Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
File:                     l4jeG3V-qqtedrGW4Xi2C15sJAw.mft (raw, json)
Hash identifier:          ErpWRGWctNycLB05pqs0UWmMFa3PVBbRxlhpl1u5Y9A=
Subject key identifier:   1C:0F:39:97:2C:BA:CB:F7:BE:75:94:C0:97:5B:A0:48:5B:E3:60:18
Authority key identifier: 97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C
Certificate issuer:       /CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
Certificate serial:       019356BF9CAEB27251B3A1FC6FF752B6DF63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
Manifest number:          0246
Signing time:             Sat 23 Nov 2024 02:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 02:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 02:00:18 +0000
Files and hashes:         1: l4jeG3V-qqtedrGW4Xi2C15sJAw.crl (hash: 8LI29mdDNfdc3sfjAH0Po9MogQp1BdRYJ7yqSK06VO8=)
                          2: rMWPy0hT6r2aLpS1-5IDNfJsvmE.roa (hash: BIBAUHxwg6DcuSt3N2CxeE3iWFL3Q/W4s1rWoVY1JsE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 02:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:bf:9c:ae:b2:72:51:b3:a1:fc:6f:f7:52:b6:df:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9788de1b757eaaab5e76b196e178b60b5e6c240c
        Validity
            Not Before: Nov 23 02:00:18 2024 GMT
            Not After : Nov 24 02:00:18 2024 GMT
        Subject: CN=1c0f39972cbacbf7be7594c0975ba0485be36018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:db:71:eb:69:ed:04:0b:60:00:8b:57:fe:36:
                    c5:6b:59:dc:e3:90:c4:d6:b6:0f:5a:91:0f:39:a4:
                    28:bf:10:dd:e5:14:32:ea:00:54:ff:04:b8:4a:c2:
                    55:47:9a:11:84:28:df:76:4e:cd:74:bd:b1:ac:96:
                    eb:74:1a:92:e7:c7:3c:09:40:5e:f5:bd:52:d1:d6:
                    56:4a:37:92:fc:11:0c:08:7d:85:e8:eb:9f:e3:6b:
                    25:58:53:81:26:60:84:54:8f:a5:ff:5b:9b:62:48:
                    c6:7c:14:4d:4f:d9:b3:42:46:30:f7:55:21:b6:3d:
                    1a:c6:83:05:81:ae:60:2f:36:0f:b0:a5:d3:10:76:
                    02:40:07:48:8d:17:4a:8e:56:10:f7:f8:ac:d9:4d:
                    9f:6d:8c:f2:2f:8a:67:ba:d8:f0:b0:5f:f5:43:de:
                    e1:20:b0:e1:08:e6:46:59:09:3d:2e:e9:26:f1:f0:
                    dc:e1:6e:de:24:7e:65:6a:a3:3c:dc:2b:45:44:18:
                    ad:f7:b8:44:43:13:e1:91:8b:2b:c8:60:df:32:01:
                    99:4a:fb:dd:1c:a8:8e:fa:17:9e:6a:21:34:f5:cd:
                    0d:8a:c0:03:a8:21:1c:e1:5f:91:66:63:0a:55:09:
                    e3:4a:19:ab:ae:2a:70:5f:af:0b:be:4c:d1:c9:32:
                    82:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0F:39:97:2C:BA:CB:F7:BE:75:94:C0:97:5B:A0:48:5B:E3:60:18
            X509v3 Authority Key Identifier:
                keyid:97:88:DE:1B:75:7E:AA:AB:5E:76:B1:96:E1:78:B6:0B:5E:6C:24:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4jeG3V-qqtedrGW4Xi2C15sJAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/73ca57-4eee-4c29-814a-81790f61e794/1/l4jeG3V-qqtedrGW4Xi2C15sJAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:c3:a6:c7:e5:dc:25:7a:a5:71:e1:96:b4:6e:44:3a:9b:92:
         89:34:0b:1b:2c:e5:fa:a5:6a:51:93:37:28:e3:7e:a7:49:75:
         d6:82:a9:df:83:3a:5d:2b:f9:ad:b9:16:95:c8:26:c3:fd:6f:
         45:5d:81:9f:b1:17:17:1f:a2:ab:d0:e3:10:7f:6c:0a:5a:9c:
         3b:87:c8:02:91:de:84:ba:de:d1:ab:f3:7f:70:c9:69:10:92:
         e1:92:0c:72:dc:0f:bc:73:de:2b:c3:67:ac:80:50:06:d3:63:
         24:a9:47:53:69:f4:52:09:fc:b7:db:99:12:d7:06:58:d6:6b:
         ef:67:fb:6a:e9:f3:23:d2:5c:0d:00:4c:a8:cd:01:9a:f0:db:
         e8:0c:bf:21:67:38:55:5a:5c:06:77:28:b1:b7:ba:67:2f:36:
         3f:e2:2a:cc:42:18:97:ff:af:8d:63:95:da:69:cd:d3:e8:ac:
         ad:c2:14:92:80:74:be:c4:15:f5:1d:49:17:35:d5:f4:4d:da:
         fc:12:43:12:ac:c6:e0:db:ed:96:8d:90:3f:ad:28:cc:5d:96:
         f8:50:c2:9f:59:7b:81:f4:06:17:eb:f6:c9:d6:3b:b0:09:3b:
         6f:9e:74:2b:a5:c9:09:fd:69:1b:d5:4c:8a:db:66:e8:0b:c7:
         db:e0:16:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----