Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
File:                     5777980E886C29F0060C3A073B6E681A8A70574B.mft (raw, json)
Hash identifier:          eBA44snPDJzWCKhxgI5k9+rlvagVbEYsiRvQnXntYkI=
Subject key identifier:   30:E8:B1:B8:88:1D:E4:D9:11:BC:D3:1F:E0:29:DA:FB:D5:BB:1C:9A
Authority key identifier: 57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B
Certificate issuer:       /CN=5777980e886c29f0060c3a073b6e681a8a70574b
Certificate serial:       3BEC4A7F0B33108E6655B6494A45D905B2B1390F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
Manifest number:          012A
Signing time:             Fri 22 Nov 2024 18:24:24 +0000
Manifest this update:     Fri 22 Nov 2024 18:19:24 +0000
Manifest next update:     Sat 23 Nov 2024 20:47:24 +0000
Files and hashes:         1: 5777980E886C29F0060C3A073B6E681A8A70574B.crl (hash: E9Is+Gkwyf5bZb05Y8cUvc3AmW2/VmUYhzo+C7kK9Zg=)
                          2: AS216311.asa (hash: K7m3KVo3vTMDgBc/83DKyhT7Azk3LWdIWk6sAr0WLFs=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ec:4a:7f:0b:33:10:8e:66:55:b6:49:4a:45:d9:05:b2:b1:39:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5777980e886c29f0060c3a073b6e681a8a70574b
        Validity
            Not Before: Nov 22 18:19:24 2024 GMT
            Not After : Nov 23 20:47:24 2024 GMT
        Subject: CN=30E8B1B8881DE4D911BCD31FE029DAFBD5BB1C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:ed:8b:54:e8:3e:3b:61:6d:63:87:fd:05:
                    79:90:2c:89:55:3a:b7:91:17:2b:b0:26:d1:44:44:
                    80:6b:42:1b:b0:7d:40:67:db:24:6b:1e:fd:97:2f:
                    99:29:00:b6:ef:be:1e:bf:a8:65:79:b0:da:8b:b2:
                    84:ba:6e:d8:fe:c4:5d:87:5d:e0:cd:4a:d1:65:11:
                    20:c6:57:0e:55:ae:84:00:77:61:cb:95:08:69:40:
                    c6:9b:56:3e:11:c8:20:77:57:28:b8:b0:65:f5:1d:
                    bb:10:09:64:73:ce:40:e9:1d:38:6f:94:57:7b:e9:
                    c2:02:84:b8:c8:46:31:82:5e:4a:50:53:c9:fb:a1:
                    ec:c1:76:77:bc:44:06:81:b5:0f:79:96:c8:c4:07:
                    db:9a:e6:d7:9b:2b:c6:08:ab:d5:28:c3:b6:85:c7:
                    6b:58:04:4a:af:73:35:26:aa:1a:6b:b9:4e:ea:36:
                    1f:1c:8a:78:8c:68:49:0c:f6:f2:08:1e:5f:24:9c:
                    89:25:b2:90:56:39:ba:cc:7f:c3:b3:07:35:cf:84:
                    21:a9:e6:9c:b8:88:91:14:4d:87:8e:0b:91:1b:10:
                    f6:36:d1:f0:c6:aa:2a:e2:4f:d9:2f:82:a6:f4:a1:
                    c0:4b:c5:c9:52:17:f2:d2:b7:34:5a:cf:55:2f:36:
                    89:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E8:B1:B8:88:1D:E4:D9:11:BC:D3:1F:E0:29:DA:FB:D5:BB:1C:9A
            X509v3 Authority Key Identifier:
                keyid:57:77:98:0E:88:6C:29:F0:06:0C:3A:07:3B:6E:68:1A:8A:70:57:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3eYDohsKfAGDDoHO25oGopwV0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/1/5777980E886C29F0060C3A073B6E681A8A70574B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:dd:89:74:72:3c:7e:2d:55:94:f4:92:99:60:06:7f:8c:ad:
         cd:62:b7:cc:b9:0f:df:82:1e:dc:a9:fd:88:52:f4:ca:6e:ba:
         3b:b6:77:68:90:55:14:3d:22:e0:4d:c5:7d:31:11:bc:68:1e:
         e2:b7:45:36:b0:a0:99:70:9a:1f:ca:fc:06:8b:e4:69:aa:af:
         dc:29:5a:38:06:12:36:c6:da:b3:6b:f4:30:26:7f:00:14:03:
         04:1f:48:04:08:1e:d5:fa:4a:1e:9c:61:8a:8c:78:47:9d:d5:
         78:14:7b:1c:77:a0:ce:c1:32:93:56:7a:3b:21:e1:a5:50:68:
         bf:5f:61:ca:ba:68:31:1b:07:76:6a:d5:6b:ef:92:d4:67:e3:
         83:59:ce:0f:c4:1b:b6:e9:2e:32:26:e4:61:39:47:94:5c:26:
         60:de:71:fe:50:69:7e:a5:94:af:e0:96:25:c4:47:5f:90:04:
         7a:7b:5f:5f:66:cd:a1:12:bf:2a:8b:93:a0:d2:c9:4c:3c:9a:
         11:d8:ed:6c:2c:ac:16:60:cb:80:f6:62:91:fb:fa:84:e2:3d:
         14:91:b4:03:28:5b:ca:4b:db:a0:cf:26:9f:25:97:b6:aa:91:
         d4:67:97:33:ef:ac:70:70:17:fa:f0:0a:f2:69:ac:12:da:ca:
         91:f4:3f:0f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUO+xKfwszEI5mVbZJSkXZBbKxOQ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTc3Nzk4MGU4ODZjMjlmMDA2MGMzYTA3M2I2ZTY4MWE4
YTcwNTc0YjAeFw0yNDExMjIxODE5MjRaFw0yNDExMjMyMDQ3MjRaMDMxMTAvBgNV
BAMTKDMwRThCMUI4ODgxREU0RDkxMUJDRDMxRkUwMjlEQUZCRDVCQjFDOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyke2LVOg+O2FtY4f9BXmQLIlV
OreRFyuwJtFERIBrQhuwfUBn2yRrHv2XL5kpALbvvh6/qGV5sNqLsoS6btj+xF2H
XeDNStFlESDGVw5VroQAd2HLlQhpQMabVj4RyCB3Vyi4sGX1HbsQCWRzzkDpHThv
lFd76cIChLjIRjGCXkpQU8n7oezBdne8RAaBtQ95lsjEB9ua5tebK8YIq9Uow7aF
x2tYBEqvczUmqhpruU7qNh8ciniMaEkM9vIIHl8knIklspBWObrMf8OzBzXPhCGp
5py4iJEUTYeOC5EbEPY20fDGqiriT9kvgqb0ocBLxclSF/LStzRaz1UvNolXAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMOixuIgd5NkRvNMf4Cna+9W7HJowHwYDVR0j
BBgwFoAUV3eYDohsKfAGDDoHO25oGopwV0swDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5
M2U2LzEvNTc3Nzk4MEU4ODZDMjlGMDA2MEMzQTA3M0I2RTY4MUE4QTcwNTc0Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1YzZVlEb2hzS2ZBR0REb0hPMjVvR29w
d1Ywcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03
ZjQxLTRhNmItOTQzNC1jYzgwZGNhMDkzZTYvMS81Nzc3OTgwRTg4NkMyOUYwMDYw
QzNBMDczQjZFNjgxQThBNzA1NzRCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnt2JdHI8fi1VlPSSmWAG
f4ytzWK3zLkP34Ie3Kn9iFL0ym66O7Z3aJBVFD0i4E3FfTERvGge4rdFNrCgmXCa
H8r8Bovkaaqv3ClaOAYSNsbas2v0MCZ/ABQDBB9IBAge1fpKHpxhiox4R53VeBR7
HHegzsEyk1Z6OyHhpVBov19hyrpoMRsHdmrVa++S1Gfjg1nOD8QbtukuMibkYTlH
lFwmYN5x/lBpfqWUr+CWJcRHX5AEentfX2bNoRK/KouToNLJTDyaEdjtbCysFmDL
gPZikfv6hOI9FJG0AyhbykvboM8mnyWXtqqR1GeXM++scHAX+vAK8mmsEtrKkfQ/
Dw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:54:49 2024 by rpki-client on console-fra.rpki-client.org