Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
File:                     ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft (raw, json)
Hash identifier:          XIyohcFMWx6fsesZrPuWqsesXFBUS3BSKUzmwXYNHQI=
Subject key identifier:   C4:C2:13:2C:0A:F6:AC:D4:AB:E6:B2:65:38:AE:41:60:85:B3:E5:22
Authority key identifier: 11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54
Certificate issuer:       /CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
Certificate serial:       01903AE26FD91648D584BBB045D06E889CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
Manifest number:          AC
Signing time:             Fri 21 Jun 2024 13:00:36 +0000
Manifest this update:     Fri 21 Jun 2024 13:00:36 +0000
Manifest next update:     Sat 22 Jun 2024 13:00:36 +0000
Files and hashes:         1: ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl (hash: KB/fjKz2qWZ5XyEUKHeT900HRWsZ4jsWnTJxX9I4tkk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3a:e2:6f:d9:16:48:d5:84:bb:b0:45:d0:6e:88:9c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112a6a260d1e67e0a7b4e6dcf403fd39f6de9754
        Validity
            Not Before: Jun 21 13:00:36 2024 GMT
            Not After : Jun 22 13:00:36 2024 GMT
        Subject: CN=c4c2132c0af6acd4abe6b26538ae416085b3e522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:49:af:17:3f:b6:14:f1:f6:71:88:00:b6:
                    51:cd:e7:d3:f0:32:36:7b:2b:82:e7:ce:13:89:04:
                    f6:de:65:3e:72:c1:42:87:65:b3:78:74:8a:57:c8:
                    da:c7:bf:fd:09:2d:9c:86:6a:cc:47:96:38:c7:65:
                    b5:ae:0d:b6:e4:82:70:84:7f:67:6e:97:07:37:de:
                    86:67:73:b4:8f:1e:9e:ec:8a:df:1f:d1:95:ca:5d:
                    1b:ae:4e:80:ce:8c:1b:b3:8e:7e:6b:63:b8:78:ad:
                    d1:19:d0:7f:60:97:7a:26:1b:11:5a:9d:f7:87:a5:
                    69:f0:c7:a3:d9:17:1e:f7:06:ee:b1:d0:b5:2e:bd:
                    af:f8:b1:59:ca:f0:16:e0:65:d3:49:65:c9:d8:3d:
                    11:54:82:40:9c:a3:5b:1d:12:a4:ea:6d:c1:0a:cc:
                    9e:fc:fd:6e:b9:aa:8b:01:a0:5c:c1:82:b2:71:94:
                    88:c0:d7:ec:fd:dd:c4:fd:6e:6c:fb:7f:8e:6c:58:
                    23:df:a3:16:f2:3e:2b:c3:a3:4d:c4:4a:59:23:43:
                    c5:59:cf:50:0e:ba:81:28:1e:c0:e3:6c:39:2f:29:
                    e1:87:8c:1e:65:1a:5a:44:ca:34:a5:93:fb:21:3b:
                    79:3f:55:37:1f:45:56:42:66:dd:a6:85:c5:ad:16:
                    63:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C2:13:2C:0A:F6:AC:D4:AB:E6:B2:65:38:AE:41:60:85:B3:E5:22
            X509v3 Authority Key Identifier:
                keyid:11:2A:6A:26:0D:1E:67:E0:A7:B4:E6:DC:F4:03:FD:39:F6:DE:97:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESpqJg0eZ-CntObc9AP9Ofbel1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/84faed-0cb5-4799-9447-a3988fc90d60/1/ESpqJg0eZ-CntObc9AP9Ofbel1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:12:8f:4e:73:19:ec:2a:a8:35:27:65:24:36:96:e4:b3:c2:
         38:24:a7:a6:18:20:6f:79:f5:b2:d3:f7:49:7c:0d:b9:2b:b1:
         ea:11:fd:56:d3:1c:71:1f:73:bb:3b:a7:32:45:a7:3b:41:67:
         bc:70:aa:80:f3:c0:e8:8a:65:f7:fa:1c:58:cc:26:35:5d:27:
         f0:25:22:91:dd:4a:96:83:b0:1e:30:12:f4:83:9f:6a:3d:de:
         b3:f2:ef:a2:25:a0:25:7e:9c:f2:be:d1:fd:71:43:72:eb:6e:
         02:ea:8b:81:a3:4f:8b:49:28:99:10:01:06:53:24:29:9e:bc:
         2a:c1:48:9f:82:77:fa:38:be:c4:50:da:77:38:20:bc:62:64:
         01:80:0a:db:a8:72:5a:89:46:47:8f:96:10:2f:e4:87:ff:e0:
         80:60:85:d6:f3:64:63:98:8b:9d:53:97:61:8c:d2:9b:2a:a9:
         f9:70:43:ca:67:08:fc:29:ea:30:48:6f:37:3b:d4:3d:85:5b:
         f8:45:c3:54:ca:dc:1d:e4:74:25:0f:15:bd:ee:b3:84:78:dc:
         92:fc:2f:7f:f6:a3:5b:49:f8:4a:8b:cb:37:2f:d2:c7:a3:54:
         ee:59:ef:9e:90:f7:89:25:a4:08:d2:9a:5f:9b:36:90:c1:e5:
         6f:f8:c4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:39:08 2024 by rpki-client on console-fra.rpki-client.org