Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
File:                     tQALgentSypwKh71-FLg52nuEOI.mft (raw, json)
Hash identifier:          O8Z0f/hYEToh6oxhi/Y0a4Ddwaz1rk2Uy3i/weMapR8=
Subject key identifier:   7B:5A:C0:71:0D:C9:30:B4:69:24:41:BF:44:44:D7:AD:2E:06:F5:4F
Authority key identifier: B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2
Certificate issuer:       /CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
Certificate serial:       01936AB4AD6048768C21C707E1A81A92A959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
Manifest number:          0C19
Signing time:             Tue 26 Nov 2024 23:00:45 +0000
Manifest this update:     Tue 26 Nov 2024 23:00:45 +0000
Manifest next update:     Wed 27 Nov 2024 23:00:45 +0000
Files and hashes:         1: makasdgj9joi2Qb4esFFl2b7XiE.roa (hash: lKFNU4r/QNGeXadZMPZkBFgP7YXjXxGi+m1t7CHK2IE=)
                          2: tQALgentSypwKh71-FLg52nuEOI.crl (hash: vsps7/WwoOqZQn1T4BW5LkM98MPa+8sk7ez9rk9307g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:6a:b4:ad:60:48:76:8c:21:c7:07:e1:a8:1a:92:a9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5000b81e9ed4b2a702a1ef5f852e0e769ee10e2
        Validity
            Not Before: Nov 26 23:00:45 2024 GMT
            Not After : Nov 27 23:00:45 2024 GMT
        Subject: CN=7b5ac0710dc930b4692441bf4444d7ad2e06f54f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:02:02:4d:12:c5:07:21:46:94:1e:65:b8:
                    db:db:01:e3:c7:b5:16:35:f9:31:c9:1f:aa:c1:89:
                    f7:cc:ee:64:72:25:57:cf:6c:8e:74:7f:24:87:38:
                    81:ad:51:b8:09:fe:b8:aa:bc:58:a0:49:86:23:d6:
                    cb:62:50:0e:29:7c:29:65:f1:5c:80:16:e2:fd:3d:
                    09:7e:22:5b:ba:72:39:ee:32:4f:bd:11:84:ea:21:
                    af:e4:6e:e4:97:b7:9c:23:1d:d4:94:f5:0a:b3:1c:
                    d0:c2:a6:93:04:5d:8c:96:7d:57:e3:bf:91:31:bb:
                    b3:8f:d8:eb:8f:ed:b7:93:e7:f6:43:bd:75:12:ac:
                    c1:18:c2:93:ec:b7:3d:4d:c8:26:90:ce:b6:71:92:
                    b4:31:0e:60:5a:1f:54:de:58:d9:5e:83:b7:4c:38:
                    62:08:7d:16:29:ea:37:2d:4c:f8:56:94:7b:51:28:
                    de:b1:53:97:20:20:08:9e:4e:3a:43:2e:1a:3d:97:
                    6d:9c:15:65:03:c6:be:db:bb:ad:75:c6:40:05:d7:
                    06:e7:29:92:b4:1b:a5:6c:11:8c:9d:54:43:f7:4f:
                    7c:e3:93:04:68:ce:ab:1c:fd:d0:7d:f9:28:35:0c:
                    d7:d6:f3:2d:84:bf:c5:88:83:7f:aa:96:3d:4a:26:
                    44:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5A:C0:71:0D:C9:30:B4:69:24:41:BF:44:44:D7:AD:2E:06:F5:4F
            X509v3 Authority Key Identifier:
                keyid:B5:00:0B:81:E9:ED:4B:2A:70:2A:1E:F5:F8:52:E0:E7:69:EE:10:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQALgentSypwKh71-FLg52nuEOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0df7f3-a492-4d6f-b36f-d41e03592335/1/tQALgentSypwKh71-FLg52nuEOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:82:db:a3:9e:ab:d4:b4:41:7f:95:c0:40:f3:21:49:d6:f1:
         c6:47:7c:9a:41:fe:73:e2:07:18:d1:df:54:a9:1e:07:d4:7f:
         5a:fb:74:05:7d:7a:a7:7f:9d:08:10:1f:92:61:33:9a:5a:b7:
         aa:74:70:9b:43:68:b1:0e:14:24:2c:ee:42:a2:7f:18:74:d4:
         92:f8:7d:cd:01:4a:c1:97:b5:4d:3e:ba:a7:0a:26:b7:28:11:
         55:0f:98:98:8f:1b:f3:55:7f:e1:c5:0f:4f:18:84:93:73:a2:
         5a:81:d0:eb:03:8b:c6:a1:76:17:83:73:e7:dd:8f:a2:2c:c5:
         ce:b3:75:4b:4c:21:dd:82:2b:45:54:1f:ec:1f:9e:ec:5d:a7:
         9b:dc:4e:9e:fb:59:24:b0:9e:b1:f8:51:fa:38:2e:c9:63:15:
         3f:f0:d4:ca:4c:da:b2:34:a1:50:b9:1e:88:00:32:59:b5:12:
         61:f9:98:71:1f:4f:3e:4c:81:f1:44:b8:e7:4b:3b:f0:ed:ba:
         18:d7:eb:75:7e:af:70:1e:78:2f:df:56:af:ba:38:75:82:c2:
         1f:e3:05:99:59:ed:98:4f:93:8d:ec:9d:8e:a2:17:ed:8b:8a:
         3f:48:e3:d0:35:2f:2f:47:eb:9b:01:8f:51:a2:e3:59:87:61:
         bc:8a:5a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----