Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File:                     tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier:          MUEoEamo2GeTY00XuqPzVkOUJybLQ+SkaSL7Bpf6jWo=
Subject key identifier:   CA:AC:69:71:D7:4E:A3:2D:13:6E:74:77:59:6E:2A:1B:4D:76:31:EC
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer:       /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial:       019351D059E2FA7A6FF1AECA971D30183059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number:          0F02
Signing time:             Fri 22 Nov 2024 03:00:29 +0000
Manifest this update:     Fri 22 Nov 2024 03:00:29 +0000
Manifest next update:     Sat 23 Nov 2024 03:00:29 +0000
Files and hashes:         1: B1t0cf6jKVPfi9F4ZvS2asdaWKg.roa (hash: 6tAbuyHG30JV7evUDcp/1DNqGl1tO0RQx4DKZ/6zjuA=)
                          2: GwGyiWi1lJtGUOMwLS1LhYnGjds.roa (hash: PO1ZB8DGEc/8PvDomdUaHeQnJxhE2WK1GZQI2WZvJS8=)
                          3: TJpRf4VjTvVZ97ojGmOnP-N2u1I.roa (hash: bkTi+K7rMkPuqNp2adpGE0kXjDOSnzMkyYoFck08jBI=)
                          4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: oGooxlPvUWSBexVS8/9b9Af0LnpfvRExfBzND54HI3A=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:d0:59:e2:fa:7a:6f:f1:ae:ca:97:1d:30:18:30:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
        Validity
            Not Before: Nov 22 03:00:29 2024 GMT
            Not After : Nov 23 03:00:29 2024 GMT
        Subject: CN=caac6971d74ea32d136e7477596e2a1b4d7631ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:21:52:4c:90:13:19:46:95:29:1d:fb:1e:17:
                    c4:7a:96:9b:52:2f:67:99:e6:4c:e8:fb:b5:9f:54:
                    8e:10:0b:fd:af:92:f1:21:4b:44:0a:9c:f1:a4:e1:
                    53:83:d3:c4:b2:00:17:8f:3d:31:20:3f:f8:6e:75:
                    39:fa:16:64:10:35:1c:63:c9:c8:02:3b:f7:f4:37:
                    7b:8c:8d:c0:af:ed:10:6d:ce:1c:0f:15:2f:86:2f:
                    c3:fd:92:88:73:5c:c5:5b:f7:9b:1d:07:36:59:0e:
                    c6:9a:10:95:02:c6:2f:1b:ac:49:02:b3:9a:5a:7a:
                    52:f4:e4:c4:7f:6a:98:1f:8e:57:5d:b0:30:31:61:
                    9e:75:2c:d7:6e:a6:0d:cb:b4:6e:2c:f8:9d:96:cf:
                    36:fb:81:39:4c:05:f5:6c:a1:77:8d:91:bf:1f:f0:
                    8c:eb:10:94:f5:19:ea:58:1a:c7:0d:82:2b:6f:99:
                    8b:07:54:e8:cb:a4:55:41:1d:0f:52:9b:27:12:58:
                    57:03:fd:ac:96:50:e6:e4:9d:0b:ee:29:f1:3d:9c:
                    dd:81:e5:9f:f0:8d:fe:6e:68:4b:c3:07:99:17:a0:
                    5f:d0:b0:fd:a8:23:a8:6a:e5:5d:1a:b0:6e:18:c4:
                    74:28:68:51:24:12:c6:11:50:5d:6c:a3:f8:72:7b:
                    c2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AC:69:71:D7:4E:A3:2D:13:6E:74:77:59:6E:2A:1B:4D:76:31:EC
            X509v3 Authority Key Identifier:
                keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b3:87:71:79:89:3a:fe:50:f4:c6:a6:2b:d1:df:5d:2e:20:
         72:17:f5:3f:12:2b:07:a4:f0:4a:6a:c5:24:ac:4c:98:43:cd:
         7a:93:26:70:75:e5:6e:b9:ae:15:b4:00:8c:98:c5:fd:eb:bf:
         60:70:30:eb:8f:50:ec:db:98:c8:64:b9:11:d7:bd:d1:f1:7f:
         2e:82:2c:f2:88:b7:70:58:a4:35:21:25:74:20:b8:39:63:31:
         90:b6:5a:72:d6:e8:11:ea:19:f9:1e:9d:a6:fd:6a:15:25:06:
         e2:bb:ee:98:91:d0:9e:3f:a1:2b:df:5b:5e:5f:df:54:db:76:
         68:65:0e:14:42:fb:08:dd:0c:8a:8d:05:6e:d8:2c:4e:06:b7:
         0c:4f:80:cb:a3:d5:91:a0:06:c3:bd:33:bc:2c:d3:8b:76:1f:
         e9:eb:28:5d:27:2f:4c:cd:9e:df:a1:1b:fb:9e:2e:8f:81:8a:
         65:55:5d:c6:39:84:f1:d6:62:45:d7:a3:ef:9f:a5:3c:0f:5d:
         f1:e7:86:f7:92:ad:95:ae:b7:98:70:73:ae:d2:fd:89:f9:ac:
         71:5d:13:fd:25:6f:27:d6:1a:f9:8d:6f:32:ff:c9:6a:f7:27:
         a6:2a:ea:d0:4f:e9:88:3f:8c:16:ab:11:71:65:a2:af:da:fa:
         3f:ca:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----