Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File:                     PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier:          6d8jZiuab1XMIPY1JJFn+LRin/0QfgeVmPykjWYVkJ8=
Subject key identifier:   5E:5D:D2:CE:F0:B1:0B:09:C8:99:99:C7:0A:A5:5D:97:E5:A2:BF:11
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer:       /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial:       01964F6CE347F9E530B2F8D47CA77D7BED81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number:          046A
Signing time:             Sat 19 Apr 2025 19:00:58 +0000
Manifest this update:     Sat 19 Apr 2025 19:00:58 +0000
Manifest next update:     Sun 20 Apr 2025 19:00:58 +0000
Files and hashes:         1: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: i9vMt65GouiY5ioT9QRW6oCdknCG373wfYLW1Ngg7Fo=)
                          2: fZ9isGtIlM4KCLTcv8R-iIf03v8.roa (hash: B9s0fxg99QLzPGHKR09eX4IAtgF+hQonUvqfnXhZlTc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4f:6c:e3:47:f9:e5:30:b2:f8:d4:7c:a7:7d:7b:ed:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
        Validity
            Not Before: Apr 19 19:00:58 2025 GMT
            Not After : Apr 20 19:00:58 2025 GMT
        Subject: CN=5e5dd2cef0b10b09c89999c70aa55d97e5a2bf11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:70:63:09:2b:db:40:70:9e:de:88:fb:5f:0f:
                    47:76:a0:9a:9f:46:0a:33:b4:7e:82:39:4d:7b:ca:
                    07:cb:65:4b:4e:17:66:ad:db:c2:84:bd:3f:20:ad:
                    d9:19:5c:37:77:39:42:d8:2a:d4:4c:db:fe:5f:35:
                    27:d0:27:af:78:ad:d9:a0:ba:d0:d9:69:42:d3:fe:
                    b0:17:3c:ec:f2:41:37:60:df:96:1c:c4:3f:9d:52:
                    fe:8a:f6:4c:44:7a:5b:6e:e5:50:23:d4:61:5a:ab:
                    f8:d5:33:c2:60:e3:e6:49:c7:eb:39:1a:2f:34:a9:
                    e2:12:41:9f:fe:20:da:97:fc:e0:33:de:26:e5:d2:
                    5f:d9:91:1f:53:7a:91:c8:49:79:c0:e0:b5:fb:0f:
                    5c:db:12:b8:0b:17:56:2a:59:63:1e:17:39:7e:53:
                    b4:a8:a3:13:ed:fc:6a:4d:88:d3:fd:47:20:51:e8:
                    38:4a:29:24:dc:96:c5:e8:b6:65:26:97:7f:74:93:
                    06:b5:00:65:40:cc:9c:35:07:d1:d5:4a:6e:0e:2c:
                    09:bc:b5:46:3d:89:66:f1:bb:89:8b:08:d5:54:37:
                    1e:dd:31:fc:41:3b:0c:63:23:57:c3:ec:b4:3e:c8:
                    02:92:cb:08:3d:f7:74:7f:6d:a1:02:9c:cb:41:4e:
                    39:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5D:D2:CE:F0:B1:0B:09:C8:99:99:C7:0A:A5:5D:97:E5:A2:BF:11
            X509v3 Authority Key Identifier:
                keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:b8:2a:80:b1:d2:b5:74:66:7e:e6:2a:3e:3c:82:90:30:30:
         30:c3:fa:cf:d0:85:eb:f7:78:3b:89:8f:7a:e6:54:96:39:eb:
         6e:5d:ae:3a:cb:22:60:7d:ac:63:67:8d:64:ff:b3:11:bc:37:
         1f:28:b8:47:41:86:e8:38:42:f4:ba:fa:b0:1a:54:07:6c:ae:
         c2:93:b8:52:72:2e:a4:54:91:ba:66:96:8a:a7:48:ba:e9:05:
         af:2d:45:4c:ea:1f:81:49:80:93:88:d1:fd:bb:76:70:15:bc:
         3c:e4:54:93:13:ca:bf:64:a9:d8:e2:00:02:9c:86:58:15:fa:
         12:bd:50:85:04:c0:66:ca:92:c4:15:99:90:f0:ed:e0:26:9a:
         70:fa:d4:b7:28:e5:74:d8:3e:c1:74:80:52:0a:73:7f:19:1c:
         94:2a:29:d7:bd:fe:eb:7e:60:22:ca:99:75:b2:57:69:0b:dc:
         d0:e2:35:6b:49:35:51:6d:34:54:e8:29:75:b3:3b:43:03:2a:
         6c:d9:ac:23:23:de:2c:e4:d3:34:24:80:0e:64:e4:b4:75:ea:
         75:dc:55:0b:d8:9d:29:12:11:58:59:e9:3e:64:80:65:41:81:
         f4:19:e4:8e:5b:c6:b6:cf:62:12:9d:ac:fa:bc:23:b4:f6:c3:
         4a:a9:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:21:21 2025 by rpki-client