Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File:                     tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier:          KWzkoHQ9UC5KlC7UaUiYAxQ8YcUWHFvskNqtTSVcnfE=
Subject key identifier:   AA:EF:34:E6:1F:3D:61:9A:89:2B:12:14:8B:A7:0F:5D:27:FB:F0:E4
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer:       /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial:       01935651C24B75C07A46F33C82CACFD4B3C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number:          1374
Signing time:             Sat 23 Nov 2024 00:00:18 +0000
Manifest this update:     Sat 23 Nov 2024 00:00:18 +0000
Manifest next update:     Sun 24 Nov 2024 00:00:18 +0000
Files and hashes:         1: 5yLA-3E75mxZ6L39i4BU-pLzy7E.roa (hash: +x4tLUzRfMhOOijhO4xbor2VoZt00YijzQROIpmNE9U=)
                          2: cERV0SshptRsefq-dpzg57EkY_s.roa (hash: QKZkzWste6kwWTGjAR2boXN2OGJXn03AiEgRUfoaTj0=)
                          3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: hUH+8AHDdHZMcXuypg/jwrInvVmcHKzktX3BWUZLJEo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:51:c2:4b:75:c0:7a:46:f3:3c:82:ca:cf:d4:b3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
        Validity
            Not Before: Nov 23 00:00:18 2024 GMT
            Not After : Nov 24 00:00:18 2024 GMT
        Subject: CN=aaef34e61f3d619a892b12148ba70f5d27fbf0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8c:e6:76:cf:21:a9:07:91:70:e7:3b:27:b3:
                    1a:fb:f2:2e:8e:2c:12:db:24:7a:26:19:ee:47:84:
                    09:5d:d4:fd:f9:5b:03:e4:74:c6:1a:67:ca:4b:41:
                    cd:36:2a:2e:fa:46:6c:9e:e5:11:c2:86:93:24:6d:
                    f4:0a:0c:c3:b5:d8:e6:b6:9b:bb:d1:22:84:9b:ba:
                    38:0f:27:4a:fd:9f:45:14:80:ca:58:35:8c:51:9c:
                    10:f5:8a:a1:b3:9a:68:8e:f8:9b:e5:af:43:98:39:
                    22:46:87:85:8a:92:00:58:2a:67:d2:1a:5d:13:93:
                    bc:8e:2f:60:31:90:2e:fe:64:cf:97:c7:23:ed:0f:
                    08:87:58:74:fb:05:be:00:80:fa:60:2e:0b:eb:28:
                    62:42:86:7f:53:b8:7d:95:b6:13:a4:2d:eb:b5:bd:
                    4d:6a:56:1b:43:1b:38:48:62:41:9a:88:48:ca:0f:
                    32:75:c4:0c:39:41:d3:72:cd:66:93:e8:45:0f:25:
                    c8:ba:e2:d5:78:a1:51:f4:86:23:4c:ec:e6:62:11:
                    af:e8:b6:ce:b6:be:b6:d2:f9:6c:22:bc:5b:b7:22:
                    51:dc:34:f5:ed:33:da:ef:1c:03:9d:f1:20:ac:33:
                    1a:e0:da:b6:de:04:6f:0d:7e:60:0c:ef:87:8e:45:
                    cb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EF:34:E6:1F:3D:61:9A:89:2B:12:14:8B:A7:0F:5D:27:FB:F0:E4
            X509v3 Authority Key Identifier:
                keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9f:0d:65:ea:3e:f5:d7:3c:18:dd:7c:75:48:a8:70:ca:11:
         39:fc:ad:f5:b1:d7:76:e9:13:94:18:ae:08:9a:3a:2b:17:78:
         60:4c:a8:77:7b:bd:f1:1c:1c:5d:2b:c4:1b:c7:ff:42:6e:e4:
         29:d5:f0:94:2e:01:07:88:2b:2f:a6:57:86:83:7c:fc:4d:e8:
         70:ac:71:57:e0:67:95:3b:4d:95:58:33:44:3f:4a:cc:c2:b4:
         c5:65:04:8d:5d:05:83:d6:50:3f:98:7e:bb:3d:9c:8e:63:9b:
         45:91:1e:cd:54:7a:7e:85:cb:8d:f0:a8:71:fc:f0:3f:0e:76:
         7f:0d:be:b7:aa:7a:e3:a9:8d:1a:27:1c:f2:45:8f:da:a5:ac:
         84:54:96:5b:e3:f8:ee:9b:5a:8d:e3:d9:15:89:eb:d2:b5:15:
         6b:b1:fe:f7:12:1b:60:ad:c0:b6:a5:33:ae:8c:21:0e:af:ed:
         2b:42:ab:50:5d:22:bb:22:bc:a1:cf:1a:73:33:b9:99:de:03:
         f6:7b:dc:2e:b7:ad:f0:6f:aa:52:43:95:84:5e:9c:e7:de:b0:
         64:3b:3f:52:6e:1e:40:85:d8:7f:89:cf:4d:af:f8:32:ba:59:
         aa:32:3a:44:f9:fd:a6:b5:41:eb:31:59:c0:b6:cc:17:22:0d:
         c6:78:47:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----