Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File:                     pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier:          YKw43DG5rElOL9iORsDR81A4PB/BG296n6m7DJNNzZM=
Subject key identifier:   6C:2A:29:99:2C:05:EA:60:FC:4B:75:AB:8D:91:C2:B5:56:72:71:FC
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer:       /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial:       01951134E568190A5A313E41DEC1D75CA388
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number:          0275
Signing time:             Mon 17 Feb 2025 00:00:34 +0000
Manifest this update:     Mon 17 Feb 2025 00:00:34 +0000
Manifest next update:     Tue 18 Feb 2025 00:00:34 +0000
Files and hashes:         1: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: 5Aprd8kyWGFPPBNg2ouWwANXDG8ow9d5wjRnq49e5lY=)
                          2: slYjYuIFo0w5rC10sA14jjDYTj4.roa (hash: vyn3c0KUGlBUpj99ofdIph6Rnk7SAht9bfr6EHYuHzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:34:e5:68:19:0a:5a:31:3e:41:de:c1:d7:5c:a3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
        Validity
            Not Before: Feb 17 00:00:34 2025 GMT
            Not After : Feb 18 00:00:34 2025 GMT
        Subject: CN=6c2a29992c05ea60fc4b75ab8d91c2b5567271fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:d5:93:9d:c9:13:e6:50:0c:01:e2:fb:61:
                    4d:36:33:0d:0a:28:46:79:c0:2b:51:fb:53:d0:0c:
                    9b:ec:c7:36:09:fa:dc:dc:58:eb:33:ed:09:73:ec:
                    31:23:bb:fb:90:85:25:cf:b7:aa:0c:5a:ad:7b:50:
                    19:59:ca:ac:15:db:3b:d9:39:24:84:31:f8:38:11:
                    3a:db:48:5d:53:16:a0:c4:f6:3e:b1:16:15:22:4e:
                    08:aa:f7:42:cb:aa:ab:99:65:8b:78:70:39:09:ff:
                    7e:a8:a7:68:72:52:e4:b4:b3:dc:51:44:fa:43:76:
                    4f:e9:3d:f6:24:f2:47:67:04:0a:32:03:59:27:d7:
                    2d:be:ad:82:7c:29:67:5b:c0:19:ec:0c:dc:71:7c:
                    58:e8:2e:9a:d3:c8:71:13:8d:15:cc:1a:69:38:61:
                    2d:14:37:f6:57:0f:27:de:38:e4:de:34:4d:82:0d:
                    a6:87:83:61:02:34:7b:80:e9:d7:03:76:be:a5:40:
                    c3:fe:b8:7b:83:23:d3:46:30:1a:be:df:55:1c:ed:
                    61:a3:99:59:f6:06:79:b7:e7:01:a8:87:89:7f:ba:
                    94:2a:5b:23:2e:c9:12:ab:ec:5b:86:f5:e0:ed:66:
                    be:57:5f:5e:2b:5b:bf:a2:88:f4:0e:94:c0:e2:e4:
                    91:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:2A:29:99:2C:05:EA:60:FC:4B:75:AB:8D:91:C2:B5:56:72:71:FC
            X509v3 Authority Key Identifier:
                keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:1d:e7:41:6c:99:46:34:de:b5:63:7b:55:71:7b:55:0f:3c:
         fb:a4:8d:6a:48:f1:75:69:a0:a8:83:d8:3b:37:a1:95:4d:04:
         9d:7e:01:ac:7b:d2:cf:28:63:42:fb:c4:ee:af:9b:3a:a3:c7:
         86:f4:6e:0a:ab:14:d7:87:ca:be:c1:89:64:34:b3:8c:9a:b1:
         86:c1:20:3b:19:b2:1c:80:cd:2e:59:97:d7:d5:64:64:0a:5d:
         bd:b1:30:d2:20:de:75:49:69:96:4d:ad:56:95:bf:14:e1:f1:
         99:70:d4:35:7d:52:8e:67:b4:33:5b:96:1c:45:b9:30:ca:27:
         a6:49:de:00:c3:c7:34:d3:ed:95:6e:08:d4:ee:63:d0:74:ad:
         49:e9:34:16:52:78:52:f2:42:5c:30:68:da:7f:f1:38:9f:40:
         57:5e:ce:98:8a:68:96:08:5b:a2:71:b4:45:4c:c2:28:25:25:
         3e:98:21:b9:f7:2c:7f:77:ab:03:db:f0:c9:11:36:4d:29:42:
         78:a9:6b:2f:cd:ba:7b:f9:a2:19:d4:20:48:e2:be:c2:c4:97:
         f3:b9:b2:98:fa:93:b0:22:65:59:bd:ac:ee:aa:aa:fe:30:97:
         c7:c8:78:b5:a5:cb:41:d4:13:d9:8b:74:3f:c4:2b:87:5c:27:
         11:23:4e:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZURNOVoGQpaMT5B3sHXXKOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MjQ0NDUwZDFjNzg1NWRmODQ4ZjM0MzE4ZTFmMDk0ODkw
MGQ4ZDUwHhcNMjUwMjE3MDAwMDM0WhcNMjUwMjE4MDAwMDM0WjAzMTEwLwYDVQQD
Eyg2YzJhMjk5OTJjMDVlYTYwZmM0Yjc1YWI4ZDkxYzJiNTU2NzI3MWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqojVk53JE+ZQDAHi+2FNNjMNCihG
ecArUftT0Ayb7Mc2Cfrc3FjrM+0Jc+wxI7v7kIUlz7eqDFqte1AZWcqsFds72Tkk
hDH4OBE620hdUxagxPY+sRYVIk4IqvdCy6qrmWWLeHA5Cf9+qKdoclLktLPcUUT6
Q3ZP6T32JPJHZwQKMgNZJ9ctvq2CfClnW8AZ7AzccXxY6C6a08hxE40VzBppOGEt
FDf2Vw8n3jjk3jRNgg2mh4NhAjR7gOnXA3a+pUDD/rh7gyPTRjAavt9VHO1ho5lZ
9gZ5t+cBqIeJf7qUKlsjLskSq+xbhvXg7Wa+V19eK1u/ooj0DpTA4uSRdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwqKZksBepg/Et1q42RwrVWcnH8MB8GA1UdIwQY
MBaAFKckRFDRx4Vd+EjzQxjh8JSJANjVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84ZWU1Y2MtZTlhMy00YzU2LWFlOWEt
MTY4YzMzMDZjMDQyLzEvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84ZWU1Y2MtZTlhMy00YzU2LWFlOWEtMTY4YzMzMDZjMDQy
LzEvcHlSRVVOSEhoVjM0U1BOREdPSHdsSWtBMk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALh3nQWyZ
RjTetWN7VXF7VQ88+6SNakjxdWmgqIPYOzehlU0EnX4BrHvSzyhjQvvE7q+bOqPH
hvRuCqsU14fKvsGJZDSzjJqxhsEgOxmyHIDNLlmX19VkZApdvbEw0iDedUlplk2t
VpW/FOHxmXDUNX1Sjme0M1uWHEW5MMonpkneAMPHNNPtlW4I1O5j0HStSek0FlJ4
UvJCXDBo2n/xOJ9AV17OmIpolghbonG0RUzCKCUlPpghufcsf3erA9vwyRE2TSlC
eKlrL826e/miGdQgSOK+wsSX87mymPqTsCJlWb2s7qqq/jCXx8h4taXLQdQT2Yt0
P8Qrh1wnESNOBg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:53 2025 by rpki-client