Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/25/FA9512423B45AFEDFFC91B8342175A5BF7EBE12F.mft
File:                     FA9512423B45AFEDFFC91B8342175A5BF7EBE12F.mft (raw, json)
Hash identifier:          oP4KYCJyGwCCOKQxqKFdahqtB4NVEUA+2NZRBF6i7f0=
Subject key identifier:   00:E5:EB:E5:0B:AA:96:0F:D5:85:40:0C:90:9B:BE:35:1C:7D:65:8A
Authority key identifier: FA:95:12:42:3B:45:AF:ED:FF:C9:1B:83:42:17:5A:5B:F7:EB:E1:2F
Certificate issuer:       /CN=fa9512423b45afedffc91b8342175a5bf7ebe12f
Certificate serial:       7D5E4AB441E3B688519333D59297A62C640BB679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-pUSQjtFr-3_yRuDQhdaW_fr4S8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/25/FA9512423B45AFEDFFC91B8342175A5BF7EBE12F.mft
Manifest number:          015A
Signing time:             Sat 15 Jun 2024 15:23:19 +0000
Manifest this update:     Sat 15 Jun 2024 15:18:19 +0000
Manifest next update:     Sun 16 Jun 2024 17:01:19 +0000
Files and hashes:         1: FA9512423B45AFEDFFC91B8342175A5BF7EBE12F.crl (hash: 0anUnsQB4Kgx1MO/rbrsZcNsAdp95TywflvAiMF5yqY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/25/FA9512423B45AFEDFFC91B8342175A5BF7EBE12F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/25/FA9512423B45AFEDFFC91B8342175A5BF7EBE12F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-pUSQjtFr-3_yRuDQhdaW_fr4S8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 11:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:5e:4a:b4:41:e3:b6:88:51:93:33:d5:92:97:a6:2c:64:0b:b6:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa9512423b45afedffc91b8342175a5bf7ebe12f
        Validity
            Not Before: Jun 15 15:18:19 2024 GMT
            Not After : Jun 16 17:01:19 2024 GMT
        Subject: CN=00E5EBE50BAA960FD585400C909BBE351C7D658A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:07:b1:3b:e1:e4:5e:3f:b9:6e:92:47:bd:
                    f3:1c:39:00:99:85:a7:ff:0e:0f:4b:20:e6:6b:96:
                    ed:38:95:71:8f:c2:02:2f:d5:4c:56:84:ed:13:5b:
                    82:08:49:13:df:e8:41:2d:42:2d:44:7a:60:48:c9:
                    4f:fb:09:36:e4:fa:a4:84:c5:eb:8a:8b:b8:4b:90:
                    9b:ef:ef:c9:c2:6d:0d:4a:fe:5f:7e:20:68:99:bd:
                    49:d1:61:ee:3b:03:08:52:b9:58:36:78:08:66:64:
                    b0:d6:f8:ca:e0:97:01:43:93:a0:dc:05:71:98:1b:
                    b9:5c:c9:49:bd:80:14:0a:52:04:b7:aa:17:36:fb:
                    87:7d:20:26:4c:23:f5:64:bb:e7:07:0d:9a:35:e6:
                    f8:a8:d8:ce:91:82:4f:fa:1c:d3:db:f1:ae:b3:d2:
                    10:58:84:2b:4b:cf:e3:ae:44:42:bb:7b:a8:8a:76:
                    5c:3b:3b:c0:97:d1:77:67:98:0c:3b:89:a2:e1:0d:
                    56:18:11:6a:a8:8a:1f:7e:06:b0:10:d7:cb:12:06:
                    af:7f:f2:42:fa:41:ff:60:30:7a:0c:21:e7:a7:b9:
                    11:d6:33:00:a5:fc:52:b3:70:0d:f8:33:45:bd:2a:
                    e8:0b:bd:a6:1b:44:2e:5b:6f:3a:a4:ba:c6:3d:c5:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E5:EB:E5:0B:AA:96:0F:D5:85:40:0C:90:9B:BE:35:1C:7D:65:8A
            X509v3 Authority Key Identifier:
                keyid:FA:95:12:42:3B:45:AF:ED:FF:C9:1B:83:42:17:5A:5B:F7:EB:E1:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/25/FA9512423B45AFEDFFC91B8342175A5BF7EBE12F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pUSQjtFr-3_yRuDQhdaW_fr4S8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/25/FA9512423B45AFEDFFC91B8342175A5BF7EBE12F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:0c:5f:b1:08:b8:7b:70:81:1a:07:a8:89:4e:47:6b:1c:03:
         19:93:9f:69:be:31:62:5c:1e:98:c4:8e:e1:85:23:a7:72:b5:
         67:95:5b:21:fc:9f:69:e3:cd:22:8d:5f:49:e1:a8:1f:f8:3f:
         0b:92:3f:64:de:eb:5c:06:58:ec:91:b3:d3:1e:2b:5e:65:29:
         38:c8:53:19:bb:e1:d1:06:b4:dc:d1:be:16:93:ca:2a:cc:1b:
         7f:ef:f3:d6:87:ce:f5:4a:96:24:ac:cd:66:e7:f5:d6:8a:cc:
         c6:af:50:7a:75:71:49:52:89:5e:c6:5f:e5:7c:56:cf:6b:fc:
         9b:48:56:85:12:c7:6f:61:d9:5d:36:0b:19:6f:84:cf:72:a8:
         94:5f:3e:c8:93:8b:e7:a6:0c:96:dd:b3:04:22:1b:32:fa:23:
         2a:4e:f5:04:2c:97:2a:60:cd:58:8e:c2:f0:b8:9c:b7:21:67:
         c8:ee:36:e4:da:ce:8c:dd:ee:21:6d:12:c4:89:6e:3d:21:3c:
         e2:92:6a:aa:d2:08:ad:ad:fd:d9:ed:ca:21:4c:bc:99:9f:8e:
         e1:4b:88:45:ff:36:36:e5:2e:5f:81:df:9c:ed:61:6a:b5:ed:
         4a:12:ab:1f:d6:29:18:22:0c:67:e4:0f:d1:20:f0:6c:a1:10:
         0f:f5:51:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 17:58:03 2024 by rpki-client on console-ams.rpki-client.org