Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.mft
File:                     es_QeX4tm9NTnRlaAxJBpWoCoWo.mft (raw, json)
Hash identifier:          8FZDN4r/crw8cGuicff4sgE6BeFVGl0SWUEXbj0jyeI=
Subject key identifier:   BF:A4:9B:99:FD:94:1D:E1:CE:3D:44:87:EF:14:7E:80:ED:67:A2:4F
Authority key identifier: 7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A
Certificate issuer:       /CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
Certificate serial:       01903D7616DC044A7727D34CA98C8797BEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.mft
Manifest number:          0A20
Signing time:             Sat 22 Jun 2024 01:01:07 +0000
Manifest this update:     Sat 22 Jun 2024 01:01:07 +0000
Manifest next update:     Sun 23 Jun 2024 01:01:07 +0000
Files and hashes:         1: es_QeX4tm9NTnRlaAxJBpWoCoWo.crl (hash: nBDLk1ZOuGZy7gwbeYwFSh5CUwzjY8NrvGbNiw9U6XU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3d:76:16:dc:04:4a:77:27:d3:4c:a9:8c:87:97:be:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7acfd0797e2d9bd3539d195a031241a56a02a16a
        Validity
            Not Before: Jun 22 01:01:07 2024 GMT
            Not After : Jun 23 01:01:07 2024 GMT
        Subject: CN=bfa49b99fd941de1ce3d4487ef147e80ed67a24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fd:2d:03:1c:00:d9:da:92:23:59:1d:46:b9:
                    9f:b9:99:6a:55:c7:e8:6b:c9:70:ea:a7:47:aa:a6:
                    0e:d8:bf:ba:cf:cd:c2:71:8e:8f:60:8a:86:6a:2a:
                    5e:d6:e5:15:fd:f5:75:c3:07:81:90:ab:eb:6e:09:
                    59:3a:cc:98:2d:70:37:5b:85:93:4a:35:e0:b8:86:
                    a2:a2:68:b8:e4:42:3f:01:22:fa:bd:bc:74:96:13:
                    14:e3:c4:6a:0b:ad:3a:02:3f:d1:17:2f:58:47:14:
                    48:f1:fd:45:0f:6b:d1:7c:d4:51:e6:02:18:3e:28:
                    16:57:3e:68:4b:32:84:df:85:da:9b:6c:7e:24:8a:
                    80:2d:ec:2f:f6:96:82:de:8c:f2:f5:b2:c7:de:8d:
                    c3:e8:14:57:fb:b1:c2:60:f7:20:52:5c:db:64:d8:
                    8d:48:e2:ac:3c:77:e8:b9:0f:57:b6:d9:f6:f9:93:
                    07:fd:06:ef:d3:d5:07:a2:f9:be:9e:16:f2:c0:1e:
                    98:be:1a:d2:44:ce:4f:66:cd:c1:ad:cc:53:c0:db:
                    c2:b4:54:24:91:74:79:3d:28:80:4a:b7:69:3d:54:
                    55:37:18:2f:f3:fc:8a:37:4e:1a:35:ee:a8:78:00:
                    e6:a8:ee:97:7e:1d:ce:37:14:9a:81:41:e0:53:e4:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A4:9B:99:FD:94:1D:E1:CE:3D:44:87:EF:14:7E:80:ED:67:A2:4F
            X509v3 Authority Key Identifier:
                keyid:7A:CF:D0:79:7E:2D:9B:D3:53:9D:19:5A:03:12:41:A5:6A:02:A1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es_QeX4tm9NTnRlaAxJBpWoCoWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/afbab5-adcf-4e57-92ea-9f4025571cba/1/es_QeX4tm9NTnRlaAxJBpWoCoWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c8:0f:dd:47:ac:12:44:82:7e:b8:73:e0:d9:7d:a1:9f:75:
         36:7b:ae:99:d4:be:c2:20:cc:70:fa:e6:64:4e:47:bb:01:0c:
         ea:90:ac:f0:68:c6:a9:08:48:83:fb:d0:40:9a:ce:f7:2b:7c:
         b7:2b:3a:61:d6:c7:bc:bd:10:8a:47:d5:01:c9:ac:d5:df:d9:
         f9:40:e4:b6:85:80:06:1c:f0:49:de:83:1b:22:d3:34:8f:e7:
         47:8d:a5:e9:c7:87:73:1a:6e:6a:4c:26:06:dc:44:68:e5:ba:
         ca:c2:ac:f5:e4:a6:f3:57:26:d8:40:37:43:4e:b8:9c:ac:e0:
         14:95:1e:2f:16:1f:6a:a5:28:43:06:87:22:16:9b:e1:26:c1:
         87:dd:6b:3c:29:56:a7:82:d8:19:11:26:ca:3a:9c:30:62:11:
         3a:c8:78:69:4a:e7:50:c2:e0:8b:e6:5d:47:4b:e4:d3:49:66:
         6b:8e:50:f2:18:dc:5d:f3:f9:97:0d:67:7a:28:49:70:40:76:
         6f:ac:3d:91:01:38:a6:0b:23:60:d3:e7:c2:e3:2c:ab:7e:aa:
         d0:db:ab:59:9b:85:75:a4:a7:1a:9e:cd:b8:22:99:1b:81:08:
         d1:0b:d4:cb:01:eb:6a:dd:9d:e7:e8:b9:60:8c:c3:6c:65:b3:
         1d:6a:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:19:03 2024 by rpki-client on console-fra.rpki-client.org