Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
File:                     LuliCJJdg2-NA30XmYCoOhsME0I.mft (raw, json)
Hash identifier:          JsN8wYITC29Cre5+d2mujufEMV9CLpM947Ej6nQM4hI=
Subject key identifier:   5D:3C:60:59:E5:87:F8:96:83:00:DD:7C:FB:F9:15:B1:CD:38:29:82
Authority key identifier: 2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42
Certificate issuer:       /CN=2ee96208925d836f8d037d179980a83a1b0c1342
Certificate serial:       01935689E5F3DEF08F3A580E0004F54FC799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 01:01:38 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:38 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:38 +0000
Files and hashes:         1: LuliCJJdg2-NA30XmYCoOhsME0I.crl (hash: wYsxqi9m5e9m5uIHyXVCbTVS+GtbdBENC12ceAMwwLo=)
                          2: U0pL8thQU7wANHf1IudSUBGo1Fo.roa (hash: NAyXK7g48LYKLamYAUTSK/p+jXO4s70odLOGgJELc5E=)
                          3: VPs3gtVM7VjQX7lb62YvPFxJbdM.roa (hash: IaELyEaK2K9MyWGFNsB9si/5dJsC5d9rQyHgAvRXzCY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 01:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:e5:f3:de:f0:8f:3a:58:0e:00:04:f5:4f:c7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee96208925d836f8d037d179980a83a1b0c1342
        Validity
            Not Before: Nov 23 01:01:38 2024 GMT
            Not After : Nov 24 01:01:38 2024 GMT
        Subject: CN=5d3c6059e587f8968300dd7cfbf915b1cd382982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a7:f2:3e:14:db:9c:8d:94:4f:07:b1:cf:c5:
                    50:24:98:04:79:80:23:a9:45:61:65:86:a0:93:f0:
                    2e:77:2e:25:7e:1c:a5:9c:89:8f:bf:a8:3f:19:6e:
                    82:07:17:28:19:3f:0f:16:ad:4e:c7:9b:55:8c:03:
                    f7:1c:de:5b:b6:4b:92:1d:8e:4e:4a:0e:f7:0a:89:
                    11:16:5a:2a:3b:20:9d:f7:76:76:43:9c:2f:4a:66:
                    04:35:b6:18:6d:47:6c:13:e9:7c:1a:48:e5:d2:d7:
                    e6:53:f7:9d:fe:8a:95:78:fd:ca:ec:85:20:99:ce:
                    92:e3:a7:29:29:5b:90:d7:14:07:86:1e:34:15:da:
                    40:95:ed:81:db:fd:db:2d:99:e4:08:b1:b0:27:28:
                    67:47:c7:cc:b5:50:ff:55:0c:16:f7:1f:e3:53:c6:
                    b1:15:13:7d:37:0a:2b:60:3a:de:f1:c5:af:f7:68:
                    09:6d:41:52:0a:47:38:c8:82:60:90:4c:b5:b1:cc:
                    39:63:18:1e:8f:28:86:73:e3:f0:cf:ce:72:94:74:
                    1e:36:87:0a:95:b5:db:5e:47:66:a2:d7:86:51:07:
                    66:76:bd:0b:0b:2d:42:ab:b6:7d:46:36:53:14:1a:
                    24:77:09:74:04:4c:a1:2b:8d:f1:07:9b:a8:f1:82:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3C:60:59:E5:87:F8:96:83:00:DD:7C:FB:F9:15:B1:CD:38:29:82
            X509v3 Authority Key Identifier:
                keyid:2E:E9:62:08:92:5D:83:6F:8D:03:7D:17:99:80:A8:3A:1B:0C:13:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LuliCJJdg2-NA30XmYCoOhsME0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/71c608-1cc2-4899-a5fa-846aaf0eb1ad/1/LuliCJJdg2-NA30XmYCoOhsME0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:29:31:db:76:58:b8:65:a4:b6:af:14:0c:a8:6b:17:32:65:
         49:00:59:fd:18:bf:53:91:6c:c0:cb:ad:79:46:de:69:dd:c9:
         73:dc:0c:35:ab:7a:12:46:9a:96:90:f9:ae:c1:5c:fa:2e:68:
         26:ad:c6:04:1b:b7:a3:aa:f1:58:b6:9e:e1:92:ab:90:6e:14:
         29:f8:24:4a:e1:c2:4b:a7:4c:92:89:d3:46:29:a1:e9:6e:8e:
         d7:52:5f:ab:55:3a:46:9f:c4:cd:6d:fe:ff:6b:b1:99:e3:6a:
         ad:f7:b0:31:1c:db:4a:a5:46:cb:29:f5:93:7c:d3:68:57:9d:
         10:ab:ba:e3:f1:62:e3:9b:4c:e4:14:0a:0a:f5:e0:da:27:fc:
         ed:34:2d:b2:c7:47:b0:79:b7:ea:e0:21:6b:29:2e:03:d4:97:
         67:17:1a:ff:47:ad:e2:07:cc:ba:f2:b1:4a:07:fc:13:14:c5:
         f6:8b:d0:66:80:05:95:62:76:d6:c8:ef:06:ad:39:b8:64:2a:
         53:d3:f2:5f:62:af:61:ef:af:8a:0b:b2:92:3b:cd:0e:43:d4:
         81:3e:d6:3c:67:ad:80:2b:fa:12:15:6b:07:09:2a:d6:20:42:
         bf:7b:bc:86:09:40:38:35:e1:6d:5d:6c:42:0b:2f:7c:e3:2e:
         a2:32:0b:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNWieXz3vCPOlgOAAT1T8eZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZTk2MjA4OTI1ZDgzNmY4ZDAzN2QxNzk5ODBhODNhMWIw
YzEzNDIwHhcNMjQxMTIzMDEwMTM4WhcNMjQxMTI0MDEwMTM4WjAzMTEwLwYDVQQD
Eyg1ZDNjNjA1OWU1ODdmODk2ODMwMGRkN2NmYmY5MTViMWNkMzgyOTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qfyPhTbnI2UTwexz8VQJJgEeYAj
qUVhZYagk/Audy4lfhylnImPv6g/GW6CBxcoGT8PFq1Ox5tVjAP3HN5btkuSHY5O
Sg73CokRFloqOyCd93Z2Q5wvSmYENbYYbUdsE+l8Gkjl0tfmU/ed/oqVeP3K7IUg
mc6S46cpKVuQ1xQHhh40FdpAle2B2/3bLZnkCLGwJyhnR8fMtVD/VQwW9x/jU8ax
FRN9NworYDre8cWv92gJbUFSCkc4yIJgkEy1scw5YxgejyiGc+Pwz85ylHQeNocK
lbXbXkdmoteGUQdmdr0LCy1Cq7Z9RjZTFBokdwl0BEyhK43xB5uo8YJ4qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF08YFnlh/iWgwDdfPv5FbHNOCmCMB8GA1UdIwQY
MBaAFC7pYgiSXYNvjQN9F5mAqDobDBNCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEt
ODQ2YWFmMGViMWFkLzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC83MWM2MDgtMWNjMi00ODk5LWE1ZmEtODQ2YWFmMGViMWFk
LzEvTHVsaUNKSmRnMi1OQTMwWG1ZQ29PaHNNRTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHikx23ZY
uGWktq8UDKhrFzJlSQBZ/Ri/U5FswMuteUbead3Jc9wMNat6EkaalpD5rsFc+i5o
Jq3GBBu3o6rxWLae4ZKrkG4UKfgkSuHCS6dMkonTRimh6W6O11Jfq1U6Rp/EzW3+
/2uxmeNqrfewMRzbSqVGyyn1k3zTaFedEKu64/Fi45tM5BQKCvXg2if87TQtssdH
sHm36uAhaykuA9SXZxca/0et4gfMuvKxSgf8ExTF9ovQZoAFlWJ21sjvBq05uGQq
U9PyX2KvYe+viguykjvNDkPUgT7WPGetgCv6EhVrBwkq1iBCv3u8hglAODXhbV1s
QgsvfOMuojILQw==
-----END CERTIFICATE-----