Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
File:                     v1Tb8A10WQyJE97Isc8ITY_PaTw.mft (raw, json)
Hash identifier:          g4SIvcpbLrxt/h85ZRXc5+RdnvekbejN97RPPnigUQM=
Subject key identifier:   77:CC:D3:EA:92:3C:6B:82:67:EC:D3:E2:A9:C7:EF:14:57:27:26:42
Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
Certificate issuer:       /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Certificate serial:       0191FAEC7E8126A6D1D28F5EB746B91B89EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
Manifest number:          F5
Signing time:             Mon 16 Sep 2024 13:01:28 +0000
Manifest this update:     Mon 16 Sep 2024 13:01:28 +0000
Manifest next update:     Tue 17 Sep 2024 13:01:28 +0000
Files and hashes:         1: cG78UDIdpCeydMsdYVz1mgNE3IA.roa (hash: Q2t7km09E2u1jijGQs5OQkzXqaUABPZw4QrG33/Ddv8=)
                          2: v1Tb8A10WQyJE97Isc8ITY_PaTw.crl (hash: 0B0LVgyAWYKdPN5curuYnXlqqU/hFegnFVin3r7CHa4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fa:ec:7e:81:26:a6:d1:d2:8f:5e:b7:46:b9:1b:89:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
        Validity
            Not Before: Sep 16 13:01:28 2024 GMT
            Not After : Sep 17 13:01:28 2024 GMT
        Subject: CN=77ccd3ea923c6b8267ecd3e2a9c7ef1457272642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:42:c6:5b:6b:ac:0c:77:e8:9c:db:6e:44:
                    33:0c:fe:fa:7b:0d:b8:80:4b:73:d8:9c:60:0f:12:
                    67:3d:90:15:a0:8d:fb:36:84:fb:fe:83:99:c8:46:
                    57:05:b1:98:ab:c7:13:3c:47:d1:a6:ab:5b:a2:0a:
                    6a:50:88:30:2a:37:d0:c7:38:a0:72:95:6b:bd:b3:
                    2a:4b:3b:0c:cb:2f:cb:9d:f0:c5:63:0b:d4:0e:4a:
                    90:9e:02:82:29:28:d2:84:22:d6:20:6e:b0:c8:5b:
                    27:2f:04:27:a8:a7:23:10:c1:0f:f8:17:84:18:60:
                    99:f6:d9:43:0c:d0:01:66:d8:2f:47:c6:1f:77:1f:
                    80:e5:4e:bd:d2:53:13:24:d3:11:ea:d2:11:74:1c:
                    ec:3c:91:30:2c:90:54:4a:13:c3:41:58:70:d0:af:
                    5f:3c:b3:08:58:18:38:01:86:f9:a4:6f:23:ce:a7:
                    16:ff:89:e6:d7:b5:d0:c1:62:61:f7:b3:9a:ff:c6:
                    6a:ee:f4:69:f1:05:98:49:b6:7a:56:8b:3a:6d:91:
                    11:25:aa:bf:60:2e:9d:15:fa:0c:32:8a:ca:2f:51:
                    47:6b:4b:92:cb:1c:c3:d5:c8:19:61:e4:6b:af:a9:
                    91:c9:9c:05:79:30:d2:95:8c:54:59:24:47:92:2a:
                    a7:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CC:D3:EA:92:3C:6B:82:67:EC:D3:E2:A9:C7:EF:14:57:27:26:42
            X509v3 Authority Key Identifier:
                keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:af:d1:b5:2c:f9:f5:af:b8:8c:e1:df:c2:e7:6b:f7:be:c4:
         24:ce:b6:5c:a5:75:57:8d:ad:9a:cd:21:ec:7b:bb:8c:57:41:
         60:17:b4:ec:e9:21:cd:be:f0:19:35:df:67:60:87:66:3b:d1:
         85:44:8c:eb:43:3f:80:72:19:15:bc:66:ff:ee:a6:11:c3:0c:
         b8:d5:57:a3:8e:62:c8:79:11:66:8e:56:2c:99:a2:cc:bd:a9:
         b0:17:e8:dd:85:9a:57:ba:52:f7:a9:a1:89:a8:f7:a0:c5:ff:
         64:25:4a:d4:25:ad:07:37:7e:fa:c7:2d:2f:86:1b:13:95:18:
         1e:35:d1:41:de:15:02:47:f4:cf:65:e7:23:51:bb:c0:b4:af:
         75:7a:a8:56:d7:b4:76:07:54:c3:db:85:17:79:e6:32:1b:0f:
         b4:5b:5a:2d:4c:cf:e7:07:dd:f4:60:83:c8:34:54:3e:d4:41:
         49:12:2b:d0:4c:f4:27:fd:e0:24:76:75:db:15:a4:3b:4f:4e:
         e4:98:3c:43:28:e5:7c:33:bc:e3:06:21:dd:55:6b:06:d6:aa:
         b3:b4:17:71:c1:28:5d:10:6c:f4:8a:87:70:8f:08:51:53:48:
         65:a3:36:dc:44:df:21:e3:e2:4c:a5:4b:36:11:e3:49:43:c2:
         42:d3:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----