Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
File:                     ESCgzgE-LVKm_zVKJwiUu5mORUc.mft (raw, json)
Hash identifier:          4eWMq8l5cnc+0g3u8O5hafYfosnB0nbiPXOd9Zr6XbQ=
Subject key identifier:   9C:FD:15:26:CF:17:26:F6:3B:62:62:F3:E3:CB:52:7F:AF:70:39:D1
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Certificate issuer:       /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial:       01935162F079896AC2D7BCE1C369E3EEE702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
Manifest number:          1371
Signing time:             Fri 22 Nov 2024 01:00:58 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:58 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:58 +0000
Files and hashes:         1: Dtq_BbYQG_cf9hfyce67pNymZMM.roa (hash: 3SpwHQh02R0QwNc7EY1K8IxFKhltq1wk1Vc4un+x3Qs=)
                          2: ESCgzgE-LVKm_zVKJwiUu5mORUc.crl (hash: +QZ/S9v4PiJmKjRczIPMG8KZpnoN+xFQZ7NtEsGMNY8=)
                          3: _iKvOCxiDYc6PqJxrj0tqbc_u7E.roa (hash: 090BNdFHGcQjGiMm3Vk8jsOHMyu3+6qWURvb26/VyJ4=)
                          4: fMHyifof2fmDqqux8uEC3vtqbIc.roa (hash: rmIDbftbKw5+ovY5evcTpKxJpbUy0tyMt+Ud6XvLusA=)
                          5: p4mUIX4hR85puaSgoPgDOo1yAEk.roa (hash: UTXIPn1eiuQOQPJwBdmBc0iikMNo2mbNnSVaoUyiw9Q=)
                          6: qvfhmF5mEYsoGctQhrbJCiGZh4U.roa (hash: O8Q6aB9CiJsm7fy9aACylhu7RDvmS0vI/a06YCM9k58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:f0:79:89:6a:c2:d7:bc:e1:c3:69:e3:ee:e7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
        Validity
            Not Before: Nov 22 01:00:58 2024 GMT
            Not After : Nov 23 01:00:58 2024 GMT
        Subject: CN=9cfd1526cf1726f63b6262f3e3cb527faf7039d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5b:13:e5:01:05:3b:35:3b:a0:f7:76:cd:6a:
                    29:81:64:27:70:3c:0a:fe:85:c1:7a:d0:ae:df:01:
                    b7:fe:03:47:99:b7:cc:c6:e2:96:ce:50:73:81:90:
                    85:60:94:2b:15:68:c4:b4:68:53:0d:5e:8b:09:45:
                    48:eb:f0:94:ce:c8:64:f8:72:b8:24:a9:ef:f8:57:
                    79:4b:a7:cd:24:70:6c:43:6b:4d:86:05:8d:2b:c0:
                    9e:01:b3:39:17:96:44:2d:a1:40:d3:ef:b8:44:c7:
                    03:cc:57:f8:5b:bb:e5:d2:8c:54:71:3c:20:b9:cb:
                    03:05:eb:3e:d5:77:d8:70:3d:2d:86:4a:92:9c:18:
                    5f:24:4d:ed:08:82:08:6a:60:8f:76:91:c5:72:a3:
                    e4:f3:fb:d6:ea:b8:47:e5:71:e2:0d:ac:cb:db:c3:
                    e3:79:ac:55:fe:e2:f6:e2:7d:2e:bb:d9:04:f2:bc:
                    47:9e:19:4c:30:68:e6:2e:8e:35:d7:84:39:fb:ee:
                    eb:16:91:26:53:1c:37:4a:c0:9a:44:c1:1d:ad:3e:
                    60:cb:a6:5d:8e:b3:11:bc:ab:9b:17:d2:57:8b:4d:
                    c0:aa:ed:14:9a:7d:ec:92:f6:ba:25:51:6a:64:bf:
                    93:8a:b6:02:34:5e:e1:fc:08:5c:d0:41:86:9c:67:
                    ba:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FD:15:26:CF:17:26:F6:3B:62:62:F3:E3:CB:52:7F:AF:70:39:D1
            X509v3 Authority Key Identifier:
                keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4b:ea:ef:97:b8:cb:17:5b:8a:0b:c9:f8:53:72:06:b1:43:
         bf:a7:ff:d3:00:a6:3b:d1:6b:1e:94:94:4f:30:ef:0a:ae:ff:
         a8:1e:7b:a4:32:ac:0b:69:58:88:0a:60:0d:7c:31:04:1f:3b:
         dd:1b:8f:cc:15:f0:95:1c:8c:9a:2b:6c:d6:ab:3d:89:4d:d7:
         a2:40:2c:1b:c8:1e:7a:13:88:ce:bd:73:0e:ca:f3:34:65:12:
         d5:00:79:bf:c2:dd:4d:b9:f6:a1:2a:b4:4d:18:b8:43:b2:17:
         b1:8a:10:dc:95:50:47:8f:a0:ab:ef:41:a5:80:33:63:ca:81:
         55:31:2c:b8:0a:87:91:59:b9:1d:91:22:a4:f7:a6:fb:ed:b5:
         65:6a:29:09:c9:88:bb:45:79:ad:d7:f1:c0:13:53:69:4c:c3:
         3f:9f:5e:82:86:f8:e1:a8:a5:39:06:d2:d1:cd:e9:1a:2f:d3:
         f8:88:45:a6:e8:b6:5b:bf:11:99:fc:bb:c5:ec:7c:4a:de:c4:
         41:7f:1a:16:04:b0:cd:1b:f0:b2:ef:7c:a6:fd:be:46:93:81:
         77:59:ac:6d:ac:bc:f3:6f:08:b3:db:92:67:5c:d1:5c:a6:9d:
         3f:5e:03:66:60:39:58:3c:08:eb:a8:1e:cf:8c:6a:24:0e:ee:
         2c:6e:0e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:41:29 2024 by rpki-client on console-fra.rpki-client.org