Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.mft
File:                     277DB6AB779E3D5333C97AB2285B988001C5E0C6.mft (raw, json)
Hash identifier:          /0EYBJLz2Rl+twSPuWOFg2cEd9L4+rgZwhuf7H9mqHY=
Subject key identifier:   BC:79:A6:1C:32:B8:4E:8C:C4:F5:68:5B:0B:99:E7:9C:88:41:4A:17
Authority key identifier: 27:7D:B6:AB:77:9E:3D:53:33:C9:7A:B2:28:5B:98:80:01:C5:E0:C6
Certificate issuer:       /CN=277db6ab779e3d5333c97ab2285b988001c5e0c6
Certificate serial:       096AA9405CCB6B123BFF08CB9E453141C0575769
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J322q3eePVMzyXqyKFuYgAHF4MY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.mft
Manifest number:          15
Signing time:             Sun 29 Sep 2024 09:00:11 +0000
Manifest this update:     Sun 29 Sep 2024 08:55:11 +0000
Manifest next update:     Mon 30 Sep 2024 10:03:11 +0000
Files and hashes:         1: 277DB6AB779E3D5333C97AB2285B988001C5E0C6.crl (hash: KFTNmCBh3O2KlRqF7iUxHduUrhrTPcq768uSHcbl5pA=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J322q3eePVMzyXqyKFuYgAHF4MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Sep 2024 01:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6a:a9:40:5c:cb:6b:12:3b:ff:08:cb:9e:45:31:41:c0:57:57:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277db6ab779e3d5333c97ab2285b988001c5e0c6
        Validity
            Not Before: Sep 29 08:55:11 2024 GMT
            Not After : Sep 30 10:03:11 2024 GMT
        Subject: CN=BC79A61C32B84E8CC4F5685B0B99E79C88414A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:d1:62:2c:b5:08:c9:40:39:e3:6e:b5:5a:
                    7d:d5:9d:74:f3:c5:bc:6b:ac:01:fc:1b:0e:05:32:
                    c6:0a:05:04:c3:1b:31:fd:7c:dd:41:51:93:3f:45:
                    dc:41:87:89:7a:69:0d:f4:7d:1e:14:05:6a:a3:a2:
                    9d:68:ae:24:20:3e:fc:b3:e6:4f:0b:54:c0:e5:7f:
                    58:83:0c:11:7f:18:f1:e7:a0:1a:ed:cf:71:69:61:
                    3e:13:59:6a:1c:ac:57:00:de:06:f5:ae:5f:76:d7:
                    f6:18:6c:3b:70:cb:83:df:20:99:93:a3:4f:dd:19:
                    1e:53:d3:20:3e:d4:a9:99:f9:8c:03:77:92:1b:54:
                    e6:fe:7a:66:01:a0:9a:e0:e8:cd:3f:95:76:4e:59:
                    09:29:ff:a0:9f:72:63:a7:1c:56:2e:06:33:dc:7c:
                    0a:2b:d2:66:44:f9:ae:16:73:f5:7b:5d:15:2a:e9:
                    28:b0:7c:9e:51:6a:84:b9:1f:eb:77:66:db:98:48:
                    55:9a:d9:e5:66:a5:e8:bd:a4:8d:71:ac:f7:08:be:
                    f5:86:75:64:6a:e5:06:2c:49:e9:53:9d:bf:54:38:
                    f5:29:3f:95:8d:58:af:38:42:e6:23:c5:a8:a4:56:
                    67:9b:31:a0:cf:46:5f:a6:09:05:59:a1:1d:0c:d3:
                    bc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:79:A6:1C:32:B8:4E:8C:C4:F5:68:5B:0B:99:E7:9C:88:41:4A:17
            X509v3 Authority Key Identifier:
                keyid:27:7D:B6:AB:77:9E:3D:53:33:C9:7A:B2:28:5B:98:80:01:C5:E0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J322q3eePVMzyXqyKFuYgAHF4MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:69:76:b7:46:19:83:ce:58:68:06:d3:a4:e6:5f:65:10:58:
         89:fb:bb:c2:f7:e2:03:8c:fa:bf:0f:8e:23:0d:1b:3a:ce:f1:
         5f:1d:73:eb:a5:fb:f8:d8:99:8b:0f:93:f6:b5:5b:fe:38:72:
         90:35:5a:13:a3:bc:75:75:a7:6f:c8:78:73:96:95:e4:3c:af:
         84:3a:0c:87:39:33:22:24:19:8c:97:63:39:3c:16:17:e5:ad:
         81:d8:ff:45:07:39:d6:b8:9b:93:3a:8d:86:95:28:04:31:8b:
         da:52:aa:8d:83:13:a7:c2:1d:c3:a6:b9:0f:b8:3d:70:e6:9e:
         35:58:ae:63:60:ca:24:76:ca:cc:1c:ca:df:e3:a5:70:4d:b8:
         41:0a:e0:a3:2c:49:0f:28:57:02:42:a9:71:03:50:70:c4:3c:
         36:ac:bf:a2:85:00:b3:6d:de:9a:b6:42:48:d7:4d:61:4f:46:
         f1:0b:d2:9f:fd:08:7f:b6:2d:c1:66:9c:24:1b:dd:7c:38:29:
         89:90:ab:b6:45:e6:7c:4f:b6:cf:2d:55:e6:0b:d9:11:2d:84:
         ce:40:99:7c:62:4d:ab:be:40:21:8f:0c:bf:1d:85:c4:72:16:
         ec:28:a1:e2:f2:7a:cd:a6:14:9d:04:5d:33:e1:39:1e:32:88:
         1a:56:69:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 10:26:07 2024 by rpki-client on console-ams.rpki-client.org