Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
File:                     dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft (raw, json)
Hash identifier:          AjKVjE5dsxB8S8JMHT7komWWQD0sFobIpm8fb0DpQas=
Subject key identifier:   A7:D7:E9:0D:AA:56:10:18:61:AC:FB:B6:F1:9E:0F:6D:E0:1E:DF:66
Authority key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Certificate issuer:       /CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Certificate serial:       019357D2ED359C3CCC17F06E87CE7A2BAF94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
Manifest number:          02BF
Signing time:             Sat 23 Nov 2024 07:01:01 +0000
Manifest this update:     Sat 23 Nov 2024 07:01:01 +0000
Manifest next update:     Sun 24 Nov 2024 07:01:01 +0000
Files and hashes:         1: 7MoyIhaNY940_cx0GxHYDOcgmRk.roa (hash: K5hhIb5Y1lqnJhjydp7zsqLaiSxFY3aZeDYkgmbX1pE=)
                          2: dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl (hash: 1AQZLmbE+GJLi50+D9vEjjzbMwVbWheloAY7mbOgqWQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:ed:35:9c:3c:cc:17:f0:6e:87:ce:7a:2b:af:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
        Validity
            Not Before: Nov 23 07:01:01 2024 GMT
            Not After : Nov 24 07:01:01 2024 GMT
        Subject: CN=a7d7e90daa56101861acfbb6f19e0f6de01edf66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:cd:94:fa:d5:18:79:7f:fb:bf:52:86:1a:
                    61:a6:42:58:b4:6a:2a:32:09:1a:0e:a6:af:5b:29:
                    39:43:50:49:b9:89:27:9b:74:60:5f:8e:5c:32:a0:
                    10:d4:03:31:b2:76:39:6f:45:bb:9e:e9:40:b3:a9:
                    b1:f0:f8:e3:dd:ac:1c:da:7b:09:f4:56:7a:f1:cb:
                    50:3e:d5:d4:a9:90:aa:78:1e:57:fd:53:77:a1:00:
                    95:87:a0:cb:09:7f:c5:a8:f1:78:ea:dd:a6:0f:5d:
                    91:09:48:b5:63:a4:2a:f2:76:16:7e:bf:e8:7f:00:
                    42:4c:84:49:54:ab:db:7f:45:79:08:ef:a2:1e:93:
                    28:6f:6c:5e:25:52:18:23:91:64:79:91:bf:6b:0c:
                    84:00:26:bd:f8:77:ab:b3:5c:12:3d:16:b1:30:3c:
                    04:ec:50:20:63:7a:d3:08:3b:0c:c4:15:14:3c:07:
                    a3:32:0b:79:9c:95:fb:c7:85:77:e1:7e:61:93:f6:
                    68:75:7c:9b:77:ef:de:37:29:81:52:f0:7b:e1:ec:
                    09:81:c8:90:38:af:79:1b:31:7f:d3:b5:f8:56:79:
                    9b:3f:cb:9c:24:6f:47:17:39:52:f0:b3:f3:8c:fa:
                    43:a7:98:3b:5d:82:f7:2e:98:5e:c2:af:e4:2d:fb:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D7:E9:0D:AA:56:10:18:61:AC:FB:B6:F1:9E:0F:6D:E0:1E:DF:66
            X509v3 Authority Key Identifier:
                keyid:75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:50:e1:48:b3:e3:dc:21:4f:4e:6d:03:19:c7:74:70:da:a7:
         48:94:68:a8:d5:b1:34:13:23:bf:6f:4c:9a:33:53:9a:7b:d8:
         9a:7a:eb:4c:22:93:88:41:26:4c:70:ba:9f:a1:47:34:6b:bf:
         f3:5f:9c:9a:d1:b4:ef:2a:37:58:46:8f:26:79:98:1a:26:60:
         74:43:81:7b:e8:47:81:6f:81:d6:9e:34:da:4b:0a:73:8f:3f:
         d8:ac:ea:43:ae:36:49:b4:d1:8f:5f:77:57:18:b4:7b:d7:0e:
         94:36:d7:93:8d:e5:2c:cd:85:8f:49:42:a0:68:dc:3e:bb:59:
         37:a1:fc:5a:24:a3:81:7d:34:7f:2d:9f:05:6b:1a:17:b7:e3:
         09:81:40:6e:40:28:b7:52:58:e9:5a:77:3a:8c:6a:eb:94:77:
         74:5f:74:00:3f:98:32:f9:cc:37:44:da:de:67:33:b8:ec:62:
         f5:81:86:55:82:b3:81:19:cf:3c:73:a7:ae:ee:1d:7c:6e:2c:
         3d:d6:0a:60:52:e7:ae:9f:74:8f:aa:98:72:f3:26:70:75:a7:
         36:06:82:b5:dd:cb:6a:ef:74:2a:10:44:1b:e1:44:23:4b:5f:
         39:f5:5e:1c:9d:39:15:4f:2e:ef:d2:b6:28:56:fd:1f:c8:d6:
         a0:fd:a8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:22 2024 by rpki-client on console-fra.rpki-client.org