Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
File:                     PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json)
Hash identifier:          3uYXH4iTFPgwDmzzXP7YkQWzBljwxLlmjPfA+O2AF7o=
Subject key identifier:   18:56:E1:86:D2:BC:DA:2D:62:AC:1C:93:3F:0F:6C:20:C6:FF:18:C2
Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84
Certificate issuer:       /CN=3f24a4322e88312c81f469ac9ffa730df14b3384
Certificate serial:       01967A567F6D4379946EA94441CB08899787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
Manifest number:          150E
Signing time:             Mon 28 Apr 2025 03:00:11 +0000
Manifest this update:     Mon 28 Apr 2025 03:00:11 +0000
Manifest next update:     Tue 29 Apr 2025 03:00:11 +0000
Files and hashes:         1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: cRknanWIc0ShyIOT0Wib78offKtNuZHGrl0jM6LVBmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 03:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:56:7f:6d:43:79:94:6e:a9:44:41:cb:08:89:97:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384
        Validity
            Not Before: Apr 28 03:00:11 2025 GMT
            Not After : Apr 29 03:00:11 2025 GMT
        Subject: CN=1856e186d2bcda2d62ac1c933f0f6c20c6ff18c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:41:43:d9:b8:6e:8c:79:56:4b:dd:0e:ce:
                    f2:35:b5:9b:9f:1c:08:1f:b2:d8:2a:10:73:fa:df:
                    57:3d:d2:b7:05:46:cb:c1:dd:60:5e:1e:bf:99:e3:
                    c3:6a:04:7c:b0:2a:3b:b2:e7:0d:03:1e:75:b0:09:
                    a7:8a:69:01:84:bb:f2:88:01:c4:49:99:d6:11:bc:
                    fb:82:30:2e:f6:c2:e0:99:47:92:05:3d:38:3a:35:
                    3c:24:4c:cc:ce:8e:34:7b:52:66:eb:cc:e9:6e:ae:
                    2b:69:53:1e:13:78:1f:74:e3:ae:1c:41:d7:8c:8f:
                    a6:0a:bd:46:52:f7:3f:8b:ff:1f:a8:ab:b6:bd:f9:
                    9a:6e:fe:73:38:1b:ac:fe:6a:48:71:92:92:a8:bf:
                    80:52:1f:8a:e9:21:be:19:20:a8:c0:d0:80:a0:b6:
                    c3:17:d0:57:cf:e3:e0:ce:d7:7b:13:e1:71:8d:5b:
                    53:9f:c1:44:60:64:7f:d6:ac:2d:75:28:79:b2:6b:
                    f2:c5:08:5b:be:5b:95:81:3e:c0:be:e7:59:36:46:
                    af:f8:bc:d2:0d:a5:ab:57:10:fb:3a:21:cf:4c:a7:
                    d6:2b:88:b1:6b:7a:6c:83:bb:2d:d4:f4:d1:7e:3c:
                    da:74:ad:f8:8c:1e:d6:24:60:1d:a8:46:31:8e:63:
                    b6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:56:E1:86:D2:BC:DA:2D:62:AC:1C:93:3F:0F:6C:20:C6:FF:18:C2
            X509v3 Authority Key Identifier:
                keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:bf:8e:3f:bb:ea:87:f3:78:57:47:d1:06:1e:9c:d6:b0:9d:
         d1:77:29:ce:34:0a:da:86:fb:3d:29:63:7b:1e:18:14:78:05:
         03:a4:f8:2c:af:22:e2:7a:88:6b:65:e2:19:49:11:64:8d:a0:
         06:39:ff:3f:44:d2:c9:2e:03:43:b5:01:3e:cd:1b:76:0e:3c:
         61:b7:ae:77:4e:62:af:ea:2e:03:c9:13:77:5c:70:81:b4:a8:
         02:58:e5:18:76:17:50:e6:a1:17:44:1a:39:29:77:70:1b:42:
         7a:d9:38:b2:31:78:e2:be:79:e2:c8:70:9d:41:85:17:73:e4:
         11:34:ae:52:aa:07:0c:cc:a9:ce:ce:2d:f3:4e:71:10:d0:95:
         c6:24:8f:e5:85:75:36:3e:6d:19:1c:42:c5:06:4e:e9:b2:2b:
         d7:84:f4:50:4f:41:76:d0:12:54:1b:5f:9d:f5:5a:f8:60:ed:
         31:5c:ca:d4:e6:d5:9e:a6:96:82:96:cc:f2:3c:44:df:8c:ec:
         ff:40:bf:83:46:00:18:2e:a8:a2:15:6c:62:60:4f:d7:f0:1c:
         a1:ae:3a:9a:33:e0:98:71:37:7a:29:6c:d1:6b:2d:1f:51:be:
         b9:5d:61:93:28:af:5c:d3:c2:dd:36:40:09:ec:7f:99:aa:26:
         a5:67:cd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:19 2025 by rpki-client