Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.mft
File:                     11435D6616B135DBB5F63E0FEBA683A4A9216C58.mft (raw, json)
Hash identifier:          9cdu0RiEFNwNGcdgOe4Ac93Z13NOFW/rD5Sk5g6AIMg=
Subject key identifier:   D8:BB:02:7B:3A:10:2F:D2:7F:D6:DB:BA:EF:D7:0E:E8:D1:6C:D5:0F
Authority key identifier: 11:43:5D:66:16:B1:35:DB:B5:F6:3E:0F:EB:A6:83:A4:A9:21:6C:58
Certificate issuer:       /CN=11435d6616b135dbb5f63e0feba683a4a9216c58
Certificate serial:       46968A8C77608233646484BFFE67AEEEFAE004D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUNdZhaxNdu19j4P66aDpKkhbFg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.mft
Manifest number:          A0
Signing time:             Sat 22 Jun 2024 16:08:37 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:37 +0000
Manifest next update:     Sun 23 Jun 2024 19:07:37 +0000
Files and hashes:         1: 11435D6616B135DBB5F63E0FEBA683A4A9216C58.crl (hash: 2ZprNSUj617hP1uKQpgLUjLLo+cgKK3Z3mI+BoNsn3g=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUNdZhaxNdu19j4P66aDpKkhbFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:96:8a:8c:77:60:82:33:64:64:84:bf:fe:67:ae:ee:fa:e0:04:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11435d6616b135dbb5f63e0feba683a4a9216c58
        Validity
            Not Before: Jun 22 16:03:37 2024 GMT
            Not After : Jun 23 19:07:37 2024 GMT
        Subject: CN=D8BB027B3A102FD27FD6DBBAEFD70EE8D16CD50F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b2:27:8b:29:e8:21:a2:a4:3b:74:dc:d8:8e:
                    99:81:5f:88:cd:2c:51:2d:fd:e2:d6:34:b2:06:2f:
                    d6:dc:c5:c2:32:55:ca:4d:fe:04:fa:9d:d1:82:32:
                    3f:d1:16:78:89:98:91:88:0d:87:82:ab:17:f0:8c:
                    6e:ea:0f:ce:89:e4:f3:9e:3f:5f:ca:b3:15:c6:f5:
                    5c:bf:a6:a3:e0:7b:c6:2c:8d:3b:8c:d2:fd:77:bc:
                    1c:d8:0f:1f:9f:76:4d:28:e1:8c:43:dd:b9:8f:26:
                    cb:5f:27:9b:b7:10:0c:39:5b:1d:39:f0:f1:7d:2a:
                    7f:21:72:18:91:c4:c0:22:19:79:2a:15:73:2c:ed:
                    27:05:b3:e4:df:7b:ec:bc:19:c9:d9:ce:61:6b:72:
                    40:dd:f0:41:62:11:f1:95:36:e7:6c:dc:1b:a2:b5:
                    ea:c5:4e:62:0d:93:f7:76:65:28:49:1c:85:ae:05:
                    28:3a:d1:89:64:ad:9d:c8:1c:7d:c4:32:0b:c4:f3:
                    69:e2:68:8d:69:d2:1c:85:55:94:ec:76:c0:7e:9e:
                    da:dd:41:54:9b:f6:84:4a:31:ed:cf:06:9d:4c:b9:
                    7f:d9:4f:bf:49:50:88:05:c1:76:8c:57:fb:79:8a:
                    d5:8b:aa:cb:36:2c:1d:32:38:0a:cd:20:5f:f1:5f:
                    ff:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BB:02:7B:3A:10:2F:D2:7F:D6:DB:BA:EF:D7:0E:E8:D1:6C:D5:0F
            X509v3 Authority Key Identifier:
                keyid:11:43:5D:66:16:B1:35:DB:B5:F6:3E:0F:EB:A6:83:A4:A9:21:6C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUNdZhaxNdu19j4P66aDpKkhbFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ac:dc:a8:2a:5e:30:98:5b:a6:e5:78:2f:32:28:51:df:de:
         3b:04:0f:61:98:69:d0:b7:6c:03:8d:18:3e:05:e3:82:25:61:
         47:03:74:7c:25:23:b7:88:9f:c8:a9:9b:63:fa:1c:c2:4a:10:
         6e:51:34:4e:91:e0:ce:b7:c2:74:6c:c1:be:e9:32:dc:c3:3d:
         22:e4:79:03:5b:6c:16:dc:29:f2:5c:ab:ae:a8:ff:6d:42:c4:
         c0:96:8c:b5:1c:5e:07:63:13:95:8d:1b:72:f5:9e:25:fe:60:
         23:b8:f6:0b:6e:23:99:70:ec:0e:b2:f9:db:12:97:c1:4a:8f:
         aa:69:b3:68:5d:c2:51:5a:a3:f5:b2:98:e9:e8:51:99:20:2d:
         83:bc:1b:e0:9d:4e:4d:b5:94:23:9e:f1:36:a6:4a:3a:60:aa:
         e6:4d:61:89:5b:41:2f:bd:be:f8:b9:d9:60:da:62:d5:3a:78:
         43:15:2c:07:76:4d:2a:56:01:7f:97:b4:3d:1b:1e:e9:74:0b:
         02:20:aa:b4:49:5f:58:66:9c:96:84:49:d2:52:d0:bc:0b:bd:
         12:03:45:16:a1:8a:59:89:17:05:2e:c3:7d:69:f2:bc:98:25:
         1e:34:5f:39:bd:05:c3:7a:5f:98:c9:61:47:47:5e:ae:1b:67:
         a6:ee:dc:05
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURpaKjHdggjNkZIS//meu7vrgBNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE0MzVkNjYxNmIxMzVkYmI1ZjYzZTBmZWJhNjgzYTRh
OTIxNmM1ODAeFw0yNDA2MjIxNjAzMzdaFw0yNDA2MjMxOTA3MzdaMDMxMTAvBgNV
BAMTKEQ4QkIwMjdCM0ExMDJGRDI3RkQ2REJCQUVGRDcwRUU4RDE2Q0Q1MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisieLKeghoqQ7dNzYjpmBX4jN
LFEt/eLWNLIGL9bcxcIyVcpN/gT6ndGCMj/RFniJmJGIDYeCqxfwjG7qD86J5POe
P1/KsxXG9Vy/pqPge8YsjTuM0v13vBzYDx+fdk0o4YxD3bmPJstfJ5u3EAw5Wx05
8PF9Kn8hchiRxMAiGXkqFXMs7ScFs+Tfe+y8GcnZzmFrckDd8EFiEfGVNuds3Bui
terFTmINk/d2ZShJHIWuBSg60YlkrZ3IHH3EMgvE82niaI1p0hyFVZTsdsB+ntrd
QVSb9oRKMe3PBp1MuX/ZT79JUIgFwXaMV/t5itWLqss2LB0yOArNIF/xX/93AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2LsCezoQL9J/1tu679cO6NFs1Q8wHwYDVR0j
BBgwFoAUEUNdZhaxNdu19j4P66aDpKkhbFgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTAwZWU4MjUtNzJhZS00MWMzLTljNDgtZTUyZDBjNDYz
NzNmLzEvMTE0MzVENjYxNkIxMzVEQkI1RjYzRTBGRUJBNjgzQTRBOTIxNkM1OC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0VVTmRaaGF4TmR1MTlqNFA2NmFEcEtr
aGJGZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS81MDBlZTgyNS03
MmFlLTQxYzMtOWM0OC1lNTJkMGM0NjM3M2YvMS8xMTQzNUQ2NjE2QjEzNURCQjVG
NjNFMEZFQkE2ODNBNEE5MjE2QzU4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWazcqCpeMJhbpuV4LzIo
Ud/eOwQPYZhp0LdsA40YPgXjgiVhRwN0fCUjt4ifyKmbY/ocwkoQblE0TpHgzrfC
dGzBvuky3MM9IuR5A1tsFtwp8lyrrqj/bULEwJaMtRxeB2MTlY0bcvWeJf5gI7j2
C24jmXDsDrL52xKXwUqPqmmzaF3CUVqj9bKY6ehRmSAtg7wb4J1OTbWUI57xNqZK
OmCq5k1hiVtBL72++LnZYNpi1Tp4QxUsB3ZNKlYBf5e0PRse6XQLAiCqtElfWGac
loRJ0lLQvAu9EgNFFqGKWYkXBS7DfWnyvJglHjRfOb0Fw3pfmMlhR0derhtnpu7c
BQ==
-----END CERTIFICATE-----
Generated at Sat Jun 22 19:17:20 2024 by rpki-client on console-ams.rpki-client.org