Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
File:                     8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft (raw, json)
Hash identifier:          dFjvz7BTutEriI8E2NPF8WnKxEKUgVZvUepjLQFhXG4=
Subject key identifier:   F6:DD:33:77:CD:17:33:FE:97:0E:27:B2:1D:F2:94:FA:A4:1A:68:F2
Authority key identifier: 8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
Certificate issuer:       /CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Certificate serial:       46B3C2DDD4FCD78C2E0C0E8BB792E8A2091D1B3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
Manifest number:          DA
Signing time:             Sat 02 Nov 2024 18:32:48 +0000
Manifest this update:     Sat 02 Nov 2024 18:27:48 +0000
Manifest next update:     Sun 03 Nov 2024 22:21:48 +0000
Files and hashes:         1: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl (hash: IYny8KpZdirHPjCz2bdRO1V7xApxVIJF0ML1MogXrVg=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 03 Nov 2024 10:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b3:c2:dd:d4:fc:d7:8c:2e:0c:0e:8b:b7:92:e8:a2:09:1d:1b:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8be214db337d726a1fac5ffb2e9da105f2e42025
        Validity
            Not Before: Nov  2 18:27:48 2024 GMT
            Not After : Nov  3 22:21:48 2024 GMT
        Subject: CN=F6DD3377CD1733FE970E27B21DF294FAA41A68F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:fd:d7:51:ed:f5:b4:78:f3:e7:65:77:16:
                    bd:ed:f8:62:f1:b5:eb:76:73:f4:70:58:75:d5:d9:
                    d1:22:18:7e:ab:21:a0:07:2f:64:83:61:03:b9:d6:
                    8f:f2:fb:cd:8c:ff:7c:6c:bb:15:8d:e6:ab:bb:09:
                    74:09:69:ac:d6:6d:22:1a:52:b2:5f:78:f6:93:4b:
                    d8:b6:4c:7f:2b:af:9c:09:6b:58:8e:8c:df:58:d5:
                    59:9e:40:f9:d9:27:f0:ca:50:04:4a:fa:eb:f4:fd:
                    07:f0:ae:bc:cc:b6:37:21:5d:6e:22:ae:d5:b1:96:
                    d3:cb:65:42:08:28:99:13:a7:0f:9d:cd:ed:5e:2b:
                    ae:1b:2c:0d:06:a1:92:71:93:2f:e6:c2:1d:ec:22:
                    3c:b5:16:ab:0f:64:f6:30:88:87:21:ae:01:c0:ad:
                    a8:da:99:f8:db:f6:59:70:1e:df:01:57:f2:1a:09:
                    fe:0f:e5:8b:79:3f:ad:a9:e8:f0:23:8a:01:e8:6f:
                    bb:04:f1:e1:f4:7b:e1:ce:db:bd:cf:87:1f:0e:fb:
                    22:a8:84:44:9d:70:d7:89:ec:31:f3:03:df:9c:d1:
                    91:f7:18:e4:9a:99:0a:7a:de:ca:83:c5:b5:44:f4:
                    00:8d:57:53:22:23:b4:b8:3e:84:66:f1:d8:c0:af:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DD:33:77:CD:17:33:FE:97:0E:27:B2:1D:F2:94:FA:A4:1A:68:F2
            X509v3 Authority Key Identifier:
                keyid:8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:84:94:49:d2:3f:48:59:57:29:45:42:75:d1:eb:73:6b:c3:
         41:1b:d4:96:f5:9d:4f:af:96:2f:b4:3c:da:18:ea:34:cf:9e:
         67:97:5c:11:cf:37:7f:ad:ec:96:a3:cb:4c:4a:4a:80:2d:9a:
         f9:72:2d:94:b7:c5:cf:79:c3:c0:bc:a1:c3:df:e5:d4:17:4d:
         a1:e4:14:ff:f7:0b:f9:58:d0:df:e8:a2:2b:23:19:42:f9:db:
         c3:aa:a2:3a:12:f1:01:2f:2a:38:c6:7d:44:f3:e8:9e:90:43:
         56:2b:29:85:24:b3:62:29:40:6e:c7:66:f9:37:e4:09:af:67:
         0c:2d:c9:2c:a3:b1:59:3f:5b:9f:e2:63:cc:52:d5:ae:1c:0a:
         1d:22:a2:94:f0:44:2e:54:eb:ff:67:f9:9c:a4:37:b9:2c:9b:
         cc:de:7e:de:0e:0c:1b:3a:89:3a:e6:fd:7a:73:0d:3f:3a:c9:
         ff:6d:72:fa:2f:ce:43:4e:eb:8d:34:a5:82:b6:0f:e7:41:ee:
         81:95:8f:8c:b3:5d:0c:ae:b7:d3:73:a0:59:0c:81:ac:9d:dd:
         86:59:83:1e:0e:7f:38:07:01:e0:ce:3c:95:5e:58:c2:cc:ea:
         c2:8f:37:ee:ce:fa:17:1b:45:56:36:0d:08:7d:2f:c7:15:6e:
         32:42:ab:a7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIURrPC3dT814wuDA6Lt5LoogkdGz4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOGJlMjE0ZGIzMzdkNzI2YTFmYWM1ZmZiMmU5ZGExMDVm
MmU0MjAyNTAeFw0yNDExMDIxODI3NDhaFw0yNDExMDMyMjIxNDhaMDMxMTAvBgNV
BAMTKEY2REQzMzc3Q0QxNzMzRkU5NzBFMjdCMjFERjI5NEZBQTQxQTY4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvv3XUe31tHjz52V3Fr3t+GLx
tet2c/RwWHXV2dEiGH6rIaAHL2SDYQO51o/y+82M/3xsuxWN5qu7CXQJaazWbSIa
UrJfePaTS9i2TH8rr5wJa1iOjN9Y1VmeQPnZJ/DKUARK+uv0/QfwrrzMtjchXW4i
rtWxltPLZUIIKJkTpw+dze1eK64bLA0GoZJxky/mwh3sIjy1FqsPZPYwiIchrgHA
rajamfjb9llwHt8BV/IaCf4P5Yt5P62p6PAjigHob7sE8eH0e+HO273Phx8O+yKo
hESdcNeJ7DHzA9+c0ZH3GOSamQp63sqDxbVE9ACNV1MiI7S4PoRm8djAr/c5AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU9t0zd80XM/6XDieyHfKU+qQaaPIwHwYDVR0j
BBgwFoAUi+IU2zN9cmofrF/7Lp2hBfLkICUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTQ1MWRmMzAtM2RmZS00NTAyLWExY2YtMTM0MzU4Mzlk
YTBhLzAvOEJFMjE0REIzMzdENzI2QTFGQUM1RkZCMkU5REExMDVGMkU0MjAyNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ktSVUyek45Y21vZnJGXzdMcDJoQmZM
a0lDVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNDUxZGYzMC0z
ZGZlLTQ1MDItYTFjZi0xMzQzNTgzOWRhMGEvMC84QkUyMTREQjMzN0Q3MjZBMUZB
QzVGRkIyRTlEQTEwNUYyRTQyMDI1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYSUSdI/SFlXKUVCddHr
c2vDQRvUlvWdT6+WL7Q82hjqNM+eZ5dcEc83f63slqPLTEpKgC2a+XItlLfFz3nD
wLyhw9/l1BdNoeQU//cL+VjQ3+iiKyMZQvnbw6qiOhLxAS8qOMZ9RPPonpBDVisp
hSSzYilAbsdm+TfkCa9nDC3JLKOxWT9bn+JjzFLVrhwKHSKilPBELlTr/2f5nKQ3
uSybzN5+3g4MGzqJOub9enMNPzrJ/21y+i/OQ07rjTSlgrYP50HugZWPjLNdDK63
03OgWQyBrJ3dhlmDHg5/OAcB4M48lV5Ywszqwo837s76FxtFVjYNCH0vxxVuMkKr
pw==
-----END CERTIFICATE-----
Generated at Sat Nov 2 19:25:00 2024 by rpki-client on console-fra.rpki-client.org