Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File:                     tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier:          zciQPCulEoPzE65DQQbGvZ3fTt/YiG3k6GqQLw18orA=
Subject key identifier:   C6:1A:EC:A2:8B:53:63:80:41:66:7D:7E:A4:3F:0E:A5:7F:B7:68:65
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer:       /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial:       0193549BB01315BDAF27D12CA51FCCA1D02A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number:          1370
Signing time:             Fri 22 Nov 2024 16:01:49 +0000
Manifest this update:     Fri 22 Nov 2024 16:01:49 +0000
Manifest next update:     Sat 23 Nov 2024 16:01:49 +0000
Files and hashes:         1: 1-5GrPYwHG94DYIJmze00iU1Lvw8.roa (hash: 50X9Vz8vMs6OLdzIBIQ+Xw0KPvEgbUhhxukmmTVPHnw=)
                          2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: QcZ6Qk2i2eeSqb1tJ2D7d3UcKxjLj7ABBnb+94OfNpI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 16:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:54:9b:b0:13:15:bd:af:27:d1:2c:a5:1f:cc:a1:d0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
        Validity
            Not Before: Nov 22 16:01:49 2024 GMT
            Not After : Nov 23 16:01:49 2024 GMT
        Subject: CN=c61aeca28b53638041667d7ea43f0ea57fb76865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:96:4e:0e:90:f1:6e:e4:2c:c7:7d:66:58:1e:
                    05:b7:ba:98:ed:cf:11:20:01:ed:8c:80:16:0d:6d:
                    a0:a9:9c:30:59:1d:91:ab:1c:4e:2f:d3:e4:93:5c:
                    c5:20:16:2b:ed:a6:c9:c5:78:3f:ea:1d:27:c1:32:
                    58:6a:52:53:c2:67:00:f6:b6:13:33:51:a2:d0:42:
                    d4:27:0d:47:56:e4:a6:cb:5c:3b:60:54:26:e1:43:
                    fb:7a:98:bf:49:1b:80:1e:01:1d:cc:ec:34:b0:e0:
                    2e:76:7a:e5:d1:63:84:98:a3:42:8e:7c:6f:5f:a9:
                    f4:d0:f8:4e:83:8b:67:c3:96:12:05:28:91:f8:b7:
                    de:12:e5:73:ce:2a:e7:9f:f9:28:27:e1:db:ae:e3:
                    8e:5f:84:73:90:78:db:fe:dc:ea:c7:31:85:c6:2c:
                    5b:c6:db:4f:6c:df:7f:8b:61:3e:87:fd:86:f7:86:
                    c3:ed:8e:ea:3e:66:c3:93:25:84:c9:a9:0a:23:2b:
                    fc:ea:bd:e1:c7:af:4a:57:e2:2a:7e:e9:25:a8:64:
                    bb:4b:58:83:19:7f:c3:b9:6b:1e:11:d0:73:57:ff:
                    53:cd:6d:95:fd:2e:03:05:09:3a:18:c1:bd:77:85:
                    91:ec:67:99:39:c6:00:2c:3d:69:90:d5:ef:7a:0f:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1A:EC:A2:8B:53:63:80:41:66:7D:7E:A4:3F:0E:A5:7F:B7:68:65
            X509v3 Authority Key Identifier:
                keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:29:6f:82:87:c6:a1:79:68:7f:49:c8:73:c6:09:e2:e2:9c:
         ce:d3:63:53:c1:73:71:13:ff:e9:00:33:d8:31:26:39:26:b2:
         fe:35:ea:bb:db:e6:d4:dc:48:bf:d9:fe:69:87:b8:ea:e4:ea:
         cd:68:22:6f:e8:a3:be:9e:2f:d5:8e:82:93:53:01:86:24:37:
         e1:b8:e5:49:83:ed:3c:69:2a:29:fc:b1:bf:71:0c:41:54:f5:
         ca:0a:dc:ae:5a:5f:5a:31:07:6c:98:8c:e1:73:fc:7e:7c:89:
         b3:6d:31:89:67:ae:74:ba:05:9a:99:a3:da:ab:84:1f:07:3e:
         29:d1:3b:f0:50:1d:a5:f3:57:cb:b1:f1:17:5b:df:32:4d:81:
         16:c4:75:e4:b7:07:42:4c:33:03:20:14:e8:82:1f:cb:d2:23:
         32:2f:e8:58:2b:c0:7a:da:c6:ff:c9:2f:9f:45:e1:19:34:49:
         11:19:8d:26:c9:25:2a:61:dc:ca:18:16:b3:da:2d:67:c0:30:
         52:d7:49:09:b2:db:88:2f:c1:c0:c7:fe:4e:6a:3d:47:95:b2:
         1d:85:2d:53:2a:32:20:77:3c:42:d6:5b:33:ab:f9:d8:f1:8d:
         f9:73:d0:0f:83:30:ed:e4:1b:7a:0e:51:d2:16:7a:46:8c:bf:
         ff:f5:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----