Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
File:                     pyREUNHHhV34SPNDGOHwlIkA2NU.mft (raw, json)
Hash identifier:          GZkY0nKjTSrzAE07qQIgiAm9RGcYegVnxp5VpDN3Mck=
Subject key identifier:   38:92:BC:BF:1D:7F:C8:CD:4A:D7:27:A7:3F:B2:5D:77:01:B2:6C:A4
Authority key identifier: A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5
Certificate issuer:       /CN=a7244450d1c7855df848f34318e1f0948900d8d5
Certificate serial:       0196B0696B346C7079E7226B183090B0CB48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
Manifest number:          034C
Signing time:             Thu 08 May 2025 15:00:20 +0000
Manifest this update:     Thu 08 May 2025 15:00:20 +0000
Manifest next update:     Fri 09 May 2025 15:00:20 +0000
Files and hashes:         1: pyREUNHHhV34SPNDGOHwlIkA2NU.crl (hash: H145JTaKrf/1Bclhed+/sthpujqIM5flPlllbhP3o9w=)
                          2: slYjYuIFo0w5rC10sA14jjDYTj4.roa (hash: vyn3c0KUGlBUpj99ofdIph6Rnk7SAht9bfr6EHYuHzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:69:6b:34:6c:70:79:e7:22:6b:18:30:90:b0:cb:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7244450d1c7855df848f34318e1f0948900d8d5
        Validity
            Not Before: May  8 15:00:20 2025 GMT
            Not After : May  9 15:00:20 2025 GMT
        Subject: CN=3892bcbf1d7fc8cd4ad727a73fb25d7701b26ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:86:47:02:3f:0b:9b:e0:c3:11:18:7a:83:94:
                    49:33:fb:43:8f:4b:19:fb:ed:f4:54:1a:0e:d9:c4:
                    01:76:90:a2:00:8d:b8:31:f4:5b:e9:fe:06:8b:2c:
                    97:e5:9f:f4:3c:16:fc:e4:22:7a:27:1c:89:69:05:
                    89:71:04:3f:f1:7d:2f:31:2d:4e:8c:18:64:ed:74:
                    da:73:2c:18:f3:bc:20:1e:a3:68:09:15:d4:38:84:
                    6e:7c:44:cd:96:2d:48:eb:3b:77:49:be:22:5f:9f:
                    41:e7:e1:92:f8:a0:81:42:2e:ab:d1:3f:41:13:1d:
                    2d:71:e2:90:22:00:d1:ed:e1:4d:b9:d6:77:23:6e:
                    81:8c:91:cc:35:18:fc:ba:db:81:78:c9:eb:1f:56:
                    46:48:d0:0c:87:1c:15:df:d5:30:43:95:57:90:7e:
                    f8:3f:b4:74:3b:b5:39:74:f6:b4:e8:22:bf:d9:9b:
                    12:ae:4b:8c:bf:81:27:63:f0:b3:3a:97:5f:ef:84:
                    64:98:13:f8:92:b1:1e:78:4e:9c:69:68:dd:0a:bb:
                    0e:17:30:b6:df:3c:6d:d5:db:8f:25:01:44:be:a8:
                    0d:89:f5:eb:db:01:5d:37:ab:1d:03:2b:13:0a:1b:
                    a7:a3:51:e8:1f:b8:2c:d7:2f:18:6c:9b:7b:22:d2:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:92:BC:BF:1D:7F:C8:CD:4A:D7:27:A7:3F:B2:5D:77:01:B2:6C:A4
            X509v3 Authority Key Identifier:
                keyid:A7:24:44:50:D1:C7:85:5D:F8:48:F3:43:18:E1:F0:94:89:00:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyREUNHHhV34SPNDGOHwlIkA2NU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8ee5cc-e9a3-4c56-ae9a-168c3306c042/1/pyREUNHHhV34SPNDGOHwlIkA2NU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:d7:3a:01:ea:38:3f:97:df:f7:ea:b6:e2:27:49:ed:ad:2d:
         6d:58:f9:7f:c8:2e:22:50:7d:a5:a6:ee:4b:6c:c3:7a:66:3a:
         08:34:c9:6d:03:d6:11:e6:1d:59:6c:f7:9a:09:d4:54:c0:82:
         9d:7e:07:b3:e3:c2:1c:79:aa:f1:5f:e8:52:dc:54:b6:5d:f8:
         73:94:18:1d:88:fe:e4:8d:fe:91:79:23:20:26:f3:c6:70:5d:
         44:8a:2f:ba:b9:28:a7:08:26:2b:a2:e9:e8:0d:90:4e:47:56:
         c9:9f:8f:6e:a2:3e:18:25:9d:d0:11:ba:2b:54:e9:64:f0:4c:
         8e:a6:ec:69:35:82:83:3f:24:aa:2d:e9:1a:32:1d:f0:09:cb:
         e4:df:7b:fd:42:29:b0:fa:ef:61:98:17:b2:f3:23:66:ee:82:
         4b:99:71:9b:1f:0e:ea:0c:89:dd:aa:cc:cb:a5:11:94:ab:1f:
         5a:ff:6b:54:89:13:1a:19:a4:b5:12:cd:1f:21:74:b7:39:4a:
         66:c4:0b:84:7f:3d:da:87:d3:4a:1b:6f:80:b9:df:c5:fe:34:
         5d:2d:56:85:6b:15:b8:c2:f0:01:ef:7f:27:ba:3f:0c:13:c8:
         aa:4e:33:f1:88:31:88:f3:09:96:5c:b9:5b:b1:c9:ee:35:73:
         31:47:be:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:46:32 2025 by rpki-client