Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
File:                     EsRb041L3Gjj153gJE3wbS7LZgk.mft (raw, json)
Hash identifier:          MzLtn4Lh+PBCY7ALF29/KooTTKSRf2QHrsFS1dPHxtw=
Subject key identifier:   4F:0E:77:8F:4A:C2:83:09:DE:D6:AE:4C:01:12:E9:33:C7:C5:FF:2D
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Certificate issuer:       /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial:       018F58F03F2617CE93A05B098DAC175302F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
Manifest number:          0CC5
Signing time:             Wed 08 May 2024 16:01:30 +0000
Manifest this update:     Wed 08 May 2024 16:01:30 +0000
Manifest next update:     Thu 09 May 2024 16:01:30 +0000
Files and hashes:         1: EsRb041L3Gjj153gJE3wbS7LZgk.crl (hash: MQByxOGfR+NuI93ZLHmUnS8eUdWX9kgnXnr1mxIUcbc=)
                          2: tAgFVLKq14RliA3yqAak1zt_wm8.roa (hash: B2OZKeAk7G52S3ywNHjYWSL7Me+KwW1XFvcfpZW2ErY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:58:f0:3f:26:17:ce:93:a0:5b:09:8d:ac:17:53:02:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
        Validity
            Not Before: May  8 16:01:30 2024 GMT
            Not After : May  9 16:01:30 2024 GMT
        Subject: CN=4f0e778f4ac28309ded6ae4c0112e933c7c5ff2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:e3:e3:9b:92:48:40:a2:9a:a9:ce:f9:cd:
                    7e:4d:c9:0f:d7:3f:b6:21:3a:26:cf:b7:5a:f2:27:
                    d6:f4:d1:2a:3f:5c:fe:81:05:67:d2:e9:5b:9d:87:
                    65:33:45:f0:d9:7d:5e:7f:db:5f:a2:ed:34:12:f4:
                    1f:aa:2c:99:21:d6:2f:4c:cd:f2:f9:5f:07:44:a1:
                    e3:d1:6e:a4:53:c9:7e:bd:63:fc:9d:97:81:cc:6e:
                    2c:d6:85:fe:19:3f:b3:dd:5c:64:3a:c0:c4:e1:80:
                    5f:a2:2b:77:f8:ef:51:92:1e:41:34:d3:a8:a2:40:
                    f0:c0:f3:26:9b:09:83:ba:e5:7c:53:c8:63:bd:b2:
                    1f:14:a8:ef:3f:25:da:3c:35:3e:e6:2f:e2:8c:f8:
                    db:f8:0c:8e:c0:97:f8:2d:20:60:ff:6f:e2:eb:08:
                    ab:4b:5a:21:f2:30:62:2b:1f:ee:15:e9:a1:51:b3:
                    43:c9:12:51:07:c3:e0:2c:99:c2:9b:49:dd:c4:d5:
                    98:73:f7:3c:1a:4d:c7:50:da:0b:c7:41:5f:cb:32:
                    2b:19:f6:8e:2a:ae:6a:31:e8:9d:95:4a:07:97:e0:
                    23:af:c7:b7:83:0d:8b:62:b4:4f:9c:ad:f5:88:32:
                    d2:9c:e2:29:8b:96:84:5f:fb:5d:7b:ca:69:1d:7c:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0E:77:8F:4A:C2:83:09:DE:D6:AE:4C:01:12:E9:33:C7:C5:FF:2D
            X509v3 Authority Key Identifier:
                keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:7f:b6:ec:a6:9a:5f:fa:d7:22:d1:42:12:3e:6a:29:5a:9b:
         45:ea:8c:e1:73:2a:ca:22:9c:7c:2b:c5:6a:80:d8:b1:57:a5:
         c8:77:ab:06:62:f0:07:a5:f7:fb:8c:c7:34:67:bd:90:00:e3:
         1e:a8:ce:0b:13:c9:42:17:57:25:23:75:88:2b:57:0c:ef:12:
         4d:0e:e0:bd:7b:04:27:39:58:e8:02:db:d2:73:13:f2:86:4a:
         c2:74:3f:66:db:8e:57:ae:01:ba:b9:68:5c:48:cd:19:0e:fc:
         6e:0c:b2:49:9a:0c:9a:6b:52:e0:fd:c7:39:fc:9d:2f:e4:6a:
         e4:4a:89:ad:b4:98:c5:5d:50:c6:f4:2b:0e:cd:07:9a:4a:88:
         ff:20:59:df:a0:34:00:8d:b7:dd:dc:37:00:2d:a6:56:11:86:
         0a:1d:44:d0:ea:19:26:8d:12:39:c6:24:81:17:8d:80:03:5b:
         ee:41:0c:28:a4:01:dd:1f:fa:d8:19:04:fa:a5:bf:3c:af:05:
         0e:97:67:3d:fe:fd:cf:24:14:75:01:4d:1a:26:e3:87:0e:8e:
         79:9c:af:72:ab:02:8e:43:66:e3:7b:48:d5:17:75:7e:6f:9e:
         05:39:9d:4b:e9:9e:48:ac:10:e6:1b:98:5f:e4:b1:6e:8e:ed:
         fd:2f:d6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 22:40:51 2024 by rpki-client on console-fra.rpki-client.org