Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          uy/5kLWJzO6HsNDtEpAGcCPmAc3C6/BuMrxVVzRWcLo=
Subject key identifier:   04:C7:5F:DB:C3:51:0E:8C:72:34:75:08:23:E1:1D:C4:8E:74:25:4F
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       018F885ADF9DC547AED3F10E0A9CA8DF8751
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          017C
Signing time:             Fri 17 May 2024 21:00:07 +0000
Manifest this update:     Fri 17 May 2024 21:00:07 +0000
Manifest next update:     Sat 18 May 2024 21:00:07 +0000
Files and hashes:         1: hQ-r_UxZdQynEeqMFTmJvBOBrpk.roa (hash: jgWQp6HyPodhqXlv/9F1CJTsyTmqyMgNdfAdbOMTN9Q=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: 3oyg0NgtxzRar2N27eAR27FcCTye65d7NHP5ojrkN/k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5a:df:9d:c5:47:ae:d3:f1:0e:0a:9c:a8:df:87:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: May 17 21:00:07 2024 GMT
            Not After : May 18 21:00:07 2024 GMT
        Subject: CN=04c75fdbc3510e8c7234750823e11dc48e74254f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c7:c3:07:0e:af:83:bf:2c:96:89:9f:37:55:
                    25:85:33:1f:2d:42:5b:66:cb:84:d4:69:22:db:70:
                    1d:ba:43:7b:76:0c:36:82:58:fc:09:d4:97:8d:09:
                    da:d2:38:84:6d:f1:6d:34:fa:c5:0e:cf:bb:86:d2:
                    18:5a:14:f7:c2:86:7e:d6:40:8e:e5:58:f0:f8:13:
                    79:ca:75:50:ed:fa:91:ff:5a:c7:ac:77:b1:a5:61:
                    55:9a:47:61:da:e8:dc:14:30:3c:1c:51:92:63:90:
                    72:23:40:02:29:3a:47:eb:ad:d8:84:78:49:c2:fc:
                    25:37:26:6f:9f:d2:97:75:bf:fa:60:26:2b:e8:48:
                    9c:2a:48:d7:37:d0:28:1d:c2:0a:1c:ea:5a:9a:1f:
                    e9:b4:64:b9:72:b1:1d:75:ed:49:05:1b:ec:e7:73:
                    dd:c2:01:55:c3:5a:3a:8b:b4:b5:62:76:1b:bd:e3:
                    a4:52:f9:e0:d1:0b:8b:7a:22:5d:c1:f4:fc:d4:d5:
                    a1:70:a9:63:56:6c:82:c4:e9:e9:15:7a:e2:d5:5c:
                    23:67:f8:16:5a:8f:24:eb:25:5b:2a:84:72:40:1f:
                    09:41:ca:b9:c4:7e:0a:a0:42:42:9a:0e:05:cc:bd:
                    6b:ad:b8:bc:80:3d:42:27:da:43:34:e1:0f:7a:05:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C7:5F:DB:C3:51:0E:8C:72:34:75:08:23:E1:1D:C4:8E:74:25:4F
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:14:5f:22:ae:47:90:99:b0:cb:6b:00:34:b4:4b:d2:75:99:
         c4:58:1b:ef:8d:6e:da:a5:79:15:e3:58:e1:62:3c:c4:64:05:
         8e:17:9c:f9:12:3e:08:12:1d:f1:9d:c6:79:bf:37:6d:ec:a1:
         de:ca:19:8e:e4:51:23:5b:67:af:75:bf:43:04:8c:82:b3:39:
         b5:23:93:ef:ba:d6:1e:24:cc:45:63:f6:1d:d3:29:30:fd:41:
         42:aa:5a:5b:4d:39:26:3a:42:8e:45:ce:ae:9f:92:c8:50:88:
         78:ae:d7:4e:25:a5:14:e0:6b:37:c7:21:16:eb:17:9c:0b:0b:
         ee:97:0c:84:0b:ba:23:7b:fd:7b:af:3a:66:07:52:a9:69:cd:
         36:17:3c:aa:f3:c1:1f:61:32:7d:77:8a:04:57:4e:0b:08:7d:
         cd:c2:63:82:c1:93:d1:a3:f0:16:7e:15:41:79:13:7f:4b:20:
         27:35:c8:12:2b:10:a5:c4:5f:b8:64:80:e0:23:f3:1b:3d:39:
         34:41:82:27:5c:f3:ce:0e:7a:d3:1c:1a:d9:1d:17:48:e3:f2:
         98:cf:da:92:c0:64:b9:19:ea:64:e5:15:ae:71:ea:ac:09:43:
         ae:c7:55:6d:b0:e0:24:63:f4:89:ac:16:18:99:7c:e1:07:5c:
         5d:b9:8a:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+IWt+dxUeu0/EOCpyo34dRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZTk3ZmJlNjdkOTVkZjZlNGE4MDY1ZTI2NzVlMDQwZDZl
ODBlZmMwHhcNMjQwNTE3MjEwMDA3WhcNMjQwNTE4MjEwMDA3WjAzMTEwLwYDVQQD
EygwNGM3NWZkYmMzNTEwZThjNzIzNDc1MDgyM2UxMWRjNDhlNzQyNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cfDBw6vg78slomfN1UlhTMfLUJb
ZsuE1Gki23AdukN7dgw2glj8CdSXjQna0jiEbfFtNPrFDs+7htIYWhT3woZ+1kCO
5Vjw+BN5ynVQ7fqR/1rHrHexpWFVmkdh2ujcFDA8HFGSY5ByI0ACKTpH663YhHhJ
wvwlNyZvn9KXdb/6YCYr6EicKkjXN9AoHcIKHOpamh/ptGS5crEdde1JBRvs53Pd
wgFVw1o6i7S1YnYbveOkUvng0QuLeiJdwfT81NWhcKljVmyCxOnpFXri1VwjZ/gW
Wo8k6yVbKoRyQB8JQcq5xH4KoEJCmg4FzL1rrbi8gD1CJ9pDNOEPegW7kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATHX9vDUQ6McjR1CCPhHcSOdCVPMB8GA1UdIwQY
MBaAFLXpf75n2V325KgGXiZ14EDW6A78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81ODcyYzItZDUzZS00OGFhLWI1ODEt
YmI0NGE4MjhjZWE3LzEvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81ODcyYzItZDUzZS00OGFhLWI1ODEtYmI0NGE4MjhjZWE3
LzEvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRRfIq5H
kJmwy2sANLRL0nWZxFgb741u2qV5FeNY4WI8xGQFjhec+RI+CBId8Z3Geb83beyh
3soZjuRRI1tnr3W/QwSMgrM5tSOT77rWHiTMRWP2HdMpMP1BQqpaW005JjpCjkXO
rp+SyFCIeK7XTiWlFOBrN8chFusXnAsL7pcMhAu6I3v9e686ZgdSqWnNNhc8qvPB
H2EyfXeKBFdOCwh9zcJjgsGT0aPwFn4VQXkTf0sgJzXIEisQpcRfuGSA4CPzGz05
NEGCJ1zzzg560xwa2R0XSOPymM/aksBkuRnqZOUVrnHqrAlDrsdVbbDgJGP0iawW
GJl84QdcXbmKPw==
-----END CERTIFICATE-----