Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
File:                     3EviU3WUInayZECX3D1ah1r7ivE.mft (raw, json)
Hash identifier:          TlWXwGOkcOoLbi7FOxy1XJn21hMihuhTGGPjOvGu8tE=
Subject key identifier:   65:DF:93:12:64:05:0D:85:64:73:A4:F9:2F:19:2D:25:CC:BD:E1:E3
Authority key identifier: DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1
Certificate issuer:       /CN=dc4be25375942276b2644097dc3d5a875afb8af1
Certificate serial:       018F381E43BA27688060406E86476BB0BE73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
Manifest number:          0403
Signing time:             Thu 02 May 2024 07:04:18 +0000
Manifest this update:     Thu 02 May 2024 07:04:18 +0000
Manifest next update:     Fri 03 May 2024 07:04:18 +0000
Files and hashes:         1: 3EviU3WUInayZECX3D1ah1r7ivE.crl (hash: eWPL/COg5q9v6XQBV9jv+/CAp6lEf+1EmCu1PYFMEzY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 03 May 2024 07:04:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1e:43:ba:27:68:80:60:40:6e:86:47:6b:b0:be:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc4be25375942276b2644097dc3d5a875afb8af1
        Validity
            Not Before: May  2 07:04:18 2024 GMT
            Not After : May  3 07:04:18 2024 GMT
        Subject: CN=65df931264050d856473a4f92f192d25ccbde1e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:11:c2:e1:43:8d:75:4e:6f:ce:92:12:3d:3f:
                    eb:27:6a:70:1c:ae:2c:71:1d:08:dd:93:79:58:7e:
                    66:97:b9:0f:a6:4b:e1:e7:35:eb:de:c5:62:96:0d:
                    1c:d6:2f:67:42:42:5f:ba:90:3b:89:52:9a:55:ef:
                    0f:78:bc:65:db:0b:27:87:06:85:69:a3:d1:f2:92:
                    c6:f3:f2:f4:1b:ef:4b:ef:47:d0:78:13:b0:c3:26:
                    0f:e3:f9:fe:33:8f:3c:60:28:29:cc:81:78:9a:48:
                    cb:8a:29:7c:3a:ac:53:7b:3e:ff:61:34:72:0a:47:
                    58:8a:7f:0d:41:8b:79:3d:95:65:77:80:4e:c9:0a:
                    90:7e:19:29:fd:8b:4f:a1:00:0d:34:25:c4:0a:40:
                    ee:05:05:45:1d:b9:ab:33:90:3a:9d:63:f3:c2:a7:
                    74:29:46:08:df:71:08:e9:c2:49:92:9a:b4:45:45:
                    ce:6f:5d:05:76:ff:de:97:e7:89:fa:77:39:be:0d:
                    60:d1:42:5f:9b:14:1f:ac:17:14:06:b1:05:fc:22:
                    77:a9:86:54:69:89:e9:2c:1c:27:90:ce:ab:50:32:
                    e9:a4:b6:2c:2e:02:01:21:44:01:fc:6d:26:93:3d:
                    84:bd:e7:32:de:75:a1:96:0d:9d:56:68:bc:0f:72:
                    69:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DF:93:12:64:05:0D:85:64:73:A4:F9:2F:19:2D:25:CC:BD:E1:E3
            X509v3 Authority Key Identifier:
                keyid:DC:4B:E2:53:75:94:22:76:B2:64:40:97:DC:3D:5A:87:5A:FB:8A:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EviU3WUInayZECX3D1ah1r7ivE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/53d100-9976-494b-ae21-0b851038a5de/1/3EviU3WUInayZECX3D1ah1r7ivE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:fc:c8:53:94:22:da:d9:33:f1:4e:6d:04:41:75:26:0d:
         a6:28:f6:04:dc:be:58:76:b2:96:23:e1:b0:d2:09:c4:65:37:
         a9:6a:f8:4e:ae:26:01:42:af:6e:e9:1b:71:35:a5:42:18:72:
         90:a0:39:9e:89:d7:a7:99:7c:3c:3c:0c:ca:8f:a4:94:25:f2:
         86:8b:36:06:64:e3:b2:f2:27:f0:c1:e8:a0:89:bf:03:4c:fb:
         d7:1b:4c:cf:3f:a4:80:bb:d2:e1:29:cb:b5:d2:08:19:25:4b:
         19:e6:8b:7d:9c:4f:53:55:79:54:ed:9a:e6:89:4a:75:ff:5c:
         3a:bd:b2:e1:e2:f9:37:66:b9:df:6d:2b:f2:1f:04:6d:d3:67:
         4d:b2:47:d3:e6:9b:51:bf:e2:b2:ec:46:cc:fc:ca:9c:6f:b4:
         84:fe:90:74:e1:e6:bd:bf:b6:b0:83:8c:11:c8:32:a1:98:9a:
         36:c8:75:be:e0:46:fb:00:70:b7:ef:e9:4a:da:cf:2a:2c:cd:
         a8:b8:65:ff:b5:6c:c4:b9:df:43:bc:06:f5:3d:bc:66:71:6e:
         a6:76:27:ef:cc:c3:d4:49:31:be:74:3e:4e:73:76:04:91:e9:
         1a:28:1d:00:6e:a8:e3:7b:b2:52:69:5e:28:17:53:37:89:37:
         94:d6:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:42:25 2024 by rpki-client on console-ams.rpki-client.org