Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.mft
File:                     FE2CBAA11AD6DE93E836F49D692AE540D9764331.mft (raw, json)
Hash identifier:          /efxUzjcVzFCpazc7lwii78Ef3ICtVdgpv96u+odyBA=
Subject key identifier:   72:8A:02:4D:9D:16:57:E4:DC:06:5B:12:BF:E4:7E:6D:D1:7D:A4:0A
Authority key identifier: FE:2C:BA:A1:1A:D6:DE:93:E8:36:F4:9D:69:2A:E5:40:D9:76:43:31
Certificate issuer:       /CN=fe2cbaa11ad6de93e836f49d692ae540d9764331
Certificate serial:       26D38698FE673F91B122D77742DCB22D6D12EA3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_iy6oRrW3pPoNvSdaSrlQNl2QzE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.mft
Manifest number:          01A1
Signing time:             Fri 14 Jun 2024 18:04:08 +0000
Manifest this update:     Fri 14 Jun 2024 17:59:08 +0000
Manifest next update:     Sat 15 Jun 2024 21:28:08 +0000
Files and hashes:         1: FE2CBAA11AD6DE93E836F49D692AE540D9764331.crl (hash: cxVLmFHiABE9g4dkT/YFVtSZK38Tz9oKg7iC0Y3Sm/8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_iy6oRrW3pPoNvSdaSrlQNl2QzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Jun 2024 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:d3:86:98:fe:67:3f:91:b1:22:d7:77:42:dc:b2:2d:6d:12:ea:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe2cbaa11ad6de93e836f49d692ae540d9764331
        Validity
            Not Before: Jun 14 17:59:08 2024 GMT
            Not After : Jun 15 21:28:08 2024 GMT
        Subject: CN=728A024D9D1657E4DC065B12BFE47E6DD17DA40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cb:1f:70:37:8f:64:50:a6:75:15:6f:86:62:
                    3e:83:0b:25:62:bb:b3:46:44:fd:a8:9b:fa:0b:ee:
                    df:98:78:50:4e:0d:68:bf:9e:23:a2:ad:3e:f1:f2:
                    e0:4a:d2:da:26:38:37:2a:30:97:f4:d3:8f:93:a4:
                    29:29:9a:f1:04:ac:08:3b:ee:f1:d6:33:1d:a3:fd:
                    73:18:f8:4e:22:53:5b:4e:15:1b:10:f9:50:9c:d0:
                    8f:a3:ac:1f:61:35:a0:8b:46:6f:a4:dd:fe:21:10:
                    50:85:93:96:2c:59:29:82:e8:0e:67:7f:b4:2d:93:
                    c6:d0:fc:15:e0:3f:97:13:da:ea:ad:41:89:c4:9e:
                    57:8b:39:4e:7f:35:6e:91:93:b2:b5:cd:59:19:a0:
                    79:ea:39:03:98:ca:b7:08:14:cf:d0:64:e1:6c:47:
                    cb:f5:ba:58:bf:93:8a:59:48:a5:d9:77:41:ea:61:
                    04:ca:be:76:ba:dc:61:76:cb:32:ee:43:91:e9:be:
                    e5:b4:d0:37:97:96:f3:f0:ac:80:63:9f:d6:52:93:
                    a0:65:30:5a:de:82:17:4d:b0:e2:29:cb:5f:9c:82:
                    d5:2d:b0:5e:19:f5:c6:52:21:97:5f:0c:2b:ea:2a:
                    94:3b:38:9a:03:9b:9c:d3:07:03:5d:0c:9f:62:11:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:02:4D:9D:16:57:E4:DC:06:5B:12:BF:E4:7E:6D:D1:7D:A4:0A
            X509v3 Authority Key Identifier:
                keyid:FE:2C:BA:A1:1A:D6:DE:93:E8:36:F4:9D:69:2A:E5:40:D9:76:43:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iy6oRrW3pPoNvSdaSrlQNl2QzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b2:c3:ed:09:d4:b2:51:8a:72:01:c3:99:e6:2a:72:57:1b:
         fc:c7:5d:20:19:f0:b9:8a:ff:75:b1:29:85:09:f4:ae:28:93:
         a6:d0:77:a2:0f:00:3d:7f:69:5c:3d:eb:f3:24:08:ee:f2:3b:
         e9:dc:88:b3:61:5e:d6:b6:6b:5b:e1:3e:03:cf:b8:49:c6:f7:
         af:17:1a:3f:2c:fd:a7:af:a9:01:d8:ce:9f:bd:fd:0d:46:e7:
         00:f3:ba:4c:96:4b:58:e6:38:d0:cd:bd:dc:4f:db:fc:ac:88:
         90:fc:1a:62:4c:6d:db:e4:8e:ea:bc:61:f0:26:d9:dc:dc:4d:
         af:bf:27:f4:d8:19:2b:49:4d:06:de:dd:43:c9:cf:7a:18:49:
         39:93:f8:7d:c3:4e:97:08:73:c3:2b:e3:a6:f3:86:ec:d8:32:
         79:cf:01:11:48:3d:e9:b0:bd:53:8d:3e:09:fd:22:a9:d2:68:
         6e:ef:8f:6e:34:00:b7:97:e2:5e:ec:45:24:81:c1:8a:5e:17:
         78:30:83:9a:fd:80:31:a0:8b:ac:70:ae:71:87:bd:4b:81:97:
         7e:36:d8:2f:2e:7e:a1:66:c1:b7:45:12:b6:d6:82:cb:0c:58:
         1e:59:de:9f:c1:9a:3d:da:6a:fa:1b:6c:5f:57:d5:e4:04:dd:
         50:1b:b6:a4
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJtOGmP5nP5GxItd3QtyyLW0S6jowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmUyY2JhYTExYWQ2ZGU5M2U4MzZmNDlkNjkyYWU1NDBk
OTc2NDMzMTAeFw0yNDA2MTQxNzU5MDhaFw0yNDA2MTUyMTI4MDhaMDMxMTAvBgNV
BAMTKDcyOEEwMjREOUQxNjU3RTREQzA2NUIxMkJGRTQ3RTZERDE3REE0MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGyx9wN49kUKZ1FW+GYj6DCyVi
u7NGRP2om/oL7t+YeFBODWi/niOirT7x8uBK0tomODcqMJf004+TpCkpmvEErAg7
7vHWMx2j/XMY+E4iU1tOFRsQ+VCc0I+jrB9hNaCLRm+k3f4hEFCFk5YsWSmC6A5n
f7Qtk8bQ/BXgP5cT2uqtQYnEnleLOU5/NW6Rk7K1zVkZoHnqOQOYyrcIFM/QZOFs
R8v1uli/k4pZSKXZd0HqYQTKvna63GF2yzLuQ5HpvuW00DeXlvPwrIBjn9ZSk6Bl
MFreghdNsOIpy1+cgtUtsF4Z9cZSIZdfDCvqKpQ7OJoDm5zTBwNdDJ9iEZZRAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUcooCTZ0WV+TcBlsSv+R+bdF9pAowHwYDVR0j
BBgwFoAU/iy6oRrW3pPoNvSdaSrlQNl2QzEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFi
YzEyLzMvRkUyQ0JBQTExQUQ2REU5M0U4MzZGNDlENjkyQUU1NDBEOTc2NDMzMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19peTZvUnJXM3BQb052U2RhU3JsUU5s
MlF6RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0w
OGJhLTRjZGUtODk3OS00ZmFlYTRiMWJjMTIvMy9GRTJDQkFBMTFBRDZERTkzRTgz
NkY0OUQ2OTJBRTU0MEQ5NzY0MzMxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7LD7QnUslGKcgHDmeYq
clcb/MddIBnwuYr/dbEphQn0riiTptB3og8APX9pXD3r8yQI7vI76dyIs2Fe1rZr
W+E+A8+4Scb3rxcaPyz9p6+pAdjOn739DUbnAPO6TJZLWOY40M293E/b/KyIkPwa
Ykxt2+SO6rxh8CbZ3NxNr78n9NgZK0lNBt7dQ8nPehhJOZP4fcNOlwhzwyvjpvOG
7Ngyec8BEUg96bC9U40+Cf0iqdJobu+PbjQAt5fiXuxFJIHBil4XeDCDmv2AMaCL
rHCucYe9S4GXfjbYLy5+oWbBt0USttaCywxYHlnen8GaPdpq+htsX1fV5ATdUBu2
pA==
-----END CERTIFICATE-----
Generated at Fri Jun 14 19:32:47 2024 by rpki-client on console-ams.rpki-client.org