Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
File:                     LJl56ji5293KdLe_pzdotXv_wS8.mft (raw, json)
Hash identifier:          pH3AtyPP5Paw/P+pxRFXeb+iXYyiSvR8CtmAciKyBlA=
Subject key identifier:   88:FC:F5:FB:D6:E5:DE:0D:67:55:47:38:6A:E1:00:4A:43:E0:EF:FA
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Certificate issuer:       /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial:       018F8749A66E8A066FF186FE5D5F45D38A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
Manifest number:          03FF
Signing time:             Fri 17 May 2024 16:01:41 +0000
Manifest this update:     Fri 17 May 2024 16:01:41 +0000
Manifest next update:     Sat 18 May 2024 16:01:41 +0000
Files and hashes:         1: LJl56ji5293KdLe_pzdotXv_wS8.crl (hash: 2nAJmH7cwo2AEdb0oao67T2yVz3RcXqiUkntCwJeufw=)
                          2: iPFyZuR5NrPDEFIVTNUUrwXxZ20.roa (hash: tMD3B3bl7j41dj5aRO/q1qRtifXj9dnu41dIIc2pEJE=)
                          3: jSMmmDD5u-WGjPr0NoF-dAnCro8.roa (hash: HGYnE0kFxYhe3NufQodCWVmaufY4q8Mj0iaqhDWRPg8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:a6:6e:8a:06:6f:f1:86:fe:5d:5f:45:d3:8a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
        Validity
            Not Before: May 17 16:01:41 2024 GMT
            Not After : May 18 16:01:41 2024 GMT
        Subject: CN=88fcf5fbd6e5de0d675547386ae1004a43e0effa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:92:0d:7c:57:02:ca:42:17:4c:c6:d6:57:
                    55:99:3e:43:83:ca:89:1b:d3:93:07:76:5d:05:22:
                    55:50:83:3a:ed:46:1c:e4:2a:4c:f0:f8:dc:88:72:
                    a8:d5:be:7d:97:03:15:0d:09:41:13:9b:ae:7c:1a:
                    aa:dc:ae:91:52:c5:e3:89:3e:c5:1c:b8:f0:96:c5:
                    03:cb:99:44:72:5d:57:e3:82:66:d4:d1:cf:c0:2d:
                    44:55:0f:c8:2e:0e:6d:d2:12:c0:33:97:93:54:c1:
                    5f:f6:ae:7d:a7:a3:bc:76:f8:dd:ec:68:d2:2d:a3:
                    a6:1e:b3:c2:dd:8f:f7:e3:68:9f:9f:14:66:81:a5:
                    64:96:63:d8:b8:d5:95:78:1a:a8:03:6f:c2:84:21:
                    94:56:23:ad:53:4a:1d:32:fa:39:fc:b2:7c:e3:2e:
                    e7:2b:a7:b5:be:3e:c9:95:08:42:17:f6:52:c1:5a:
                    f1:7c:79:e4:07:cc:d4:c3:9b:83:b0:1a:70:e8:20:
                    22:bf:df:90:c5:c7:be:8b:ec:59:a5:b1:f3:13:b7:
                    c5:a0:4f:f6:32:ad:ec:00:a8:58:7e:a0:ed:79:6f:
                    bd:75:7e:97:72:7b:67:da:17:a2:bd:f9:20:a0:79:
                    30:02:04:96:30:61:31:9f:e8:ce:f0:8b:25:54:2b:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FC:F5:FB:D6:E5:DE:0D:67:55:47:38:6A:E1:00:4A:43:E0:EF:FA
            X509v3 Authority Key Identifier:
                keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:70:6f:7a:d6:55:48:cb:88:7a:75:3a:09:6e:a3:47:68:52:
         f3:f9:93:89:08:e1:d9:de:05:8d:4e:ef:52:83:71:95:74:32:
         1f:d2:59:4f:4c:64:f5:87:93:8c:10:b2:b9:50:07:b9:8a:32:
         37:54:4e:bd:ed:1f:f8:7f:fa:3a:0e:04:54:f3:f1:c9:82:cb:
         d6:94:8d:31:e8:21:7a:6b:9c:ef:66:b9:66:77:e9:2d:32:97:
         4b:14:e4:f7:be:b5:d5:b6:a5:bd:1d:81:bf:2a:26:6f:c3:2e:
         92:48:c0:4b:3b:71:05:9d:78:f3:d9:e8:0e:7d:76:69:a0:92:
         06:97:6c:06:fd:8e:1b:4c:af:b8:c3:49:d9:04:04:cc:72:60:
         5b:03:17:0d:78:9f:9d:fb:1e:0f:e7:bd:25:10:f4:c6:53:f1:
         c4:f3:dd:13:0e:e4:e0:94:78:d5:d1:e9:e9:25:91:f6:23:e4:
         63:df:5a:bf:58:b6:57:72:98:aa:f7:0d:b5:c0:c5:16:22:aa:
         79:ba:cc:e9:69:b5:1f:95:66:08:2b:9d:81:35:b7:a4:d4:75:
         20:08:80:05:8f:46:d2:ea:63:b3:6f:2a:b2:02:17:eb:38:cf:
         9b:7f:3e:5a:12:a4:57:ec:1f:27:f3:07:6c:1a:57:ec:73:13:
         87:4a:9d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----