Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
File:                     DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json)
Hash identifier:          oWGnBcY+p1rIn9lsRKjUQ3fDnJfmlEK+2/6E8j2XaEs=
Subject key identifier:   D2:EF:43:7D:09:CE:26:30:99:E2:02:7C:91:02:B4:D2:56:A4:14:1C
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Certificate issuer:       /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial:       018F51390161FDE8BE0BB46922BF20292E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 04:04:01 +0000
Manifest this update:     Tue 07 May 2024 04:04:01 +0000
Manifest next update:     Wed 08 May 2024 04:04:01 +0000
Files and hashes:         1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: 1KBqfu6m0OdXmHs+u2KnFR1rJbf4ZTFZZV5/xXvVH2w=)
                          2: hjAUYySazW45Fy_3qG6c9jWRcMA.roa (hash: /wGrlZyYN9C8yFnVGkEqQ9BOvqyLPzPKVVyJU5JMbKo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 04:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:39:01:61:fd:e8:be:0b:b4:69:22:bf:20:29:2e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
        Validity
            Not Before: May  7 04:04:01 2024 GMT
            Not After : May  8 04:04:01 2024 GMT
        Subject: CN=d2ef437d09ce263099e2027c9102b4d256a4141c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:27:f9:b9:cf:2f:57:3b:ff:d6:86:37:cb:
                    a7:8f:2b:ce:57:74:27:1c:dc:2d:4a:9a:24:ce:1f:
                    c3:f3:47:b2:b6:10:51:d4:9d:ce:a2:a3:c8:a8:2f:
                    c9:8c:3b:14:aa:0a:7f:74:24:ae:bd:b8:36:07:40:
                    dc:e0:9f:09:46:a9:6e:1d:f4:15:d7:f8:a3:ed:64:
                    ba:dd:33:3b:19:e8:61:bd:39:5d:c2:d9:88:37:a2:
                    70:09:95:7d:32:e9:8a:ee:09:b4:a0:7f:dc:b4:65:
                    ef:be:0d:1a:1d:b3:8b:59:8d:a4:b6:97:b1:5a:ad:
                    5d:88:46:35:9e:56:37:95:fb:91:ae:18:df:c8:c8:
                    5a:19:a1:a1:7f:89:89:2b:cd:f1:45:9a:0c:ff:16:
                    99:50:eb:e3:c1:ca:6d:fb:b1:21:17:43:7a:a8:57:
                    1a:63:d3:f8:c6:ea:87:ac:aa:78:e9:e9:de:38:40:
                    f9:84:ec:0c:48:ef:7d:16:00:e1:b0:0e:32:13:10:
                    62:1e:41:ef:61:e2:05:18:38:e0:7b:28:f8:36:19:
                    bf:49:fe:3e:47:63:58:28:cc:b2:f3:44:69:8d:c5:
                    55:ba:92:f4:f1:c8:d3:f2:71:e1:77:88:07:85:aa:
                    03:b2:df:2c:05:42:2e:7f:e6:1c:46:4f:72:83:23:
                    9a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EF:43:7D:09:CE:26:30:99:E2:02:7C:91:02:B4:D2:56:A4:14:1C
            X509v3 Authority Key Identifier:
                keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:44:a7:70:16:35:80:5c:bf:dc:3e:21:4a:9e:6f:86:68:8c:
         09:b5:f3:e0:90:26:81:05:a9:8e:09:87:0a:31:dd:6a:59:64:
         81:fc:c3:54:df:2d:76:d6:a2:68:9c:56:70:e0:0e:bc:96:33:
         c6:b0:f4:2a:b6:41:15:2e:85:96:3b:c2:b5:a9:f3:fb:ab:38:
         c4:37:a9:b1:7e:ab:4d:bd:47:49:f9:29:e2:ea:2c:5b:a9:a0:
         d8:65:c0:6b:d4:0d:2e:31:a2:67:74:c0:ac:b6:ea:06:88:8d:
         1c:2d:f4:38:43:0e:3a:28:d0:25:dd:97:3f:f0:43:d2:93:b1:
         b0:f0:1a:61:97:63:97:ca:e3:53:7b:33:67:36:58:08:e9:e7:
         6c:d9:fd:83:aa:47:40:69:2e:38:be:0e:2a:7a:11:a2:04:0e:
         69:37:86:81:20:60:69:05:53:d3:d0:9b:dc:88:df:d5:13:66:
         c3:fc:38:55:7d:0b:16:ad:3d:ca:81:8c:a3:5c:71:cf:da:0e:
         f2:dc:7e:28:5c:66:62:b8:67:91:41:f7:d5:c2:15:62:15:98:
         3a:4c:4a:f5:69:75:70:05:4f:2e:16:dd:d7:60:55:c2:80:c9:
         fe:35:37:16:0d:4a:d6:dc:59:4a:dc:95:7c:bf:e1:c9:a8:66:
         0e:ef:49:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 07:37:56 2024 by rpki-client on console-ams.rpki-client.org