Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
File:                     EsqtEcXYmB2YPDAehqGs8tgRqsE.mft (raw, json)
Hash identifier:          M+AycMs2Cz81sRqqMhwstJq2ME3fghQL/WZpWbRgwhE=
Subject key identifier:   8E:5A:AD:DD:97:89:46:86:96:62:6E:3C:5D:9B:A2:85:2C:1C:63:16
Authority key identifier: 12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1
Certificate issuer:       /CN=12caad11c5d8981d983c301e86a1acf2d811aac1
Certificate serial:       018F15C5FBAC8DFC076AF670ECB194091E2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
Manifest number:          0B38
Signing time:             Thu 25 Apr 2024 15:00:47 +0000
Manifest this update:     Thu 25 Apr 2024 15:00:47 +0000
Manifest next update:     Fri 26 Apr 2024 15:00:47 +0000
Files and hashes:         1: EsqtEcXYmB2YPDAehqGs8tgRqsE.crl (hash: wyW2veXMhx7sNOAv1PZio2Er5iIxTRMpS/RY5x/PuNg=)
                          2: mWBT37rnC7-5rHFa14Q2ABY5Xuc.roa (hash: +TO2k6XlHCVpnv9loASG+vskCIzuVuQ5jrG55dXAFdM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 14:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:15:c5:fb:ac:8d:fc:07:6a:f6:70:ec:b1:94:09:1e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12caad11c5d8981d983c301e86a1acf2d811aac1
        Validity
            Not Before: Apr 25 15:00:47 2024 GMT
            Not After : Apr 26 15:00:47 2024 GMT
        Subject: CN=8e5aaddd9789468696626e3c5d9ba2852c1c6316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ed:ab:99:87:84:53:28:0e:d3:9f:21:cd:fd:
                    56:51:5c:2f:75:b3:67:88:2e:9f:c0:0f:49:11:50:
                    20:f3:67:76:1d:3a:6b:2f:2f:72:2a:71:83:60:05:
                    fb:ee:30:97:3b:11:32:1a:13:d2:9c:d1:dd:21:c2:
                    76:40:5d:93:82:3b:93:bf:d6:7f:eb:61:d7:58:25:
                    e3:6b:50:07:2b:ec:eb:1e:33:5a:49:37:3d:a4:b8:
                    55:93:24:6c:48:62:15:14:cc:38:a2:4b:8c:dc:20:
                    86:47:95:e8:60:da:67:06:4d:32:15:fc:a4:60:b3:
                    79:47:af:80:e2:3a:9a:3b:d9:a9:3e:2f:75:5f:1c:
                    46:69:e1:cc:ee:97:92:88:d3:a3:51:c3:10:31:24:
                    f4:1b:ac:f0:01:89:e5:cd:e2:d9:b8:33:4f:be:03:
                    19:c4:cd:68:35:15:26:38:4c:3b:f6:00:83:f3:94:
                    00:30:8b:3a:76:1e:1c:79:91:de:86:04:1a:35:55:
                    4a:3d:6c:19:a6:ba:73:7b:7f:14:10:71:1a:f6:2e:
                    95:c7:6b:80:f0:ab:aa:be:c8:ed:30:05:a7:3e:2f:
                    7c:41:d1:e8:b6:b1:92:ff:1f:65:f8:1c:6d:6d:b3:
                    2d:95:b6:2f:ca:24:2f:fc:de:e7:bc:47:43:32:de:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:5A:AD:DD:97:89:46:86:96:62:6E:3C:5D:9B:A2:85:2C:1C:63:16
            X509v3 Authority Key Identifier:
                keyid:12:CA:AD:11:C5:D8:98:1D:98:3C:30:1E:86:A1:AC:F2:D8:11:AA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsqtEcXYmB2YPDAehqGs8tgRqsE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/6c3fa1-63b5-4bdc-94be-eb7b9590e303/1/EsqtEcXYmB2YPDAehqGs8tgRqsE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:16:69:26:92:aa:4b:71:59:02:c8:71:74:db:8a:f7:c1:17:
         03:89:96:3b:b8:97:7f:c2:0a:a4:33:61:5f:48:bc:46:65:5f:
         3a:e3:ff:61:42:59:f9:8f:2a:f7:26:e1:e8:f9:6d:94:3a:e2:
         a4:9d:e6:d1:fd:23:a4:b9:c2:0f:51:64:50:2d:22:63:36:e5:
         f6:89:1c:dc:84:43:00:a2:11:36:be:fa:76:48:04:00:a6:8b:
         af:30:b4:07:28:ef:96:6f:e0:63:fe:6f:9e:50:3e:71:1f:0e:
         4b:c1:8c:5f:79:2a:71:2e:43:b8:e1:38:79:d1:1b:7c:d2:37:
         c2:b5:37:7c:8c:98:4e:fc:4f:ee:a8:f3:94:3c:82:7c:96:c1:
         03:6f:76:ef:08:dc:4c:21:85:08:05:d1:17:eb:de:df:c5:55:
         a2:78:90:78:f4:84:b4:ed:22:58:b2:94:c3:51:9a:48:fa:88:
         50:73:12:03:9a:7d:58:ce:8c:4c:db:d3:9d:5d:01:07:97:0a:
         df:56:a6:87:be:3c:58:76:c5:d4:0b:95:e7:d0:a7:12:b2:36:
         a5:cc:6e:d5:29:7e:a9:c9:65:da:e0:37:36:02:93:85:d6:71:
         c3:73:ad:48:cc:94:cc:73:94:58:61:51:e5:df:89:3d:0b:d3:
         69:2b:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:38:26 2024 by rpki-client on console-fra.rpki-client.org