Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
File:                     tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json)
Hash identifier:          wELhKXJ5n4KQU45/hS0RLBEDlDz0roR8K1jzZvRVSjQ=
Subject key identifier:   91:94:7C:4D:F4:F5:AF:07:19:B4:A1:74:5F:40:17:8E:07:8D:C1:CD
Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC
Certificate issuer:       /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
Certificate serial:       0193652050DDCFD6885E51F1CEF3BC6D4223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
Manifest number:          037C
Signing time:             Mon 25 Nov 2024 21:00:36 +0000
Manifest this update:     Mon 25 Nov 2024 21:00:36 +0000
Manifest next update:     Tue 26 Nov 2024 21:00:36 +0000
Files and hashes:         1: hQ-r_UxZdQynEeqMFTmJvBOBrpk.roa (hash: jgWQp6HyPodhqXlv/9F1CJTsyTmqyMgNdfAdbOMTN9Q=)
                          2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: hNCu20LhlYvFdCnMWIU+RfmhzGbnWapUQCMJLijX7zU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:65:20:50:dd:cf:d6:88:5e:51:f1:ce:f3:bc:6d:42:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc
        Validity
            Not Before: Nov 25 21:00:36 2024 GMT
            Not After : Nov 26 21:00:36 2024 GMT
        Subject: CN=91947c4df4f5af0719b4a1745f40178e078dc1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ea:a1:a2:f0:b3:d8:90:d7:ee:3a:cc:bd:d7:
                    3b:77:a9:8b:3e:98:83:ea:15:e2:05:7c:8a:4f:49:
                    ee:12:be:45:c6:30:a3:de:bc:e3:8c:93:6e:91:69:
                    bb:f3:22:32:ca:f0:d7:9a:cb:d8:4f:5a:1c:ae:97:
                    e6:ff:5f:26:43:7a:c8:39:f3:cd:2f:96:81:22:6c:
                    f2:31:1f:96:2a:97:64:ea:97:c0:43:3b:78:fb:e5:
                    45:4e:55:0a:8d:45:12:d7:2f:3d:60:c6:c8:57:1f:
                    89:51:2e:ff:6f:7d:77:d3:53:db:13:bb:ff:15:72:
                    93:7d:5f:76:d6:f9:3a:ab:36:20:95:56:41:9f:44:
                    c6:1c:bb:c7:6f:a4:5e:24:87:da:a2:94:76:7a:f1:
                    6d:7b:be:e1:60:38:97:34:68:ef:7e:2b:8c:00:d1:
                    cc:1b:21:f7:5e:55:71:76:bb:9c:b3:b6:83:6a:ee:
                    2b:a4:de:1e:fc:30:ba:7e:03:42:a8:80:7a:d2:d4:
                    ac:d7:23:fe:69:17:14:fd:f5:6d:16:9c:c7:e5:c7:
                    3b:c2:df:42:6b:2d:65:3c:8a:00:d4:15:ad:7a:41:
                    b1:dd:c4:a2:9c:8c:85:f2:13:e8:14:d7:2b:6f:55:
                    b4:28:b5:49:e3:e4:d8:eb:17:29:c3:91:43:be:77:
                    06:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:94:7C:4D:F4:F5:AF:07:19:B4:A1:74:5F:40:17:8E:07:8D:C1:CD
            X509v3 Authority Key Identifier:
                keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:59:d8:44:47:78:93:96:e5:42:5f:67:17:ce:9e:d2:8c:a2:
         c0:3a:57:c4:14:39:42:80:cf:c1:4f:1c:21:65:b8:c7:2d:ab:
         10:f9:59:4a:1b:bd:2a:4b:e5:67:c4:ce:94:02:4b:0b:05:58:
         9d:c3:28:9c:65:c6:33:40:00:22:69:81:40:a5:98:be:ba:61:
         e0:59:d6:bc:ff:40:d8:b0:e4:46:b3:cc:44:d4:a3:bb:ac:1c:
         c4:5e:19:9b:0f:98:19:33:32:88:ad:b9:15:5f:28:b6:06:16:
         95:6a:45:7e:f5:01:bf:db:63:d4:d0:56:3d:cc:61:63:52:65:
         65:a9:b2:79:40:3b:f5:a6:6d:80:f8:44:17:3a:42:5e:dc:6d:
         b5:04:cd:a6:f4:e2:87:b5:39:36:e5:91:d8:93:57:68:58:fc:
         19:b9:d0:ea:13:41:a0:bb:98:87:0c:05:bb:e2:5a:ee:47:62:
         5e:da:89:d2:a3:ef:be:ef:c4:03:38:85:a1:fd:99:d9:d6:0c:
         6b:98:ca:07:21:e3:9b:44:41:a5:92:5e:bd:7a:53:0d:db:ce:
         c3:ce:67:d8:b0:f8:59:75:9b:07:ea:9e:19:10:56:52:13:2f:
         d2:ce:26:b2:66:47:14:4a:c4:75:c3:07:45:b5:7f:8a:df:df:
         eb:d0:45:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNlIFDdz9aIXlHxzvO8bUIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZTk3ZmJlNjdkOTVkZjZlNGE4MDY1ZTI2NzVlMDQwZDZl
ODBlZmMwHhcNMjQxMTI1MjEwMDM2WhcNMjQxMTI2MjEwMDM2WjAzMTEwLwYDVQQD
Eyg5MTk0N2M0ZGY0ZjVhZjA3MTliNGExNzQ1ZjQwMTc4ZTA3OGRjMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOqhovCz2JDX7jrMvdc7d6mLPpiD
6hXiBXyKT0nuEr5FxjCj3rzjjJNukWm78yIyyvDXmsvYT1ocrpfm/18mQ3rIOfPN
L5aBImzyMR+WKpdk6pfAQzt4++VFTlUKjUUS1y89YMbIVx+JUS7/b31301PbE7v/
FXKTfV921vk6qzYglVZBn0TGHLvHb6ReJIfaopR2evFte77hYDiXNGjvfiuMANHM
GyH3XlVxdrucs7aDau4rpN4e/DC6fgNCqIB60tSs1yP+aRcU/fVtFpzH5cc7wt9C
ay1lPIoA1BWtekGx3cSinIyF8hPoFNcrb1W0KLVJ4+TY6xcpw5FDvncGWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGUfE309a8HGbShdF9AF44HjcHNMB8GA1UdIwQY
MBaAFLXpf75n2V325KgGXiZ14EDW6A78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81ODcyYzItZDUzZS00OGFhLWI1ODEt
YmI0NGE4MjhjZWE3LzEvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81ODcyYzItZDUzZS00OGFhLWI1ODEtYmI0NGE4MjhjZWE3
LzEvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFnYREd4
k5blQl9nF86e0oyiwDpXxBQ5QoDPwU8cIWW4xy2rEPlZShu9KkvlZ8TOlAJLCwVY
ncMonGXGM0AAImmBQKWYvrph4FnWvP9A2LDkRrPMRNSju6wcxF4Zmw+YGTMyiK25
FV8otgYWlWpFfvUBv9tj1NBWPcxhY1JlZamyeUA79aZtgPhEFzpCXtxttQTNpvTi
h7U5NuWR2JNXaFj8GbnQ6hNBoLuYhwwFu+Ja7kdiXtqJ0qPvvu/EAziFof2Z2dYM
a5jKByHjm0RBpZJevXpTDdvOw85n2LD4WXWbB+qeGRBWUhMv0s4msmZHFErEdcMH
RbV/it/f69BFVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:53:45 2024 by rpki-client on console-fra.rpki-client.org