Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
File:                     nLIR1_j6Gq3epEDFASab2vHKtFI.mft (raw, json)
Hash identifier:          MAtiKTZl1uoXlLDt1kBYhP7cn6snyIhRAKCYdbqMUGo=
Subject key identifier:   74:DA:72:36:F3:19:CD:36:17:78:00:DD:AE:25:06:4B:1D:4C:F4:2C
Authority key identifier: 9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52
Certificate issuer:       /CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
Certificate serial:       019357D2902E6827CB4E80D71C106F3831F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
Manifest number:          136E
Signing time:             Sat 23 Nov 2024 07:00:37 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:37 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:37 +0000
Files and hashes:         1: nLIR1_j6Gq3epEDFASab2vHKtFI.crl (hash: 87bL5nQrsYTI7dgyCfhj4LJKXyQT2frygYsfXvDSxak=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:90:2e:68:27:cb:4e:80:d7:1c:10:6f:38:31:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb211d7f8fa1aaddea440c501269bdaf1cab452
        Validity
            Not Before: Nov 23 07:00:37 2024 GMT
            Not After : Nov 24 07:00:37 2024 GMT
        Subject: CN=74da7236f319cd36177800ddae25064b1d4cf42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:80:cf:38:1b:4a:0d:e7:34:05:77:00:9c:
                    33:67:9c:05:26:e1:18:4d:3c:b2:f4:47:59:9c:c7:
                    dd:00:82:de:9f:0d:74:1c:d6:cf:1f:e7:03:13:d2:
                    8a:8a:9a:84:9c:4e:44:35:dd:86:29:0a:57:d6:77:
                    11:26:bf:7d:df:7f:eb:af:e7:40:a7:cf:d7:17:df:
                    df:7b:6e:69:66:c9:2f:1d:bc:93:a5:11:ee:fc:d4:
                    ce:71:0a:06:45:7e:ac:a5:e0:36:72:de:0c:84:80:
                    4d:62:44:b7:ed:6d:77:f0:4f:0b:55:4c:a9:9b:91:
                    26:93:53:aa:9c:cf:7e:d5:a2:c5:71:30:33:97:ee:
                    ae:87:e7:5a:ae:b9:02:44:80:44:4d:29:99:86:e9:
                    7c:f5:69:6f:b4:de:bd:2a:8f:ed:70:43:e7:e0:c9:
                    ad:14:cb:85:47:4e:85:48:2d:b8:4a:19:94:e2:9c:
                    41:fa:a6:f8:dc:39:96:ff:0f:a7:46:b4:56:05:d9:
                    b2:30:5b:07:ff:34:31:17:de:63:57:d1:20:86:e4:
                    38:8a:a7:2d:53:ef:93:b5:98:96:a3:c7:86:07:43:
                    b2:41:17:10:61:20:21:3f:83:b9:70:9f:c9:55:69:
                    b9:b1:78:02:84:3e:4a:c4:b3:4c:5c:e7:d5:43:2a:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DA:72:36:F3:19:CD:36:17:78:00:DD:AE:25:06:4B:1D:4C:F4:2C
            X509v3 Authority Key Identifier:
                keyid:9C:B2:11:D7:F8:FA:1A:AD:DE:A4:40:C5:01:26:9B:DA:F1:CA:B4:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLIR1_j6Gq3epEDFASab2vHKtFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c3107b-8155-4a2a-9b59-2adfec837111/1/nLIR1_j6Gq3epEDFASab2vHKtFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:46:17:74:3f:52:4c:05:bd:d7:fd:5d:bd:4d:c7:a3:8f:17:
         c2:d9:c7:b5:f8:ae:3d:47:a4:98:50:04:53:07:82:1d:ec:39:
         de:5d:c9:51:17:2b:f1:7e:7d:b4:94:f8:53:e7:27:5a:ac:de:
         d5:84:65:05:16:03:ab:e3:33:60:e5:63:cd:d9:86:4a:37:73:
         9b:1f:10:ea:ad:88:32:96:73:5d:27:f3:15:77:7b:61:4b:c8:
         fc:7a:b9:6f:ff:e3:f5:d2:83:5f:9d:23:09:ee:74:21:00:9d:
         95:e9:41:8c:9a:15:9e:fa:72:4e:b4:63:a9:46:9b:84:76:be:
         5d:bf:f3:ed:2e:44:f7:c5:cc:80:52:80:6b:ba:e1:7e:4e:f7:
         dc:8f:ca:74:f5:3e:66:e8:50:92:be:98:c9:07:15:e8:09:6d:
         40:18:e6:56:38:c4:fd:c7:bb:66:2c:2c:2d:9c:aa:b8:d0:ca:
         bd:10:98:75:6e:3e:4e:6d:63:fa:20:51:bd:0a:2a:09:34:fd:
         a1:57:f1:27:89:fc:6b:94:58:62:41:c8:a2:9f:85:7c:0d:5a:
         70:9f:6f:40:e3:c6:b6:c7:84:d1:12:bd:2a:5a:99:b1:9a:3d:
         da:98:2d:b9:9a:20:32:69:24:74:1e:75:ab:19:e5:fd:ed:5e:
         47:b9:15:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----