Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.mft
File:                     80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.mft (raw, json)
Hash identifier:          vyXeDCa7hnoHYefiCW1uT5D+g0cc4dsMTTwzkhZIcIM=
Subject key identifier:   71:9A:45:34:73:C9:68:21:E0:9D:94:0B:82:D1:F4:82:D8:2D:ED:58
Authority key identifier: 80:A2:3E:AC:4D:62:0D:C2:C1:B1:70:1F:21:E4:6E:CC:A0:5E:4D:BE
Certificate issuer:       /CN=80a23eac4d620dc2c1b1701f21e46ecca05e4dbe
Certificate serial:       6EA4E5CA9B1DC8539C1312E6C8D127AE2CA037D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gKI-rE1iDcLBsXAfIeRuzKBeTb4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.mft
Manifest number:          02FB
Signing time:             Tue 28 May 2024 18:11:45 +0000
Manifest this update:     Tue 28 May 2024 18:06:45 +0000
Manifest next update:     Wed 29 May 2024 19:49:45 +0000
Files and hashes:         1: 80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.crl (hash: YrRi9aSvdZ853dNGRtajMra95+6jO6iJm+sx60I0XrQ=)
                          2: AS211244.asa (hash: xNnTD1Tj+LfyQOBmPw0zrM5lmL7GtYR6ihBeIqSa7i8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gKI-rE1iDcLBsXAfIeRuzKBeTb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 May 2024 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a4:e5:ca:9b:1d:c8:53:9c:13:12:e6:c8:d1:27:ae:2c:a0:37:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80a23eac4d620dc2c1b1701f21e46ecca05e4dbe
        Validity
            Not Before: May 28 18:06:45 2024 GMT
            Not After : May 29 19:49:45 2024 GMT
        Subject: CN=719A453473C96821E09D940B82D1F482D82DED58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:97:e1:53:54:8c:dd:8c:00:f8:0d:67:14:74:
                    e4:d5:ca:cc:fe:06:6b:00:04:41:54:7a:1c:35:09:
                    a2:58:c6:66:1e:83:d0:27:a1:b2:eb:e0:94:9a:0d:
                    25:a3:59:12:c8:79:cd:c7:ee:73:32:ba:0d:80:94:
                    7c:aa:0d:91:a5:55:a2:5b:c6:71:58:5d:17:6b:64:
                    6e:49:0a:35:00:a9:7b:f6:31:14:c7:ac:e1:16:20:
                    5a:ee:25:f5:7f:df:f7:cb:9b:14:fd:62:90:70:51:
                    8b:2e:ee:8e:eb:a4:b7:45:02:cf:f1:aa:8d:e0:e1:
                    4a:4d:ea:55:94:27:71:45:3c:dd:ad:2f:da:f2:df:
                    90:08:cc:1f:fb:e1:a6:3a:f3:08:70:8f:d6:33:6c:
                    77:86:a3:fa:a6:dc:8c:12:e4:a0:0a:72:7d:61:2e:
                    1a:ef:bf:9d:79:df:79:f5:ec:2e:42:ea:9f:83:6a:
                    c0:d5:19:ee:9b:57:e4:89:51:38:2b:73:49:9d:ee:
                    3c:eb:8d:f5:e8:70:bf:ae:02:fd:eb:d6:98:78:c5:
                    f8:d1:8e:1f:31:86:58:ba:c2:8f:4b:64:01:7e:19:
                    a9:22:9c:df:d9:bb:44:61:52:06:3c:65:8e:bf:fc:
                    a8:bc:e6:1c:34:6a:cc:96:6e:89:71:c2:f3:f2:63:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9A:45:34:73:C9:68:21:E0:9D:94:0B:82:D1:F4:82:D8:2D:ED:58
            X509v3 Authority Key Identifier:
                keyid:80:A2:3E:AC:4D:62:0D:C2:C1:B1:70:1F:21:E4:6E:CC:A0:5E:4D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gKI-rE1iDcLBsXAfIeRuzKBeTb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/2/80A23EAC4D620DC2C1B1701F21E46ECCA05E4DBE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:44:33:42:5d:fe:28:ff:4e:99:fa:a1:79:d9:1c:54:c6:b7:
         c3:10:15:7c:6b:9f:6a:30:a9:85:b3:41:91:61:5b:f5:bd:bd:
         1b:d0:63:be:00:76:78:f7:bf:2b:cf:38:c2:71:65:a3:57:50:
         11:9e:0b:b9:89:40:e5:4e:8a:27:e8:9b:5f:3c:5c:6a:17:95:
         c5:83:c1:84:14:8a:75:b3:55:bf:72:de:c1:60:98:3d:96:02:
         fd:83:ed:6d:e4:ce:49:85:5f:12:12:ee:ea:a2:6a:07:e4:76:
         90:b9:41:eb:36:04:ed:e7:9b:11:33:29:38:ac:2c:ed:2a:44:
         3e:13:28:df:81:f2:bd:71:18:2b:08:0d:87:c9:ba:ef:2a:6a:
         4c:a5:30:aa:78:4c:7c:a1:0a:d3:d7:54:f1:cc:74:8f:99:5c:
         cd:8f:cb:a0:f6:18:b9:27:fa:8a:d0:37:6c:9e:d5:e7:2e:a6:
         ca:6b:0c:b3:89:39:f6:53:95:4c:00:7f:a6:2b:14:cb:6d:de:
         19:7e:de:50:00:f9:4d:2b:c4:6b:f8:74:a9:0a:40:5f:1e:fc:
         a5:e6:ba:77:b3:51:48:21:4b:4a:e7:2b:79:07:53:56:87:40:
         35:9f:97:1c:8f:1d:6f:d6:7b:ca:39:b6:3e:31:75:76:12:5b:
         02:6c:83:7b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUbqTlypsdyFOcExLmyNEnriygN9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBhMjNlYWM0ZDYyMGRjMmMxYjE3MDFmMjFlNDZlY2Nh
MDVlNGRiZTAeFw0yNDA1MjgxODA2NDVaFw0yNDA1MjkxOTQ5NDVaMDMxMTAvBgNV
BAMTKDcxOUE0NTM0NzNDOTY4MjFFMDlEOTQwQjgyRDFGNDgyRDgyREVENTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTl+FTVIzdjAD4DWcUdOTVysz+
BmsABEFUehw1CaJYxmYeg9AnobLr4JSaDSWjWRLIec3H7nMyug2AlHyqDZGlVaJb
xnFYXRdrZG5JCjUAqXv2MRTHrOEWIFruJfV/3/fLmxT9YpBwUYsu7o7rpLdFAs/x
qo3g4UpN6lWUJ3FFPN2tL9ry35AIzB/74aY68whwj9YzbHeGo/qm3IwS5KAKcn1h
Lhrvv51533n17C5C6p+DasDVGe6bV+SJUTgrc0md7jzrjfXocL+uAv3r1ph4xfjR
jh8xhli6wo9LZAF+GakinN/Zu0RhUgY8ZY6//Ki85hw0asyWbolxwvPyY5JZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUcZpFNHPJaCHgnZQLgtH0gtgt7VgwHwYDVR0j
BBgwFoAUgKI+rE1iDcLBsXAfIeRuzKBeTb4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2I1NzVlYTctNzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNl
Y2VlLzIvODBBMjNFQUM0RDYyMERDMkMxQjE3MDFGMjFFNDZFQ0NBMDVFNERCRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2dLSS1yRTFpRGNMQnNYQWZJZVJ1ektC
ZVRiNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YjU3NWVhNy03
ODZmLTRiMmQtYTQ1NS03OWQ3ZmM0M2VjZWUvMi84MEEyM0VBQzRENjIwREMyQzFC
MTcwMUYyMUU0NkVDQ0EwNUU0REJFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEQzQl3+KP9Omfqhedkc
VMa3wxAVfGufajCphbNBkWFb9b29G9BjvgB2ePe/K884wnFlo1dQEZ4LuYlA5U6K
J+ibXzxcaheVxYPBhBSKdbNVv3LewWCYPZYC/YPtbeTOSYVfEhLu6qJqB+R2kLlB
6zYE7eebETMpOKws7SpEPhMo34HyvXEYKwgNh8m67ypqTKUwqnhMfKEK09dU8cx0
j5lczY/LoPYYuSf6itA3bJ7V5y6mymsMs4k59lOVTAB/pisUy23eGX7eUAD5TSvE
a/h0qQpAXx78pea6d7NRSCFLSucreQdTVodANZ+XHI8db9Z7yjm2PjF1dhJbAmyD
ew==
-----END CERTIFICATE-----
Generated at Tue May 28 21:12:39 2024 by rpki-client on console-fra.rpki-client.org