Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File:                     A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier:          JWa7Rb8XS0mdkoLYMdsP1HgHbrzdsU1nL9krSETZ+Ns=
Subject key identifier:   97:7D:68:FF:B2:27:12:17:29:73:DE:F2:61:8E:22:75:61:8F:FF:6F
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer:       /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial:       5B53AF9D57F23BC399BCE74808D74C5E05B85371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number:          0476
Signing time:             Sun 16 Feb 2025 19:01:29 +0000
Manifest this update:     Sun 16 Feb 2025 18:56:29 +0000
Manifest next update:     Mon 17 Feb 2025 22:27:29 +0000
Files and hashes:         1: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: At4s0V1t3NwtGv6WanGXcV9V0EEBiApgwSQEdqA/Fug=)
                          2: 698CBB9E641A60FE66E1B58C92ACD281637ED767.cer (hash: tNwFc0wxK30edc2dJgBKjPLV9///2mnITAEpNIZ0d8k=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:53:af:9d:57:f2:3b:c3:99:bc:e7:48:08:d7:4c:5e:05:b8:53:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
        Validity
            Not Before: Feb 16 18:56:29 2025 GMT
            Not After : Feb 17 22:27:29 2025 GMT
        Subject: CN=977D68FFB22712172973DEF2618E2275618FFF6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:9d:10:d7:1b:66:0f:06:70:6f:b0:f6:a0:
                    23:51:7c:7c:de:3f:4b:57:46:94:7e:45:36:32:91:
                    42:68:69:0b:7b:09:57:12:d6:c8:dc:3c:ce:d4:aa:
                    09:07:00:ea:c3:d6:3d:eb:cd:b7:91:4f:31:7c:52:
                    c0:86:34:ab:f3:be:47:ef:91:f0:12:1a:e2:d5:cb:
                    38:c7:7f:ba:2a:a6:32:0a:47:84:c2:b7:82:7b:3e:
                    3a:ee:fd:e5:f2:19:bc:db:37:43:70:06:15:ea:4a:
                    f5:a7:58:8d:49:70:a5:c2:7e:f2:8f:97:2e:2a:48:
                    65:40:0f:aa:f2:d3:de:4b:d1:52:d5:ce:4a:f1:5d:
                    31:f3:f6:b0:d2:99:7c:c1:02:08:f6:0b:f9:94:da:
                    56:20:ce:af:78:74:cf:d5:a6:72:73:93:48:cf:15:
                    ce:e9:32:38:52:6e:08:82:27:4c:10:6d:42:45:e2:
                    93:20:38:7e:df:f0:84:12:7b:8c:87:68:c6:02:6c:
                    2f:96:22:0e:4c:d9:13:22:8d:d2:af:ce:d7:d6:64:
                    66:22:0f:14:84:c4:3a:8b:b2:a8:40:24:b2:e8:fe:
                    3b:2f:76:cd:65:cf:1c:77:d0:29:d5:86:a6:10:42:
                    cc:63:e4:df:21:37:25:b0:f6:c0:0f:4a:e3:7c:39:
                    a1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7D:68:FF:B2:27:12:17:29:73:DE:F2:61:8E:22:75:61:8F:FF:6F
            X509v3 Authority Key Identifier:
                keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:92:c9:2e:f0:10:5f:b0:df:b9:02:65:78:4f:36:1b:a2:8d:
         14:c2:36:56:b9:16:bb:f2:bd:99:68:21:59:a0:99:09:a0:47:
         17:a8:dd:04:2f:56:0d:bd:40:bc:0c:7e:52:6c:3a:2c:c1:d1:
         f5:0a:b0:08:a8:e3:49:cc:c6:ad:c5:85:4a:47:8f:21:25:61:
         f0:6e:fe:34:bc:18:2b:88:b0:05:87:75:72:9a:ca:93:b9:02:
         9a:ad:a7:33:e3:fa:ff:1a:d3:04:2e:79:2b:0b:a1:18:00:88:
         c3:41:28:97:d0:25:2f:08:c7:7b:16:0f:28:c7:8a:65:14:5b:
         15:5e:7e:58:6d:12:9d:6a:95:b1:c7:c1:04:fb:9a:b5:73:e3:
         9e:43:df:8f:6c:52:b4:a4:d0:eb:d1:d6:1e:a7:43:e2:fb:8c:
         2c:7f:3a:1e:2b:56:80:eb:cc:95:37:d7:c5:3e:c0:27:b8:4c:
         51:84:e2:32:50:ea:81:e8:2b:e4:60:51:7c:bf:9d:c3:9e:5c:
         3d:88:62:ba:b4:91:91:35:c0:ac:51:53:51:d5:46:d0:c7:a6:
         b5:e7:c3:b1:e7:30:bb:4e:4d:76:2d:93:f1:c2:2e:b5:ca:91:
         ea:13:4d:ff:1b:d6:a5:62:5e:e0:a3:d2:97:7d:d0:8b:8e:ef:
         86:81:43:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:01 2025 by rpki-client