Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
File:                     A715A7C4243DFD5608AC7C5962055125B94D1763.mft (raw, json)
Hash identifier:          pT1mbbS2LFGH2hEIqsqbGxJxHXHnWxa1evG1FFh54MU=
Subject key identifier:   B9:67:CE:E1:95:A2:DA:D0:B5:39:2F:91:E5:7F:C8:54:20:B4:67:85
Authority key identifier: A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63
Certificate issuer:       /CN=a715a7c4243dfd5608ac7c5962055125b94d1763
Certificate serial:       36FEFB675B6ABB5F735CA182E6AF32EFE31B5802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
Manifest number:          02E5
Signing time:             Fri 17 May 2024 11:16:38 +0000
Manifest this update:     Fri 17 May 2024 11:11:38 +0000
Manifest next update:     Sat 18 May 2024 15:10:38 +0000
Files and hashes:         1: A715A7C4243DFD5608AC7C5962055125B94D1763.crl (hash: OGFAqh5SZr7DoXSGl40uw1TY/+oNhOBTrDo1N3rCFi0=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fe:fb:67:5b:6a:bb:5f:73:5c:a1:82:e6:af:32:ef:e3:1b:58:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a715a7c4243dfd5608ac7c5962055125b94d1763
        Validity
            Not Before: May 17 11:11:38 2024 GMT
            Not After : May 18 15:10:38 2024 GMT
        Subject: CN=B967CEE195A2DAD0B5392F91E57FC85420B46785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:c4:67:24:c0:04:55:19:d9:33:c6:60:3f:
                    65:e4:ee:73:ef:2c:9c:ca:e5:08:9b:3d:52:92:45:
                    a2:b8:24:9b:ea:c0:31:68:19:2b:26:0d:f1:8d:56:
                    e2:9e:a1:c7:11:d3:06:c0:94:59:ff:91:07:51:13:
                    0e:86:a2:ab:0d:66:8c:4b:2d:fa:d7:0f:72:1a:9b:
                    c9:ca:f0:8e:39:63:85:32:c3:c8:ea:d1:a4:87:f1:
                    3e:2e:da:e4:19:dc:c8:d9:70:da:e8:7d:5b:22:54:
                    40:15:b3:3a:f0:44:d1:1a:36:7d:3a:45:68:40:c3:
                    8b:9c:00:da:2b:28:45:6c:6c:bf:02:ce:46:8d:c4:
                    ce:2d:80:7b:cc:45:e9:1c:f1:b6:45:59:ec:15:6a:
                    57:e1:7a:f2:64:78:4f:12:c4:58:d1:a0:00:55:b3:
                    10:27:dd:39:56:10:2e:4b:f7:cd:cc:41:c8:65:42:
                    33:51:b1:f8:5b:61:ba:f0:0c:87:e1:2b:7d:71:41:
                    35:6d:9b:c6:98:62:8c:c4:65:5d:07:7d:5e:b6:b3:
                    57:63:c7:06:db:d4:bf:61:7c:b5:96:83:2d:12:ad:
                    e1:89:21:79:be:1e:cd:fb:18:53:94:59:d9:04:44:
                    23:ef:6a:4a:36:61:d1:55:31:98:f5:b4:1b:e9:9e:
                    83:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:67:CE:E1:95:A2:DA:D0:B5:39:2F:91:E5:7F:C8:54:20:B4:67:85
            X509v3 Authority Key Identifier:
                keyid:A7:15:A7:C4:24:3D:FD:56:08:AC:7C:59:62:05:51:25:B9:4D:17:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:11:3d:65:63:52:3a:48:66:a8:43:9d:6b:8c:0e:b5:53:e7:
         2f:57:ac:ee:e9:df:38:97:dc:58:c1:0c:c5:19:02:57:0d:77:
         f6:54:5f:7a:c2:5f:da:b7:d5:e8:6e:1b:93:fa:5d:c8:10:85:
         48:ca:de:e5:37:9d:3d:1c:bf:fa:60:60:7b:6b:40:ec:f9:67:
         df:26:b6:65:7d:2e:16:e6:b8:e7:91:f0:88:7e:4f:a6:a8:3a:
         bd:7d:ee:c5:e9:fd:75:e3:5c:29:1e:2a:1d:5f:68:fa:d5:6f:
         11:d8:60:76:b6:86:15:9e:26:d2:69:66:1f:9b:8b:d2:d0:bb:
         03:93:06:e7:b9:5f:85:90:d4:ab:71:b9:92:1c:e2:dc:c3:fc:
         25:ca:f1:c0:07:56:12:76:a1:61:67:7d:d8:f5:63:42:d2:73:
         32:3c:0e:63:d8:1e:a4:40:a7:16:53:f6:bd:7f:e8:91:f8:21:
         bc:aa:73:a0:cd:61:74:16:84:7c:a4:8a:ba:0f:67:89:96:f1:
         00:2e:09:74:7e:4d:7f:de:33:87:ed:46:c8:be:f8:fa:55:2f:
         d3:75:63:ed:5c:23:72:dc:19:4c:8e:4d:44:94:99:bc:07:d0:
         d2:5d:68:00:fd:76:e9:27:f9:6f:7e:60:a9:ab:f3:bf:7f:a1:
         40:0d:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 13:32:18 2024 by rpki-client on console-fra.rpki-client.org