Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
File:                     PvLDEpButnNhK6502i3RigNoJLE.mft (raw, json)
Hash identifier:          hbMUGoJ1KA309wquDpNwxiDxllymGJuDmLNGbBoJSxU=
Subject key identifier:   9D:EE:40:50:01:56:D8:5B:8B:E4:D4:46:98:3E:F7:BC:7A:C8:FE:D3
Authority key identifier: 3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1
Certificate issuer:       /CN=3ef2c312906eb673612bae74da2dd18a036824b1
Certificate serial:       0196A3C0AF55EF530123566D8DE513F9ECD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
Manifest number:          09A7
Signing time:             Tue 06 May 2025 04:00:35 +0000
Manifest this update:     Tue 06 May 2025 04:00:35 +0000
Manifest next update:     Wed 07 May 2025 04:00:35 +0000
Files and hashes:         1: 9qEL2pFi8GcNKTnAwY3D31I1-18.roa (hash: kRwBp+rZmhG6iafwWEWyexpHApyotJ76NYZuUZZ35QQ=)
                          2: PvLDEpButnNhK6502i3RigNoJLE.crl (hash: QIBsDq4QwFTz+2KWXmmygUBbhWV1RS6EQ/tDgQpM9gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a3:c0:af:55:ef:53:01:23:56:6d:8d:e5:13:f9:ec:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ef2c312906eb673612bae74da2dd18a036824b1
        Validity
            Not Before: May  6 04:00:35 2025 GMT
            Not After : May  7 04:00:35 2025 GMT
        Subject: CN=9dee40500156d85b8be4d446983ef7bc7ac8fed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f5:fb:e2:5c:02:5a:e2:12:56:db:fa:43:3b:
                    8a:eb:95:c7:2a:93:62:2a:46:75:0b:07:66:6f:ba:
                    e5:7c:ad:8a:59:4c:0b:41:db:a8:c8:f3:d8:80:f7:
                    d5:14:46:f4:0c:af:d5:36:7a:22:a6:1d:3e:17:ca:
                    20:91:a0:dd:5a:91:c2:c2:73:b4:a5:ca:88:be:2e:
                    bf:50:6e:5f:ea:97:76:dd:54:01:55:2d:1b:c3:33:
                    ab:2b:d7:9e:16:bb:3d:ac:d5:d1:bf:1f:25:ff:bd:
                    4b:5e:18:06:14:bb:f6:bf:fc:db:cf:87:0e:f5:a0:
                    b8:20:32:74:af:1b:9e:c4:24:39:80:9c:3b:32:73:
                    8f:ad:74:f9:49:2f:6b:0e:b2:11:40:a4:91:e9:d5:
                    56:0d:5b:c8:a3:d2:71:82:5f:3b:03:83:97:83:3f:
                    63:4f:c1:81:6c:6f:f7:62:38:08:66:7b:94:75:3b:
                    36:78:c5:de:f7:6c:69:ee:2c:99:82:96:08:45:fa:
                    9f:ff:43:b8:51:18:dd:a9:d6:d3:14:31:e3:3f:e2:
                    96:8e:13:f9:33:33:d8:20:c7:6a:99:02:27:48:bb:
                    77:58:ac:35:54:ea:b5:e5:b1:ac:ff:69:35:da:19:
                    9f:d7:03:ba:0f:bd:1e:01:00:36:d1:36:57:93:7a:
                    cc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EE:40:50:01:56:D8:5B:8B:E4:D4:46:98:3E:F7:BC:7A:C8:FE:D3
            X509v3 Authority Key Identifier:
                keyid:3E:F2:C3:12:90:6E:B6:73:61:2B:AE:74:DA:2D:D1:8A:03:68:24:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PvLDEpButnNhK6502i3RigNoJLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7882e3-de8f-4751-9b6f-c9ffbe9b94d3/1/PvLDEpButnNhK6502i3RigNoJLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:be:15:d1:cb:22:37:77:26:24:b5:9a:11:5c:2c:45:44:a0:
         20:00:65:94:c9:36:5d:87:ee:df:13:8c:a2:67:33:86:0b:e9:
         23:35:ef:59:69:fe:dc:04:af:26:aa:ee:80:fd:42:d4:6b:91:
         74:27:dc:85:cf:23:e8:e0:aa:48:76:76:19:e6:4c:9c:83:6d:
         42:c8:d3:71:32:6a:45:85:57:4a:c7:d7:6e:2e:fc:c4:69:65:
         8b:cf:31:44:a5:d6:0d:6c:20:16:ef:d6:89:25:c6:56:68:78:
         a2:fe:45:8e:8e:4b:32:44:5d:ad:fb:74:bc:86:0e:7e:52:8c:
         9d:56:eb:cf:d6:26:43:3e:21:33:ab:34:85:dc:74:a8:f3:02:
         de:d3:58:17:3d:ec:48:69:77:26:74:17:55:b0:3c:52:ce:f6:
         cb:0e:ec:b0:89:c9:af:13:1e:8a:fe:94:6c:24:e3:3d:de:a6:
         3a:89:b5:22:f4:c9:91:29:f8:80:65:55:e5:87:81:16:cb:86:
         c8:5e:b4:fc:90:d0:31:8f:15:ff:02:f9:c5:de:c9:54:44:b4:
         7c:ac:f8:b5:8f:73:7a:6e:52:ab:bd:b7:cd:11:2a:2c:fd:55:
         c0:9d:a9:f0:f9:cb:e0:b2:9d:a4:ed:f2:1b:68:76:7a:59:2e:
         dc:d2:62:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 11:24:36 2025 by rpki-client