Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
File:                     627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft (raw, json)
Hash identifier:          ga47JIEIKbbjT1q6Qqyidntgtu2gPkz1Mx/MCPUP9n8=
Subject key identifier:   72:9D:9C:8B:60:EF:73:E9:AF:E5:EE:89:EA:8F:9A:0C:0B:AE:4E:84
Authority key identifier: 62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE
Certificate issuer:       /CN=627288b3a2f25873aa73906dd37bafff0b1ef5de
Certificate serial:       2F264073A12A2A898EF76373037540AF3E8DA06B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
Manifest number:          01A4
Signing time:             Sat 15 Jun 2024 08:00:05 +0000
Manifest this update:     Sat 15 Jun 2024 07:55:05 +0000
Manifest next update:     Sun 16 Jun 2024 11:39:05 +0000
Files and hashes:         1: 627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl (hash: uriq2m6Y5o5SnlHpbGLD3f5D6YhCE7lyEo61LqrXZXQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:26:40:73:a1:2a:2a:89:8e:f7:63:73:03:75:40:af:3e:8d:a0:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627288b3a2f25873aa73906dd37bafff0b1ef5de
        Validity
            Not Before: Jun 15 07:55:05 2024 GMT
            Not After : Jun 16 11:39:05 2024 GMT
        Subject: CN=729D9C8B60EF73E9AFE5EE89EA8F9A0C0BAE4E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0e:d1:2c:03:dd:bf:cd:5b:01:e2:72:f4:7f:
                    7d:83:15:08:aa:92:42:e8:83:1e:32:39:de:f8:fd:
                    e5:cb:ef:1c:38:42:d4:fe:6c:04:4b:e4:e5:7f:10:
                    ee:ca:95:e1:e1:bb:74:79:ff:fe:5a:c3:20:27:69:
                    d7:85:2d:7a:03:ad:e6:fc:c6:6b:76:a7:ae:66:78:
                    64:fd:55:1a:40:9f:93:5e:5f:07:5c:63:bd:9e:47:
                    75:dd:a5:0a:5e:22:22:e5:3d:82:06:a1:1d:ed:ce:
                    07:7b:87:8d:65:ec:77:08:e1:f5:8d:c9:6c:18:cf:
                    57:13:7d:83:98:d1:21:a5:0c:d4:5e:fb:3e:aa:48:
                    b0:4f:80:32:e7:d4:26:fe:d6:c5:c5:f5:f4:30:19:
                    bd:68:51:6c:94:22:81:c3:15:c2:16:84:e4:33:09:
                    2f:77:bd:82:e5:a7:f3:f2:49:a3:cc:a1:28:f5:0f:
                    22:40:12:ed:8c:18:b3:e6:80:fc:f9:b1:f7:16:5e:
                    5c:0b:75:64:a0:35:d8:9d:ca:02:81:da:95:6c:0b:
                    57:18:bf:9f:7b:98:8d:37:16:bd:78:87:f1:32:6b:
                    c4:7f:b7:5e:1f:d9:0b:87:08:be:d0:d1:63:ed:69:
                    30:06:be:43:12:5a:c5:82:5f:22:a7:13:0f:e8:26:
                    e8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9D:9C:8B:60:EF:73:E9:AF:E5:EE:89:EA:8F:9A:0C:0B:AE:4E:84
            X509v3 Authority Key Identifier:
                keyid:62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:52:d2:99:9e:ad:75:6e:a4:02:a1:13:76:7f:15:4b:b7:
         b6:e7:d3:91:76:cd:36:4e:4f:77:14:87:99:64:4e:aa:0c:20:
         4e:60:bd:86:03:91:1b:ba:fc:49:d7:ac:06:47:e4:e6:3c:79:
         49:46:82:20:c6:fe:d0:72:86:93:17:07:01:58:dc:e6:68:1f:
         2e:8e:53:40:61:6f:26:c9:97:36:52:ab:09:ef:b1:bb:23:f4:
         fb:9a:e1:6a:f5:23:4f:50:5d:05:4a:bc:59:28:b8:65:61:ea:
         4c:4b:1a:40:80:9f:be:05:d0:d2:94:2e:2a:b7:c6:12:76:0c:
         3f:e9:91:28:46:74:ad:40:ac:3d:a0:72:27:a4:6a:c1:c8:af:
         46:df:3e:fa:b6:64:6a:8b:3a:9a:5f:e5:56:6a:7f:21:c5:7d:
         9a:13:2c:71:43:62:cd:c6:43:a6:90:2d:01:7b:00:75:26:8a:
         65:d4:25:d4:4e:05:da:7e:e6:d4:6d:5c:2d:7a:28:7a:78:18:
         2f:fe:ad:ca:14:9a:05:7d:c5:14:15:98:08:fa:c5:0d:dc:9e:
         5d:ab:32:8c:2e:35:e1:7b:53:86:06:54:ec:00:81:06:5e:67:
         03:f1:5c:2c:55:4b:56:79:4b:82:d9:b5:2f:cc:4f:47:8c:60:
         34:c5:41:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----