Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File:                     pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier:          c3p3O0GbNpOf4nghXDqeSWVlkYI3f95RsH85mk01//w=
Subject key identifier:   7A:48:E5:A1:E6:09:4B:3E:83:B0:B1:15:A1:6D:6C:76:70:C4:F9:AC
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer:       /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial:       01964BFD73598868049B6968AF0F1B206373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number:          0318
Signing time:             Sat 19 Apr 2025 03:00:23 +0000
Manifest this update:     Sat 19 Apr 2025 03:00:23 +0000
Manifest next update:     Sun 20 Apr 2025 03:00:23 +0000
Files and hashes:         1: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: 2SG/QZIDf8ySJgAaqTte2dhzL83AvrF2BmtBarYZqGg=)
                          2: slYjYuIFo0w5rC10sA14jjDYTj4.roa (hash: vyn3c0KUGlBUpj99ofdIph6Rnk7SAht9bfr6EHYuHzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4b:fd:73:59:88:68:04:9b:69:68:af:0f:1b:20:63:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
        Validity
            Not Before: Apr 19 03:00:23 2025 GMT
            Not After : Apr 20 03:00:23 2025 GMT
        Subject: CN=7a48e5a1e6094b3e83b0b115a16d6c7670c4f9ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7f:d6:66:f1:9f:6f:16:ae:06:8a:a0:d3:33:
                    73:8c:7d:54:9f:d6:bc:09:48:6e:6b:29:2d:78:e0:
                    1c:fe:19:55:c0:3d:49:eb:1c:c4:15:c9:28:ca:58:
                    b3:2e:29:33:68:62:0f:ae:c5:f1:ff:05:11:32:32:
                    a9:8d:a1:81:b5:d2:ef:19:87:ff:69:a9:69:99:b9:
                    6c:d3:ba:2d:d9:8d:9c:ef:fe:28:59:53:6d:ee:22:
                    cb:18:0b:d9:a0:6e:a4:18:48:b9:a3:ab:28:d1:47:
                    60:f3:1c:75:e8:93:10:44:7c:af:30:17:06:33:0e:
                    6c:49:61:22:a5:bd:dc:e6:6f:f5:8c:bc:af:2d:9e:
                    b0:62:8e:38:ed:ca:b6:d8:9e:dc:50:60:56:57:19:
                    f8:e9:41:68:3b:b6:9e:d9:51:69:e5:83:fc:2b:41:
                    cf:ab:62:59:56:fc:bc:33:db:29:a7:e4:7a:fa:6b:
                    39:db:39:b1:86:5b:6c:82:f8:f5:5c:21:de:e8:b0:
                    8b:2c:fa:f0:12:f0:4a:95:4e:a3:3d:52:60:f1:fa:
                    a5:f2:1d:1d:c8:38:c4:ed:fd:94:b5:cc:8f:e8:63:
                    9e:5f:78:db:ae:fa:9f:77:eb:e0:8a:8a:5f:9d:79:
                    30:24:c2:e1:e9:0e:2a:a6:22:cf:68:75:42:d4:54:
                    d5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:48:E5:A1:E6:09:4B:3E:83:B0:B1:15:A1:6D:6C:76:70:C4:F9:AC
            X509v3 Authority Key Identifier:
                keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:91:d2:6c:69:6d:76:b8:16:0e:6f:57:9b:20:0a:a0:a0:91:
         94:9e:79:d3:95:49:b8:af:c4:8f:58:2b:bf:22:13:f7:c9:d1:
         be:44:6a:90:82:76:ad:f2:91:a6:c2:30:4e:9c:23:b2:66:f0:
         f4:99:b1:5e:26:2d:b9:cb:39:a7:12:6d:27:0d:03:1a:69:ed:
         d3:99:82:ae:bd:eb:bc:7b:fe:30:96:bd:44:79:14:c5:12:9c:
         7c:f4:9d:58:e3:7e:36:8e:4b:7e:ab:b4:26:fc:d5:49:10:76:
         a3:a9:7c:9c:cc:a4:fd:e9:58:80:c5:18:93:a2:4a:10:68:b8:
         37:d8:1f:c1:70:e2:d8:b8:2b:53:07:09:e0:4c:92:16:cf:3a:
         b0:4b:b6:c5:0f:fa:cd:bc:15:c0:c7:52:b5:4e:2e:3a:ae:b0:
         67:f7:eb:7a:6a:3c:1d:11:29:26:67:7c:d3:8e:ee:c3:4e:24:
         47:cf:43:31:b9:6e:e6:11:4d:03:6c:9c:26:f7:b0:98:c3:aa:
         3c:6e:86:ed:ab:63:03:14:e3:e5:64:df:73:fa:a3:be:02:e2:
         2b:9d:3a:96:a4:0a:d9:e7:f0:ae:8a:7a:26:75:84:fa:00:d1:
         71:9b:e8:f3:3f:2c:5e:5f:18:57:41:5a:fc:c8:2c:4c:31:0d:
         fe:e1:5e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:09:48 2025 by rpki-client