Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
File:                     29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft (raw, json)
Hash identifier:          B7qOJEyijKFEegU/OwIKK1a8CZsR6Eq/CWw9PYh7Syc=
Subject key identifier:   7F:1F:45:8C:F3:61:6C:F4:1F:43:E7:42:EB:83:83:FE:C6:45:3D:47
Authority key identifier: 29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF
Certificate issuer:       /CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
Certificate serial:       1D0949D6AB90811E281F7E9D1555B10F2E8E8D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
Manifest number:          025E
Signing time:             Fri 17 May 2024 11:16:37 +0000
Manifest this update:     Fri 17 May 2024 11:11:37 +0000
Manifest next update:     Sat 18 May 2024 11:20:37 +0000
Files and hashes:         1: 29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl (hash: RX+C2vlmho3MpB/M+EuuQkAh3jP38s+jdne4hpnVfDk=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:09:49:d6:ab:90:81:1e:28:1f:7e:9d:15:55:b1:0f:2e:8e:8d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c9c8ca32a12de7c686b5240d01173fc43c71ff
        Validity
            Not Before: May 17 11:11:37 2024 GMT
            Not After : May 18 11:20:37 2024 GMT
        Subject: CN=7F1F458CF3616CF41F43E742EB8383FEC6453D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:ae:3c:d6:ee:74:84:49:f1:23:fc:21:a2:
                    43:e0:76:0e:1c:54:01:eb:13:45:02:8f:41:18:bc:
                    6e:55:67:0b:f8:f0:fd:af:e2:2d:11:c4:03:9a:0f:
                    bd:7b:cb:df:ad:42:1c:85:5d:62:f0:1f:3c:19:68:
                    f3:7b:4b:5b:65:5e:06:97:cf:d5:c1:67:1b:63:e6:
                    37:7b:c9:83:e8:25:38:8c:aa:63:6a:59:29:18:6b:
                    34:4b:80:98:79:16:d1:a4:4b:08:e5:71:f6:42:2c:
                    32:9e:1b:4a:88:4d:37:f6:6c:3f:36:42:49:b1:19:
                    2c:b6:cf:e4:4a:76:ad:db:59:79:24:e7:ac:47:29:
                    3b:72:97:84:c4:80:7c:6d:c7:ee:ff:87:bb:4a:f2:
                    69:91:5a:55:03:17:f9:f0:b3:f7:df:48:7f:71:ea:
                    cc:bf:c4:74:9f:2c:03:4b:78:08:16:a3:26:46:22:
                    00:9c:8b:73:d1:d4:d6:47:4f:8b:c1:7e:b6:8d:6b:
                    41:71:c2:6b:35:4a:f8:c5:64:3b:1f:7b:4b:40:29:
                    89:8f:0e:45:71:3d:1e:ec:6b:9e:4c:db:04:ff:e3:
                    48:3c:d3:b3:1b:dd:83:ab:cd:fe:cf:f1:c1:83:28:
                    ea:a0:a0:63:94:fb:79:e7:9a:ec:e1:04:7b:b7:8e:
                    a7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:1F:45:8C:F3:61:6C:F4:1F:43:E7:42:EB:83:83:FE:C6:45:3D:47
            X509v3 Authority Key Identifier:
                keyid:29:C9:C8:CA:32:A1:2D:E7:C6:86:B5:24:0D:01:17:3F:C4:3C:71:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcnIyjKhLefGhrUkDQEXP8Q8cf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/29C9C8CA32A12DE7C686B5240D01173FC43C71FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:2b:30:c1:8a:8c:3f:2e:ee:9f:98:f8:ab:a7:1a:e5:00:1e:
         f0:c1:d2:75:35:bb:8c:c2:a1:64:e5:c6:e0:f7:b3:b9:22:4f:
         cf:29:50:57:bf:ef:cb:aa:3e:b9:e0:df:c0:a1:7b:0e:7f:f5:
         88:81:48:2e:9f:05:67:2d:e4:87:c6:59:6b:57:3b:98:d9:fc:
         20:30:2c:32:14:92:a0:a2:17:3c:60:a2:dd:b7:ff:3b:ff:a9:
         24:7a:6a:ff:90:33:32:ac:5f:f1:d8:fb:58:53:18:11:08:da:
         91:c0:31:1d:19:39:0b:6f:b6:ef:03:fa:a7:18:dd:80:ad:46:
         e0:0e:74:cf:9b:e5:9c:36:b6:1f:0f:6e:4f:e8:46:ba:7b:48:
         13:9a:7e:64:45:6d:94:68:09:56:e4:86:b2:0c:0a:46:d7:1d:
         58:ce:92:19:e2:63:81:96:c7:17:08:a1:29:bd:1e:b9:09:58:
         ed:bf:c5:73:12:9d:34:45:47:57:96:06:95:9b:98:fe:c6:76:
         d6:8f:2f:d4:cb:66:99:5f:01:d5:07:c9:e8:81:c8:43:ea:cc:
         8c:3e:cd:20:41:2a:b7:90:69:7b:e6:69:ee:c4:25:13:52:bd:
         f9:22:90:f3:db:45:21:9f:3a:84:34:8d:e8:b2:c7:9b:5d:89:
         7c:8c:70:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:34:43 2024 by rpki-client on console-ams.rpki-client.org