Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
File:                     8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft (raw, json)
Hash identifier:          MDXetgsvze9hpSYg07IAbpWwJNzl48od48FpwT/w9hY=
Subject key identifier:   B6:E6:9C:6E:C7:E1:49:24:7F:4C:A6:DF:99:3F:C4:47:38:70:21:59
Authority key identifier: 8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25
Certificate issuer:       /CN=8be214db337d726a1fac5ffb2e9da105f2e42025
Certificate serial:       0C665479924DA63F60BDA96354B36C89150ABD34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
Manifest number:          F7
Signing time:             Mon 25 Nov 2024 01:17:57 +0000
Manifest this update:     Mon 25 Nov 2024 01:12:57 +0000
Manifest next update:     Tue 26 Nov 2024 02:32:57 +0000
Files and hashes:         1: 8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl (hash: +/2vS5LbQGENqLX1oJEGTVREU2ymClRDUbBpcaDd0aY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:66:54:79:92:4d:a6:3f:60:bd:a9:63:54:b3:6c:89:15:0a:bd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8be214db337d726a1fac5ffb2e9da105f2e42025
        Validity
            Not Before: Nov 25 01:12:57 2024 GMT
            Not After : Nov 26 02:32:57 2024 GMT
        Subject: CN=B6E69C6EC7E149247F4CA6DF993FC44738702159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:f6:86:31:db:99:4c:96:ac:94:89:fa:59:
                    c8:f3:00:94:ea:3c:3f:e8:da:7b:ff:33:ef:02:02:
                    f1:a0:a4:c8:18:16:dc:4f:b5:96:62:9e:ca:53:d3:
                    24:c7:39:ab:7d:6c:a1:37:3e:5b:3e:54:bd:92:58:
                    ee:58:fb:20:47:fb:30:0b:c3:17:1f:77:27:9e:63:
                    11:41:a4:99:3f:ee:40:33:56:0f:b7:8a:e8:48:5f:
                    04:be:20:30:0c:96:e9:ce:7a:9f:9e:da:61:b3:6a:
                    5f:68:7a:5d:25:85:bd:3c:8a:1a:67:5b:f0:81:73:
                    a6:cb:67:01:b9:06:6b:f6:b0:03:79:75:15:4d:d3:
                    8f:64:ea:af:56:95:15:be:05:d9:92:7f:64:da:79:
                    43:ce:ca:c9:5a:e9:7b:ac:45:b1:85:cd:ca:c6:ad:
                    db:27:bb:d4:b7:02:bb:d1:7b:e4:96:43:fc:e4:1d:
                    0f:f1:56:0f:ac:9b:ae:15:21:5a:8b:fe:8e:a0:89:
                    bc:54:aa:54:22:e7:c6:c7:01:10:a9:b6:c1:cd:37:
                    fe:e5:85:b6:62:aa:5c:21:a0:0d:ce:28:06:1b:c4:
                    0c:b8:94:86:b6:87:d5:f1:d9:ad:96:70:2c:79:f7:
                    49:9f:17:09:d1:12:15:7f:93:55:44:07:86:5c:4c:
                    f6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E6:9C:6E:C7:E1:49:24:7F:4C:A6:DF:99:3F:C4:47:38:70:21:59
            X509v3 Authority Key Identifier:
                keyid:8B:E2:14:DB:33:7D:72:6A:1F:AC:5F:FB:2E:9D:A1:05:F2:E4:20:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-IU2zN9cmofrF_7Lp2hBfLkICU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1451df30-3dfe-4502-a1cf-13435839da0a/0/8BE214DB337D726A1FAC5FFB2E9DA105F2E42025.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:38:bf:9f:11:3a:8c:94:a2:fa:19:a2:1c:24:85:5f:ae:c4:
         31:45:62:bc:e5:dd:ef:02:ae:a6:22:62:e0:4c:0a:68:2b:77:
         bc:d5:29:8b:6e:0e:22:51:7f:99:e3:5a:dc:3d:df:4d:49:ce:
         7b:b7:12:bc:82:2f:2d:d8:5f:d1:58:93:79:20:e6:4a:df:18:
         73:9b:83:7b:a6:0a:ec:e1:47:1d:89:48:f7:5e:75:f1:50:f2:
         23:ee:14:d9:cf:e5:57:58:05:36:80:d5:7a:d4:b5:a7:87:c6:
         90:b3:a2:6d:c5:f2:6a:cb:38:8f:3c:49:8c:a9:5c:ac:a6:57:
         e2:3d:79:fa:f9:98:50:d8:2c:ea:46:f0:01:9f:16:05:dd:43:
         e7:4a:ff:e4:e8:0b:ec:59:00:80:c5:5f:81:5c:ac:00:5c:f2:
         5f:03:62:b5:df:2c:ba:34:fb:7a:c8:50:9e:97:bf:be:2c:b7:
         1c:3a:13:5f:8d:b0:e1:18:bb:0f:58:d2:f7:45:4c:90:08:3d:
         4c:fb:2f:8f:da:b5:08:88:f6:21:d1:95:60:7f:2a:0f:28:14:
         ad:f7:28:fd:06:65:f7:d5:a0:09:69:cb:33:ec:8a:25:b3:1c:
         5d:8f:76:62:e4:99:ba:da:ac:03:4d:51:68:ea:9d:b7:e5:41:
         b7:d1:c4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 03:29:11 2024 by rpki-client on console-ams.rpki-client.org