Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
File:                     84101CECAA6A71465DCF665D716279A008341EA4.mft (raw, json)
Hash identifier:          u581bqgenpjkD6+UVCr9nHthbP8i45YilBSdm19cjPA=
Subject key identifier:   40:A9:BD:63:4A:C3:27:95:25:2F:A0:84:1D:CF:D6:A2:EB:82:71:DA
Authority key identifier: 84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4
Certificate issuer:       /CN=84101cecaa6a71465dcf665d716279a008341ea4
Certificate serial:       62E9788BBB2E158906EF651B129CE856B54C31E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
Manifest number:          12
Signing time:             Sun 20 Apr 2025 20:32:13 +0000
Manifest this update:     Sun 20 Apr 2025 20:27:13 +0000
Manifest next update:     Mon 21 Apr 2025 22:51:13 +0000
Files and hashes:         1: 84101CECAA6A71465DCF665D716279A008341EA4.crl (hash: 7v1JVaW3Tadb5GZBqCPKpxm6B7m0SQ79ogv0tjSyHn4=)
                          2: AS216311.asa (hash: Dmw7omaWtWOpKd5S/DPOujGFLODAQcprPtQE3Nwf75E=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 22:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:e9:78:8b:bb:2e:15:89:06:ef:65:1b:12:9c:e8:56:b5:4c:31:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84101cecaa6a71465dcf665d716279a008341ea4
        Validity
            Not Before: Apr 20 20:27:13 2025 GMT
            Not After : Apr 21 22:51:13 2025 GMT
        Subject: CN=40A9BD634AC32795252FA0841DCFD6A2EB8271DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:2a:c9:e0:0d:8c:8b:b2:99:69:bc:0c:4c:
                    4e:24:00:ba:29:e6:b8:5e:60:78:d7:75:83:61:78:
                    52:4d:97:b3:02:7e:9a:fa:ab:37:8e:6f:15:22:90:
                    50:27:9a:0b:62:6c:a7:ab:25:ec:9f:cd:e8:09:60:
                    cd:71:89:c1:0f:0a:4c:35:52:dc:00:f6:bf:0f:38:
                    6e:6e:5a:45:95:ad:2b:a3:84:6b:65:06:82:c2:2e:
                    66:da:32:78:9a:fe:8d:9d:bd:b4:cf:8c:d7:26:85:
                    02:3d:49:b6:87:5b:a8:1e:a3:3c:f5:b6:16:9b:19:
                    09:b8:e5:1c:47:21:2a:1b:10:d6:b9:4c:2c:1c:6d:
                    df:0e:6a:4c:44:92:cc:ba:58:96:d8:5f:4d:c9:9a:
                    26:37:41:24:a1:e9:63:76:34:9d:b2:0f:5a:fa:ef:
                    78:1f:c6:f3:99:62:09:42:25:b7:01:22:d6:51:96:
                    db:aa:d2:1b:ff:55:27:c6:ed:a6:34:8f:9c:c4:2a:
                    cc:81:df:25:0d:ea:e7:37:52:59:22:97:ac:ee:48:
                    b0:5b:72:62:ff:cf:b3:f8:5a:66:b5:2f:52:b9:b0:
                    aa:0d:8c:f6:7e:9c:b5:97:3f:52:47:9e:9e:a9:dc:
                    6a:76:f7:b3:a9:76:b1:72:9a:fa:95:d3:d3:26:2c:
                    ef:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A9:BD:63:4A:C3:27:95:25:2F:A0:84:1D:CF:D6:A2:EB:82:71:DA
            X509v3 Authority Key Identifier:
                keyid:84:10:1C:EC:AA:6A:71:46:5D:CF:66:5D:71:62:79:A0:08:34:1E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hBAc7KpqcUZdz2ZdcWJ5oAg0HqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01b20176-76b9-4000-a6e6-ba547b524143/0/84101CECAA6A71465DCF665D716279A008341EA4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:66:57:64:14:50:95:fc:4d:0b:9c:c3:21:03:cc:6f:c8:85:
         83:2c:8c:68:5c:02:a4:3b:2b:f1:31:07:a3:b1:3a:b7:94:8e:
         ae:69:0c:a0:d5:10:61:38:76:13:ff:a3:03:23:66:6e:c0:66:
         f6:81:b4:e3:08:b0:96:ec:67:d4:ac:eb:a8:70:09:25:43:c3:
         86:62:94:bf:72:94:6c:12:43:dd:d0:00:4b:21:3d:06:fa:46:
         b9:a4:a4:52:62:13:6d:69:11:6a:f7:d7:9a:cd:60:fb:cc:46:
         cc:5e:d5:0f:0b:11:a8:23:1d:ef:64:14:96:de:a7:ef:79:46:
         93:e4:fe:0c:86:c5:d2:3b:b4:ea:b8:99:80:84:88:6a:91:7a:
         03:af:7c:b7:8d:1d:3a:d0:0c:8a:5d:12:8b:8e:b7:27:76:d7:
         30:e3:05:70:62:6b:aa:b3:12:c9:e5:e9:5f:d7:ab:91:6e:f6:
         58:05:3e:16:b0:d0:d9:59:54:76:fd:b2:10:4e:10:51:45:ab:
         12:1e:f1:ac:42:43:7a:45:e5:eb:b6:a6:77:b6:21:74:5f:3d:
         e5:0a:58:e3:ad:93:25:08:ec:78:2f:d9:95:1f:b0:65:b9:e7:
         b6:95:8d:40:f6:0c:30:67:31:4e:b8:81:09:1f:4a:85:64:57:
         ef:56:e5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:32 2025 by rpki-client