Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.mft
File:                     478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.mft (raw, json)
Hash identifier:          zEJaLupKNdVeKlshyUx/6Dgxeb75YM+zj3/r/HHHmLQ=
Subject key identifier:   02:A8:81:15:4C:B7:23:43:AA:75:56:64:E8:4A:04:73:BD:A1:5D:59
Authority key identifier: 47:8E:73:CA:14:A0:AA:78:D7:1B:1B:F1:AF:3E:A2:4E:56:B9:94:B7
Certificate issuer:       /CN=478e73ca14a0aa78d71b1bf1af3ea24e56b994b7
Certificate serial:       015D8411C0BC456FE0EB558039B654CF5216CCC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R45zyhSgqnjXGxvxrz6iTla5lLc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.mft
Manifest number:          0317
Signing time:             Sat 15 Jun 2024 21:58:19 +0000
Manifest this update:     Sat 15 Jun 2024 21:53:19 +0000
Manifest next update:     Mon 17 Jun 2024 01:49:19 +0000
Files and hashes:         1: 478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.crl (hash: NRBdHkQYu94Zy1gF7kWAueTuN13vMAKrQqpjUbC+y9A=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R45zyhSgqnjXGxvxrz6iTla5lLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5d:84:11:c0:bc:45:6f:e0:eb:55:80:39:b6:54:cf:52:16:cc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478e73ca14a0aa78d71b1bf1af3ea24e56b994b7
        Validity
            Not Before: Jun 15 21:53:19 2024 GMT
            Not After : Jun 17 01:49:19 2024 GMT
        Subject: CN=02A881154CB72343AA755664E84A0473BDA15D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:de:66:da:e4:bd:d9:bd:2d:94:88:7e:2d:3c:
                    aa:d2:84:de:ed:dc:f4:74:ba:07:78:56:45:bc:54:
                    0b:02:32:e4:2c:62:0b:cd:ab:2f:e7:6a:03:7e:7b:
                    c6:5c:ba:31:46:d3:f0:db:a9:41:ad:81:0d:06:ff:
                    d3:4e:4c:65:2f:e2:de:9d:18:61:af:99:1e:c1:dd:
                    7a:0f:92:92:64:68:d4:b8:11:93:0a:79:49:a5:85:
                    19:e0:e8:b4:f8:ad:82:2b:9e:d9:84:fe:01:d3:0e:
                    25:fc:cb:3d:a4:68:05:c3:30:60:4d:01:3c:a9:1e:
                    4e:d7:ac:9b:32:3c:57:3c:a0:b4:bb:5d:9e:c3:62:
                    43:90:47:cc:38:83:12:a8:0f:cc:04:f1:9a:43:f1:
                    29:a2:70:83:62:be:63:d2:3b:6e:ae:e1:7b:96:a4:
                    e3:20:82:02:ca:2c:df:c6:e1:ff:c2:b0:5e:58:c5:
                    00:41:82:f5:39:58:89:ee:19:e5:a7:74:1d:18:28:
                    d2:69:b8:4e:54:e8:fe:4c:95:0f:35:08:a1:a7:54:
                    44:b7:9d:6c:04:fa:f4:4c:1a:54:4c:03:fe:f8:a3:
                    66:f2:77:03:0d:02:2d:fa:53:4a:01:90:55:ff:21:
                    96:14:65:f7:83:de:de:fd:06:93:33:81:3c:98:ea:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A8:81:15:4C:B7:23:43:AA:75:56:64:E8:4A:04:73:BD:A1:5D:59
            X509v3 Authority Key Identifier:
                keyid:47:8E:73:CA:14:A0:AA:78:D7:1B:1B:F1:AF:3E:A2:4E:56:B9:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R45zyhSgqnjXGxvxrz6iTla5lLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e9:8d:37:40:d5:6b:b8:07:e0:05:a1:68:2e:17:20:54:fa:
         42:54:3f:b3:44:97:7d:69:d1:33:f0:30:b1:d0:2e:29:19:dc:
         19:66:a0:3c:2a:9a:24:cb:f4:b2:f5:fd:dd:01:86:c2:75:b9:
         ab:40:ec:9c:de:4a:c7:d6:44:a9:73:75:d4:c0:8e:38:e1:3d:
         8a:df:24:fe:a3:d3:ec:5b:47:e6:d2:56:d4:96:9c:bb:ee:38:
         d1:f6:cc:f5:87:c8:fd:4d:39:fd:08:af:1b:1f:d2:48:ec:79:
         3f:82:a5:a8:c0:cb:56:39:7e:48:3d:b3:b7:f8:26:4c:c8:91:
         be:ae:14:15:cb:81:26:31:b0:6b:60:5b:6b:0c:c2:16:49:f5:
         c0:22:e6:92:4a:33:62:ad:86:fe:39:4c:38:d1:55:35:05:ae:
         de:65:74:bb:ec:f3:be:10:4b:e2:90:0e:76:17:e2:04:f5:09:
         a1:ff:4e:6c:a3:95:8c:92:cc:25:5b:13:21:3b:b0:13:f3:08:
         58:fa:30:ab:27:39:6f:10:b0:f9:14:ec:68:d2:b7:0f:94:fb:
         61:51:52:a0:f7:28:72:0e:fc:f2:97:42:83:81:d8:8f:d9:32:
         94:42:9c:bf:bd:55:4d:11:e1:b0:ff:dd:2e:ea:a7:4c:78:57:
         10:bd:3d:46
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUAV2EEcC8RW/g61WAObZUz1IWzMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc4ZTczY2ExNGEwYWE3OGQ3MWIxYmYxYWYzZWEyNGU1
NmI5OTRiNzAeFw0yNDA2MTUyMTUzMTlaFw0yNDA2MTcwMTQ5MTlaMDMxMTAvBgNV
BAMTKDAyQTg4MTE1NENCNzIzNDNBQTc1NTY2NEU4NEEwNDczQkRBMTVENTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi3mba5L3ZvS2UiH4tPKrShN7t
3PR0ugd4VkW8VAsCMuQsYgvNqy/nagN+e8ZcujFG0/DbqUGtgQ0G/9NOTGUv4t6d
GGGvmR7B3XoPkpJkaNS4EZMKeUmlhRng6LT4rYIrntmE/gHTDiX8yz2kaAXDMGBN
ATypHk7XrJsyPFc8oLS7XZ7DYkOQR8w4gxKoD8wE8ZpD8SmicINivmPSO26u4XuW
pOMgggLKLN/G4f/CsF5YxQBBgvU5WInuGeWndB0YKNJpuE5U6P5MlQ81CKGnVES3
nWwE+vRMGlRMA/74o2bydwMNAi36U0oBkFX/IZYUZfeD3t79BpMzgTyY6khzAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUAqiBFUy3I0OqdVZk6EoEc72hXVkwHwYDVR0j
BBgwFoAUR45zyhSgqnjXGxvxrz6iTla5lLcwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzdiNTc1ZWE3LTc4NmYtNGIyZC1hNDU1LTc5ZDdmYzQz
ZWNlZS8xNC80NzhFNzNDQTE0QTBBQTc4RDcxQjFCRjFBRjNFQTI0RTU2Qjk5NEI3
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvUjQ1enloU2dxbmpYR3h2eHJ6NmlU
bGE1bExjLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YjU3NWVh
Ny03ODZmLTRiMmQtYTQ1NS03OWQ3ZmM0M2VjZWUvMTQvNDc4RTczQ0ExNEEwQUE3
OEQ3MUIxQkYxQUYzRUEyNEU1NkI5OTRCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE7pjTdA1Wu4B+AF
oWguFyBU+kJUP7NEl31p0TPwMLHQLikZ3BlmoDwqmiTL9LL1/d0BhsJ1uatA7Jze
SsfWRKlzddTAjjjhPYrfJP6j0+xbR+bSVtSWnLvuONH2zPWHyP1NOf0Irxsf0kjs
eT+CpajAy1Y5fkg9s7f4JkzIkb6uFBXLgSYxsGtgW2sMwhZJ9cAi5pJKM2Kthv45
TDjRVTUFrt5ldLvs874QS+KQDnYX4gT1CaH/TmyjlYySzCVbEyE7sBPzCFj6MKsn
OW8QsPkU7GjStw+U+2FRUqD3KHIO/PKXQoOB2I/ZMpRCnL+9VU0R4bD/3S7qp0x4
VxC9PUY=
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:04:00 2024 by rpki-client on console-fra.rpki-client.org