Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
File:                     tsaaSiFb3h0yk03chd6vj9nJRHk.mft (raw, json)
Hash identifier:          uEeI2VAGsRBdqnc7fq5/onJ9FzUJ8K30C8tbOQobPq0=
Subject key identifier:   7E:C6:38:90:EC:82:6F:27:CF:1C:E0:48:21:27:45:E7:0B:3A:87:21
Authority key identifier: B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
Certificate issuer:       /CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Certificate serial:       019356F6DA14D69B7F4977C0136A2CE78D7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
Manifest number:          0B1D
Signing time:             Sat 23 Nov 2024 03:00:38 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:38 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:38 +0000
Files and hashes:         1: tsaaSiFb3h0yk03chd6vj9nJRHk.crl (hash: O0DIVnNH4RKjiCfA+xDqVpQrIfcuz2hWsJPWMek+cVo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:da:14:d6:9b:7f:49:77:c0:13:6a:2c:e7:8d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
        Validity
            Not Before: Nov 23 03:00:38 2024 GMT
            Not After : Nov 24 03:00:38 2024 GMT
        Subject: CN=7ec63890ec826f27cf1ce048212745e70b3a8721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:72:25:f7:f0:39:66:59:80:97:ef:af:86:db:
                    43:1d:df:8b:98:ab:79:c3:da:25:cf:ab:6e:9c:77:
                    c8:45:0d:87:46:ba:5a:29:e4:4b:34:4b:2d:d6:91:
                    27:fc:15:38:a8:4b:96:cf:a4:84:d4:59:e4:42:79:
                    9e:b5:fa:79:f3:bf:24:d7:35:ca:75:cc:5e:24:d0:
                    f2:5a:77:12:a8:01:4b:e0:11:2c:8e:84:4a:23:7f:
                    46:a8:5e:8b:1b:12:54:ae:03:5a:d3:52:bc:9c:ad:
                    9f:7d:04:2f:24:b9:15:8a:71:13:21:4f:bf:cd:ed:
                    eb:9e:aa:fb:fb:38:51:0f:a7:22:3c:2a:eb:e6:ff:
                    a5:ae:05:c1:22:84:a4:50:f0:42:c6:4b:6f:dc:fb:
                    90:24:1b:62:c0:d5:74:24:b1:00:f4:2a:34:02:6a:
                    fd:1f:d8:98:d0:23:11:3f:8a:7d:ef:f9:73:a8:8e:
                    4c:a6:69:d7:fb:16:0e:0c:c2:e7:6e:40:a6:cb:8b:
                    6c:4b:5b:b4:55:8a:f4:e0:9b:2a:c0:1b:b3:67:4f:
                    9a:d4:92:e9:1c:66:5a:4a:96:f4:fd:de:38:2e:9f:
                    09:b4:0e:9d:0e:99:df:9a:5f:9a:4f:1d:c7:22:8c:
                    f5:48:4d:8c:b8:36:eb:50:8d:e6:d8:0a:bd:be:b9:
                    7f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C6:38:90:EC:82:6F:27:CF:1C:E0:48:21:27:45:E7:0B:3A:87:21
            X509v3 Authority Key Identifier:
                keyid:B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:ab:04:a2:eb:98:93:72:51:0d:40:99:43:be:1d:58:3e:
         a6:c3:f2:69:81:83:37:09:18:dd:fd:2e:42:8b:e2:dd:20:82:
         75:21:ef:ce:45:6f:64:10:ec:84:03:9b:ab:8c:b0:30:1d:d9:
         e2:54:c4:de:f8:62:10:76:af:8f:06:c3:53:be:39:14:46:a9:
         8d:ab:ab:75:e2:c4:5c:9f:7a:f4:5e:f1:5e:7f:34:e3:93:d0:
         f6:9c:23:7c:7b:23:58:87:ea:b8:fe:5e:b1:1d:33:a6:2c:ed:
         bf:ca:14:50:0d:e0:f2:35:97:16:b8:36:66:5d:87:bb:e6:76:
         d7:99:82:6f:02:cf:ab:a4:05:96:31:93:2b:7e:86:11:1d:f5:
         bb:7c:6e:6c:30:8f:77:56:b0:12:22:97:18:ea:ec:21:14:2a:
         7a:c7:36:6c:ff:47:27:4c:1a:88:94:28:9d:cf:72:44:e1:ef:
         6f:a5:c6:ca:22:7e:47:a0:54:46:7e:eb:7f:2a:47:0d:13:0d:
         93:17:2e:a1:4b:9c:a3:30:23:f9:01:9e:88:a5:3f:7e:fa:bb:
         cd:9b:58:7b:5d:fb:e8:bf:d0:e5:e3:d9:bb:3e:3b:cb:5a:8c:
         4d:1f:38:14:ee:21:da:fe:8d:4f:1b:ef:82:c6:4c:09:9f:bb:
         a9:e9:32:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----