Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
File:                     LMJf8ykY8LSTBiWdSDr7njgaORU.mft (raw, json)
Hash identifier:          NRa7glWqagya2s6/8Tdavw1yENcWf4AwlT9+PG6ObdA=
Subject key identifier:   E9:CF:C1:73:CD:F3:98:10:91:6E:53:AB:29:94:08:0A:FB:51:F1:2A
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Certificate issuer:       /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial:       018F885B216A621792D345E9C7957B57E4DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
Manifest number:          1182
Signing time:             Fri 17 May 2024 21:00:24 +0000
Manifest this update:     Fri 17 May 2024 21:00:24 +0000
Manifest next update:     Sat 18 May 2024 21:00:24 +0000
Files and hashes:         1: LMJf8ykY8LSTBiWdSDr7njgaORU.crl (hash: qY4OlbycJ+1pe9k05UKTHeGsfb1wHHVA5WZc4OjmvBc=)
                          2: Y89DXWPW7-kVwT02BTSBCKQImg8.roa (hash: bGiHH3aymSGbPp9ZbgkW4SNPH1VZPdzexMT6N50kL6w=)
                          3: xmGe7JJreGajFrLjnndYWuVBq3Y.roa (hash: QVkkGv0Hl8DhEZ9Bo/ovH4gawvUGgcYGy4IlWy3O+v8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:21:6a:62:17:92:d3:45:e9:c7:95:7b:57:e4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
        Validity
            Not Before: May 17 21:00:24 2024 GMT
            Not After : May 18 21:00:24 2024 GMT
        Subject: CN=e9cfc173cdf39810916e53ab2994080afb51f12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:eb:04:fa:52:2f:31:13:c7:eb:ee:8d:61:
                    44:78:f5:ca:c4:0e:e6:73:cf:74:54:02:91:9c:a0:
                    9f:a3:ad:f7:65:b3:86:81:5e:c1:05:bc:22:2c:52:
                    ca:2e:7c:10:73:6f:56:d0:92:78:8c:9d:1e:9f:55:
                    d8:f8:e8:85:d2:38:10:40:a8:fa:3a:ab:de:5e:98:
                    e8:46:b3:3f:5c:aa:a2:c8:d3:65:99:55:77:55:ec:
                    c9:5c:46:08:6a:1b:0f:b2:35:3e:c7:4c:93:6a:d1:
                    18:b8:3e:0e:e4:ce:da:ce:67:4d:8a:53:96:dd:69:
                    2f:36:e0:67:c3:ec:dd:d8:c5:87:fe:bd:23:2f:5f:
                    0b:bd:d2:ce:59:05:e1:9e:6f:4e:c9:53:47:8f:8a:
                    1e:c1:fb:49:fe:93:f0:32:94:43:37:ee:b7:a1:7c:
                    7a:71:67:42:df:91:13:45:b4:de:14:77:c0:d7:d3:
                    a5:9c:de:48:10:e0:dc:06:fc:5a:d5:3c:ee:78:53:
                    cc:84:4c:f6:a2:d0:4b:88:4a:dc:22:7f:f5:a8:4b:
                    14:dd:4c:22:77:de:e6:21:5d:88:01:75:1c:b0:84:
                    c2:6d:62:cb:5a:68:b2:11:ac:b3:13:86:40:78:78:
                    f8:05:d2:39:c8:36:9a:29:fb:2d:18:e6:f6:e4:94:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CF:C1:73:CD:F3:98:10:91:6E:53:AB:29:94:08:0A:FB:51:F1:2A
            X509v3 Authority Key Identifier:
                keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:01:75:7f:75:cf:36:d9:47:db:76:be:6e:d4:d8:63:4f:34:
         4a:68:e3:72:62:d2:72:5b:ed:8a:a6:91:7c:2a:ae:10:2f:91:
         db:75:61:7f:69:d2:34:9d:bc:47:c3:9b:ec:eb:53:df:24:fa:
         35:c2:9a:a5:79:bd:d9:f3:30:5e:46:bf:21:7c:51:45:ef:b7:
         05:fc:46:ae:c0:07:7a:4e:6a:94:0d:5b:2f:bd:e4:1d:5a:8a:
         fd:75:c8:17:75:38:8e:8d:c0:a2:98:fd:ed:9b:e7:a3:1d:a6:
         42:f4:d2:79:bd:55:50:cb:ae:85:51:a5:99:67:0b:23:c2:b1:
         b5:f3:6c:89:31:04:c7:79:e2:d4:92:86:4d:6d:20:9d:5a:01:
         97:5f:b3:26:a0:a7:57:e7:eb:b8:f3:53:88:bc:e2:51:fd:e4:
         8b:25:e0:45:28:05:87:cd:ba:66:cf:64:dc:c3:ee:d1:e2:44:
         d4:5a:1d:e6:4d:23:53:ca:fe:fb:f7:16:0b:d5:5f:b0:ac:2a:
         b4:08:68:cb:42:b8:dd:b4:71:4c:d3:ed:10:13:21:76:30:df:
         a8:de:69:91:5d:51:62:f0:a2:c0:93:4a:60:c2:05:d8:ed:52:
         75:4e:f6:3f:f5:30:ed:d8:67:fc:e8:0d:54:46:36:7e:5f:ed:
         a3:a3:67:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----