Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
File:                     Es2a3RYTfourmNeOKjNgvIvW8PE.mft (raw, json)
Hash identifier:          PKLtVNYJ+AaGxq3KqbA9UJOudH4zA8QpIc9cFjGFXyU=
Subject key identifier:   03:66:E5:38:4B:85:2F:63:1F:35:D4:EF:58:4F:76:19:53:C7:15:44
Authority key identifier: 12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1
Certificate issuer:       /CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
Certificate serial:       018F3A78181B3DDE1CE7DA288D2C37ADFE54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
Manifest number:          1150
Signing time:             Thu 02 May 2024 18:01:40 +0000
Manifest this update:     Thu 02 May 2024 18:01:40 +0000
Manifest next update:     Fri 03 May 2024 18:01:40 +0000
Files and hashes:         1: Es2a3RYTfourmNeOKjNgvIvW8PE.crl (hash: IwuwIOW/BFDWmkxD9AwjsvHovS7cTEeHlBPTyQ0p68I=)
                          2: Fmw4nHwtQudzZlKN2sME45lFPTA.roa (hash: vdcemfhARcCeDKOVcwS5bki3DAzgmdzp6m6WgLMMDMw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 16:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3a:78:18:1b:3d:de:1c:e7:da:28:8d:2c:37:ad:fe:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12cd9add16137e8bab98d78e2a3360bc8bd6f0f1
        Validity
            Not Before: May  2 18:01:40 2024 GMT
            Not After : May  3 18:01:40 2024 GMT
        Subject: CN=0366e5384b852f631f35d4ef584f761953c71544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:ab:a1:e9:fa:a0:65:58:d1:51:60:41:79:
                    7c:f2:38:f9:9d:74:e5:10:af:3e:5c:8f:bd:a6:ef:
                    aa:ec:95:3d:bb:93:51:68:3e:ce:89:c7:34:67:a0:
                    3a:1a:8f:f3:00:42:3c:20:0e:21:ba:63:16:46:b6:
                    25:66:6e:bd:f9:30:a9:01:c0:1e:5a:b6:ec:ab:ef:
                    96:56:09:46:c0:3c:7d:0e:fd:ab:3e:41:cf:5d:3b:
                    cb:a4:07:05:62:f5:47:91:df:4b:d5:28:67:5e:4c:
                    d3:31:43:00:87:cc:91:d6:88:6c:57:2c:33:80:88:
                    d8:5f:61:3e:65:3a:f4:e8:d4:85:57:7f:f3:72:b0:
                    99:af:31:7d:ca:22:23:18:54:c1:86:f2:f2:19:1c:
                    8e:4d:07:88:3d:67:1e:46:37:c7:d0:83:d1:46:3f:
                    b6:de:40:66:00:e2:3c:da:30:44:44:21:68:7e:db:
                    43:56:6c:fc:4a:6a:6a:a8:94:38:8e:ca:ce:fb:b1:
                    df:b4:fb:15:ec:8b:58:10:4a:4e:a4:d1:4e:0d:cf:
                    24:8f:93:33:b2:0f:aa:83:d0:b8:42:ba:11:fa:ca:
                    7f:90:db:74:8b:d2:a8:37:06:22:c5:e2:be:a3:93:
                    40:1b:c1:64:7c:2b:ca:b9:5d:52:94:0f:70:33:24:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:66:E5:38:4B:85:2F:63:1F:35:D4:EF:58:4F:76:19:53:C7:15:44
            X509v3 Authority Key Identifier:
                keyid:12:CD:9A:DD:16:13:7E:8B:AB:98:D7:8E:2A:33:60:BC:8B:D6:F0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es2a3RYTfourmNeOKjNgvIvW8PE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/57cc6e-8b1a-4827-999c-172df6bcd45b/1/Es2a3RYTfourmNeOKjNgvIvW8PE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:d2:0c:56:c8:cc:63:ac:fa:ac:67:45:3c:49:91:84:3e:57:
         bb:1f:3a:b9:93:6c:53:5f:a9:be:57:56:5b:4a:a5:e0:50:33:
         69:6c:90:8a:a6:bc:f7:36:47:18:89:19:5a:2a:ec:f4:54:11:
         3b:c8:c4:b4:86:1d:b7:94:fb:84:54:11:6c:af:fc:05:83:d5:
         89:49:46:5a:1e:b4:c6:ed:d0:4d:3f:e7:ae:1b:5a:ff:8e:9e:
         02:5f:48:2d:d2:4e:3b:6f:3f:75:4e:9d:c0:68:42:2b:97:b7:
         67:1c:a9:dd:2f:ab:9b:c8:63:fd:cc:9d:76:81:ab:03:54:50:
         58:7b:03:14:0c:02:cc:10:a4:df:43:f5:dc:59:9d:ec:79:d5:
         48:dc:65:25:a2:4e:69:e5:a4:5d:67:5b:8e:74:bc:d0:2a:d5:
         15:9e:43:9d:ef:37:3a:6a:b8:dd:90:ca:ba:98:66:40:bb:7b:
         7f:8c:2c:cc:8c:83:fe:39:29:92:ea:d2:7a:e7:af:94:79:12:
         e4:5f:71:24:3f:47:08:e5:52:71:4f:03:dd:17:55:bd:b3:1c:
         1f:45:12:2d:f4:d3:5e:df:fe:94:5f:1d:37:7d:48:3b:88:7a:
         c6:75:ae:d2:c9:a7:c4:51:70:2e:c0:dd:6e:7b:cc:d5:ed:29:
         89:16:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:50:07 2024 by rpki-client on console-ams.rpki-client.org