Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
File:                     eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft (raw, json)
Hash identifier:          1sJZ2zLCHobMutzhYECdPNHo6qE0W+w+pBGSTRORfoY=
Subject key identifier:   A3:B2:52:A9:10:6C:D6:32:3C:F2:A7:79:D6:ED:48:C8:9F:DF:A6:95
Authority key identifier: 7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4
Certificate issuer:       /CN=7accf137245aec66b2f674a8581a7449ae2cfce4
Certificate serial:       019048691EA7EB91574F32F8A22DBB625083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
Manifest number:          11DC
Signing time:             Mon 24 Jun 2024 04:02:46 +0000
Manifest this update:     Mon 24 Jun 2024 04:02:46 +0000
Manifest next update:     Tue 25 Jun 2024 04:02:46 +0000
Files and hashes:         1: eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl (hash: 1QKQx9qB7+B1tmaSGk9BPEkGVEEUTrd2mAPG8nYC2b0=)
                          2: tas80hspRYcaRZz6aF742hwnBao.roa (hash: duO/ZvLM1WsWdR+IXRxYGxbp0g2OE0DmHW61SEd38nY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 04:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:48:69:1e:a7:eb:91:57:4f:32:f8:a2:2d:bb:62:50:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7accf137245aec66b2f674a8581a7449ae2cfce4
        Validity
            Not Before: Jun 24 04:02:46 2024 GMT
            Not After : Jun 25 04:02:46 2024 GMT
        Subject: CN=a3b252a9106cd6323cf2a779d6ed48c89fdfa695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:d2:e2:5c:42:24:c5:25:ed:4d:b8:56:c8:20:
                    2a:85:9f:bd:76:d3:45:99:fd:a6:c1:28:33:60:4b:
                    65:9c:2a:0a:e6:7d:55:5f:c7:77:ef:bb:1e:95:df:
                    7a:f0:f6:67:39:4b:8e:bb:fc:7b:38:95:92:ee:0a:
                    8a:fb:61:a3:de:3f:83:43:06:f2:5d:60:f5:17:3c:
                    fa:be:d6:c0:f2:9f:08:99:aa:98:89:03:b2:54:a5:
                    22:76:74:42:84:e7:43:32:e3:9c:51:1f:77:91:2b:
                    f1:b6:08:9f:7a:7c:19:17:73:1f:c1:68:ea:4f:f4:
                    db:ed:ec:e0:78:f0:40:da:5f:c7:17:da:33:d1:f3:
                    78:48:8a:11:a1:71:b3:5a:86:1b:05:9c:a8:b2:2f:
                    85:55:aa:70:af:9f:98:df:45:ed:17:46:31:fc:66:
                    09:03:e7:27:31:fd:e5:7f:69:73:f1:6c:f5:6f:36:
                    cc:52:e7:fa:d2:d4:fd:b7:26:0d:03:9f:20:38:df:
                    1e:b9:e5:ff:86:5d:b2:19:c9:4d:5a:a1:9b:9a:de:
                    2b:a5:1c:ae:82:d0:36:35:ca:5b:4a:d9:af:55:5b:
                    79:73:2d:32:ef:a4:d0:77:ab:0c:bc:d2:98:ee:c1:
                    96:d5:54:b6:b3:1c:56:aa:0b:cd:41:e6:2d:88:6e:
                    1d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B2:52:A9:10:6C:D6:32:3C:F2:A7:79:D6:ED:48:C8:9F:DF:A6:95
            X509v3 Authority Key Identifier:
                keyid:7A:CC:F1:37:24:5A:EC:66:B2:F6:74:A8:58:1A:74:49:AE:2C:FC:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/38f24b-b68e-4143-bb52-7fc3fe05f310/1/eszxNyRa7Gay9nSoWBp0Sa4s_OQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:48:e8:92:ea:2d:de:b7:05:60:29:76:fb:ee:e4:9c:8a:af:
         49:c0:d3:15:da:a7:93:dd:a4:c6:87:99:00:eb:a7:f5:20:82:
         65:95:57:3f:4f:ff:d0:e8:eb:a0:21:5c:65:bd:c7:b5:dd:d4:
         18:f2:6f:c0:64:33:95:f6:5a:1b:27:ad:b9:d3:b5:b6:10:ab:
         47:53:a4:6a:65:22:5a:b1:2d:ca:fd:cd:12:d1:8a:81:60:4f:
         85:26:29:62:4b:ee:63:e1:d0:cb:2c:97:79:8a:9f:cd:fe:c5:
         c1:43:9c:f8:b7:e9:c3:07:26:6e:0d:64:16:81:89:25:44:e2:
         bf:ba:a3:a5:d4:3e:12:fe:cf:1f:17:72:99:ff:ee:fb:fb:7b:
         87:fe:35:a8:7f:5d:f5:6b:4c:ed:f0:d0:06:75:be:53:00:d3:
         f2:08:9e:7b:93:56:d5:a0:2c:94:6f:ef:5d:36:4b:bc:6b:43:
         7f:9c:7d:f7:5f:8f:0c:9e:e2:4c:50:7e:e1:bd:4d:ed:77:b7:
         46:04:ac:5c:6b:f4:e1:fa:63:f1:3e:32:6a:fa:81:98:1b:df:
         84:f3:93:ad:81:24:fe:da:04:0a:47:61:67:d0:73:01:c8:b4:
         04:46:d9:6b:a7:89:17:1e:19:a8:15:20:c0:c9:c9:a5:44:fd:
         ed:94:f9:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZBIaR6n65FXTzL4oi27YlCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2NmMTM3MjQ1YWVjNjZiMmY2NzRhODU4MWE3NDQ5YWUy
Y2ZjZTQwHhcNMjQwNjI0MDQwMjQ2WhcNMjQwNjI1MDQwMjQ2WjAzMTEwLwYDVQQD
EyhhM2IyNTJhOTEwNmNkNjMyM2NmMmE3NzlkNmVkNDhjODlmZGZhNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+tLiXEIkxSXtTbhWyCAqhZ+9dtNF
mf2mwSgzYEtlnCoK5n1VX8d377seld968PZnOUuOu/x7OJWS7gqK+2Gj3j+DQwby
XWD1Fzz6vtbA8p8ImaqYiQOyVKUidnRChOdDMuOcUR93kSvxtgifenwZF3MfwWjq
T/Tb7ezgePBA2l/HF9oz0fN4SIoRoXGzWoYbBZyosi+FVapwr5+Y30XtF0Yx/GYJ
A+cnMf3lf2lz8Wz1bzbMUuf60tT9tyYNA58gON8eueX/hl2yGclNWqGbmt4rpRyu
gtA2NcpbStmvVVt5cy0y76TQd6sMvNKY7sGW1VS2sxxWqgvNQeYtiG4dkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOyUqkQbNYyPPKnedbtSMif36aVMB8GA1UdIwQY
MBaAFHrM8TckWuxmsvZ0qFgadEmuLPzkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTIt
N2ZjM2ZlMDVmMzEwLzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zOGYyNGItYjY4ZS00MTQzLWJiNTItN2ZjM2ZlMDVmMzEw
LzEvZXN6eE55UmE3R2F5OW5Tb1dCcDBTYTRzX09RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEjokuot
3rcFYCl2++7knIqvScDTFdqnk92kxoeZAOun9SCCZZVXP0//0OjroCFcZb3Htd3U
GPJvwGQzlfZaGyetudO1thCrR1OkamUiWrEtyv3NEtGKgWBPhSYpYkvuY+HQyyyX
eYqfzf7FwUOc+Lfpwwcmbg1kFoGJJUTiv7qjpdQ+Ev7PHxdymf/u+/t7h/41qH9d
9WtM7fDQBnW+UwDT8giee5NW1aAslG/vXTZLvGtDf5x991+PDJ7iTFB+4b1N7Xe3
RgSsXGv04fpj8T4yavqBmBvfhPOTrYEk/toECkdhZ9BzAci0BEbZa6eJFx4ZqBUg
wMnJpUT97ZT5mA==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:54:22 2024 by rpki-client on console-fra.rpki-client.org