Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.mft
File:                     11435D6616B135DBB5F63E0FEBA683A4A9216C58.mft (raw, json)
Hash identifier:          9NazaAf7RBtoUY0rUdgER4sR4p2L2+0/NwgQzJcgP5M=
Subject key identifier:   80:54:F9:9B:DD:2C:42:EF:F5:15:12:15:00:F2:11:E3:3B:F9:C5:73
Authority key identifier: 11:43:5D:66:16:B1:35:DB:B5:F6:3E:0F:EB:A6:83:A4:A9:21:6C:58
Certificate issuer:       /CN=11435d6616b135dbb5f63e0feba683a4a9216c58
Certificate serial:       5457A243AC5F1CA54ACBC6A4B50347924BB77A87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EUNdZhaxNdu19j4P66aDpKkhbFg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.mft
Manifest number:          97
Signing time:             Sat 15 Jun 2024 19:53:36 +0000
Manifest this update:     Sat 15 Jun 2024 19:48:36 +0000
Manifest next update:     Sun 16 Jun 2024 22:51:36 +0000
Files and hashes:         1: 11435D6616B135DBB5F63E0FEBA683A4A9216C58.crl (hash: RuLrrhCffqoF+de5aRT7ZKvJCEErv6xEoA5lWxs0T+0=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EUNdZhaxNdu19j4P66aDpKkhbFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:57:a2:43:ac:5f:1c:a5:4a:cb:c6:a4:b5:03:47:92:4b:b7:7a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11435d6616b135dbb5f63e0feba683a4a9216c58
        Validity
            Not Before: Jun 15 19:48:36 2024 GMT
            Not After : Jun 16 22:51:36 2024 GMT
        Subject: CN=8054F99BDD2C42EFF515121500F211E33BF9C573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:59:74:96:3a:c5:d5:29:b6:17:56:42:eb:3e:
                    58:70:05:92:67:a8:db:b0:1f:16:87:1c:66:df:68:
                    24:5e:33:79:e0:09:76:7b:44:8a:3d:b6:b5:63:3f:
                    fd:81:1a:55:af:c0:c1:9a:f8:e6:69:e1:30:cb:35:
                    96:be:e7:c7:ad:eb:47:9f:38:6d:05:c3:59:99:ed:
                    2b:42:04:91:ce:78:d1:10:ee:66:b9:5c:98:44:96:
                    be:f7:72:a0:a6:06:47:76:f0:d0:05:9a:a8:d5:19:
                    e1:5c:5c:77:7a:dd:f0:f8:be:3f:a3:11:b2:cb:5f:
                    9b:f8:0e:0b:8a:0a:8b:67:17:58:63:41:f9:ff:9c:
                    5d:e6:4d:c5:fc:40:bd:65:d9:e1:34:e2:f6:62:64:
                    4c:95:f7:7c:ea:72:00:fc:a0:68:28:50:df:13:b2:
                    41:4c:fd:c4:22:6a:c4:38:83:ae:f9:3e:0c:ca:db:
                    b4:5a:07:85:82:35:93:32:27:28:ca:03:05:fd:7c:
                    76:16:37:b5:21:29:39:21:21:49:6b:92:6a:16:e4:
                    97:fc:6f:83:57:ad:e0:06:aa:db:69:6f:53:b4:37:
                    0f:b1:23:47:97:b1:15:a1:92:cd:1c:61:0b:0c:0e:
                    5e:b1:8c:d0:da:62:29:b4:03:dc:d6:7a:76:ee:d5:
                    33:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:54:F9:9B:DD:2C:42:EF:F5:15:12:15:00:F2:11:E3:3B:F9:C5:73
            X509v3 Authority Key Identifier:
                keyid:11:43:5D:66:16:B1:35:DB:B5:F6:3E:0F:EB:A6:83:A4:A9:21:6C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EUNdZhaxNdu19j4P66aDpKkhbFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/500ee825-72ae-41c3-9c48-e52d0c46373f/1/11435D6616B135DBB5F63E0FEBA683A4A9216C58.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7b:ea:96:7b:a4:8e:3a:0d:26:d1:f2:2e:94:ea:1c:25:97:
         00:12:36:f8:12:85:93:35:67:ef:f0:37:c0:0b:ae:ee:94:a6:
         5d:98:0d:53:2f:1c:84:d9:3d:52:b3:c0:97:f5:49:de:85:c2:
         ae:04:22:34:ad:dd:57:14:0a:6a:3a:7e:8b:21:19:be:ac:76:
         77:45:fe:2f:9c:13:eb:a5:72:61:84:f6:e1:ef:af:05:34:5d:
         ae:3a:f3:99:a3:3f:b5:e4:aa:d0:c6:7d:09:d0:21:e8:91:4e:
         c6:9d:1d:c9:fa:9f:d1:ab:1a:37:08:da:21:88:ae:a3:e9:78:
         82:3a:99:6f:a0:ad:e7:d7:31:dc:2b:94:01:a7:3b:72:9d:04:
         36:d0:02:16:f3:6a:c8:b1:bb:39:ae:be:72:48:b6:5e:33:bb:
         67:c2:f0:c6:02:2d:f3:59:cb:0c:92:c4:f2:04:d0:45:26:d5:
         49:40:b2:6c:8a:23:fb:2d:17:4c:d1:17:02:75:65:f7:6f:08:
         89:8e:1c:39:73:a4:b4:3f:7d:a8:db:00:e7:30:5d:31:be:aa:
         6c:ef:29:7c:98:e0:5b:5f:89:e9:bd:36:98:6b:29:24:6d:b7:
         55:91:bc:74:b5:ba:43:fd:74:c9:a8:cb:e9:96:ed:0d:e3:f5:
         72:57:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 22:37:37 2024 by rpki-client on console-ams.rpki-client.org