Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File:                     tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier:          dZVUTuU5EHo1ANcvUt+k0Vazgex4cQRZUkZzV+kJ7xA=
Subject key identifier:   36:24:6E:E2:69:F6:B8:D0:8D:80:70:8E:F8:F1:9F:67:2D:F4:FB:53
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer:       /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial:       01936A7D6E88A0C7FCFA30C57411891168E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number:          0B02
Signing time:             Tue 26 Nov 2024 22:00:25 +0000
Manifest this update:     Tue 26 Nov 2024 22:00:25 +0000
Manifest next update:     Wed 27 Nov 2024 22:00:25 +0000
Files and hashes:         1: OV_DDDujN202WhAqDfa0rwafbIo.roa (hash: X01oKi3hOCXUBA3nASmnFJEIW67AKGyT1BxjHqKsUL0=)
                          2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: j1XNOgeaNDPr0ZLZblmOJau9hRy4PYmWGgxN/H3GMLo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:7d:6e:88:a0:c7:fc:fa:30:c5:74:11:89:11:68:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
        Validity
            Not Before: Nov 26 22:00:25 2024 GMT
            Not After : Nov 27 22:00:25 2024 GMT
        Subject: CN=36246ee269f6b8d08d80708ef8f19f672df4fb53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ab:5a:ab:3c:fd:59:a7:99:12:2f:cd:5f:5a:
                    9c:97:a5:18:00:01:25:ff:94:90:ca:5d:eb:ff:2e:
                    df:0e:31:06:46:24:08:89:4d:e0:d1:f5:c3:10:b8:
                    d8:3c:47:2d:00:d7:15:d3:17:2e:15:69:e3:9d:31:
                    92:af:aa:c2:9c:a4:3f:06:9c:5c:ee:e9:68:01:a1:
                    a8:c2:b9:32:83:27:30:cf:99:73:dc:12:ab:e6:fe:
                    ea:e4:eb:29:37:f8:b1:2e:bd:09:17:27:38:71:1c:
                    01:11:16:78:c6:61:01:0d:ec:ce:3f:6b:db:88:ef:
                    f1:af:1c:2f:04:d8:3f:1a:d9:c7:a2:f6:3b:1f:82:
                    87:1c:5b:f7:df:93:b6:94:95:5b:50:8d:d7:74:16:
                    72:dc:bb:66:f0:6f:64:50:a3:ec:19:40:f9:b2:a1:
                    8d:76:23:e4:fb:8d:03:6b:e3:6b:0a:30:df:74:08:
                    77:59:f8:1f:42:1d:81:f1:f3:85:b5:48:f8:6c:6e:
                    1d:12:86:3d:d0:df:35:45:a1:64:0b:63:b8:21:a6:
                    27:fc:aa:dc:c0:42:8f:3d:23:2d:12:cd:42:5c:5f:
                    63:2d:0d:7b:f8:2b:a5:97:c2:17:10:20:17:b9:23:
                    ed:17:97:46:3b:ff:4f:89:d4:c1:eb:f1:26:7d:50:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:24:6E:E2:69:F6:B8:D0:8D:80:70:8E:F8:F1:9F:67:2D:F4:FB:53
            X509v3 Authority Key Identifier:
                keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:cd:a7:23:db:95:f0:61:05:ba:01:28:3b:4a:20:fb:4a:04:
         3e:55:7b:85:c0:19:bb:7f:30:db:63:8a:f3:8e:f7:3f:1b:5d:
         f2:69:7c:25:0a:bd:d8:38:87:5c:ce:b1:50:e3:de:9c:55:f4:
         9d:f7:84:70:1b:48:c9:f2:f5:02:ee:e0:1f:c9:d7:07:8a:35:
         48:16:3f:b5:8a:b4:1d:9a:c9:0b:3b:d7:92:de:87:f2:0f:a3:
         8c:98:90:1a:a3:85:92:1f:a6:19:82:9e:a5:9d:18:e3:ff:a6:
         05:ad:c1:be:31:e6:fd:f2:01:da:14:3e:bb:dd:e6:b6:a8:6b:
         0a:fe:3f:e8:3d:05:68:8c:45:6f:f4:38:8e:63:16:6c:af:b0:
         20:e8:e3:30:f5:48:e5:cc:ab:ff:d4:e4:de:75:e3:fe:d8:91:
         8a:31:02:b6:b5:b0:71:f4:c1:34:1a:7e:1b:d8:e8:02:fc:d8:
         e0:0e:d9:8d:87:5e:31:99:a9:60:39:ed:a6:75:b9:03:a9:98:
         13:8b:15:65:0e:ec:1f:a2:02:3a:9c:88:08:c3:14:91:c6:e6:
         d2:12:fb:ed:81:a0:f0:e2:94:96:48:30:db:2d:3a:3d:b8:3b:
         19:91:d4:6f:9a:5f:43:73:28:5f:55:66:06:ef:0c:45:7a:e4:
         f8:34:2c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----