Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
File:                     rWUjcvDl0WnCAPfR0IDoVw_-23E.mft (raw, json)
Hash identifier:          T3uVYUai4maqRWMBmsWrbEU+rBJlqpoQsSXq9XNvAS4=
Subject key identifier:   AE:16:78:E2:35:A4:F0:1A:9B:BD:23:02:D8:99:C4:9E:04:5B:8F:AC
Authority key identifier: AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71
Certificate issuer:       /CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
Certificate serial:       0193553F9D381DEE45927D1452BD0D6B73E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
Manifest number:          DB
Signing time:             Fri 22 Nov 2024 19:00:52 +0000
Manifest this update:     Fri 22 Nov 2024 19:00:52 +0000
Manifest next update:     Sat 23 Nov 2024 19:00:52 +0000
Files and hashes:         1: qwAfH0hL1h3I7Vz1ufZqxLjq1vs.roa (hash: 4CR3GxyAO40dQeUSHO+lmLE05vt9DG5tvDetGYEm5aw=)
                          2: rWUjcvDl0WnCAPfR0IDoVw_-23E.crl (hash: ex/8ywVQ14Lx07nPpK5roMPJYSu93rekZa7sh8tPmKM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:3f:9d:38:1d:ee:45:92:7d:14:52:bd:0d:6b:73:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad652372f0e5d169c200f7d1d080e8570ffedb71
        Validity
            Not Before: Nov 22 19:00:52 2024 GMT
            Not After : Nov 23 19:00:52 2024 GMT
        Subject: CN=ae1678e235a4f01a9bbd2302d899c49e045b8fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:82:a0:1a:3f:ae:03:87:e2:26:43:c3:59:
                    59:8e:38:66:e3:3f:7f:f6:ba:18:b4:21:8c:60:bd:
                    2c:79:39:b6:70:66:76:b2:5c:30:95:25:52:ce:46:
                    56:93:4b:15:b2:e3:f9:99:b5:30:1d:26:1d:92:52:
                    e1:0a:f0:e3:73:15:31:4e:fd:ca:9e:02:35:a2:9b:
                    4a:b9:74:ea:e1:00:53:9f:65:cf:97:9a:c8:9a:b1:
                    9e:07:57:b8:7b:cd:b8:de:66:81:a1:fd:94:69:5e:
                    2a:67:14:0b:1d:fd:83:0c:63:fb:fb:80:94:c4:9c:
                    d7:e6:14:39:e0:71:88:0e:b7:78:61:86:52:de:1c:
                    20:a3:7b:0e:24:7b:9d:e7:23:55:ca:1a:d2:48:05:
                    13:14:69:82:9f:76:e9:4f:01:17:07:32:fb:3a:80:
                    95:6a:75:c9:e2:09:90:69:47:e8:6a:db:aa:c2:9d:
                    c4:08:96:99:f0:4f:89:4f:60:bd:20:4a:21:5d:33:
                    a9:5c:35:70:63:e6:29:be:b2:64:04:59:b1:30:89:
                    1c:13:73:dc:8b:bc:b6:7a:bf:2b:6a:60:5b:a4:b3:
                    9a:1d:19:2d:2a:3a:0c:d6:2d:5a:5e:7f:e1:ee:3b:
                    d8:c5:89:24:61:68:f3:72:56:7f:33:3b:de:a4:3f:
                    e0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:16:78:E2:35:A4:F0:1A:9B:BD:23:02:D8:99:C4:9E:04:5B:8F:AC
            X509v3 Authority Key Identifier:
                keyid:AD:65:23:72:F0:E5:D1:69:C2:00:F7:D1:D0:80:E8:57:0F:FE:DB:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rWUjcvDl0WnCAPfR0IDoVw_-23E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bd98c9-fce3-4bba-b49b-4cae325c0e28/1/rWUjcvDl0WnCAPfR0IDoVw_-23E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:77:19:42:96:82:68:55:2c:b5:5a:9b:17:18:63:1e:cd:7d:
         cf:c1:2c:37:3d:8f:66:4e:31:16:76:d0:90:ea:47:92:12:c8:
         b4:74:86:ab:c5:b5:a7:7d:91:41:d9:fd:50:da:53:fc:1f:dc:
         43:e1:8a:77:36:c6:eb:b2:81:78:75:a7:71:9c:91:39:95:f8:
         2d:28:38:a2:ae:f7:48:85:6e:5f:d2:6d:85:39:58:df:22:96:
         64:52:bd:c0:ef:31:fb:10:72:7d:a3:ca:a5:fe:3f:2c:48:3e:
         54:a1:95:23:f7:0b:ae:28:4e:66:b0:ea:9d:00:04:c7:d3:75:
         80:fc:d7:a2:bb:e0:6b:41:00:8b:07:87:c4:a5:bf:31:5a:62:
         e4:72:c3:43:e0:a9:e8:1b:63:c1:4c:8f:93:08:e2:f7:a0:bc:
         62:cf:2a:a4:ba:93:e6:90:71:da:b1:80:6b:e6:42:4c:16:e4:
         61:e4:20:fb:1a:04:29:71:4b:61:a4:99:11:bd:12:df:6d:f5:
         e7:40:d2:36:60:bc:3f:b1:bc:d7:5d:ba:96:b5:26:4b:05:c2:
         24:e7:24:82:9a:1e:d0:c8:13:a8:51:51:c3:6a:3d:1f:8c:92:
         0e:69:45:42:d5:7c:fc:b3:b4:2e:66:ab:a3:ff:e9:a2:64:49:
         c3:05:a0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:53:53 2024 by rpki-client on console-fra.rpki-client.org