Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
File:                     e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft (raw, json)
Hash identifier:          QvHoGGlt2FXYMvAbjMYe3ptn6l7CFXWhs7GhfZsr4zM=
Subject key identifier:   47:F6:D2:12:1D:88:4B:35:5B:7F:6E:C5:E4:B6:D5:6E:05:92:2E:33
Authority key identifier: 7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF
Certificate issuer:       /CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
Certificate serial:       019674F9AAA3FB81C648E162AC35F72DBAC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
Manifest number:          0DE1
Signing time:             Sun 27 Apr 2025 02:00:41 +0000
Manifest this update:     Sun 27 Apr 2025 02:00:41 +0000
Manifest next update:     Mon 28 Apr 2025 02:00:41 +0000
Files and hashes:         1: e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl (hash: dMF/9FTd6Z+GKVi5p6ukycrZe78xEcr0h89LuRwwg+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:74:f9:aa:a3:fb:81:c6:48:e1:62:ac:35:f7:2d:ba:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7c3f12cb7f951a62dc96f5ba3a0cde3e50b6ff
        Validity
            Not Before: Apr 27 02:00:41 2025 GMT
            Not After : Apr 28 02:00:41 2025 GMT
        Subject: CN=47f6d2121d884b355b7f6ec5e4b6d56e05922e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b3:75:34:2b:63:05:e6:dc:ea:aa:ad:b9:ef:
                    aa:48:f5:d6:78:90:a6:7b:7c:ac:d6:8a:59:22:11:
                    a7:23:f1:1d:31:b4:9c:4a:f2:8f:3c:f5:b9:43:eb:
                    d4:7d:9c:4d:50:12:bb:3a:ee:39:69:95:14:98:97:
                    f7:2a:84:c5:fb:21:fd:68:b1:fb:7a:4b:ae:85:1a:
                    90:94:78:cc:d6:49:f4:5c:1c:8d:33:07:19:d4:a2:
                    d3:48:12:a9:dc:38:bb:1c:e2:60:48:3b:cf:55:5a:
                    bf:81:e3:ac:c7:9d:8e:d7:39:98:84:04:9a:0d:48:
                    46:03:29:0a:42:b0:b6:c9:5f:b0:22:29:62:c4:78:
                    ec:44:aa:d7:bc:ac:83:5d:71:e2:05:49:e2:0e:c1:
                    db:b8:e7:5e:97:17:f6:3d:a7:ca:7c:b3:ec:3f:c2:
                    2c:e2:0a:e1:88:3c:a3:83:31:2f:21:25:c5:96:08:
                    b3:28:c3:82:3a:ca:60:8b:0a:bf:06:86:d3:85:81:
                    02:3c:e6:f0:06:58:ff:de:60:0a:33:7f:d6:b5:cb:
                    c2:f7:9e:fa:0b:49:ca:65:65:db:2f:5e:5a:b2:c0:
                    87:bd:b7:86:e6:b4:22:58:7f:59:23:ba:7a:89:52:
                    b1:c2:df:3d:a6:6b:80:7c:b9:45:67:26:86:90:0f:
                    1d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F6:D2:12:1D:88:4B:35:5B:7F:6E:C5:E4:B6:D5:6E:05:92:2E:33
            X509v3 Authority Key Identifier:
                keyid:7B:7C:3F:12:CB:7F:95:1A:62:DC:96:F5:BA:3A:0C:DE:3E:50:B6:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/20a0a0-a04c-4f7c-bf2c-c5726f916d5e/1/e3w_Est_lRpi3Jb1ujoM3j5Qtv8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:0f:9b:74:9e:48:02:10:93:f3:f1:a5:73:8d:e6:a3:14:fd:
         b9:70:49:92:a4:f8:6d:99:53:ed:bc:2c:8c:ee:b5:4e:05:52:
         11:06:8c:87:00:d0:eb:2b:7d:c6:02:29:48:ad:7a:5c:13:18:
         bc:14:35:4c:6e:b9:8f:4e:84:a5:a0:e4:9d:42:65:1d:b7:db:
         71:6b:d7:7e:62:8f:d1:c8:72:3f:48:31:c5:f8:cf:e4:96:55:
         e8:db:b1:f4:65:86:80:3d:07:df:e6:c0:11:85:6c:ce:41:0b:
         02:61:22:48:99:b5:55:5d:22:5f:7e:15:a7:8f:b5:a0:e3:5e:
         c9:e2:7c:53:63:88:42:64:3c:a5:ef:e2:39:dc:6e:b0:69:58:
         5c:1d:1e:df:ce:dc:47:d0:d6:79:e0:26:01:59:8c:97:8e:34:
         e6:95:58:50:fa:65:60:0e:15:71:60:65:db:e7:93:f4:50:aa:
         c8:af:14:eb:1a:e9:aa:90:ce:ec:08:2e:f5:52:10:89:23:b6:
         03:18:51:6a:41:c0:78:8b:3b:6b:7d:f2:a3:fb:e5:ba:24:fd:
         f8:91:a8:e8:23:af:03:0c:7a:7a:b7:b8:94:12:6f:b0:58:9a:
         da:5c:2d:6c:82:30:15:d0:1c:aa:02:f9:6f:8b:83:42:3e:9c:
         32:7f:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:41:36 2025 by rpki-client