Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
File:                     ES0MTxbciSISn_YFDiNVYjF1ZeU.mft (raw, json)
Hash identifier:          a0TfM8zkbylTQuHt95MSH+zkR2bIc5DtGbi/WnVONOQ=
Subject key identifier:   43:F9:7C:A5:2F:EC:96:80:41:C6:39:69:68:8E:CF:39:0F:8F:E9:D9
Authority key identifier: 11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5
Certificate issuer:       /CN=112d0c4f16dc8922129ff6050e235562317565e5
Certificate serial:       018F58F07D531E5D0E4DDEC7BFD4574B44B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
Manifest number:          1161
Signing time:             Wed 08 May 2024 16:01:46 +0000
Manifest this update:     Wed 08 May 2024 16:01:46 +0000
Manifest next update:     Thu 09 May 2024 16:01:46 +0000
Files and hashes:         1: ES0MTxbciSISn_YFDiNVYjF1ZeU.crl (hash: 9rURnAng+5HBE8Mlw1SouDabjraSwOVGq0MaS4MMSOI=)
                          2: g2L_j_OlF8oNJJm5RDJfW4NvqQY.roa (hash: SyCsv5iIE6MdHBA8IaYkdHxnGbUHoOSIzGIpbOe5urQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f0:7d:53:1e:5d:0e:4d:de:c7:bf:d4:57:4b:44:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112d0c4f16dc8922129ff6050e235562317565e5
        Validity
            Not Before: May  8 16:01:46 2024 GMT
            Not After : May  9 16:01:46 2024 GMT
        Subject: CN=43f97ca52fec968041c63969688ecf390f8fe9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5e:29:04:97:d1:fa:2b:4f:d4:c3:68:e5:9a:
                    52:13:a1:4e:8c:69:52:cf:7b:f7:c7:61:db:34:ca:
                    00:c6:43:3c:8f:f9:2c:85:32:5a:87:0f:85:1e:84:
                    96:d9:c8:0a:2f:c8:42:40:fa:d2:9b:e1:d3:dd:ac:
                    69:3f:fe:a9:4f:fe:2d:07:51:5a:07:3c:e8:02:75:
                    2b:47:30:21:26:98:3e:b8:27:8a:98:b9:d5:c6:73:
                    33:a7:00:86:77:e2:dc:25:f6:b8:9d:c0:dc:05:04:
                    06:3f:92:43:70:22:25:5a:98:62:4c:fa:93:e4:1c:
                    13:07:64:3a:69:d1:b4:08:05:54:c2:af:19:95:12:
                    e0:7c:ce:32:e7:7c:a5:98:12:77:40:ea:1d:6a:c9:
                    b5:5b:c1:d6:0e:10:05:34:40:fa:4f:9f:d9:b5:84:
                    7a:b3:43:db:b4:b8:3a:43:ab:ba:d1:28:2d:31:07:
                    21:86:4b:09:39:3e:f1:37:aa:67:e1:ff:55:26:83:
                    c3:fa:5d:42:9c:6e:81:36:7f:f2:4d:b4:2b:e9:d4:
                    84:5f:01:49:89:30:42:57:ec:05:1f:df:3c:89:6a:
                    69:5d:7c:24:ec:92:cb:5e:df:78:70:74:9b:7a:ad:
                    d7:58:96:98:2d:57:ba:c3:95:fb:93:3f:c5:1f:26:
                    26:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F9:7C:A5:2F:EC:96:80:41:C6:39:69:68:8E:CF:39:0F:8F:E9:D9
            X509v3 Authority Key Identifier:
                keyid:11:2D:0C:4F:16:DC:89:22:12:9F:F6:05:0E:23:55:62:31:75:65:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES0MTxbciSISn_YFDiNVYjF1ZeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/45830c-4a86-402c-a1ee-4009d879b97e/1/ES0MTxbciSISn_YFDiNVYjF1ZeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:cf:ab:ea:ea:91:2f:ac:38:54:0e:64:77:32:71:6c:31:
         cc:2b:bf:1b:43:87:13:b2:8a:30:95:68:fa:28:31:a1:99:74:
         4d:f6:42:1d:e7:00:ed:78:cb:8c:6d:29:e8:ac:6a:41:ee:d0:
         66:cd:fc:00:e5:fe:af:a2:f5:d5:d3:48:05:0d:c6:9d:90:56:
         ff:7d:97:3d:8b:ca:c9:6b:49:7b:a5:d1:53:6e:be:ee:dc:82:
         e6:79:ce:58:c8:1f:c9:5b:26:49:ea:00:e3:ea:9f:d0:3d:31:
         d8:f0:e3:fc:61:6d:67:45:41:70:bb:9f:cb:71:c4:18:d3:da:
         f4:b3:7b:a9:3e:aa:c3:57:a3:1e:d4:1f:09:a7:e1:0d:26:27:
         2e:1b:51:c5:df:2e:1c:d4:ff:e6:9e:be:ec:3e:f2:8f:31:df:
         8c:1a:7a:e2:74:0c:be:c5:ca:74:08:58:b3:dd:7e:ea:d3:f7:
         2e:10:99:ad:7d:11:ab:5a:9a:33:21:80:7e:8c:90:8e:2e:36:
         60:b8:bc:fe:e8:a9:2a:63:b8:f2:68:d6:03:d4:f8:6e:32:00:
         ff:74:ac:e6:69:70:fa:28:38:b3:89:b6:66:05:d6:fc:d8:5d:
         65:74:1f:46:ef:42:92:d4:38:8c:a6:4a:7b:50:06:23:b9:c9:
         57:1d:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 22:30:05 2024 by rpki-client on console-fra.rpki-client.org