Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
File:                     ESCgzgE-LVKm_zVKJwiUu5mORUc.mft (raw, json)
Hash identifier:          3Rxdyi7+moOHwk5gNNHmHiDjRz6ztnAquBRk9hbKDwo=
Subject key identifier:   F8:41:C1:3A:D7:30:CE:42:89:B7:77:E0:3D:B6:BB:25:9C:08:E7:62
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Certificate issuer:       /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial:       018FD866FC9CBDA96DACBA4FF14F737E2FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
Manifest number:          11A1
Signing time:             Sun 02 Jun 2024 10:02:59 +0000
Manifest this update:     Sun 02 Jun 2024 10:02:59 +0000
Manifest next update:     Mon 03 Jun 2024 10:02:59 +0000
Files and hashes:         1: 0QBviaQS9FxnMS5iwDMFIm52z1k.roa (hash: xuTTMG3eW1elE7a5znqBmaUA6c+li6OCrZagBK8//Tk=)
                          2: ESCgzgE-LVKm_zVKJwiUu5mORUc.crl (hash: CHlc+9vLUQakPEymn4M1UQmacslnDI3mmiyV4lWmc1U=)
                          3: RP0gebLVRG2omORUJdBcDsuEcN0.roa (hash: l5xTPNZV1DfT+WqYvm72hqccbPSauqPLdMe6jisY1nY=)
                          4: drklO24QRPLPH-xW5DIqnUtTPcc.roa (hash: WfTRuTviFEYLRwvOY15QgjcIabpDH8klfCKkQ11GS28=)
                          5: qvfhmF5mEYsoGctQhrbJCiGZh4U.roa (hash: O8Q6aB9CiJsm7fy9aACylhu7RDvmS0vI/a06YCM9k58=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 04:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d8:66:fc:9c:bd:a9:6d:ac:ba:4f:f1:4f:73:7e:2f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
        Validity
            Not Before: Jun  2 10:02:59 2024 GMT
            Not After : Jun  3 10:02:59 2024 GMT
        Subject: CN=f841c13ad730ce4289b777e03db6bb259c08e762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0d:76:19:44:62:83:7a:c8:27:8b:5a:8d:1d:
                    fa:1d:e1:76:d1:36:46:af:2b:13:fe:cf:be:1e:ab:
                    9a:bc:c7:c8:b2:f8:16:37:3d:91:fb:6d:ca:fc:d2:
                    cb:24:a0:a7:e0:04:2d:60:eb:22:b6:f8:00:98:0f:
                    72:33:6c:7a:7e:85:51:ab:e6:93:35:f6:e7:82:6a:
                    72:b0:30:ad:f2:2e:1a:e6:11:e5:28:8e:ff:dd:91:
                    e2:cd:b1:68:64:c0:e6:9f:fd:06:61:37:a3:7d:24:
                    92:87:70:a2:70:66:1c:f6:e9:88:d6:4b:d5:61:7d:
                    ae:54:67:bc:97:e7:c9:73:6b:db:92:9f:4a:21:fc:
                    c5:2f:f5:68:46:80:87:cf:45:fd:85:9d:06:a8:5e:
                    8e:25:21:a2:b6:f2:28:14:19:90:ab:61:40:51:0a:
                    3e:8f:58:df:29:2d:b0:b2:b3:0e:b2:ee:be:b6:f6:
                    65:27:39:55:3a:b9:37:d4:47:cf:fd:09:b0:f6:f0:
                    94:6c:7b:2b:a5:aa:25:c0:da:96:b2:03:fd:29:df:
                    d2:3f:52:59:e3:49:23:06:27:ba:ec:93:4a:22:af:
                    c6:a3:9d:f0:06:d8:18:b2:45:48:56:cb:e3:a0:6b:
                    eb:fa:da:9c:24:71:a1:47:72:af:65:cb:28:7f:c6:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:41:C1:3A:D7:30:CE:42:89:B7:77:E0:3D:B6:BB:25:9C:08:E7:62
            X509v3 Authority Key Identifier:
                keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:8d:02:46:1e:ed:48:c0:5a:f1:72:a0:61:18:a3:0e:2d:65:
         ab:84:e5:ce:a5:ae:a2:d1:89:ca:d0:09:c7:d1:67:fa:b5:fb:
         97:10:4a:51:5d:49:ff:f2:e3:c5:59:b1:5f:2c:a9:36:49:6e:
         4a:f3:d8:aa:80:1a:6c:fe:db:25:6f:27:0b:30:82:90:9f:f5:
         53:a4:9a:d1:b8:1a:7a:e5:05:3d:68:4e:ad:76:27:1b:28:f4:
         88:fa:8a:ff:cb:d3:fd:7f:2a:9a:35:78:c7:ba:e7:53:89:8b:
         df:c3:e9:0a:a3:17:a5:53:01:17:bc:a8:7e:20:c0:fd:d7:d2:
         17:a1:85:7b:05:b7:9c:54:4d:e6:96:24:f9:56:f8:a2:07:67:
         d3:08:3e:6a:d2:45:ee:12:31:0a:c6:39:82:88:d5:e1:66:ca:
         e9:35:b6:13:e1:8e:60:ed:4c:38:17:e2:9a:13:b4:cf:83:47:
         0e:00:36:34:c4:09:51:63:9d:91:be:cb:59:0a:41:ea:34:1d:
         5f:aa:75:88:02:56:2e:61:0b:a0:7f:5d:51:61:a0:81:26:73:
         eb:ee:14:de:95:0a:a5:50:03:17:fe:05:ac:fc:9c:fe:ac:fe:
         b6:b8:17:30:73:ff:23:14:84:93:85:6d:27:94:57:c3:30:bd:
         5c:9f:62:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 11:04:08 2024 by rpki-client on console-fra.rpki-client.org