Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
File:                     _lSrLUgc8WIqLFIYOrT1qTCkrkE.mft (raw, json)
Hash identifier:          AywYLbZZvcNV7OTJesDhCjtZFG8ulyIVGZrkpZTimy8=
Subject key identifier:   18:B1:FF:FA:49:AE:F8:C6:BE:DA:A7:87:8C:44:CC:0F:D8:59:0C:F5
Authority key identifier: FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41
Certificate issuer:       /CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
Certificate serial:       019355AD21CD00D08168420D3A11420B3F87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
Manifest number:          1120
Signing time:             Fri 22 Nov 2024 21:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 21:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 21:00:29 +0000
Files and hashes:         1: 7wJ1fTDf_a-5nl_Q044YwlK99pU.roa (hash: AFr3ggnlOk6jYCok7ZqM4+WXv2Q5NwLkqeeXhuzDcIk=)
                          2: EBYYFh_WQxrZ9Rltz6F6B8Cq1c4.roa (hash: 8SIntfmwoh14yAFut2X6/YnJcO06eQDHW2ATabz/Wbo=)
                          3: Y_jIsQd6UFAqkfBfKo7xZYDZ-M0.roa (hash: y0tqlZw9K0j0aBMhsR43kD/z/SHpOw3OrQcmo3AV9bg=)
                          4: _lSrLUgc8WIqLFIYOrT1qTCkrkE.crl (hash: wPDnKbBhxojYw90rjePqrLWUAG2/Ai6HamfVNPSCpVk=)
                          5: l6hg9aOeT31cN2ehs21gqKe3LTQ.roa (hash: vs+bqrTpvGTrO4h3iizB+Z0rZaOLIeK5S/zf0+e+dhs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:ad:21:cd:00:d0:81:68:42:0d:3a:11:42:0b:3f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe54ab2d481cf1622a2c52183ab4f5a930a4ae41
        Validity
            Not Before: Nov 22 21:00:29 2024 GMT
            Not After : Nov 23 21:00:29 2024 GMT
        Subject: CN=18b1fffa49aef8c6bedaa7878c44cc0fd8590cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:3d:6f:76:89:f6:12:cf:1c:5a:2c:b5:bc:
                    a2:3e:5d:1d:ad:81:b2:e7:f4:61:71:c4:25:f9:7a:
                    5f:e4:27:6b:93:84:95:4f:2c:10:59:93:75:ed:a4:
                    56:8f:67:bd:c3:eb:6c:96:b9:2a:88:c3:c9:f0:03:
                    24:9f:10:1c:b9:d2:86:4a:34:f8:67:fc:20:da:83:
                    f6:99:b6:12:f7:69:7d:67:67:5a:41:47:cc:49:82:
                    d5:94:97:e3:ba:66:55:59:b2:3d:d7:d6:d3:ae:b9:
                    8d:81:47:83:95:ff:6b:e0:0e:8e:f2:47:d0:06:9f:
                    e1:a6:f5:7f:47:08:ce:83:13:15:3f:d1:ac:5b:16:
                    ae:3a:a3:c0:70:b3:25:72:5e:b0:8b:26:ba:6d:1b:
                    74:0c:e9:56:e5:0d:d4:a9:83:22:95:63:65:35:e9:
                    66:86:4f:e7:49:4a:cb:45:e4:82:8a:52:98:f3:17:
                    97:d3:d0:72:19:09:3b:15:04:22:ab:b8:6d:80:2d:
                    fb:44:e5:53:aa:ca:1f:03:30:f8:f7:73:bd:64:90:
                    48:25:4c:45:76:5a:f5:25:3e:1b:10:77:c0:92:d5:
                    3f:30:aa:86:31:30:a9:d9:c0:12:cd:79:0e:d2:9a:
                    5f:e6:58:93:eb:79:9c:ef:4a:3a:4b:02:00:cf:66:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:FF:FA:49:AE:F8:C6:BE:DA:A7:87:8C:44:CC:0F:D8:59:0C:F5
            X509v3 Authority Key Identifier:
                keyid:FE:54:AB:2D:48:1C:F1:62:2A:2C:52:18:3A:B4:F5:A9:30:A4:AE:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lSrLUgc8WIqLFIYOrT1qTCkrkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4d5e4a-8a16-4537-be1f-1b1362b9b6a2/1/_lSrLUgc8WIqLFIYOrT1qTCkrkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:83:25:5e:34:f9:01:0d:79:65:5a:43:16:17:42:b6:41:d3:
         93:db:62:70:a4:90:c2:d4:3d:62:85:2c:35:25:3d:e9:8b:ca:
         62:1c:21:1b:5c:d9:5a:80:bd:0c:f3:e6:3e:5f:1f:59:e4:7f:
         71:60:34:df:69:0f:3d:b9:7d:00:cd:0c:f1:74:55:11:ab:85:
         84:b3:6c:e9:b7:cc:46:5b:ff:c4:db:5c:c1:e3:f5:77:a0:97:
         ad:b0:2c:27:d5:2d:13:49:45:aa:92:66:61:8b:3f:18:7b:f4:
         27:08:e8:40:f8:de:77:45:fa:08:ab:be:ae:ce:1a:7e:49:e1:
         80:b5:6e:3d:3b:cd:ee:74:a4:a9:a3:39:62:12:85:11:07:63:
         20:09:7d:3a:d0:8d:5f:6c:a9:43:07:b3:d0:88:8f:50:06:a0:
         78:3c:3b:1b:8a:08:02:47:44:2a:04:83:28:5e:a9:12:65:ab:
         7a:f0:d6:fe:6b:67:36:5b:90:78:d2:f1:83:6a:72:fb:81:a6:
         3f:32:e9:5b:3e:bd:aa:62:1f:78:47:be:40:07:8f:44:be:71:
         7a:9c:10:7a:d2:b4:aa:1c:1b:9b:ff:be:b1:1f:a7:20:1b:ae:
         85:94:28:61:da:dc:9c:4e:26:f1:a6:71:e0:bd:46:e9:c6:c2:
         60:54:a9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----