Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
File:                     C678CC0A7BAA95891441AD80954491DFED87D33A.mft (raw, json)
Hash identifier:          AFx//GodKaDK/TUMEzcSbooTdi8PhYKREWbc5ymhsCw=
Subject key identifier:   D7:12:52:B1:C5:CA:72:A7:2E:D0:21:52:23:65:24:A3:7B:AE:39:E5
Authority key identifier: C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A
Certificate issuer:       /CN=c678cc0a7baa95891441ad80954491dfed87d33a
Certificate serial:       228472A836EFFA24A466257F86D03B733D16C665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
Manifest number:          86
Signing time:             Mon 24 Jun 2024 00:44:03 +0000
Manifest this update:     Mon 24 Jun 2024 00:39:03 +0000
Manifest next update:     Tue 25 Jun 2024 03:43:03 +0000
Files and hashes:         1: C678CC0A7BAA95891441AD80954491DFED87D33A.crl (hash: a17dbfFaPE0Ur20K5A6nm5SPktd7DFrLTIWlV2qkMho=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:84:72:a8:36:ef:fa:24:a4:66:25:7f:86:d0:3b:73:3d:16:c6:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c678cc0a7baa95891441ad80954491dfed87d33a
        Validity
            Not Before: Jun 24 00:39:03 2024 GMT
            Not After : Jun 25 03:43:03 2024 GMT
        Subject: CN=D71252B1C5CA72A72ED02152236524A37BAE39E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:7e:af:24:44:a5:21:17:d0:10:2e:8a:fb:
                    28:64:ee:c7:9f:30:a6:c4:19:98:a1:62:4f:36:4c:
                    85:5b:2a:f9:8f:d4:aa:85:a5:41:14:42:47:c6:88:
                    10:8a:eb:da:4c:a1:8d:f3:de:27:1c:52:5f:45:e6:
                    f1:d7:40:04:36:96:cd:58:c7:40:08:22:e0:85:5d:
                    f8:b8:c1:38:da:4c:5d:ed:a8:52:76:65:42:4c:49:
                    4b:4e:ed:ce:59:c8:ba:51:db:64:af:70:11:28:a0:
                    cd:12:ac:98:93:9b:ce:5c:b7:e2:5a:19:de:c6:83:
                    72:ec:ff:60:b7:6b:4d:33:e7:6f:43:bf:4c:77:3d:
                    94:ea:20:e4:2b:97:b2:cd:fb:d1:e2:be:c4:a6:d0:
                    94:8c:ff:a9:8f:e4:b1:38:89:c0:d1:d2:e2:6e:8b:
                    06:ae:4b:bd:ab:28:57:7d:99:8e:d8:f8:20:61:7e:
                    39:d4:8e:30:eb:fc:4e:61:9e:8d:34:a2:84:26:1a:
                    41:77:c7:15:56:d7:8d:07:12:47:88:45:d8:cf:3c:
                    c9:92:b1:46:fc:04:07:41:62:31:c3:19:5d:18:f6:
                    07:1f:a4:c3:f7:aa:f7:89:74:9e:5c:fc:cf:35:b3:
                    98:91:d9:19:30:cb:89:3c:39:af:13:3b:9d:1a:63:
                    a2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:12:52:B1:C5:CA:72:A7:2E:D0:21:52:23:65:24:A3:7B:AE:39:E5
            X509v3 Authority Key Identifier:
                keyid:C6:78:CC:0A:7B:AA:95:89:14:41:AD:80:95:44:91:DF:ED:87:D3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnjMCnuqlYkUQa2AlUSR3-2H0zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/0/C678CC0A7BAA95891441AD80954491DFED87D33A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:02:c9:9b:35:15:da:e9:ee:56:c5:4d:c1:a9:77:6b:db:07:
         62:b6:dd:00:85:49:d9:42:9a:e8:48:7e:92:9e:98:28:ad:e2:
         c2:d9:c0:47:ca:29:58:93:54:74:06:dc:97:ad:ae:b2:00:88:
         6b:c1:18:c1:35:b6:14:a0:c1:a2:ec:84:1d:1d:26:6d:4b:e5:
         91:e1:f2:72:20:ba:d8:bb:01:6a:a3:6f:80:25:57:aa:b0:01:
         88:6b:d3:4c:85:18:e8:6b:e2:b8:3a:78:28:ea:4b:44:05:b6:
         16:f0:e1:12:ca:c4:c0:0a:27:07:f0:9f:f8:a8:43:d0:53:38:
         ae:76:11:48:c7:e6:0e:7f:d0:68:88:d0:dc:b7:a1:7e:a1:93:
         a9:6b:42:65:b4:ae:a5:e3:a2:4c:b4:86:c0:a7:38:a8:f8:c8:
         8b:1c:c2:58:31:cc:e1:37:59:1e:96:72:77:ee:98:dc:5d:66:
         b3:e5:b3:fe:a4:b8:8b:92:1d:a5:40:6b:10:18:14:2e:4e:a6:
         1c:22:3e:b8:79:40:8e:be:81:0b:bd:e6:a1:ba:67:5e:e5:83:
         f1:8c:7b:d4:14:67:e6:56:b5:3f:f1:b0:a2:05:5c:b5:96:18:
         22:61:a7:cf:1a:20:a4:e8:f0:4c:12:83:d9:95:98:c4:56:0e:
         98:54:86:e7
-----BEGIN CERTIFICATE-----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Generated at Mon Jun 24 03:17:44 2024 by rpki-client on console-fra.rpki-client.org