Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
File:                     Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft (raw, json)
Hash identifier:          JWnUh4LBhZGex4OZ5QJw9VeRVkkOVsxrFDJ4NWUJX6M=
Subject key identifier:   F9:5E:A1:55:AA:12:2A:AE:3D:F4:D3:0B:E8:81:0D:A2:43:8F:5A:DA
Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
Certificate issuer:       /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Certificate serial:       019353512629B10D9C54F6D241616CC0C27E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
Manifest number:          0519
Signing time:             Fri 22 Nov 2024 10:00:47 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:47 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:47 +0000
Files and hashes:         1: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl (hash: D8mOdKO0X6yHWEbqaWnWbw4bc2Z04NS8klUqN6nuVLo=)
                          2: zFms9gdS7p2DV3FMgvhJ3cq8eZQ.roa (hash: bpKHMd3KBcfyWtw8gTXhzV0hjyLWvnQrCFZMTE00KxM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:26:29:b1:0d:9c:54:f6:d2:41:61:6c:c0:c2:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
        Validity
            Not Before: Nov 22 10:00:47 2024 GMT
            Not After : Nov 23 10:00:47 2024 GMT
        Subject: CN=f95ea155aa122aae3df4d30be8810da2438f5ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:36:f1:21:d6:53:a7:ab:c6:e1:d7:37:e6:e4:
                    0d:28:85:73:e3:b6:ec:45:b1:02:bf:26:37:6f:68:
                    7d:81:f8:87:43:31:f6:b1:7d:6d:31:07:c9:07:63:
                    6f:cc:90:89:f7:40:0e:b2:e1:4f:75:15:51:5a:bb:
                    d5:48:cc:ca:2d:e4:9e:7a:6d:51:73:76:cb:99:f7:
                    d4:bf:62:87:00:9f:c3:4a:14:c9:dd:07:c6:aa:8d:
                    ba:eb:ba:cd:64:71:55:ad:5a:11:e9:a2:83:c3:7e:
                    b6:db:70:64:b0:c1:89:2b:c6:ad:10:8c:a4:94:66:
                    58:36:a6:0c:12:cb:7a:11:9a:76:2b:61:10:45:b6:
                    19:d2:6c:8e:55:f3:9b:48:7e:a1:42:5a:90:b5:90:
                    3e:b3:96:73:3f:d3:70:9e:45:9e:54:bf:bc:64:57:
                    00:71:41:a9:5f:14:3f:96:1f:f7:69:8e:34:ab:86:
                    8a:32:81:33:35:c7:69:43:4b:68:09:c7:38:10:ab:
                    55:78:ac:f0:99:64:3c:83:b6:19:71:ff:7a:5d:cd:
                    40:1c:f3:e0:e8:fc:5a:77:5c:d1:91:fe:2b:09:54:
                    a7:f6:e7:19:7a:5c:40:d0:54:98:5a:96:70:79:a1:
                    62:2f:84:f8:7a:3e:97:a8:92:0b:70:ad:7a:48:ca:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5E:A1:55:AA:12:2A:AE:3D:F4:D3:0B:E8:81:0D:A2:43:8F:5A:DA
            X509v3 Authority Key Identifier:
                keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:e3:85:22:02:64:60:b6:3b:bd:14:38:b1:02:82:d7:92:
         7d:89:83:c7:fc:11:a7:f0:ec:4c:70:31:1c:cf:4e:6b:f6:f6:
         e7:0a:73:a8:69:e1:49:28:0d:17:71:35:4d:45:85:a0:f5:2b:
         3d:e6:68:2e:2c:3c:3f:af:7e:e9:da:58:02:b0:b3:d7:60:af:
         16:a1:57:9c:83:1a:b6:86:d8:38:db:f8:a6:a1:ba:3f:f5:ee:
         50:10:4c:fc:0d:de:a6:43:0f:b7:15:fe:49:8e:49:07:4c:6d:
         ba:54:83:16:79:1b:de:73:f5:c6:3e:b3:2d:21:4f:cd:d8:c4:
         72:2a:b6:77:9f:fa:62:54:94:4b:55:57:4d:83:7f:e1:6e:f8:
         ec:3f:79:dd:cc:eb:3f:fc:7c:a4:21:dd:20:1e:49:34:1a:1f:
         3a:41:5b:a1:c4:aa:6f:42:c8:72:ef:ab:49:b2:f8:0b:ae:be:
         a2:88:53:9e:14:12:a2:6c:66:15:95:08:c9:26:92:f0:25:39:
         f3:eb:2b:49:bb:d6:9c:d7:e3:54:69:14:ad:76:b5:5f:96:0a:
         45:d9:9c:89:45:c3:14:9b:2e:53:32:ef:58:fd:b1:4d:2d:3c:
         d5:59:cd:da:78:ff:95:d3:e1:9e:a5:14:a2:dd:5e:a8:2a:61:
         bc:eb:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----