Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
File:                     ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json)
Hash identifier:          cvZEGw8/AzlSsfF50Jb7ukIxUHaEZL4g4sV+DUGCV5U=
Subject key identifier:   65:A7:97:34:08:0B:60:A0:83:19:EC:D8:13:44:88:63:6C:2E:BA:CE
Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
Certificate issuer:       /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Certificate serial:       01936B228E23FD38444D61FF35D9C7DDF41B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
Manifest number:          09A0
Signing time:             Wed 27 Nov 2024 01:00:46 +0000
Manifest this update:     Wed 27 Nov 2024 01:00:46 +0000
Manifest next update:     Thu 28 Nov 2024 01:00:46 +0000
Files and hashes:         1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: +NrMwx2yIAsPQRv+l+B0sBIXxqozt4hNG/KU58Ytd1I=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6b:22:8e:23:fd:38:44:4d:61:ff:35:d9:c7:dd:f4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
        Validity
            Not Before: Nov 27 01:00:46 2024 GMT
            Not After : Nov 28 01:00:46 2024 GMT
        Subject: CN=65a79734080b60a08319ecd8134488636c2ebace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:a2:5f:b4:e4:a7:f9:8d:8d:e9:2e:49:1d:
                    85:7e:8b:67:b1:a5:bf:a6:61:af:dd:25:8c:38:48:
                    ea:d7:1b:32:01:e3:53:5e:b9:2a:4e:c0:37:72:dc:
                    30:36:9f:d6:55:71:6b:bd:04:38:4d:13:dd:56:c1:
                    3f:da:78:da:1b:71:9a:a3:f6:d3:11:d9:7c:34:52:
                    9a:d6:72:cd:3f:52:ce:0a:a6:de:2c:89:dd:d6:33:
                    24:ea:69:a8:16:a3:fb:f9:78:8c:c4:05:a3:4b:83:
                    c6:1d:20:91:e1:f4:43:bf:1c:51:5e:31:8e:56:96:
                    34:cf:ee:fe:e7:43:54:53:82:18:24:c5:72:62:20:
                    6c:37:9b:b3:0f:b6:29:bb:53:3f:09:c4:5c:90:54:
                    1a:65:07:20:9d:74:24:67:2d:3c:8e:23:ec:11:3b:
                    18:86:d7:41:69:f1:81:10:5c:0e:9d:9e:ee:a6:06:
                    fb:1b:ed:d0:bc:34:7e:5d:4e:7c:2e:63:ff:a2:57:
                    d1:77:c9:ff:34:b8:95:41:e4:ce:38:95:bd:2f:a2:
                    31:bd:c2:f6:43:e6:dd:d1:54:0f:be:0c:38:c9:07:
                    82:0f:cd:4f:c4:1b:a0:df:d7:14:36:fa:ef:f7:06:
                    d1:68:8d:f4:20:59:32:4c:84:78:f0:a5:2a:25:91:
                    c7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A7:97:34:08:0B:60:A0:83:19:EC:D8:13:44:88:63:6C:2E:BA:CE
            X509v3 Authority Key Identifier:
                keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7e:59:b7:78:9e:5a:a2:02:32:3a:ec:49:7d:df:1c:b6:8c:
         3d:f6:29:6e:d4:c6:fa:6c:f1:fa:c0:ff:79:26:f1:38:39:0a:
         31:76:50:56:9f:4e:ec:19:08:73:a4:6d:a1:f7:20:d7:dd:70:
         77:8f:4d:93:b8:d0:5b:5a:89:8a:6e:9c:68:c8:ef:ea:0e:62:
         a2:14:d3:4a:de:8b:cf:64:8c:28:fe:bc:d5:4a:f9:30:89:25:
         e5:42:9e:85:b3:56:f9:be:c4:03:39:ae:05:18:9c:4c:8d:8b:
         25:91:32:c9:12:7c:d1:8b:60:7d:d2:8f:74:87:4f:e6:45:75:
         5d:8a:5d:14:19:7b:11:85:8f:4a:29:64:72:37:14:9e:69:eb:
         0f:1c:48:68:6c:70:c0:85:df:b1:f6:36:bd:2f:ef:1f:ce:b3:
         04:ef:fa:c3:5e:80:29:5a:9c:6c:90:c2:fa:02:83:2f:4f:1c:
         26:9b:69:9d:9e:08:ec:ec:f5:f4:0f:c9:ba:5b:93:f5:92:60:
         8d:5b:a6:12:55:57:df:e8:f6:fd:c0:94:44:c1:69:b6:2a:f9:
         ef:6a:46:a0:7a:15:86:72:4a:d0:31:a0:a4:6c:e1:61:52:69:
         b3:32:24:68:d4:3c:f6:94:d0:77:fb:68:e0:14:b3:71:6c:a4:
         9a:17:79:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----