Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/0/5F01AE1836D7DA777EBB90A1EA97D37C300118E8.mft
File:                     5F01AE1836D7DA777EBB90A1EA97D37C300118E8.mft (raw, json)
Hash identifier:          iQW374oT2N8c6ys3H+wjNpacV/x9G8idCOQOG/Hi5wQ=
Subject key identifier:   98:23:5D:A1:4B:39:4F:DE:EE:A5:8C:5F:66:4B:D5:4F:76:68:8A:E4
Authority key identifier: 5F:01:AE:18:36:D7:DA:77:7E:BB:90:A1:EA:97:D3:7C:30:01:18:E8
Certificate issuer:       /CN=5f01ae1836d7da777ebb90a1ea97d37c300118e8
Certificate serial:       6DDCB8AE06025913BFC37D3D511E6CB3C89FACCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XwGuGDbX2nd-u5Ch6pfTfDABGOg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/0/5F01AE1836D7DA777EBB90A1EA97D37C300118E8.mft
Manifest number:          B0
Signing time:             Mon 25 Nov 2024 12:39:14 +0000
Manifest this update:     Mon 25 Nov 2024 12:34:14 +0000
Manifest next update:     Tue 26 Nov 2024 14:07:14 +0000
Files and hashes:         1: 5F01AE1836D7DA777EBB90A1EA97D37C300118E8.crl (hash: RExVvNrbwcUOzDYsLSbrNt4Zok5spyqTK81c3D+deKM=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/0/5F01AE1836D7DA777EBB90A1EA97D37C300118E8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/0/5F01AE1836D7DA777EBB90A1EA97D37C300118E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XwGuGDbX2nd-u5Ch6pfTfDABGOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:dc:b8:ae:06:02:59:13:bf:c3:7d:3d:51:1e:6c:b3:c8:9f:ac:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f01ae1836d7da777ebb90a1ea97d37c300118e8
        Validity
            Not Before: Nov 25 12:34:14 2024 GMT
            Not After : Nov 26 14:07:14 2024 GMT
        Subject: CN=98235DA14B394FDEEEA58C5F664BD54F76688AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:05:f4:65:23:d2:fe:a7:c0:c4:ac:31:72:42:
                    34:0a:30:86:c5:e5:60:4c:70:24:9a:ee:69:8f:7b:
                    5e:ca:22:42:53:3c:54:f7:1f:d8:02:28:00:df:1a:
                    fe:d4:30:28:36:b0:71:96:cb:11:8a:12:69:6c:52:
                    03:40:e4:17:17:31:af:c5:de:f6:9f:8a:84:a0:8a:
                    69:03:7b:d7:36:ab:c5:51:0e:5b:0f:62:9d:8b:99:
                    11:f8:b2:51:63:97:42:7f:2e:0b:25:d1:bd:94:6a:
                    95:1f:0c:d7:85:3a:f2:dd:f9:55:df:a2:01:a8:58:
                    34:81:44:6d:7e:a5:14:cb:6f:35:fb:80:ba:c3:c7:
                    7d:86:00:00:fb:b1:eb:c4:fe:a4:bc:19:39:13:af:
                    19:ce:87:dd:2f:19:33:46:1d:bb:c3:1f:2e:fd:8d:
                    f8:b5:ea:9b:5a:99:ca:9d:c4:ac:5a:da:2c:3c:c7:
                    65:2b:f0:f2:1d:66:7b:1f:4c:51:3d:59:56:a2:92:
                    fb:8a:74:8a:ea:66:30:e3:4c:c8:6a:d6:59:8f:5e:
                    54:04:a4:85:35:5e:f2:f1:fe:55:4a:d2:49:88:8f:
                    80:13:63:c0:79:18:20:e3:f8:3f:0f:47:dd:5b:f9:
                    cf:e2:22:63:cb:d7:42:68:70:a8:fa:7e:8b:a9:66:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:23:5D:A1:4B:39:4F:DE:EE:A5:8C:5F:66:4B:D5:4F:76:68:8A:E4
            X509v3 Authority Key Identifier:
                keyid:5F:01:AE:18:36:D7:DA:77:7E:BB:90:A1:EA:97:D3:7C:30:01:18:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/0/5F01AE1836D7DA777EBB90A1EA97D37C300118E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwGuGDbX2nd-u5Ch6pfTfDABGOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/0/5F01AE1836D7DA777EBB90A1EA97D37C300118E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:5f:20:5d:c2:14:0a:76:21:76:6a:de:31:4a:f2:97:91:18:
         82:3a:43:6b:1f:b3:dc:46:ce:f4:d7:62:d2:a8:6a:e0:90:f7:
         eb:c1:31:47:4c:15:15:88:84:b8:d5:2d:5a:de:2e:21:8c:85:
         8b:13:28:ad:da:ca:ff:98:93:0a:4c:37:2d:39:75:dc:e2:a3:
         dc:91:99:c8:41:af:60:9a:46:4f:d7:cb:50:43:98:da:fc:a1:
         50:ae:04:6b:3a:d4:75:2b:7d:55:5c:3f:d2:0d:c4:a4:34:4a:
         d4:d8:1d:1d:5e:87:16:d8:a5:e9:fe:ed:be:fa:e9:e9:6c:20:
         21:2f:34:dd:37:d9:bd:32:90:9f:12:fb:fc:a8:46:c9:a6:b0:
         f5:9a:9a:4c:53:63:cc:ad:02:49:62:70:3e:05:eb:b9:cf:8a:
         18:f1:81:98:6c:44:5c:ae:d9:d5:4e:eb:69:ca:b5:c2:88:36:
         3a:c9:af:3a:c3:75:be:02:df:bc:bc:5f:7f:df:4f:34:cd:1b:
         a5:52:0d:e3:52:e6:09:eb:a5:1d:c2:9f:24:7d:2d:08:4f:b8:
         7a:a3:e5:ab:dd:0c:e2:e5:11:84:0e:5d:f4:69:e7:9e:35:3d:
         14:c5:f3:d6:e1:f2:2b:f4:9b:9a:aa:04:40:15:f4:71:45:f3:
         fc:a8:62:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:43:58 2024 by rpki-client on console-fra.rpki-client.org