Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
File:                     ESunl1d-pgpWGvmkWYxFBg47cIg.mft (raw, json)
Hash identifier:          5MYY4lXZCbEeL5B7v2+NTZf6qJgYz/g2sVEE1+tEEbo=
Subject key identifier:   62:D2:2F:29:1A:27:D7:80:26:99:04:EE:BC:32:DA:9C:0A:19:FE:F0
Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88
Certificate issuer:       /CN=112ba797577ea60a561af9a4598c45060e3b7088
Certificate serial:       01967755EDA40EB17DD9190F84993E578DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
Manifest number:          1518
Signing time:             Sun 27 Apr 2025 13:00:42 +0000
Manifest this update:     Sun 27 Apr 2025 13:00:42 +0000
Manifest next update:     Mon 28 Apr 2025 13:00:42 +0000
Files and hashes:         1: 0mKnnBxNDPUWW0TdKD82TEOVdS4.roa (hash: Lo4k+eo1K7P5fia7s3jKfkvAW4fzukEV2ibTeSf86Xg=)
                          2: ESunl1d-pgpWGvmkWYxFBg47cIg.crl (hash: C7P8HYLfCT4BV31iid76zx0gXyF1+IOYVKnwV0asQQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:55:ed:a4:0e:b1:7d:d9:19:0f:84:99:3e:57:8d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088
        Validity
            Not Before: Apr 27 13:00:42 2025 GMT
            Not After : Apr 28 13:00:42 2025 GMT
        Subject: CN=62d22f291a27d780269904eebc32da9c0a19fef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fb:33:32:07:7d:b2:82:9b:41:76:2c:89:2e:
                    d1:c4:d1:a5:23:38:63:02:f0:87:8b:7e:df:c3:39:
                    20:9f:98:a9:c3:bf:c2:b6:ef:bb:c6:43:64:ff:95:
                    41:c0:65:3a:d8:8a:ac:4f:9c:4b:b8:5f:7a:e1:0d:
                    c2:af:eb:44:cb:c6:6a:1d:78:8d:a9:82:94:22:29:
                    28:62:ea:54:ff:61:cc:c4:d4:63:76:46:22:0f:26:
                    d9:82:16:48:10:44:12:c1:10:e0:65:e8:66:40:1f:
                    cb:33:76:5b:7c:2d:81:31:71:bd:ac:d2:b7:dc:35:
                    f2:0a:14:05:18:fe:1d:51:12:50:f9:d7:23:d1:e6:
                    80:a3:a3:6d:20:90:ca:55:95:e6:ea:55:8d:70:c9:
                    58:3d:c3:3f:8e:0f:ed:93:97:de:fb:0a:e9:d9:b5:
                    5c:16:8d:80:3e:61:f7:df:6f:84:c0:b7:9e:c8:4f:
                    7d:8c:0b:43:b9:5f:99:6d:dc:57:d8:3f:59:c9:1c:
                    03:0c:ce:32:45:1d:7d:33:3e:af:85:4a:7a:3f:70:
                    c6:95:7b:fe:9d:69:7f:46:d1:32:23:e6:a0:a8:3b:
                    bb:63:88:08:4e:10:e7:79:94:ea:b7:6c:83:07:8f:
                    a2:ed:0e:3d:fb:55:c2:52:98:84:c9:28:54:dc:65:
                    6d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D2:2F:29:1A:27:D7:80:26:99:04:EE:BC:32:DA:9C:0A:19:FE:F0
            X509v3 Authority Key Identifier:
                keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0f:10:8c:31:d3:f5:b2:c8:09:5b:88:6b:10:70:e4:31:db:
         1a:12:46:80:c0:6f:79:9a:29:97:ac:83:0a:a2:05:db:7c:4b:
         ce:c7:cd:5c:89:4d:f5:cf:3d:71:1b:bc:1f:35:96:a0:ca:56:
         e5:ac:58:8a:27:4d:f5:70:dd:ac:c3:92:95:5f:94:12:a7:a1:
         47:c3:eb:b9:5a:37:bc:3c:d8:47:8b:ad:4a:74:5b:2f:c7:c3:
         9c:e1:52:a1:5d:03:57:2a:f2:cc:cf:60:bc:ae:a3:78:d9:29:
         e2:75:dd:05:ed:08:47:79:d2:f3:97:5b:32:30:ce:cf:8f:d5:
         75:a5:56:a8:c7:9f:a5:80:3a:da:bc:d9:a9:84:48:98:d4:46:
         d8:78:4b:c8:b9:f2:be:fa:82:93:3c:43:03:09:41:bc:19:0d:
         73:a5:28:22:60:37:59:69:0e:7b:f2:70:21:90:9c:22:6f:e8:
         4f:4b:52:4d:20:69:87:29:40:8e:e5:75:b7:47:16:63:cf:9a:
         11:4a:33:4f:e2:32:83:a9:08:e9:60:2a:db:2d:8e:58:30:cf:
         81:93:e3:f7:5d:b9:16:78:4b:6e:c3:81:17:9d:8f:d0:80:25:
         61:d3:db:51:11:20:b9:df:12:d3:b4:ce:11:0e:ed:e5:2c:0d:
         9a:df:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:58:10 2025 by rpki-client