Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
File:                     ESe41aUEAgm4mTvyAxeJw7K6t8c.mft (raw, json)
Hash identifier:          U+VybP9LvZPsE2PuUcuDf+zsblGIK980yPlvavbD278=
Subject key identifier:   81:EF:2D:91:94:9E:D2:F6:B8:F2:8D:80:BE:B1:73:E9:1D:24:2D:67
Authority key identifier: 11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7
Certificate issuer:       /CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
Certificate serial:       018F4B6DD75F90BDFFC553BDD095996813B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
Manifest number:          1158
Signing time:             Mon 06 May 2024 01:04:00 +0000
Manifest this update:     Mon 06 May 2024 01:04:00 +0000
Manifest next update:     Tue 07 May 2024 01:04:00 +0000
Files and hashes:         1: ESe41aUEAgm4mTvyAxeJw7K6t8c.crl (hash: ESRKtFXBR+EzxvcAQ5RYzEqgU12wc1vZf87dKGJaE7c=)
                          2: X4ZGGSTJ6fNUIAN_GWncfJbb4qs.roa (hash: 370ubA+Ac8UB/5g2n5QSFisX9U2g7es7wwcxhpkicio=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6d:d7:5f:90:bd:ff:c5:53:bd:d0:95:99:68:13:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1127b8d5a5040209b8993bf2031789c3b2bab7c7
        Validity
            Not Before: May  6 01:04:00 2024 GMT
            Not After : May  7 01:04:00 2024 GMT
        Subject: CN=81ef2d91949ed2f6b8f28d80beb173e91d242d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:1c:f4:6f:0d:79:09:6c:ab:b2:83:93:2b:
                    44:ee:7c:7f:36:f9:a4:94:98:cf:9f:1b:f8:9a:17:
                    5e:6f:2f:38:bc:14:e3:2c:3c:77:5f:6c:45:60:f8:
                    6e:0c:45:bd:87:02:61:5e:73:0d:14:57:a8:7f:9e:
                    c1:8c:96:45:48:20:7f:12:d0:4f:6a:fc:91:10:fd:
                    82:18:d0:50:a2:33:41:02:91:c4:de:c1:28:3a:e6:
                    3a:c5:e9:9c:d0:10:1d:58:59:7d:81:7b:44:43:7b:
                    a2:37:93:a5:ea:07:d3:2b:b4:f6:06:b0:f6:0c:ed:
                    17:53:e0:49:51:ca:42:fb:91:7d:a5:f9:6e:0b:e1:
                    98:f2:a4:63:49:74:54:8e:0b:ac:7a:8a:2c:73:e4:
                    f4:e2:77:6e:09:8c:00:6b:22:d2:ae:7f:9a:ea:50:
                    3d:24:1c:ed:c3:6e:23:af:19:27:39:75:7a:32:8d:
                    e2:2d:ab:ee:e9:8c:88:46:98:e1:f3:a1:6e:41:fc:
                    f7:93:92:49:87:ee:ab:5e:eb:64:6c:c8:96:67:88:
                    7d:3c:b2:4b:3b:f2:18:b9:2a:8a:15:80:a9:53:9e:
                    02:99:5f:7b:64:ca:e8:dc:48:48:f2:a1:b8:14:62:
                    22:c5:99:e3:31:7c:c9:52:8e:38:b7:d8:4e:15:17:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EF:2D:91:94:9E:D2:F6:B8:F2:8D:80:BE:B1:73:E9:1D:24:2D:67
            X509v3 Authority Key Identifier:
                keyid:11:27:B8:D5:A5:04:02:09:B8:99:3B:F2:03:17:89:C3:B2:BA:B7:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESe41aUEAgm4mTvyAxeJw7K6t8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2b5fea-8f51-4ba1-bdcc-3ebcadabf0d8/1/ESe41aUEAgm4mTvyAxeJw7K6t8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:22:b0:8d:40:b5:f0:e1:17:88:90:13:8a:d4:6e:61:c2:4f:
         45:3a:2a:3a:97:b2:e9:64:22:8d:5e:62:89:a8:b2:9a:8c:74:
         95:f7:25:85:fb:8e:c3:3b:00:e9:e3:69:1e:66:f9:32:a2:93:
         df:ca:64:df:bb:6c:92:f3:07:e4:3d:1e:a5:5f:3d:20:d8:f3:
         70:d0:7f:c4:bf:9c:57:12:c1:90:03:1b:1f:b0:6b:f4:35:1b:
         7f:28:1e:72:d9:4b:ab:95:bd:bb:0a:94:6c:90:17:63:a9:e5:
         45:9e:e5:d8:ad:f1:7b:31:cf:b4:d2:07:b8:d4:c4:5e:23:9c:
         1b:53:55:58:46:26:f2:60:be:45:49:0c:64:d2:e0:16:bf:1c:
         23:71:65:9c:bc:16:09:0e:30:ca:7b:55:11:d9:1d:2b:31:a1:
         5a:9e:04:a9:40:ea:75:46:e6:3c:4f:d8:5b:33:d1:30:db:03:
         4e:d5:61:68:c6:91:da:2d:56:c0:7a:ad:5d:75:6e:b1:8e:5e:
         68:43:c5:bf:aa:ba:dc:36:09:0a:28:e2:41:16:25:07:2b:8b:
         c9:73:9c:6c:60:7e:ae:9d:32:ad:ed:e1:cb:3f:9e:80:b8:f9:
         a0:d6:7a:cb:05:b3:2c:87:32:6d:7e:0c:af:01:56:09:18:29:
         8e:fb:2c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 05:16:19 2024 by rpki-client on console-fra.rpki-client.org