Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File:                     28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier:          2hEHimPJNKtDi5vZhUKPdx7vSmfIMfn0qPSrwWhbfUA=
Subject key identifier:   7F:64:87:F5:38:1B:F2:0A:BB:DF:AF:7D:AE:8C:EB:4F:C2:11:FA:0B
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer:       /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial:       01923AA7DFC9EAC837F07D280E17007B1306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number:          12DE
Signing time:             Sat 28 Sep 2024 22:02:13 +0000
Manifest this update:     Sat 28 Sep 2024 22:02:13 +0000
Manifest next update:     Sun 29 Sep 2024 22:02:13 +0000
Files and hashes:         1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: we5qjzJlsGj6lFqf+fXUhzhoHzFr+gevj9Bss9g/o2A=)
                          2: sGNVx8ovtosfXKFdGydSNLxpY0o.roa (hash: 3cQB+nAAPj77zyUlCjVJNbPOCWd5gVzUB24qnwmNEII=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:3a:a7:df:c9:ea:c8:37:f0:7d:28:0e:17:00:7b:13:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
        Validity
            Not Before: Sep 28 22:02:13 2024 GMT
            Not After : Sep 29 22:02:13 2024 GMT
        Subject: CN=7f6487f5381bf20abbdfaf7dae8ceb4fc211fa0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:a6:84:d4:bf:ad:dc:4f:8c:05:79:ed:db:
                    06:87:32:86:d6:2b:a1:04:9d:f9:cb:17:10:08:d9:
                    1a:e1:35:dc:b5:fe:15:b2:c0:65:70:4c:a9:fd:d2:
                    d6:75:28:89:80:ea:6f:df:94:9c:b6:90:b1:f9:aa:
                    f5:da:46:61:00:14:87:9d:fa:11:87:90:9f:ca:07:
                    a2:83:f7:d7:0f:07:0d:9a:06:77:28:1a:49:2e:ba:
                    c1:7e:ab:91:f9:87:b2:0c:59:fc:d8:1e:8b:2d:67:
                    a7:90:4f:6e:47:50:51:a3:f6:9a:b6:2f:0b:24:77:
                    3c:12:6f:50:b7:77:38:de:00:10:de:d1:44:08:93:
                    a4:ec:7f:9e:c3:b8:58:70:04:5b:76:df:b7:4e:95:
                    86:0a:99:d5:34:0e:31:c1:b6:95:c9:81:c9:f3:a5:
                    b3:c2:52:32:7d:9c:28:94:c6:a1:41:9f:98:20:2c:
                    fe:06:50:c9:e5:96:b0:37:d1:41:cc:9e:ca:20:59:
                    f6:5c:01:26:18:8e:2c:96:ef:81:f2:e2:62:45:c2:
                    19:74:03:05:c9:f5:0f:1e:93:58:8c:e7:89:5d:f6:
                    aa:e1:6a:e9:6c:9e:67:ba:97:37:dd:f9:46:29:21:
                    0a:20:20:c7:ae:92:e4:7e:c5:f0:ea:9f:57:a7:5e:
                    ec:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:64:87:F5:38:1B:F2:0A:BB:DF:AF:7D:AE:8C:EB:4F:C2:11:FA:0B
            X509v3 Authority Key Identifier:
                keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:08:58:31:5c:58:1e:f6:54:5a:e6:a5:82:3e:24:57:4f:fc:
         74:e7:09:17:a4:50:bd:b2:57:e3:d1:f1:a9:cf:51:cd:ba:ea:
         f7:13:59:1d:47:40:7b:95:60:a1:ab:69:72:dd:e6:ab:52:63:
         86:2b:8d:aa:11:ce:a8:43:1a:6f:fe:58:21:ba:d6:db:15:d6:
         0b:2c:97:99:4c:ba:51:fe:98:ba:10:04:a5:7c:5b:df:fa:ac:
         59:46:bb:e5:a1:9d:48:ec:94:39:69:f7:59:9a:53:7b:5c:f0:
         5f:90:53:52:e9:8a:62:ff:9d:30:be:6c:b7:d8:5f:31:f8:0a:
         bd:40:b9:b2:c4:76:53:65:dd:51:cd:9c:7f:7f:b5:8d:b8:3a:
         e1:f2:3e:37:93:76:27:a3:5f:4d:53:6e:fb:62:6d:53:1f:07:
         0a:f4:6f:29:25:0c:6d:3a:af:f0:99:eb:46:88:b6:61:81:55:
         0e:83:39:8c:4b:04:74:7f:50:0e:32:fe:2d:21:70:00:73:fd:
         19:f9:7c:9f:5e:b4:de:42:7b:b5:53:b3:49:57:34:96:54:1b:
         7c:3c:34:1d:bc:a2:2e:35:ab:75:e1:64:62:49:7b:f7:51:5b:
         9a:b3:d5:a0:4e:ba:7d:56:58:d8:10:b2:25:83:89:5e:cf:b5:
         34:0f:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:29:19 2024 by rpki-client on console-fra.rpki-client.org