Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
File:                     lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft (raw, json)
Hash identifier:          5G451yHCkkZ0G+QfQtiwuIbaVtJeeXivFQT+w/4BmsI=
Subject key identifier:   73:F5:9C:05:CF:A1:F6:0D:4B:0B:1E:0B:4D:49:A7:B4:48:1B:75:05
Authority key identifier: 96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6
Certificate issuer:       /CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
Certificate serial:       01936A46A5350EAD6538168CD515ADB8898A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
Manifest number:          0245
Signing time:             Tue 26 Nov 2024 21:00:34 +0000
Manifest this update:     Tue 26 Nov 2024 21:00:34 +0000
Manifest next update:     Wed 27 Nov 2024 21:00:34 +0000
Files and hashes:         1: lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl (hash: u9cztZOoHqRLh4HNYYa9jRKT1/RebN16DwsiYt3+cZY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:46:a5:35:0e:ad:65:38:16:8c:d5:15:ad:b8:89:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96f7523a7b332ebdf114a5c08dc1d5f32cbd73c6
        Validity
            Not Before: Nov 26 21:00:34 2024 GMT
            Not After : Nov 27 21:00:34 2024 GMT
        Subject: CN=73f59c05cfa1f60d4b0b1e0b4d49a7b4481b7505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:58:f3:b7:17:0c:9e:18:2b:3c:da:9e:96:
                    aa:71:db:ed:55:69:f6:00:68:0e:ab:56:3f:e5:0e:
                    04:7b:30:a6:bb:d9:89:31:a9:e8:1c:00:58:b3:4b:
                    24:dd:6c:8c:1f:34:f8:db:5b:c3:35:8a:a5:60:fc:
                    43:42:cc:a6:08:2a:46:49:1d:e5:68:fe:6a:12:6e:
                    7b:b4:6f:b1:18:d0:83:09:24:6f:70:91:c4:e1:03:
                    e2:29:fa:8f:40:ee:53:59:1f:95:1e:7b:68:cb:5b:
                    d9:0f:a9:76:85:c7:0c:62:f9:63:58:e2:04:c3:91:
                    1f:cf:29:15:81:2b:0e:6e:54:cf:53:f0:56:49:9f:
                    6a:86:f9:7f:5e:11:19:44:bb:50:53:49:d2:44:b6:
                    cf:f2:0b:8f:f9:2b:f3:d0:a6:16:b5:a8:46:0e:d8:
                    05:84:d5:cc:27:39:b9:74:3f:e3:1c:d2:6c:c6:4a:
                    2b:8a:ec:70:45:a9:4f:5e:37:71:60:77:43:c6:9a:
                    7e:6b:f2:3d:95:86:bd:75:fd:8d:e2:f0:82:d8:91:
                    19:fb:32:a5:6d:cf:ce:db:ef:85:65:56:59:12:16:
                    ff:c9:4f:70:aa:28:21:f2:42:0f:aa:d1:a1:e2:52:
                    49:3c:15:d0:b1:27:b2:f1:11:59:36:cf:5f:a9:b6:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F5:9C:05:CF:A1:F6:0D:4B:0B:1E:0B:4D:49:A7:B4:48:1B:75:05
            X509v3 Authority Key Identifier:
                keyid:96:F7:52:3A:7B:33:2E:BD:F1:14:A5:C0:8D:C1:D5:F3:2C:BD:73:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lvdSOnszLr3xFKXAjcHV8yy9c8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0f95e9-b4db-47ab-be55-36057e354876/1/lvdSOnszLr3xFKXAjcHV8yy9c8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:2d:88:6f:e4:83:92:37:56:7c:af:9d:70:6b:0a:63:96:
         e8:87:e9:cd:80:bb:7a:dc:8a:2c:d6:96:d4:fd:94:a2:c7:cc:
         51:e8:74:99:eb:38:88:db:29:5c:d4:a8:c0:3d:29:61:fe:5d:
         12:fa:2a:c8:3f:11:ff:a5:6d:3c:cb:85:6f:ba:80:29:f7:0e:
         91:b9:0e:99:cb:64:c2:44:c2:27:dd:e6:f6:e1:b7:58:ad:e0:
         45:60:d1:92:3e:45:35:1e:bd:8c:d2:c6:94:14:88:83:f3:26:
         59:c7:05:83:f1:9b:e4:37:d4:8a:e0:12:8a:d2:1d:0b:04:d7:
         92:6e:28:e2:e4:f5:59:25:61:eb:32:f6:b3:21:29:36:e9:e8:
         d1:24:52:10:0a:da:c2:64:1d:99:73:9b:d4:97:0e:87:f3:74:
         b9:12:11:ca:1f:e2:69:a6:7e:49:72:93:1e:70:b3:03:40:0d:
         bf:71:29:7e:61:de:2b:6b:d4:9f:ee:ea:26:fe:9c:77:fa:b2:
         79:cf:5b:d2:f1:1a:be:2d:db:68:a8:e6:fa:a9:7a:bf:b3:69:
         1b:56:be:de:49:32:57:4e:8f:ee:b0:19:68:4a:26:3a:e9:7f:
         a8:af:7a:c3:8b:02:f1:0c:13:7a:f7:52:be:55:be:3f:d1:33:
         88:20:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----