Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.mft
File:                     18EA67C383ED563521AA295BC37F774A4B39406D.mft (raw, json)
Hash identifier:          KqbwsyOzAVHh2cHwGUzO5gTaVBIPnmydDwTktjkUMtk=
Subject key identifier:   77:8B:84:0C:A3:BC:BB:67:57:D9:BD:31:1A:2A:0F:8E:CA:A8:4E:B5
Authority key identifier: 18:EA:67:C3:83:ED:56:35:21:AA:29:5B:C3:7F:77:4A:4B:39:40:6D
Certificate issuer:       /CN=18ea67c383ed563521aa295bc37f774a4b39406d
Certificate serial:       6BC6119DC55AFB7E10C586C129EAC89813AA14D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOpnw4PtVjUhqilbw393Sks5QG0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.mft
Manifest number:          15
Signing time:             Sat 28 Sep 2024 10:10:38 +0000
Manifest this update:     Sat 28 Sep 2024 10:05:38 +0000
Manifest next update:     Sun 29 Sep 2024 11:38:38 +0000
Files and hashes:         1: 18EA67C383ED563521AA295BC37F774A4B39406D.crl (hash: V6d86u1lpuBZiLspOIpfCIpZDi2J+p+yZOTvC1Uq1to=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOpnw4PtVjUhqilbw393Sks5QG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c6:11:9d:c5:5a:fb:7e:10:c5:86:c1:29:ea:c8:98:13:aa:14:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ea67c383ed563521aa295bc37f774a4b39406d
        Validity
            Not Before: Sep 28 10:05:38 2024 GMT
            Not After : Sep 29 11:38:38 2024 GMT
        Subject: CN=778B840CA3BCBB6757D9BD311A2A0F8ECAA84EB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:18:e0:3a:f2:63:11:7e:c1:9d:4d:48:d7:d6:
                    90:6a:97:5e:03:07:f3:07:84:ae:c3:6a:de:cc:d6:
                    9a:92:ce:2f:11:e9:5e:95:e9:35:27:e5:5f:ff:7b:
                    ca:4d:ff:04:7c:67:0c:84:1d:f4:2d:a0:01:c6:06:
                    a2:14:bf:4f:61:4a:0e:d7:a4:e8:71:59:6e:d3:f5:
                    76:23:05:c1:0f:f0:4a:dc:c5:40:9f:0c:e2:27:c1:
                    b3:6c:0a:6f:ef:28:8f:16:55:81:d2:7a:9d:39:85:
                    c7:5f:3c:9c:a4:a4:8e:91:96:8b:e0:f3:13:7f:6d:
                    a8:b2:40:76:79:53:2a:f3:5b:f1:d4:f5:f5:ab:9e:
                    5a:59:cd:90:d0:b4:f5:14:6c:b3:98:a9:d3:75:db:
                    17:0f:77:01:5e:bb:d2:a5:7d:81:cf:ad:6b:fa:96:
                    96:ef:77:bb:5b:04:16:e6:bf:91:c3:95:52:ff:e6:
                    87:9c:1c:1e:9d:11:25:92:47:ae:2a:a8:e5:93:6c:
                    19:64:77:42:63:fd:10:55:ae:15:1c:e2:81:0e:53:
                    14:b2:51:b1:7e:e5:f1:44:51:1e:07:72:ab:c4:c5:
                    77:42:95:87:73:2b:21:ea:f9:42:01:4e:08:1e:18:
                    bd:42:82:96:d3:de:30:84:ef:ea:0f:00:8d:cf:e6:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:8B:84:0C:A3:BC:BB:67:57:D9:BD:31:1A:2A:0F:8E:CA:A8:4E:B5
            X509v3 Authority Key Identifier:
                keyid:18:EA:67:C3:83:ED:56:35:21:AA:29:5B:C3:7F:77:4A:4B:39:40:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOpnw4PtVjUhqilbw393Sks5QG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:52:f6:f4:83:81:0a:09:b7:32:a7:c0:3e:65:67:74:d0:a0:
         e6:c5:03:db:5a:72:8d:76:3a:c8:d5:11:a7:09:73:4a:69:12:
         c6:00:55:41:92:45:bc:95:f6:8a:ff:1a:6b:07:43:57:14:0f:
         f4:99:5e:ad:b4:29:39:ce:57:48:fd:cd:c5:41:bb:99:a4:f8:
         8e:a1:9a:83:31:fe:f8:0b:da:09:0c:4e:c8:de:eb:ee:74:83:
         58:dd:f2:df:5d:83:18:e9:8f:ff:b0:ed:79:f6:f4:1f:8f:5a:
         9a:64:1d:57:e7:b0:0c:4c:f6:05:53:12:cb:97:f6:3f:18:66:
         bf:08:0b:f9:e9:fe:2a:f2:98:e5:33:d1:53:42:2d:8e:35:b7:
         60:b2:84:18:3b:9c:0a:a8:52:cb:ee:c0:23:45:87:0c:49:3a:
         36:2e:a1:df:1e:48:c2:4f:b6:0e:e1:dc:7f:6b:1e:75:4a:ca:
         df:c8:87:04:9e:9d:0f:18:43:fb:9b:f7:2e:7b:6a:73:97:e3:
         16:d5:3e:73:11:d0:0c:80:54:bc:9f:ee:2d:66:ea:ed:83:ee:
         9d:65:32:39:af:54:52:97:51:7a:df:fd:25:8a:30:be:51:1b:
         c9:0b:0b:59:d8:6a:de:f8:7f:37:24:81:99:d6:83:e6:e3:37:
         d3:c0:4e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 12:43:32 2024 by rpki-client on console-ams.rpki-client.org