Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
File:                     1TOS85C0La1wA2dOvC0B3z3tgbw.mft (raw, json)
Hash identifier:          eJuicH5Ithv9bOGrXdbsxo/NUja21uQ8MGg5parIV8k=
Subject key identifier:   89:40:4D:17:84:97:91:4E:32:97:3D:C5:24:F7:8A:81:A1:1C:37:49
Authority key identifier: D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
Certificate issuer:       /CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Certificate serial:       0194056AC1547D5350C8DAFEFC149941029E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
Manifest number:          07A1
Signing time:             Fri 27 Dec 2024 00:01:09 +0000
Manifest this update:     Fri 27 Dec 2024 00:01:09 +0000
Manifest next update:     Sat 28 Dec 2024 00:01:09 +0000
Files and hashes:         1: 1TOS85C0La1wA2dOvC0B3z3tgbw.crl (hash: CrUSqJOGYHwdaYtdCfY5vy7fms41oqkBDvWSmIwWyJU=)
                          2: Et5dSxuAi_KihXUlNVsAbWbHrTo.roa (hash: xCLuycrSgiM/xyh0qJcxYCnQMVMP0r4rUs9JwW6rQ68=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Dec 2024 00:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:05:6a:c1:54:7d:53:50:c8:da:fe:fc:14:99:41:02:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53392f390b42dad7003674ebc2d01df3ded81bc
        Validity
            Not Before: Dec 27 00:01:09 2024 GMT
            Not After : Dec 28 00:01:09 2024 GMT
        Subject: CN=89404d178497914e32973dc524f78a81a11c3749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:9a:52:3c:d0:da:6a:ca:20:80:0f:78:ea:
                    f4:31:64:26:18:3c:55:26:d6:9e:e6:ab:9f:01:39:
                    8d:33:c7:1c:b3:9e:75:66:ce:92:af:16:43:bb:2e:
                    cc:e5:6b:02:06:1d:a0:40:4c:6d:a9:a7:fe:4d:5d:
                    0d:7b:60:32:53:06:79:6d:4b:c8:a8:a9:a9:81:8f:
                    18:07:82:6b:85:54:f0:2a:1e:21:b8:a0:ea:01:85:
                    af:5b:a7:b3:22:7b:2c:a4:92:d4:a9:03:5a:8c:a9:
                    8c:24:06:db:8d:49:09:fd:93:23:21:5c:f3:fc:db:
                    92:8b:66:94:6c:2d:93:0e:75:fc:db:71:0b:1b:56:
                    1c:5d:fb:87:16:8d:19:c2:31:c8:14:44:4c:51:b1:
                    b8:cc:6c:6b:80:0f:1d:4d:72:1d:69:8f:9e:56:df:
                    72:a8:ee:fb:a5:33:ed:5d:5a:42:fc:b2:fa:df:d2:
                    37:37:75:17:2b:c0:b6:b8:6f:57:b8:28:7a:ee:02:
                    a9:c2:e1:c2:ad:3f:a0:b6:cd:04:f6:c7:02:50:02:
                    6d:4e:f7:c7:d0:3b:95:e6:db:5a:f8:35:15:2e:39:
                    9c:25:b9:20:0a:0f:cc:ab:a8:b0:fe:39:a2:36:39:
                    f5:3a:df:36:a4:c2:1c:40:5f:b4:f9:62:ef:2d:10:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:40:4D:17:84:97:91:4E:32:97:3D:C5:24:F7:8A:81:A1:1C:37:49
            X509v3 Authority Key Identifier:
                keyid:D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d8:35:f1:ab:7e:58:a4:19:70:42:cf:d6:fa:16:ed:6b:6c:
         44:1f:90:d7:9c:d1:f7:f9:72:e2:74:7d:37:5b:00:ac:df:b5:
         36:b9:ed:59:23:39:e0:09:e2:9d:33:a8:7d:b8:07:9c:f7:44:
         db:12:f6:10:d0:ae:3b:ee:e8:6c:1d:c7:68:86:ad:d8:b0:8c:
         e8:be:6d:a4:27:d2:60:79:c7:db:d2:1a:d6:67:70:8b:9b:52:
         66:e1:cb:54:f0:d3:1e:85:2f:6d:79:d9:9f:36:1f:8c:5c:4e:
         4d:df:0b:e3:1e:d7:0e:ca:37:92:f3:d0:33:90:ed:91:78:ac:
         a4:65:26:a8:0d:22:8a:2a:33:d6:3f:56:41:32:bc:88:58:6a:
         d5:ee:35:f4:bd:10:b2:8f:40:ad:53:0e:04:b1:17:e2:53:2e:
         71:f4:ce:f1:51:5b:4f:54:a2:7e:67:95:d2:f7:fe:00:4c:c0:
         3a:76:c7:96:1a:2b:9d:4d:e5:6f:15:b7:4c:86:a3:39:3f:f0:
         ef:9a:d4:60:0a:57:c6:73:4b:e3:b7:d6:72:95:7c:a6:4f:96:
         19:3a:75:23:d9:3a:cd:df:21:15:01:6b:f1:51:3b:97:26:18:
         b6:47:7b:f0:f7:1c:b1:91:d3:bc:73:f8:3a:2e:ff:67:bb:7c:
         66:f3:b2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----