Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
File:                     1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft (raw, json)
Hash identifier:          Gtflp4wL4TCXkRD+o0ODl8t7UgpQYw9Dxb2U7sP//PY=
Subject key identifier:   BD:2B:5B:58:12:7A:1F:AF:7F:AC:ED:09:BC:6A:4A:9B:59:BF:D0:57
Authority key identifier: FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
Certificate issuer:       /CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Certificate serial:       019350C00148375AD8A22B1419C53EE123F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
Manifest number:          0DC5
Signing time:             Thu 21 Nov 2024 22:03:00 +0000
Manifest this update:     Thu 21 Nov 2024 22:03:00 +0000
Manifest next update:     Fri 22 Nov 2024 22:03:00 +0000
Files and hashes:         1: 1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl (hash: qc0R31BaqmsGKmIsFXYg30ZH0t2Uap9LvmbxV6jcriQ=)
                          2: MWov1h277Cf99IdyyPz019fGsec.roa (hash: ZOmCHyjWrBbNt8AKNPOB+yEJGEc92P8H8SwV5Bk97aI=)
                          3: YwqVuAV2cpkECW7gMbP--QkHCd0.roa (hash: 9FGjcAV2UjVlKH6IqkuNlwY4wlIQRxqJWs2YgCz8W4A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:c0:01:48:37:5a:d8:a2:2b:14:19:c5:3e:e1:23:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad949f66253543ee89b9196390736b5a6ed7cb8
        Validity
            Not Before: Nov 21 22:03:00 2024 GMT
            Not After : Nov 22 22:03:00 2024 GMT
        Subject: CN=bd2b5b58127a1faf7faced09bc6a4a9b59bfd057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1d:ef:86:d9:43:f3:d5:c8:e1:c0:ac:96:1f:
                    f1:d4:77:1c:ee:d4:16:04:ba:b6:81:2b:45:b9:40:
                    c4:e5:15:d9:72:c6:2d:1a:cc:46:be:34:d1:11:16:
                    af:1e:b5:5a:f2:41:b9:01:74:3d:f2:d5:8c:4c:a2:
                    7a:87:6b:3e:d9:91:9f:24:fb:13:46:68:c7:a3:d8:
                    d0:09:fa:84:f6:99:e0:f4:2e:54:ad:44:49:28:0d:
                    40:1f:4a:24:d8:1d:74:50:b7:e4:4f:be:84:8f:04:
                    6a:8d:02:31:b3:f8:18:ef:75:28:44:2f:5d:c3:c5:
                    00:5a:49:a3:69:66:fd:0c:5b:b7:3a:2e:37:84:18:
                    78:97:36:6d:3b:b0:87:2e:e7:e8:b7:2a:32:47:4a:
                    60:c8:24:ab:1d:d1:2a:dc:31:46:27:52:59:8c:5c:
                    d9:58:29:e9:b5:6f:fe:74:40:0a:8d:c8:ae:83:5d:
                    80:0c:6e:39:31:52:79:64:d4:29:9e:21:9a:e7:3a:
                    3c:54:26:ce:a0:9b:f8:a2:74:e1:1c:97:d8:1d:50:
                    81:23:8f:eb:2e:71:e7:a4:56:e3:81:3c:aa:54:87:
                    df:c4:e8:d4:5b:b4:6e:ef:5a:31:08:79:31:cd:6b:
                    9e:c5:06:21:7d:d0:b1:d1:b3:09:a5:b3:83:bb:88:
                    72:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2B:5B:58:12:7A:1F:AF:7F:AC:ED:09:BC:6A:4A:9B:59:BF:D0:57
            X509v3 Authority Key Identifier:
                keyid:FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b3:d8:64:6f:c5:61:b4:1b:78:40:c6:ea:6c:3a:3a:a6:5f:
         3d:fe:12:5f:64:98:93:50:fa:75:4d:0f:d4:90:38:86:4a:1e:
         a9:30:0b:4b:92:15:bc:6a:5f:10:f7:3b:6c:e9:68:a8:42:16:
         6b:2b:9d:a1:4a:77:b0:0f:fb:2a:74:da:01:55:09:1d:20:63:
         c8:05:dc:50:6d:23:fc:de:f8:0b:33:5c:87:23:d4:63:5c:40:
         6c:99:89:44:05:c7:71:b5:7a:7c:3b:7a:b5:be:a9:5a:c9:ca:
         b6:86:f0:b8:2a:c1:a4:cc:96:f0:db:96:86:69:77:67:f2:26:
         f2:44:5b:5b:c3:3c:b1:c1:1d:f7:71:20:d9:65:bf:9f:57:3d:
         0f:63:79:ea:5f:12:94:a5:57:b9:84:67:58:44:e6:de:05:52:
         bb:72:7c:97:7b:2f:4b:19:b1:21:89:41:30:6c:e1:98:5c:46:
         cc:c6:07:2d:c0:e6:18:50:ee:b0:91:db:98:64:58:4a:7e:0a:
         72:9f:65:7f:c0:fe:12:54:8c:c8:63:88:ac:83:bc:26:0d:c9:
         a3:dd:6b:b4:14:28:64:0b:c8:3f:a2:16:ff:77:25:ce:de:98:
         d2:a6:e6:26:f1:55:36:2a:ac:10:01:6f:2c:0f:9f:f9:7e:34:
         5a:36:2a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----