Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
File:                     LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft (raw, json)
Hash identifier:          wUL2EkGp4tWicZPdweze5gyjN1HK/xMCn6DDJVvmuLU=
Subject key identifier:   C4:4D:C5:7D:46:B1:52:6C:DE:AE:5B:86:55:5D:94:E5:8F:38:6B:8B
Authority key identifier: 2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4
Certificate issuer:       /CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
Certificate serial:       0193568B6CEF8F93B7CFBDC3C8565FF45889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
Manifest number:          1372
Signing time:             Sat 23 Nov 2024 01:03:17 +0000
Manifest this update:     Sat 23 Nov 2024 01:03:17 +0000
Manifest next update:     Sun 24 Nov 2024 01:03:17 +0000
Files and hashes:         1: LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl (hash: GWlXebVDS3cJ0t1D4CiwKodsXuhiIgPhKRpA/QUmbw4=)
                          2: aWbKAnd6AZ1uYSU2Eu4kbliBSCw.roa (hash: 1ZSjz+UFxfWR6f+x77OLUkWu+kJXn7/Ve1NAYLRdamw=)
                          3: bgnMZHrZllWd0wsR6AKNZnO65Is.roa (hash: rUxBvEScnXB57bDO1i1KocsQQ3b4nTzuL96BeokSjmU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:8b:6c:ef:8f:93:b7:cf:bd:c3:c8:56:5f:f4:58:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c6d66124362880f5e4c54852f8376d2b9d137f4
        Validity
            Not Before: Nov 23 01:03:17 2024 GMT
            Not After : Nov 24 01:03:17 2024 GMT
        Subject: CN=c44dc57d46b1526cdeae5b86555d94e58f386b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:e5:ad:f1:c6:b7:04:81:82:ed:a1:ee:73:
                    87:70:6e:aa:26:f9:60:3c:53:45:55:a0:22:24:bf:
                    fd:e9:17:bd:3b:56:40:88:cf:bc:8d:8e:4d:ca:5b:
                    02:13:fe:ca:d5:b3:85:c3:a2:b4:8f:b7:6f:0d:6c:
                    b7:fa:1a:b7:f9:df:47:48:49:23:02:54:2d:8a:c6:
                    5e:0a:68:14:58:3e:be:63:bc:72:76:0f:08:8f:39:
                    fa:ba:61:71:45:06:b0:a7:2e:70:2e:df:85:4f:a6:
                    b0:69:53:a9:c7:34:6d:74:9b:b8:e4:9d:69:d4:9f:
                    05:3f:1c:f7:c7:77:2f:5d:e4:ce:d3:da:ef:12:05:
                    b4:b1:37:d9:b7:1f:07:ef:18:6f:8d:73:41:1e:d5:
                    3e:b9:16:cf:83:46:5d:d6:6f:fe:20:b0:45:ec:37:
                    4c:e2:53:85:4a:c7:fe:ff:61:ad:72:fe:ce:ca:99:
                    85:3e:cd:cf:79:94:03:3a:26:55:ea:14:3f:24:a8:
                    8b:41:48:b5:cf:37:98:8e:81:bc:df:cb:30:5d:e9:
                    70:a7:ec:bc:ef:67:a5:cd:c2:d5:9b:cd:7f:5e:ba:
                    71:19:91:b0:51:76:c7:6c:04:3d:fa:6f:c6:59:b0:
                    ac:05:f9:8e:ad:f3:5d:ac:b9:a0:fc:43:9b:7a:c0:
                    68:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4D:C5:7D:46:B1:52:6C:DE:AE:5B:86:55:5D:94:E5:8F:38:6B:8B
            X509v3 Authority Key Identifier:
                keyid:2C:6D:66:12:43:62:88:0F:5E:4C:54:85:2F:83:76:D2:B9:D1:37:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LG1mEkNiiA9eTFSFL4N20rnRN_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/71fea1-3919-42f7-9e03-e4030fa1b04a/1/LG1mEkNiiA9eTFSFL4N20rnRN_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:28:d0:fd:21:c0:9d:97:82:8c:dc:52:fd:5f:47:86:3b:6b:
         0c:8e:6d:3e:c1:f3:b7:e8:8c:93:1f:c9:2e:d7:c3:3c:50:19:
         64:ed:36:48:ec:77:87:d7:41:45:fa:9f:e5:6f:44:a0:ee:59:
         b8:88:91:7c:ff:f3:34:44:e9:b8:91:0a:18:7a:23:ff:7e:e3:
         f4:6d:bc:54:f5:35:78:86:78:18:f8:ef:62:d6:b5:45:20:a1:
         cb:16:2c:89:45:cb:c6:b1:b9:fd:26:c0:09:97:97:4a:22:43:
         ff:34:0f:79:2c:d3:45:b2:23:30:7c:7d:a3:d4:15:bb:25:83:
         e2:66:81:dd:91:28:d8:33:22:89:2c:79:61:c6:c8:b1:4d:a1:
         f1:19:09:61:8b:02:6c:d2:5a:a6:9d:d6:86:0b:a2:28:d5:9e:
         6f:5d:bc:fb:16:43:f6:99:fb:91:aa:1f:22:12:86:af:39:f9:
         62:c6:7c:bc:6b:ea:ff:33:65:ad:49:86:1b:9d:dd:18:9e:02:
         c6:a3:26:9a:d5:58:10:26:65:e7:74:0d:22:46:4e:3d:c7:21:
         17:07:47:79:d5:41:a9:51:c1:13:1f:87:67:76:98:97:d4:bf:
         b8:e3:e0:0f:56:77:6b:2d:f9:07:83:75:89:6a:cf:08:18:3b:
         fb:cb:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----