Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.mft
File:                     B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.mft (raw, json)
Hash identifier:          RSbBUof0ayhC+ZOngWiw6dnHn0l5QywaSc5FcYlGKmQ=
Subject key identifier:   8A:47:B4:00:66:D1:E2:CA:C1:20:30:B6:AF:32:BF:D5:A3:34:94:BD
Authority key identifier: B5:B8:CF:DF:0D:F2:E9:DD:CC:75:50:E4:18:74:B8:63:B0:E4:03:86
Certificate issuer:       /CN=b5b8cfdf0df2e9ddcc7550e41874b863b0e40386
Certificate serial:       41EE06A497F8B55F138B95C107CA1DDF36B6D301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbjP3w3y6d3MdVDkGHS4Y7DkA4Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.mft
Manifest number:          018E
Signing time:             Sat 15 Jun 2024 18:48:19 +0000
Manifest this update:     Sat 15 Jun 2024 18:43:19 +0000
Manifest next update:     Sun 16 Jun 2024 21:54:19 +0000
Files and hashes:         1: B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.crl (hash: mJxCtd8/3WG3aSX/bwvLAy76Z8dVox+Za+LsTduRvkI=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tbjP3w3y6d3MdVDkGHS4Y7DkA4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ee:06:a4:97:f8:b5:5f:13:8b:95:c1:07:ca:1d:df:36:b6:d3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b8cfdf0df2e9ddcc7550e41874b863b0e40386
        Validity
            Not Before: Jun 15 18:43:19 2024 GMT
            Not After : Jun 16 21:54:19 2024 GMT
        Subject: CN=8A47B40066D1E2CAC12030B6AF32BFD5A33494BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e0:4e:6d:64:09:00:bf:8c:f0:66:b8:7b:1d:
                    3f:1e:56:5f:1b:d9:fb:71:93:20:26:7f:a3:e9:80:
                    3e:af:9b:1d:8c:e9:72:b2:1d:74:30:32:e4:f9:7c:
                    94:4c:7a:57:7e:13:03:90:4e:6b:f9:11:3e:e4:a2:
                    4c:8a:c1:22:79:f0:2d:b6:93:e9:3b:b1:5f:29:93:
                    d4:37:13:e6:04:71:16:17:e6:a8:3d:15:e8:2b:a7:
                    66:77:67:ef:84:8a:18:ab:28:29:96:33:a0:b7:0d:
                    10:e8:2d:c9:04:76:51:a9:d7:66:30:6d:09:14:76:
                    c9:15:cd:2d:e3:c4:d2:b3:6c:86:a3:a1:f5:91:d7:
                    de:d2:5e:86:43:1c:6b:ad:51:08:b8:01:45:f4:a4:
                    58:b9:31:af:14:14:bc:b8:b7:ae:3d:bc:0e:10:47:
                    20:04:dc:3a:07:dd:09:62:e1:8d:04:59:bf:eb:f9:
                    f3:30:a2:e6:9c:27:9d:59:95:bd:e9:5f:22:a0:d4:
                    58:8c:22:fb:1f:cb:87:88:8f:13:81:e7:95:e3:18:
                    e3:66:10:aa:3d:b3:95:88:f8:8a:90:7d:bc:fa:0e:
                    ef:49:8d:d5:6b:62:da:ed:97:f1:ea:4d:16:4b:81:
                    24:b5:8b:c5:2c:a5:09:40:38:ee:24:c8:f9:3d:b5:
                    45:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:47:B4:00:66:D1:E2:CA:C1:20:30:B6:AF:32:BF:D5:A3:34:94:BD
            X509v3 Authority Key Identifier:
                keyid:B5:B8:CF:DF:0D:F2:E9:DD:CC:75:50:E4:18:74:B8:63:B0:E4:03:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbjP3w3y6d3MdVDkGHS4Y7DkA4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:4a:40:21:c4:ef:67:8e:be:49:d5:bc:aa:ae:e3:88:ef:
         ef:e4:7f:55:1a:3d:6e:31:fd:26:4e:1a:94:74:11:58:61:00:
         d0:e7:2c:59:4b:ef:3b:03:e7:be:3f:3d:60:b9:6f:d4:4d:6f:
         39:ec:57:a7:15:88:c0:2a:7e:ac:19:58:c7:bd:67:93:61:01:
         b1:44:e0:9f:9d:28:a4:cc:08:06:8a:78:be:18:72:2d:74:34:
         c4:38:8a:4e:1c:5d:a1:60:07:83:99:6e:a8:9a:5d:dc:b5:99:
         c0:40:4a:d4:b0:16:42:c8:c3:7c:8c:5e:8a:1d:00:1d:43:13:
         9f:38:92:d3:5c:55:19:d8:f6:7f:8b:bd:a1:72:25:84:c7:5c:
         ed:c2:82:8a:a1:c2:c5:8a:78:2d:c9:33:ec:1d:a9:d3:90:12:
         27:64:ef:42:87:b9:8a:92:27:55:a9:43:f5:83:99:06:c6:0b:
         00:a5:35:ea:27:b5:b8:1e:9d:f4:3e:82:08:9f:40:10:ce:21:
         06:54:b0:3f:9d:6e:e9:ab:4c:8c:7c:b2:b6:95:e5:df:77:b7:
         70:c6:d8:56:53:f0:fb:af:4c:9b:3b:e7:48:6b:3c:62:4d:7a:
         b7:1c:92:b8:b0:0e:e2:d8:eb:40:f2:31:ea:b8:9a:18:b9:4d:
         80:c3:6a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 20:55:22 2024 by rpki-client on console-fra.rpki-client.org