Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File:                     B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier:          c8ziyp1ZwHat1QQzL+5K8qMfcXOKyGxjLISeaLrLyYE=
Subject key identifier:   06:F6:CD:10:89:00:0B:C9:56:8E:C8:B9:4E:7A:F5:94:F8:8A:DE:6D
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       431945D88CD9928A8A2D40B8F8865B722E1F1F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number:          96
Signing time:             Sat 05 Oct 2024 00:15:43 +0000
Manifest this update:     Sat 05 Oct 2024 00:10:43 +0000
Manifest next update:     Sun 06 Oct 2024 02:34:43 +0000
Files and hashes:         1: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: HToLWpuRlMxmyttykht9UhcX+FEdyq35YQnfiv1NRR4=)
                          2: AS215147.asa (hash: NeimsipMWG2Arb4707vJK6VXPqcjNL3IwCqjLSpwhuw=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Oct 2024 17:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:19:45:d8:8c:d9:92:8a:8a:2d:40:b8:f8:86:5b:72:2e:1f:1f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Oct  5 00:10:43 2024 GMT
            Not After : Oct  6 02:34:43 2024 GMT
        Subject: CN=06F6CD1089000BC9568EC8B94E7AF594F88ADE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6b:ca:22:9b:1a:b1:6e:62:5b:2a:14:42:8a:
                    f8:6c:74:d9:7b:04:26:65:1e:4a:c7:70:96:2c:91:
                    73:c5:70:bd:c7:fd:c0:17:76:51:d4:0a:23:8f:1d:
                    82:04:94:de:14:84:85:5b:09:67:91:c7:5f:ef:46:
                    e8:60:79:5d:39:f1:98:cf:ff:22:a2:08:d1:cc:11:
                    e4:89:3e:ec:01:71:cf:bf:a6:80:22:2a:89:61:6f:
                    93:00:9b:bc:be:e2:2d:50:66:f4:3a:3e:13:f3:b5:
                    2d:63:f1:c1:d9:05:c2:67:0f:c1:7a:fe:d0:71:76:
                    f6:15:d6:0d:06:fb:fe:c7:8e:04:1a:79:0d:d6:b3:
                    b8:21:3c:e2:df:e9:7a:4f:f3:f5:d9:d7:90:5e:9b:
                    18:c4:fa:96:7d:00:9d:be:fd:a6:b7:48:69:27:f4:
                    14:25:82:15:2b:36:11:d7:8d:5c:64:26:af:96:59:
                    89:8f:c1:c3:1a:5a:1d:b8:f5:49:f6:98:54:b6:90:
                    2a:88:32:40:b5:11:24:b9:1d:88:56:4d:47:3c:95:
                    b0:6f:95:14:68:b0:37:9a:c2:a1:67:00:96:a0:87:
                    10:d7:92:2c:ed:a5:67:75:04:e3:b4:ae:22:70:2c:
                    cd:67:16:7d:32:da:8f:96:d9:7e:30:76:50:e3:5f:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F6:CD:10:89:00:0B:C9:56:8E:C8:B9:4E:7A:F5:94:F8:8A:DE:6D
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:97:f8:04:74:05:59:f1:94:f8:cd:03:b7:51:77:c1:02:39:
         9a:18:24:55:e5:a7:bb:fc:11:2e:f5:5f:12:2c:e2:c3:4b:33:
         a2:26:12:11:7c:90:13:39:c1:20:f5:57:ac:eb:38:0d:1e:08:
         10:1a:5e:c3:83:d1:9e:e3:67:83:00:01:ec:a5:a7:48:c9:68:
         a1:c7:3c:3c:e2:9d:74:a8:1e:1b:84:1e:16:85:22:2b:9c:bc:
         3f:46:48:c1:9c:5a:af:df:b9:1b:32:7c:9c:36:a8:31:02:61:
         2a:8a:ab:98:66:19:3d:94:4e:89:ee:d3:4a:13:a7:84:ea:7c:
         6f:aa:5b:e9:6a:3c:c4:8a:07:9b:61:e8:79:de:c3:09:ed:90:
         b6:2d:aa:fc:ca:f6:eb:31:38:c2:f8:05:8a:76:87:66:b3:e6:
         46:84:39:b8:d3:85:d4:af:e3:1c:af:e8:b1:da:e0:05:6e:65:
         c8:03:55:6e:86:a8:25:37:cb:ef:56:fb:3c:c7:be:1b:43:00:
         74:bf:c5:26:eb:2e:48:ae:e1:a5:90:b2:27:08:68:fc:41:4c:
         5a:61:7a:2f:a9:0d:9c:a7:d9:c3:de:31:c6:dd:a2:ef:3f:fc:
         6a:68:0a:f2:6e:9c:2c:d4:da:d8:70:c5:83:20:39:af:4c:0d:
         ed:48:52:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 03:24:47 2024 by rpki-client on console-fra.rpki-client.org