Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d07cf8-2299-451d-bc3d-d7d78e4159e5/1/esPRSeeJFeRBveP_LmM9AArMoTo.mft
File:                     esPRSeeJFeRBveP_LmM9AArMoTo.mft (raw, json)
Hash identifier:          lnu3nltBrKBB5VraeQFbzMzIEYGyz8aogK4tOAZUPYs=
Subject key identifier:   C0:3F:63:F4:44:61:D6:D3:CE:85:BA:E5:9B:F9:20:7D:26:44:CB:EF
Authority key identifier: 7A:C3:D1:49:E7:89:15:E4:41:BD:E3:FF:2E:63:3D:00:0A:CC:A1:3A
Certificate issuer:       /CN=7ac3d149e78915e441bde3ff2e633d000acca13a
Certificate serial:       019677FB931C2E370B6DF96FE386B7AA2F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/esPRSeeJFeRBveP_LmM9AArMoTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/d07cf8-2299-451d-bc3d-d7d78e4159e5/1/esPRSeeJFeRBveP_LmM9AArMoTo.mft
Manifest number:          06F0
Signing time:             Sun 27 Apr 2025 16:01:37 +0000
Manifest this update:     Sun 27 Apr 2025 16:01:37 +0000
Manifest next update:     Mon 28 Apr 2025 16:01:37 +0000
Files and hashes:         1: esPRSeeJFeRBveP_LmM9AArMoTo.crl (hash: kSau8aDNc61u/9u/c5lfEYK4HuuyamslSEqDJUver/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/d07cf8-2299-451d-bc3d-d7d78e4159e5/1/esPRSeeJFeRBveP_LmM9AArMoTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/d07cf8-2299-451d-bc3d-d7d78e4159e5/1/esPRSeeJFeRBveP_LmM9AArMoTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/esPRSeeJFeRBveP_LmM9AArMoTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:77:fb:93:1c:2e:37:0b:6d:f9:6f:e3:86:b7:aa:2f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ac3d149e78915e441bde3ff2e633d000acca13a
        Validity
            Not Before: Apr 27 16:01:37 2025 GMT
            Not After : Apr 28 16:01:37 2025 GMT
        Subject: CN=c03f63f44461d6d3ce85bae59bf9207d2644cbef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:1e:6b:56:e5:4a:d3:be:51:72:00:3f:11:
                    57:e7:47:34:0b:ab:3e:14:27:36:db:8e:f8:4c:cd:
                    2d:00:40:d2:02:64:3d:29:3e:50:7b:52:ee:9b:dc:
                    a7:c9:c9:03:0a:45:65:a2:59:97:36:75:a3:65:ca:
                    d9:d5:b7:8e:e8:07:98:af:62:5b:81:11:10:4e:fc:
                    b7:d6:00:b9:82:58:ca:cb:18:3c:d1:cd:ab:c7:ab:
                    68:7a:60:b0:4b:4f:06:c0:d4:16:6e:62:41:ce:87:
                    80:8d:14:d3:4b:8f:12:a6:21:06:cb:61:d6:40:e8:
                    45:9b:0c:f5:55:e6:43:9a:52:1d:ac:49:a7:11:33:
                    d0:e0:ef:55:45:52:ff:14:24:da:fd:ba:48:47:bd:
                    db:3e:ac:69:ff:3a:72:9e:3e:42:47:ea:45:36:a5:
                    82:27:2e:5d:3f:b2:8e:eb:4d:5a:e1:b0:82:7b:d2:
                    f4:ca:45:4d:50:b4:48:7c:8c:a9:52:a2:04:96:62:
                    e9:d9:ed:71:01:05:f5:08:f6:cb:94:7a:3f:5b:ac:
                    2d:60:23:38:1c:56:95:c0:34:fd:cb:6e:5c:80:c4:
                    38:87:1b:fa:8d:3f:6d:c4:45:1e:95:4d:51:04:b9:
                    cc:0b:98:b8:0f:85:d5:50:2a:07:a3:18:15:5e:29:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3F:63:F4:44:61:D6:D3:CE:85:BA:E5:9B:F9:20:7D:26:44:CB:EF
            X509v3 Authority Key Identifier:
                keyid:7A:C3:D1:49:E7:89:15:E4:41:BD:E3:FF:2E:63:3D:00:0A:CC:A1:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/esPRSeeJFeRBveP_LmM9AArMoTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d07cf8-2299-451d-bc3d-d7d78e4159e5/1/esPRSeeJFeRBveP_LmM9AArMoTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d07cf8-2299-451d-bc3d-d7d78e4159e5/1/esPRSeeJFeRBveP_LmM9AArMoTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d9:77:13:06:17:ca:f4:ab:d0:9a:0b:3e:cd:d5:12:9f:8e:
         df:22:a4:3a:5c:b8:58:31:bd:dd:b3:6e:e9:d0:fd:4c:7f:55:
         c2:07:47:64:07:bb:ee:2e:15:1b:11:d8:68:eb:ce:3e:31:7e:
         1d:00:39:05:0e:84:fc:b3:75:34:d1:95:74:9d:28:81:b2:8c:
         da:5d:6c:dd:22:f1:a9:06:53:bb:d7:d6:38:51:12:55:05:6c:
         38:27:f5:18:f5:4e:5c:fa:31:9f:61:43:55:d8:f2:b2:8d:65:
         9e:14:e5:b1:d5:5f:fb:b4:c4:f4:00:04:e0:e3:e8:6b:a3:68:
         0d:25:b7:12:f4:04:dd:69:43:d6:d3:4b:a9:71:fe:18:d8:79:
         86:99:13:91:a0:65:19:0f:41:a6:2a:f9:c7:58:cd:ce:58:62:
         e5:7c:e1:2a:9e:aa:7a:56:23:36:03:68:45:66:c4:4e:bd:f9:
         3b:c5:1c:17:b9:77:03:e4:e0:03:8e:e3:9b:12:64:1a:ee:be:
         42:92:b8:07:df:88:cc:a2:35:30:49:0d:b2:31:e7:b3:94:96:
         d6:f3:39:f8:d2:3f:70:e5:1d:78:dc:2e:08:73:c3:3a:ff:03:
         42:13:af:41:01:de:bd:29:ce:39:3d:d1:6e:4a:f8:17:ad:a4:
         e0:1f:2d:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ3+5McLjcLbflv44a3qi9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhYzNkMTQ5ZTc4OTE1ZTQ0MWJkZTNmZjJlNjMzZDAwMGFj
Y2ExM2EwHhcNMjUwNDI3MTYwMTM3WhcNMjUwNDI4MTYwMTM3WjAzMTEwLwYDVQQD
EyhjMDNmNjNmNDQ0NjFkNmQzY2U4NWJhZTU5YmY5MjA3ZDI2NDRjYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgIea1blStO+UXIAPxFX50c0C6s+
FCc22474TM0tAEDSAmQ9KT5Qe1Lum9ynyckDCkVlolmXNnWjZcrZ1beO6AeYr2Jb
gREQTvy31gC5gljKyxg80c2rx6toemCwS08GwNQWbmJBzoeAjRTTS48SpiEGy2HW
QOhFmwz1VeZDmlIdrEmnETPQ4O9VRVL/FCTa/bpIR73bPqxp/zpynj5CR+pFNqWC
Jy5dP7KO601a4bCCe9L0ykVNULRIfIypUqIElmLp2e1xAQX1CPbLlHo/W6wtYCM4
HFaVwDT9y25cgMQ4hxv6jT9txEUelU1RBLnMC5i4D4XVUCoHoxgVXil7wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA/Y/REYdbTzoW65Zv5IH0mRMvvMB8GA1UdIwQY
MBaAFHrD0UnniRXkQb3j/y5jPQAKzKE6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXNQUlNlZUpGZVJCdmVQX0xtTTlBQXJNb1RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9kMDdjZjgtMjI5OS00NTFkLWJjM2Qt
ZDdkNzhlNDE1OWU1LzEvZXNQUlNlZUpGZVJCdmVQX0xtTTlBQXJNb1RvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9kMDdjZjgtMjI5OS00NTFkLWJjM2QtZDdkNzhlNDE1OWU1
LzEvZXNQUlNlZUpGZVJCdmVQX0xtTTlBQXJNb1RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtl3EwYX
yvSr0JoLPs3VEp+O3yKkOly4WDG93bNu6dD9TH9VwgdHZAe77i4VGxHYaOvOPjF+
HQA5BQ6E/LN1NNGVdJ0ogbKM2l1s3SLxqQZTu9fWOFESVQVsOCf1GPVOXPoxn2FD
Vdjyso1lnhTlsdVf+7TE9AAE4OPoa6NoDSW3EvQE3WlD1tNLqXH+GNh5hpkTkaBl
GQ9Bpir5x1jNzlhi5XzhKp6qelYjNgNoRWbETr35O8UcF7l3A+TgA47jmxJkGu6+
QpK4B9+IzKI1MEkNsjHns5SW1vM5+NI/cOUdeNwuCHPDOv8DQhOvQQHevSnOOT3R
bkr4F62k4B8tRg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:45 2025 by rpki-client