Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
File:                     EsCzmbynzX_KI2gTkGefXMqVueE.mft (raw, json)
Hash identifier:          A54M7iJdPEp7Q2mDSXQZORFwVZbYLTEUeY3/geTd1bI=
Subject key identifier:   33:89:AA:6D:2A:CC:C6:7E:CD:77:66:83:98:F5:69:2A:A5:6A:F3:18
Authority key identifier: 12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1
Certificate issuer:       /CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
Certificate serial:       018F36D1D5ACBE2FF3318CA772D67534D803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
Manifest number:          0EBC
Signing time:             Thu 02 May 2024 01:01:12 +0000
Manifest this update:     Thu 02 May 2024 01:01:12 +0000
Manifest next update:     Fri 03 May 2024 01:01:12 +0000
Files and hashes:         1: EsCzmbynzX_KI2gTkGefXMqVueE.crl (hash: KyA2ucN9YcdZ0wBpf7ABRa2OYLpXVW8zD8blc7rVl0c=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:36:d1:d5:ac:be:2f:f3:31:8c:a7:72:d6:75:34:d8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c0b399bca7cd7fca23681390679f5cca95b9e1
        Validity
            Not Before: May  2 01:01:12 2024 GMT
            Not After : May  3 01:01:12 2024 GMT
        Subject: CN=3389aa6d2accc67ecd77668398f5692aa56af318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:78:70:4a:e5:f3:58:af:ac:b1:6e:60:54:
                    d1:12:57:2f:c8:ee:2b:a3:c3:a7:3c:86:89:54:5c:
                    4a:56:23:51:29:f5:d9:43:11:a3:2e:1e:3c:8b:4e:
                    8f:69:e3:ab:86:9d:73:86:e4:18:91:72:92:9e:f4:
                    d2:81:0f:35:53:90:11:df:b0:31:ee:ff:c6:67:76:
                    ce:cc:36:3c:e6:b8:c1:b8:f3:d9:42:50:94:fa:f7:
                    32:0a:37:37:04:3b:95:54:16:b3:64:c6:e7:bf:89:
                    79:5e:c0:99:60:f2:ce:01:f0:98:a3:0c:b7:b9:19:
                    8b:00:c4:5e:52:3f:4f:82:12:27:97:8f:16:49:0f:
                    1b:86:d2:12:91:e8:23:a8:1c:21:71:70:d4:be:7c:
                    54:3d:1e:c0:e2:2e:46:19:96:d3:e3:a5:08:48:38:
                    f7:ae:d8:98:97:de:38:e7:2d:96:34:41:b3:2d:de:
                    0f:90:9b:82:98:53:8a:4d:66:4c:63:11:87:e0:c4:
                    05:0c:9e:3c:cf:84:e2:67:94:d7:7b:75:6a:c5:ad:
                    56:89:41:f8:10:5c:6b:e8:7a:c7:57:af:f5:b4:36:
                    fe:c6:4c:fd:e6:15:e5:a3:ce:3e:8e:ff:cc:5a:b3:
                    e7:bd:8d:02:47:be:46:4c:e1:83:48:75:9d:ad:46:
                    bf:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:89:AA:6D:2A:CC:C6:7E:CD:77:66:83:98:F5:69:2A:A5:6A:F3:18
            X509v3 Authority Key Identifier:
                keyid:12:C0:B3:99:BC:A7:CD:7F:CA:23:68:13:90:67:9F:5C:CA:95:B9:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsCzmbynzX_KI2gTkGefXMqVueE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b0ca9e-7cc6-4adc-8be4-f4ed26e44c97/1/EsCzmbynzX_KI2gTkGefXMqVueE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b0:93:ef:e6:dd:22:d2:c0:c8:20:03:fd:6b:eb:4b:67:1a:
         ec:25:25:90:d7:7f:f2:47:b6:06:68:e9:1d:ef:9a:96:ad:ac:
         e9:22:20:47:66:a0:41:2f:9c:8e:81:07:82:e1:72:b1:ab:85:
         8a:a0:93:6d:3f:60:76:2c:8e:31:9e:c9:0e:32:b2:8e:69:f2:
         74:fd:ba:28:20:1d:95:fd:b6:21:31:9d:b6:8f:3f:c9:92:d8:
         16:84:ba:bb:43:58:a8:62:e0:79:3f:10:65:c6:b3:23:04:e2:
         19:ad:c2:17:54:bf:83:f0:90:b4:0d:7a:13:8f:0e:c1:c6:35:
         9b:54:62:42:b0:1f:a4:da:67:8b:bb:f2:8a:96:91:21:15:b2:
         8d:c6:43:59:a2:ac:8a:4e:80:ab:c9:c9:6f:e8:33:e8:33:bd:
         df:74:f4:f6:d8:94:2a:f0:81:bf:17:b2:16:1c:23:ae:ca:9b:
         7e:94:47:62:b7:c0:87:37:3a:0e:25:fc:7a:e4:d1:25:df:94:
         90:86:39:c3:1f:0c:4d:ca:e1:9f:f1:57:de:21:35:5f:2e:99:
         6c:1e:79:be:2a:ec:90:07:6f:4b:e9:6c:d7:7d:0e:75:41:05:
         39:93:ca:99:f6:ff:9e:9e:5a:51:3f:4a:26:ea:aa:e1:3a:65:
         7e:76:69:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 06:21:32 2024 by rpki-client on console-ams.rpki-client.org