Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/0/FD2912C83AA417061DDF99CDAED060E6F3D1E295.mft
File:                     FD2912C83AA417061DDF99CDAED060E6F3D1E295.mft (raw, json)
Hash identifier:          TW+aRIcJDrXCYDpalJJwfBxYLLlOvBnnzV5DsOKk5O4=
Subject key identifier:   ED:DB:1A:06:15:83:57:AA:1D:BE:24:D7:F9:7D:24:5A:03:78:0B:B6
Authority key identifier: FD:29:12:C8:3A:A4:17:06:1D:DF:99:CD:AE:D0:60:E6:F3:D1:E2:95
Certificate issuer:       /CN=fd2912c83aa417061ddf99cdaed060e6f3d1e295
Certificate serial:       169EDB3ABFD91E98365976AD38B4476FEA48DCFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SkSyDqkFwYd35nNrtBg5vPR4pU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/0/FD2912C83AA417061DDF99CDAED060E6F3D1E295.mft
Manifest number:          BA
Signing time:             Fri 17 May 2024 18:52:09 +0000
Manifest this update:     Fri 17 May 2024 18:47:09 +0000
Manifest next update:     Sat 18 May 2024 18:57:09 +0000
Files and hashes:         1: FD2912C83AA417061DDF99CDAED060E6F3D1E295.crl (hash: bcilGTwdQ4mp/eeweOmarIgysE84ixLstaqMNfiRYrw=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/0/FD2912C83AA417061DDF99CDAED060E6F3D1E295.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/0/FD2912C83AA417061DDF99CDAED060E6F3D1E295.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SkSyDqkFwYd35nNrtBg5vPR4pU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:9e:db:3a:bf:d9:1e:98:36:59:76:ad:38:b4:47:6f:ea:48:dc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd2912c83aa417061ddf99cdaed060e6f3d1e295
        Validity
            Not Before: May 17 18:47:09 2024 GMT
            Not After : May 18 18:57:09 2024 GMT
        Subject: CN=EDDB1A06158357AA1DBE24D7F97D245A03780BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ee:0a:be:3b:82:ca:4e:78:7d:09:93:26:a1:
                    08:b0:5f:a8:8d:a4:87:b0:4b:57:91:38:24:e6:b4:
                    16:65:ca:34:f9:64:94:04:f3:07:b0:a8:8a:1e:70:
                    1d:00:8e:c1:93:a2:29:9f:0b:5d:5f:de:03:dd:0e:
                    b8:95:7d:ca:4c:37:55:20:f5:10:f1:34:7a:62:73:
                    7e:d7:36:35:bd:31:f6:37:1d:28:c7:a8:02:f8:2f:
                    ad:0a:f4:f7:09:6c:46:31:80:72:41:4b:9d:b9:60:
                    54:67:85:f1:cb:7d:4f:a6:d8:c9:8a:f6:6b:0f:df:
                    2e:54:a1:cc:94:a8:28:7e:66:b1:07:17:2c:23:5f:
                    23:9c:33:b4:ab:61:37:7f:c2:ed:be:f1:52:d9:5e:
                    31:08:9c:74:71:49:16:8d:b8:40:ef:41:74:ee:eb:
                    fa:16:7a:a9:ba:d5:42:08:f8:4c:95:28:90:8c:45:
                    eb:14:0b:a5:1d:4c:72:64:bf:e9:1e:50:dc:46:21:
                    42:07:ad:d5:72:f0:45:0d:f7:3c:b3:bb:5a:24:13:
                    b5:97:81:d9:3d:e6:32:18:e3:14:a2:09:79:a7:b1:
                    bb:b3:c5:93:37:e8:32:ac:61:52:09:df:86:a9:ce:
                    cc:c8:75:f4:53:15:82:1f:33:0f:88:d8:7e:96:0b:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:DB:1A:06:15:83:57:AA:1D:BE:24:D7:F9:7D:24:5A:03:78:0B:B6
            X509v3 Authority Key Identifier:
                keyid:FD:29:12:C8:3A:A4:17:06:1D:DF:99:CD:AE:D0:60:E6:F3:D1:E2:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/0/FD2912C83AA417061DDF99CDAED060E6F3D1E295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SkSyDqkFwYd35nNrtBg5vPR4pU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/0/FD2912C83AA417061DDF99CDAED060E6F3D1E295.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:50:0e:51:45:69:d3:90:63:ca:d0:02:75:73:39:31:52:57:
         fb:8c:51:69:5a:c0:12:e1:72:dc:04:98:85:b1:70:7a:b6:ad:
         b8:dd:df:e5:46:36:d6:eb:e3:dc:15:84:ee:00:5b:c4:a6:b8:
         38:45:05:e5:32:13:3e:a1:ff:84:fe:63:a1:5e:b5:dc:0b:88:
         2c:4c:3a:30:ba:67:29:da:f4:f1:36:47:f7:5b:54:81:11:79:
         5c:f9:70:be:91:3b:8d:5d:e6:1d:6e:5a:86:51:d3:bc:7b:d5:
         cc:38:6b:99:7e:f7:f7:5a:66:75:00:f3:55:73:b1:fd:0f:cf:
         d8:c8:da:66:48:51:22:00:05:7b:00:d6:a8:5f:ee:8d:61:ef:
         d3:b6:45:91:d4:22:df:48:46:0b:1b:c3:a6:aa:ce:67:d8:55:
         95:5f:56:cf:6d:7f:32:f2:20:ec:a8:33:90:82:88:07:c9:bb:
         95:af:e3:3b:cf:3e:57:16:a2:bb:8d:a5:f0:5b:00:a4:e9:d5:
         37:e9:eb:ad:e5:b6:ae:f2:43:3c:19:63:5e:b0:f6:d0:75:ae:
         13:d3:d6:c6:ae:1f:51:9d:a1:10:f7:ec:ea:01:cd:37:6f:4d:
         5d:8b:e4:ba:ed:3b:ca:eb:d2:a3:47:a3:ab:f0:ca:55:5f:94:
         8f:f8:d0:9c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFp7bOr/ZHpg2WXatOLRHb+pI3P8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmQyOTEyYzgzYWE0MTcwNjFkZGY5OWNkYWVkMDYwZTZm
M2QxZTI5NTAeFw0yNDA1MTcxODQ3MDlaFw0yNDA1MTgxODU3MDlaMDMxMTAvBgNV
BAMTKEVEREIxQTA2MTU4MzU3QUExREJFMjREN0Y5N0QyNDVBMDM3ODBCQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK7gq+O4LKTnh9CZMmoQiwX6iN
pIewS1eROCTmtBZlyjT5ZJQE8wewqIoecB0AjsGToimfC11f3gPdDriVfcpMN1Ug
9RDxNHpic37XNjW9MfY3HSjHqAL4L60K9PcJbEYxgHJBS525YFRnhfHLfU+m2MmK
9msP3y5UocyUqCh+ZrEHFywjXyOcM7SrYTd/wu2+8VLZXjEInHRxSRaNuEDvQXTu
6/oWeqm61UII+EyVKJCMResUC6UdTHJkv+keUNxGIUIHrdVy8EUN9zyzu1okE7WX
gdk95jIY4xSiCXmnsbuzxZM36DKsYVIJ34apzszIdfRTFYIfMw+I2H6WC1BtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU7dsaBhWDV6odviTX+X0kWgN4C7YwHwYDVR0j
BBgwFoAU/SkSyDqkFwYd35nNrtBg5vPR4pUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMWQyMGJlNGMtOGRiMy00NWUxLTgxNjktMGYyZTQwODQx
MzJjLzAvRkQyOTEyQzgzQUE0MTcwNjFEREY5OUNEQUVEMDYwRTZGM0QxRTI5NS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19Ta1N5RHFrRndZZDM1bk5ydEJnNXZQ
UjRwVS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xZDIwYmU0Yy04
ZGIzLTQ1ZTEtODE2OS0wZjJlNDA4NDEzMmMvMC9GRDI5MTJDODNBQTQxNzA2MURE
Rjk5Q0RBRUQwNjBFNkYzRDFFMjk1Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXVAOUUVp05BjytACdXM5
MVJX+4xRaVrAEuFy3ASYhbFweratuN3f5UY21uvj3BWE7gBbxKa4OEUF5TITPqH/
hP5joV613AuILEw6MLpnKdr08TZH91tUgRF5XPlwvpE7jV3mHW5ahlHTvHvVzDhr
mX7391pmdQDzVXOx/Q/P2MjaZkhRIgAFewDWqF/ujWHv07ZFkdQi30hGCxvDpqrO
Z9hVlV9Wz21/MvIg7KgzkIKIB8m7la/jO88+Vxaiu42l8FsApOnVN+nrreW2rvJD
PBljXrD20HWuE9PWxq4fUZ2hEPfs6gHNN29NXYvkuu07yuvSo0ejq/DKVV+Uj/jQ
nA==
-----END CERTIFICATE-----
Generated at Fri May 17 20:14:51 2024 by rpki-client on console-ams.rpki-client.org