Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File:                     pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier:          rH2kTxoMnC69bU6hCum5MMHCeG8NBB+kojjtrS0sxoA=
Subject key identifier:   CB:35:62:CE:73:24:6C:5F:C0:B7:63:39:63:D8:6E:E8:5D:37:E8:0E
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer:       /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial:       0191FB5A7F3647FEA32381753F6342C6B2EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number:          DB
Signing time:             Mon 16 Sep 2024 15:01:37 +0000
Manifest this update:     Mon 16 Sep 2024 15:01:37 +0000
Manifest next update:     Tue 17 Sep 2024 15:01:37 +0000
Files and hashes:         1: dkpiZUx8cQVvWhDyhwHVTQp-htM.roa (hash: Xmfx7gml3iInvwONOK18hjLp+rZWeVCqKDgK9BwxFMI=)
                          2: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: NxEZ9AnMf68o+nVDw8jp0VNl1imr9cp1e1Gg7fhYgJo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 14:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:fb:5a:7f:36:47:fe:a3:23:81:75:3f:63:42:c6:b2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
        Validity
            Not Before: Sep 16 15:01:37 2024 GMT
            Not After : Sep 17 15:01:37 2024 GMT
        Subject: CN=cb3562ce73246c5fc0b7633963d86ee85d37e80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:3e:68:27:a0:d0:21:f6:c4:43:cf:6d:18:
                    86:be:09:da:2e:b2:dd:d3:9e:6b:b9:a0:55:fa:bf:
                    26:a1:c2:ae:29:c2:dd:55:f8:70:dc:be:d1:00:77:
                    ed:81:f1:95:84:e7:c1:42:66:c5:2d:6b:40:bd:51:
                    a2:38:91:c2:5d:72:a8:10:d0:9b:25:37:87:13:88:
                    a8:cb:e2:8a:7f:3c:f3:c2:80:7d:11:d6:a4:9f:6f:
                    05:15:9f:1b:57:57:f5:13:18:9a:3a:24:05:12:1c:
                    be:d6:74:e8:2c:43:bd:fb:b7:87:85:10:db:96:45:
                    e5:bb:e9:4f:ed:ac:5b:92:95:46:67:b5:b0:35:c2:
                    ca:bc:b9:da:8a:40:69:fe:3e:05:7f:aa:3f:5d:c5:
                    d1:09:e0:44:3f:cf:05:e3:c1:b1:83:9f:2a:61:1c:
                    53:8e:e2:44:f2:0b:34:2f:dd:4e:93:fe:f8:2a:43:
                    4e:e5:6c:f6:5a:4d:0b:c5:f9:ef:b2:29:b7:b1:66:
                    31:e2:b0:bb:56:aa:22:30:5d:77:c8:35:40:86:cb:
                    68:c6:36:27:73:ae:39:99:76:49:14:11:44:34:7e:
                    9a:81:0f:74:0f:2d:3d:92:b2:04:d2:b6:67:1e:b4:
                    e9:59:e2:db:3b:dc:75:d3:a1:67:94:97:2a:a2:a2:
                    b9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:35:62:CE:73:24:6C:5F:C0:B7:63:39:63:D8:6E:E8:5D:37:E8:0E
            X509v3 Authority Key Identifier:
                keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:32:4d:b4:11:e7:36:01:49:ff:17:a6:67:8c:fe:7b:3d:e5:
         5f:29:6d:55:45:cc:8b:37:07:16:ca:7b:5a:73:e3:b4:9f:82:
         21:7a:1d:2f:6c:47:27:fd:7d:39:88:db:2d:a6:36:86:da:0d:
         03:65:b6:d9:d0:64:a4:44:05:18:5e:cb:8c:e6:22:f9:7d:87:
         fe:59:08:30:ed:42:2b:3a:dc:ed:0b:3c:1f:5b:1a:ea:3b:40:
         eb:6e:b4:bc:3f:6d:c6:05:f4:d8:5b:c2:fc:b9:ac:b3:49:d3:
         9b:a8:95:bc:ed:45:d1:70:2a:3b:7f:86:63:97:2d:42:a0:af:
         83:48:cd:91:8a:a0:67:e9:c3:9c:0d:75:15:18:ec:38:9d:40:
         a5:c5:ef:cf:93:6c:5d:9d:13:23:0d:a0:e3:ff:ca:3f:24:34:
         70:1b:1d:58:f1:23:fd:1f:93:83:28:60:7e:aa:f9:7c:33:85:
         95:7b:40:82:ce:c4:54:93:e7:d8:57:9e:f9:18:ec:fd:d2:7d:
         6b:d0:b7:dc:ec:34:b5:1b:00:d2:50:a0:54:43:d7:70:d9:de:
         ee:d6:da:da:c5:fe:fc:8c:8c:fa:a4:be:1c:ac:e8:4c:08:17:
         49:6e:90:ac:e9:0d:f4:fb:08:c5:d5:b1:b9:af:ea:e3:84:f6:
         62:f4:b6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:18:45 2024 by rpki-client on console-ams.rpki-client.org