Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File:                     4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier:          VXF8m/uZICgkev8rj3CrCcZzFD5JgR4TwViJFkf6X2Q=
Subject key identifier:   CE:AA:C4:AC:82:2D:88:2E:C6:DC:48:9E:6B:33:04:97:6B:C5:61:D3
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer:       /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial:       0196C3B9E3E9CEF33BD8369C7859DBEDBD2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number:          1534
Signing time:             Mon 12 May 2025 09:01:01 +0000
Manifest this update:     Mon 12 May 2025 09:01:01 +0000
Manifest next update:     Tue 13 May 2025 09:01:01 +0000
Files and hashes:         1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: jsSewOl6iTM0evkdnS57sA3pRiN6ut9iWCwneJXRTPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c3:b9:e3:e9:ce:f3:3b:d8:36:9c:78:59:db:ed:bd:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
        Validity
            Not Before: May 12 09:01:01 2025 GMT
            Not After : May 13 09:01:01 2025 GMT
        Subject: CN=ceaac4ac822d882ec6dc489e6b3304976bc561d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3b:d1:14:0a:83:36:d4:ed:43:46:11:f2:42:
                    d8:3a:23:37:82:d4:64:58:3f:9e:30:23:d7:c2:30:
                    49:fa:9a:9e:e4:48:4c:9e:e1:74:fb:71:6d:df:a7:
                    ae:b3:ae:2f:b1:d3:5d:23:a3:3e:de:0b:ff:8c:81:
                    ea:86:1d:83:b9:af:e2:3b:99:db:7d:c6:f9:f8:8b:
                    e6:f5:7f:24:d0:f9:8c:a5:25:a3:74:ee:1b:85:d2:
                    07:ba:a6:b3:44:f2:13:fd:d8:ac:ed:7e:9f:92:a9:
                    0c:82:9c:39:eb:c3:cb:a1:df:6c:eb:23:66:e4:02:
                    6f:18:9b:03:fc:b4:13:8a:8b:61:c4:88:a1:be:42:
                    71:42:61:ba:4c:23:22:99:c8:22:3b:e1:06:b7:a6:
                    ca:20:61:51:41:43:a9:b3:c4:e6:28:01:ad:21:62:
                    58:5f:96:b5:f7:de:67:9c:c9:6f:68:0d:cc:d5:ba:
                    69:d3:a9:ba:de:55:d8:c5:db:83:9c:0b:46:5f:c8:
                    72:21:4a:97:09:8e:98:a8:cf:4b:13:67:e4:74:0a:
                    5d:58:5e:6a:10:6b:d4:3f:b7:0e:ca:9f:0c:d8:1b:
                    ab:bf:b4:30:71:ac:bc:58:3f:48:e9:53:54:8e:aa:
                    ca:4d:d8:a7:bb:91:31:bc:b6:ba:e2:9a:49:09:16:
                    45:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AA:C4:AC:82:2D:88:2E:C6:DC:48:9E:6B:33:04:97:6B:C5:61:D3
            X509v3 Authority Key Identifier:
                keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:47:53:ec:96:43:67:32:ad:d0:ef:0e:07:96:89:f9:7b:eb:
         e5:25:4c:8a:4a:02:31:0e:6a:35:30:5a:7f:d8:cb:81:e2:ea:
         f3:90:c2:4c:93:2b:bd:ce:fd:44:24:2b:bb:b9:e5:f4:83:86:
         60:bf:ed:90:06:aa:0e:8b:65:40:a1:48:db:12:71:d9:18:ab:
         3a:31:25:72:8a:b1:79:70:20:8f:96:63:5d:f5:32:f8:7d:4e:
         99:58:3b:c9:ea:7d:6b:f4:10:a5:92:cc:d0:62:37:fc:dc:0d:
         f4:cd:7f:4d:4e:f0:1e:8c:5f:e8:91:b1:20:bd:62:af:22:52:
         3c:12:0b:76:a2:c1:a3:85:2c:28:e3:73:cf:a3:ff:0c:65:fa:
         8c:d2:f6:fa:a8:bd:27:f2:88:db:df:01:4f:a9:60:a7:b3:94:
         1c:07:79:f5:d5:b9:8d:a8:fe:11:d5:12:45:0c:9e:3e:bc:47:
         d8:69:11:3b:3c:94:5e:57:68:2f:e2:54:ad:1a:fb:56:3d:9e:
         8d:a1:d6:16:6b:f6:0b:61:1e:55:67:2e:7c:24:ee:43:ea:79:
         83:6e:0a:6a:a4:77:60:d0:e6:98:f3:23:16:83:95:f9:5a:13:
         ff:e2:ee:ed:ff:36:76:e2:b9:ef:46:ee:64:58:3c:b2:29:92:
         30:81:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:07:35 2025 by rpki-client