Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File:                     Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier:          pMmpIXr38k3ErwZxgBlPf5HbmpUS3rqUITPTpK99iZQ=
Subject key identifier:   56:29:02:A2:99:3C:26:92:9B:FF:6E:7B:45:17:64:B4:A6:33:FF:B9
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer:       /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial:       01901C6AD1E027C00491300F702114A50DCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number:          11C5
Signing time:             Sat 15 Jun 2024 15:01:20 +0000
Manifest this update:     Sat 15 Jun 2024 15:01:20 +0000
Manifest next update:     Sun 16 Jun 2024 15:01:20 +0000
Files and hashes:         1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: BrAGGCexvtDULbURKjcL0G6QZNxVF+BF8f5MUYFlFsY=)
                          2: Fmw4nHwtQudzZlKN2sME45lFPTA.roa (hash: vdcemfhARcCeDKOVcwS5bki3DAzgmdzp6m6WgLMMDMw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1c:6a:d1:e0:27:c0:04:91:30:0f:70:21:14:a5:0d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
        Validity
            Not Before: Jun 15 15:01:20 2024 GMT
            Not After : Jun 16 15:01:20 2024 GMT
        Subject: CN=562902a2993c26929bff6e7b451764b4a633ffb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:af:eb:72:8a:93:46:c2:d5:8c:e4:dc:77:9c:
                    d3:29:b6:e0:03:84:a3:0d:99:44:2f:77:20:83:6f:
                    a6:cb:7e:5c:56:7a:30:36:62:3a:7a:98:78:b4:5d:
                    c3:85:98:3e:5d:3b:11:14:1e:03:39:14:9e:f1:a9:
                    7c:2a:33:dc:2d:97:57:3d:33:0f:ad:55:cb:92:ce:
                    8c:4b:75:b6:84:9c:8f:a1:06:f5:71:61:be:1b:f5:
                    d1:a5:bf:d1:64:b6:70:8b:14:3d:5f:ca:84:32:d6:
                    b1:4b:45:06:45:17:f0:f6:96:b9:d2:5f:26:91:94:
                    ae:ea:4c:61:3c:00:c5:ea:6b:99:66:1a:c1:de:a7:
                    7e:e4:59:47:ca:8c:02:f6:dd:b8:c2:f8:05:b1:4a:
                    d9:a9:8c:f4:4d:d5:41:27:26:6c:68:f4:0c:8d:74:
                    b2:ed:17:9a:25:d6:c4:a6:76:1c:f2:c5:b2:a4:dc:
                    57:8d:f1:46:de:41:2a:be:ab:6c:50:98:6b:cd:fc:
                    09:ca:66:73:79:f8:8b:9d:26:bf:eb:1b:8d:89:d1:
                    72:d1:45:35:18:c5:a5:ee:58:ff:dc:12:c5:29:53:
                    32:cc:0a:dc:af:fe:eb:22:06:ff:8b:a4:64:74:d7:
                    66:69:4d:96:b8:35:c9:11:bf:f2:59:ce:1d:61:da:
                    d9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:29:02:A2:99:3C:26:92:9B:FF:6E:7B:45:17:64:B4:A6:33:FF:B9
            X509v3 Authority Key Identifier:
                keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:42:b5:27:13:1a:60:94:19:7f:53:43:22:08:c7:bb:62:32:
         65:ce:60:44:7f:63:f8:15:3e:79:11:45:3b:e8:60:56:e3:e6:
         7e:14:04:52:5b:df:0b:02:95:35:6a:f9:4f:b0:4b:17:93:4b:
         26:be:55:bb:9c:be:2f:69:26:dc:e9:d8:5a:b9:45:3d:61:cf:
         da:8c:e0:13:29:15:a2:63:b9:a7:69:d7:fb:d3:54:80:61:79:
         4a:54:45:84:97:3f:f7:c9:0d:82:7c:29:ad:59:ab:79:33:2f:
         90:89:0e:98:2e:64:12:59:6a:d4:da:36:af:53:28:2a:c0:f9:
         ec:5b:3e:24:3a:6a:fc:1b:12:52:c6:a9:18:3a:f5:50:00:72:
         94:47:a8:cf:4d:08:39:ef:8f:d2:1a:fd:97:19:f9:de:a7:d9:
         6d:91:65:27:91:b2:62:59:ce:3e:fe:ad:7f:71:2a:2f:f7:73:
         8d:c8:41:a1:1a:28:f1:78:5c:db:26:01:19:be:b2:dd:26:d8:
         d5:11:a1:9f:75:78:41:99:a6:2f:eb:ea:da:91:7d:7e:4c:01:
         03:d6:6e:81:ed:d1:9d:9b:ff:c5:08:c9:df:ac:08:0a:2a:bf:
         a5:84:73:2d:2c:9b:b6:cc:b9:46:10:3e:fd:ca:3d:8f:49:da:
         c8:8c:d1:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAcatHgJ8AEkTAPcCEUpQ3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2Q5YWRkMTYxMzdlOGJhYjk4ZDc4ZTJhMzM2MGJjOGJk
NmYwZjEwHhcNMjQwNjE1MTUwMTIwWhcNMjQwNjE2MTUwMTIwWjAzMTEwLwYDVQQD
Eyg1NjI5MDJhMjk5M2MyNjkyOWJmZjZlN2I0NTE3NjRiNGE2MzNmZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K/rcoqTRsLVjOTcd5zTKbbgA4Sj
DZlEL3cgg2+my35cVnowNmI6eph4tF3DhZg+XTsRFB4DORSe8al8KjPcLZdXPTMP
rVXLks6MS3W2hJyPoQb1cWG+G/XRpb/RZLZwixQ9X8qEMtaxS0UGRRfw9pa50l8m
kZSu6kxhPADF6muZZhrB3qd+5FlHyowC9t24wvgFsUrZqYz0TdVBJyZsaPQMjXSy
7ReaJdbEpnYc8sWypNxXjfFG3kEqvqtsUJhrzfwJymZzefiLnSa/6xuNidFy0UU1
GMWl7lj/3BLFKVMyzArcr/7rIgb/i6RkdNdmaU2WuDXJEb/yWc4dYdrZhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYpAqKZPCaSm/9ue0UXZLSmM/+5MB8GA1UdIwQY
MBaAFBLNmt0WE36Lq5jXjiozYLyL1vDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMt
MTcyZGY2YmNkNDViLzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81N2NjNmUtOGIxYS00ODI3LTk5OWMtMTcyZGY2YmNkNDVi
LzEvRXMyYTNSWVRmb3VybU5lT0tqTmd2SXZXOFBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEK1JxMa
YJQZf1NDIgjHu2IyZc5gRH9j+BU+eRFFO+hgVuPmfhQEUlvfCwKVNWr5T7BLF5NL
Jr5Vu5y+L2km3OnYWrlFPWHP2ozgEykVomO5p2nX+9NUgGF5SlRFhJc/98kNgnwp
rVmreTMvkIkOmC5kEllq1No2r1MoKsD57Fs+JDpq/BsSUsapGDr1UABylEeoz00I
Oe+P0hr9lxn53qfZbZFlJ5GyYlnOPv6tf3EqL/dzjchBoRoo8Xhc2yYBGb6y3SbY
1RGhn3V4QZmmL+vq2pF9fkwBA9Zuge3RnZv/xQjJ36wICiq/pYRzLSybtsy5RhA+
/co9j0nayIzRzA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 20:02:40 2024 by rpki-client on console-fra.rpki-client.org