Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File:                     3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier:          cAp6TnFYdphTFKovv8xi/j+hn3L8BzASsTBlXblV7mE=
Subject key identifier:   7D:9B:E6:1A:E9:85:11:9F:E9:56:61:94:5C:85:D2:AC:C7:84:3A:76
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer:       /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial:       28843E8079408813EA13940B323E441A021055EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number:          0140
Signing time:             Sat 15 Jun 2024 16:11:01 +0000
Manifest this update:     Sat 15 Jun 2024 16:06:01 +0000
Manifest next update:     Sun 16 Jun 2024 17:11:01 +0000
Files and hashes:         1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: 5l5PO/vlEGxU1ritMf98FoDh+2TLr3ghfmldCjBm8VQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:84:3e:80:79:40:88:13:ea:13:94:0b:32:3e:44:1a:02:10:55:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
        Validity
            Not Before: Jun 15 16:06:01 2024 GMT
            Not After : Jun 16 17:11:01 2024 GMT
        Subject: CN=7D9BE61AE985119FE95661945C85D2ACC7843A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:16:e6:df:2c:3e:03:e0:1c:d1:6c:40:26:81:
                    80:bf:23:60:f5:ca:08:44:2e:e1:46:34:98:ac:34:
                    9b:e0:39:3e:79:e1:1a:d4:20:d6:f1:c7:6d:f4:c5:
                    ce:1a:4e:8d:4c:0f:08:ef:ac:47:a9:0e:c5:56:31:
                    a9:12:04:69:38:81:47:81:98:35:b3:7a:73:f9:e0:
                    3b:ae:b8:34:25:53:c9:f0:9e:5e:15:36:68:e6:9b:
                    c0:d9:8e:e9:2c:e2:87:9f:37:96:2c:34:09:ed:b3:
                    65:25:34:61:67:c9:a4:7c:b5:64:a5:5f:3f:0f:15:
                    a4:fa:4d:22:37:a9:a5:6b:7e:5f:ba:4a:c3:39:67:
                    39:d0:14:6a:b0:12:4f:aa:39:61:9f:45:67:17:57:
                    0d:7f:8d:f2:c7:b8:1e:08:23:cd:7a:67:99:08:e8:
                    24:d2:c1:bb:d8:f5:a5:14:a0:c8:b4:cb:29:9d:9d:
                    b1:d6:47:de:9b:14:59:4b:3a:c6:cd:eb:f9:a8:12:
                    89:03:56:7b:3e:f3:0a:69:d3:68:5c:24:37:84:e1:
                    ef:70:83:46:82:a8:67:01:d3:57:7c:51:31:84:94:
                    9c:58:32:c2:9a:d8:ad:96:73:75:c0:b7:81:5b:5d:
                    ba:62:08:bc:38:88:e9:31:fb:da:e2:1e:92:6a:1f:
                    c7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9B:E6:1A:E9:85:11:9F:E9:56:61:94:5C:85:D2:AC:C7:84:3A:76
            X509v3 Authority Key Identifier:
                keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:01:f6:16:60:e9:58:05:a9:a0:9f:60:ec:fc:e9:2d:bd:0c:
         32:58:d5:19:f7:69:48:d9:63:18:c1:8d:4c:33:ce:37:fc:72:
         f2:e4:2c:10:31:7d:86:1e:d1:da:6f:b0:bb:6e:21:09:de:df:
         c4:b9:4f:05:b8:bb:19:5d:f0:ca:a9:92:38:27:84:1b:5c:03:
         30:bb:27:a5:bf:cf:48:48:37:d7:90:55:62:e1:ad:b1:4e:59:
         79:fe:f6:17:2c:0d:f6:14:f3:20:03:d1:65:ef:d6:05:09:09:
         7b:21:ef:9e:e0:0e:52:b1:c6:7e:9b:8f:c7:d4:70:cb:27:ac:
         d5:9d:57:c7:0b:41:fb:bf:fd:73:68:30:2b:99:52:17:57:8a:
         23:cf:f1:25:67:62:2e:a1:38:fd:ea:08:2c:14:ed:12:29:e6:
         42:3c:ee:eb:b2:c9:29:73:3f:95:5c:67:9d:68:0e:35:0c:9b:
         7c:ec:9b:3f:66:b3:27:cf:b3:db:12:03:39:c9:cf:f3:03:5e:
         ed:b1:50:37:3f:af:78:df:ea:30:f7:5b:86:0a:16:b0:8a:21:
         6f:3c:f4:3f:0c:81:27:53:a4:d8:3c:4f:e2:01:d5:f1:7f:5e:
         0c:6a:74:57:36:4b:b1:25:0c:ef:f9:e4:bf:d6:50:16:c3:66:
         65:08:6c:c4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUKIQ+gHlAiBPqE5QLMj5EGgIQVeswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYxMWIzZTZkYWU4ZTBkMWIxNmQ1YmRhZmNkYTNkODM3
MGZmM2JmNDAeFw0yNDA2MTUxNjA2MDFaFw0yNDA2MTYxNzExMDFaMDMxMTAvBgNV
BAMTKDdEOUJFNjFBRTk4NTExOUZFOTU2NjE5NDVDODVEMkFDQzc4NDNBNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEFubfLD4D4BzRbEAmgYC/I2D1
yghELuFGNJisNJvgOT554RrUINbxx230xc4aTo1MDwjvrEepDsVWMakSBGk4gUeB
mDWzenP54DuuuDQlU8nwnl4VNmjmm8DZjuks4oefN5YsNAnts2UlNGFnyaR8tWSl
Xz8PFaT6TSI3qaVrfl+6SsM5ZznQFGqwEk+qOWGfRWcXVw1/jfLHuB4II816Z5kI
6CTSwbvY9aUUoMi0yymdnbHWR96bFFlLOsbN6/moEokDVns+8wpp02hcJDeE4e9w
g0aCqGcB01d8UTGElJxYMsKa2K2Wc3XAt4FbXbpiCLw4iOkx+9riHpJqH8cRAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUfZvmGumFEZ/pVmGUXIXSrMeEOnYwHwYDVR0j
BBgwFoAUNhGz5tro4NGxbVva/No9g3D/O/QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNj
MWE4LzUvMzYxMUIzRTZEQUU4RTBEMUIxNkQ1QkRBRkNEQTNEODM3MEZGM0JGNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL05oR3o1dHJvNE5HeGJWdmFfTm85ZzNE
X09fUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NmJkOTJmMS00
MTViLTQ3NjUtOGExNi1kYmZjNDU5M2MxYTgvNS8zNjExQjNFNkRBRThFMEQxQjE2
RDVCREFGQ0RBM0Q4MzcwRkYzQkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgH2FmDpWAWpoJ9g7Pzp
Lb0MMljVGfdpSNljGMGNTDPON/xy8uQsEDF9hh7R2m+wu24hCd7fxLlPBbi7GV3w
yqmSOCeEG1wDMLsnpb/PSEg315BVYuGtsU5Zef72FywN9hTzIAPRZe/WBQkJeyHv
nuAOUrHGfpuPx9Rwyyes1Z1XxwtB+7/9c2gwK5lSF1eKI8/xJWdiLqE4/eoILBTt
EinmQjzu67LJKXM/lVxnnWgONQybfOybP2azJ8+z2xIDOcnP8wNe7bFQNz+veN/q
MPdbhgoWsIohbzz0PwyBJ1Ok2DxP4gHV8X9eDGp0VzZLsSUM7/nkv9ZQFsNmZQhs
xA==
-----END CERTIFICATE-----
Generated at Sat Jun 15 17:00:13 2024 by rpki-client on console-fra.rpki-client.org