Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
File:                     lw69BGmlxpwQmJccqrNv4DLs4xE.mft (raw, json)
Hash identifier:          eJbI3j6OnENTyFOeu/02Oesyxri1xDNhABij6hP9Y60=
Subject key identifier:   1A:91:EE:6B:73:10:9B:D8:B8:F8:6A:E6:72:32:2D:4A:26:E2:B7:14
Authority key identifier: 97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11
Certificate issuer:       /CN=970ebd0469a5c69c1098971caab36fe032ece311
Certificate serial:       019356895384078DA33F49D30A43174A90EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 01:01:00 +0000
Manifest this update:     Sat 23 Nov 2024 01:01:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:01:00 +0000
Files and hashes:         1: f9cnE4SsdeSMhztRP8eW_BMb2Qs.roa (hash: SOusAogYAop6m6tX95KPUL2JeqDICAUpt4XomdtTFI0=)
                          2: lw69BGmlxpwQmJccqrNv4DLs4xE.crl (hash: blzQK1iRyemHY06cRxjCX44o80wA4LTI3wUiHIyL2jE=)
                          3: wJ5xGL6yh-W-Q34vep8QuzeIcP0.roa (hash: sAo56QcD8kLOidWS26P3+D0XyKScQOlBdHq6Ryrwxj4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:89:53:84:07:8d:a3:3f:49:d3:0a:43:17:4a:90:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970ebd0469a5c69c1098971caab36fe032ece311
        Validity
            Not Before: Nov 23 01:01:00 2024 GMT
            Not After : Nov 24 01:01:00 2024 GMT
        Subject: CN=1a91ee6b73109bd8b8f86ae672322d4a26e2b714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:30:9a:ce:07:39:88:f4:2e:de:50:54:1e:
                    1b:a1:53:91:b6:aa:5e:41:52:52:c3:d3:89:86:4b:
                    b8:bf:22:11:9a:b6:71:de:87:27:07:73:aa:a5:58:
                    3b:b9:8b:10:85:ac:68:1a:39:0c:31:c2:38:5f:9b:
                    ff:0e:17:9b:75:68:59:ea:3d:9a:82:2c:36:35:b6:
                    6e:0f:95:f5:3d:a8:4c:1b:6b:89:c9:52:8f:68:10:
                    37:0d:87:18:1c:f0:0f:93:54:ce:20:72:41:97:6f:
                    30:ff:df:d3:6e:dd:11:f1:94:a6:1e:56:72:ff:59:
                    a8:43:34:89:2e:fe:90:b7:be:41:55:6e:d8:f0:1b:
                    d5:9c:2e:bc:d9:e2:90:1b:59:27:f7:97:74:4f:1b:
                    02:8d:4d:c9:51:a4:09:2a:5e:46:21:a1:0b:bd:72:
                    a4:b7:75:86:18:45:dd:18:0a:a1:f8:6a:e9:62:ce:
                    f2:62:b9:73:5f:2c:a4:f4:89:fe:ab:37:83:93:15:
                    84:fe:2a:cf:8b:d4:8e:fe:ae:4d:cf:65:9a:7d:32:
                    bc:cc:a7:37:af:ac:18:50:aa:1b:4b:f8:bb:02:e3:
                    fa:4a:73:cd:2b:72:5c:19:c0:53:0b:79:b1:b8:fc:
                    54:07:7b:66:64:0a:25:dd:16:bc:df:08:03:52:e4:
                    68:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:91:EE:6B:73:10:9B:D8:B8:F8:6A:E6:72:32:2D:4A:26:E2:B7:14
            X509v3 Authority Key Identifier:
                keyid:97:0E:BD:04:69:A5:C6:9C:10:98:97:1C:AA:B3:6F:E0:32:EC:E3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lw69BGmlxpwQmJccqrNv4DLs4xE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/62001a-a313-4e33-bb04-914b4b34f981/1/lw69BGmlxpwQmJccqrNv4DLs4xE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:94:82:c8:41:8c:f0:e1:53:79:f2:e5:14:fe:b6:4c:08:2b:
         40:92:60:68:52:d6:3c:2a:8f:01:bc:c4:14:c3:94:67:66:5f:
         66:2d:e4:17:33:03:1c:3d:bd:ea:2a:97:b7:2c:03:ea:ae:30:
         2f:82:07:57:ff:02:4a:a2:f5:60:aa:ce:a9:be:bf:4f:ad:26:
         d4:30:9d:09:bd:fd:6a:81:3d:4f:df:ea:0f:c1:e0:23:87:9b:
         16:c1:87:c9:3e:3e:4f:20:59:e9:f7:0e:07:0e:34:71:f7:e6:
         9a:17:c9:a3:0a:9c:3e:49:37:1b:05:8a:0e:70:c0:4a:d6:57:
         02:c9:b2:0b:d7:12:78:94:83:ec:b2:7f:0d:80:ab:24:67:c1:
         bd:d3:04:4c:a5:b3:9c:f5:f6:82:e2:c4:b0:df:5b:f1:14:0a:
         47:75:47:9a:67:fc:68:c7:08:2d:65:39:5b:3f:71:44:00:b3:
         72:c9:29:fc:0f:91:1d:a4:ae:84:d8:c1:34:33:45:ef:f3:4d:
         95:b9:f4:ed:d8:ab:5a:be:97:95:a8:85:2d:33:33:a3:2b:4e:
         a8:a4:fa:00:2b:df:02:e3:af:0a:a2:3b:ce:af:be:47:f6:19:
         e8:b6:28:d2:cb:5b:a6:36:34:9d:83:d2:00:9d:76:a7:fd:e4:
         9e:04:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----