Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File:                     0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier:          eqzU8YXjYRC9laPUFGgA9CGMGjWe5K/58ejy34aIUFQ=
Subject key identifier:   55:76:AD:AF:55:E3:9D:18:04:D2:12:16:D3:01:DB:3B:7A:59:AB:2E
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer:       /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial:       018F3BFA264A9328DA6AF32F9E0B8151477B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number:          0442
Signing time:             Fri 03 May 2024 01:03:20 +0000
Manifest this update:     Fri 03 May 2024 01:03:20 +0000
Manifest next update:     Sat 04 May 2024 01:03:20 +0000
Files and hashes:         1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: 1KRb9z3jQ1u4FNrQFfr5AnyKxOvnNzlIup/HxnLZHks=)
                          2: Iv-8z1avpQ_FJPgUMm5-5EzDBrw.roa (hash: HF+69rY8I3oY0ks1vhTkG5sW6hg/7sUCxfsCBydy2uM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 01:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3b:fa:26:4a:93:28:da:6a:f3:2f:9e:0b:81:51:47:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
        Validity
            Not Before: May  3 01:03:20 2024 GMT
            Not After : May  4 01:03:20 2024 GMT
        Subject: CN=5576adaf55e39d1804d21216d301db3b7a59ab2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b8:ea:df:14:e9:99:40:51:bd:11:54:6a:b4:
                    6a:29:49:13:0a:6e:60:cd:77:c7:c9:e8:95:f8:16:
                    68:b1:3d:ef:24:44:25:6b:b6:f4:5f:74:b5:7d:58:
                    2e:52:e7:1b:b3:48:ab:5f:49:5c:25:b2:a8:18:b8:
                    ab:34:ee:c0:02:02:a8:e2:12:5e:0a:63:2d:fe:4b:
                    41:ba:4f:3a:87:a5:f7:92:db:a2:e0:0a:91:f3:79:
                    3e:3c:20:35:78:eb:3a:68:32:6a:c3:f6:4c:7c:9e:
                    b7:ec:7c:58:75:60:63:7f:56:b4:ee:e8:b0:7e:0c:
                    6c:80:77:66:7c:98:c3:c1:0d:f1:f4:2d:df:4e:34:
                    30:d5:d4:4f:50:22:4c:3e:bb:f3:f0:8a:2b:b6:38:
                    8f:a4:a8:32:e1:00:a2:16:f0:24:08:11:ac:45:ce:
                    45:fd:ea:bf:a7:d5:78:9f:a4:40:77:50:9a:f6:e3:
                    54:d7:17:f0:f8:4d:5d:f0:ea:a1:a1:5c:ef:ec:37:
                    20:c1:f5:4a:db:d4:37:20:0b:92:86:6e:aa:37:d1:
                    4e:0a:13:2d:f5:3d:b9:47:c5:f9:44:ab:bc:79:b4:
                    93:99:7d:c4:3e:4a:5a:a6:6f:fb:9f:66:ac:46:f8:
                    74:44:d6:eb:b1:59:eb:3c:9e:68:35:27:6b:a7:77:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:76:AD:AF:55:E3:9D:18:04:D2:12:16:D3:01:DB:3B:7A:59:AB:2E
            X509v3 Authority Key Identifier:
                keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8e:38:ea:51:6f:75:35:d5:bb:6f:a4:8b:b5:4c:e8:c1:42:
         0d:15:42:4d:d1:2c:d7:5d:52:05:96:98:70:3e:f9:c0:54:b6:
         99:5c:72:00:8b:28:12:50:89:8f:dd:60:6a:8c:1d:fb:ce:b1:
         70:9a:fe:4b:66:8e:63:ef:4b:0e:bb:cb:95:9b:4c:05:87:18:
         47:5d:dc:18:97:5b:70:f4:e7:a7:6e:b2:55:18:26:59:9d:c2:
         1a:b6:39:18:de:ef:f6:93:70:bb:0f:f9:ce:2a:c2:4b:71:5f:
         5f:c7:4f:65:29:7b:06:ed:b4:93:56:6b:9e:82:d1:bf:94:2b:
         8a:4b:c1:39:25:bb:b0:fe:ff:53:ec:49:81:10:52:12:d0:27:
         26:59:ee:7c:eb:1a:26:a7:a8:8a:dc:24:2b:f4:87:bf:09:8e:
         fd:8f:d1:a3:4c:15:a2:56:31:a8:de:06:9b:8b:95:ce:87:1f:
         4d:d3:38:55:47:60:52:2e:4e:d5:9d:c7:cf:72:76:55:31:fc:
         bc:5a:e1:3e:10:2e:c9:76:30:1d:fc:71:14:0a:f2:be:1c:e4:
         6a:4f:8a:da:43:e1:47:a1:ac:0c:49:96:6e:57:1d:d2:ed:71:
         5e:f4:0c:90:47:25:e3:4c:f4:32:95:bf:be:49:48:75:31:61:
         b4:90:9b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:28:06 2024 by rpki-client on console-ams.rpki-client.org