                    b6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DE:76:A9:32:94:8D:C3:2F:D6:38:37:6D:3C:78:B0:35:65:84:71
            X509v3 Authority Key Identifier:
                keyid:2C:75:F3:5D:25:6C:C4:A5:B8:83:19:BB:7E:4B:BB:A3:29:E4:93:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHXzXSVsxKW4gxm7fku7oynkk0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/40a1e5-7d2a-48d6-a50e-f96fb4ea7e70/1/LHXzXSVsxKW4gxm7fku7oynkk0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b7:d0:b3:46:e4:08:80:8d:02:6b:20:df:f1:46:ce:ce:3b:
         1f:33:4c:62:a7:c4:fd:bf:07:22:f9:15:b8:2d:80:a8:90:98:
         4a:6d:71:9f:65:87:69:65:a6:40:14:30:02:24:dc:c5:1b:16:
         df:c9:bb:f2:4c:77:58:29:b6:05:70:cb:4f:cf:f3:b1:6c:48:
         d8:86:70:9e:74:19:8c:90:05:74:ff:2e:49:ef:77:50:31:d7:
         b4:44:a3:1b:c9:27:f2:86:83:ba:38:38:0c:04:da:d0:98:9e:
         bd:d2:9b:26:46:aa:3b:a5:96:62:23:83:c8:01:76:0a:53:dd:
         9c:43:ff:36:6a:b6:5a:e8:0d:e4:ef:d0:02:49:41:0a:6c:1b:
         15:bc:b7:84:73:d4:45:61:42:ee:2a:bd:de:1e:16:ef:75:46:
         0e:42:e6:e4:85:e7:6f:5c:b2:40:43:83:9b:cb:fb:96:90:5f:
         86:88:85:c0:5c:fd:d4:5f:e2:36:54:31:ce:d3:25:82:d3:8f:
         80:4f:0a:8f:44:7c:b3:6c:b7:2d:73:e3:5c:b9:c3:b4:a3:5b:
         96:dd:1f:81:51:d8:c6:f1:0b:de:e5:48:58:7a:22:6d:5a:52:
         00:55:4b:80:61:bc:ff:05:a0:af:bf:a7:3a:09:55:1f:8c:fb:
         24:b8:b5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----