Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/3/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.mft
File:                     9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.mft (raw, json)
Hash identifier:          oFEo1vyWlZF2up7mbcNL8P6cx2Kzc4eoDX92JNnWzow=
Subject key identifier:   2E:98:64:6C:0B:95:9A:0F:16:EE:BE:84:17:D8:1C:18:C1:35:75:D4
Authority key identifier: 9A:AD:F7:1F:F5:1D:95:2A:77:F5:64:D5:BA:37:3A:7D:55:BC:9C:0A
Certificate issuer:       /CN=9AADF71FF51D952A77F564D5BA373A7D55BC9C0A
Certificate serial:       7D1A1410D73B6DAC9656ECCF93DBD9CEBB064AAC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/3/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.mft
Manifest number:          8E
Signing time:             Thu 17 Oct 2024 17:01:25 +0000
Manifest this update:     Thu 17 Oct 2024 16:56:25 +0000
Manifest next update:     Fri 18 Oct 2024 20:16:25 +0000
Files and hashes:         1: 9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.crl (hash: 6S9q2MYRfF6mJiI/Y3mbesewYb2hRnvO3m2/1hjMONk=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/3/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/3/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Oct 2024 05:32:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:1a:14:10:d7:3b:6d:ac:96:56:ec:cf:93:db:d9:ce:bb:06:4a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AADF71FF51D952A77F564D5BA373A7D55BC9C0A
        Validity
            Not Before: Oct 17 16:56:25 2024 GMT
            Not After : Oct 18 20:16:25 2024 GMT
        Subject: CN=2E98646C0B959A0F16EEBE8417D81C18C13575D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:95:e1:4b:1d:cb:47:53:35:17:e0:63:0e:
                    7d:36:f7:48:b1:4f:f6:a3:c1:8a:ac:a9:9f:68:a2:
                    f6:5a:d7:00:f0:68:9a:fc:94:bd:66:48:55:07:1b:
                    f8:7a:a9:28:1d:e2:dc:4a:02:ed:ca:7b:8f:17:4e:
                    db:76:38:ac:15:73:23:5c:02:98:d5:cb:b7:df:ac:
                    30:d8:cb:88:f4:f0:9b:34:e1:5c:88:32:4c:8c:fb:
                    eb:78:81:31:29:b3:b7:ca:f3:61:24:8a:d4:f3:26:
                    b4:a6:81:eb:a0:08:75:f0:e2:96:84:f0:4e:86:b7:
                    08:95:9f:2f:49:e9:98:8e:aa:23:b7:bd:80:9f:97:
                    13:68:d7:33:6d:d1:59:f1:35:24:93:b8:f4:30:f6:
                    35:17:bf:1e:c1:5a:dc:e7:ef:9b:e8:cc:07:c9:b4:
                    12:dc:8b:f2:a0:fe:f8:ab:8a:f4:92:27:b8:2b:8c:
                    0a:f9:66:92:b1:67:24:6b:f0:6f:c9:9a:57:6d:45:
                    d0:9c:2a:50:7e:31:58:a3:74:88:5c:52:d9:11:17:
                    fe:50:b0:7b:b9:09:c7:5c:b7:1b:b7:ce:9b:fa:ee:
                    a9:04:b9:ea:49:9e:d1:fc:d8:d0:e6:17:cd:2a:83:
                    e5:db:76:70:cb:97:61:66:dd:63:dd:9d:9f:46:b6:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:98:64:6C:0B:95:9A:0F:16:EE:BE:84:17:D8:1C:18:C1:35:75:D4
            X509v3 Authority Key Identifier:
                keyid:9A:AD:F7:1F:F5:1D:95:2A:77:F5:64:D5:BA:37:3A:7D:55:BC:9C:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/3/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/3/9AADF71FF51D952A77F564D5BA373A7D55BC9C0A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:b5:33:d2:4f:b6:bf:56:20:96:f5:e8:89:6a:b2:c9:37:e0:
         00:c2:5a:53:4b:85:6e:4c:a7:9a:f8:3b:b5:5a:95:ec:be:61:
         39:47:c1:40:a1:d0:ba:41:3b:de:ce:54:e4:9f:c6:ae:af:01:
         18:92:e8:a4:38:a1:a9:63:85:79:70:6b:9d:ce:7c:59:06:c7:
         43:fc:64:37:aa:cf:37:38:08:20:37:64:66:e5:39:29:8d:a1:
         7e:f8:8e:82:89:53:94:b0:9f:aa:5e:2c:24:a7:ce:ff:97:2f:
         c8:28:55:31:9a:bd:1c:f5:49:8a:40:e7:43:36:3c:b5:0e:bb:
         d5:e0:24:ae:53:db:77:6d:99:9b:cb:80:ed:5d:4b:cf:24:01:
         33:dd:77:02:06:cd:a5:51:be:f9:43:04:4b:16:d4:68:73:3a:
         8e:d2:74:71:ea:2e:21:4d:a8:09:11:fa:bf:d5:c3:1e:20:23:
         8e:20:9b:0c:ac:f6:48:06:4e:dd:d0:56:a3:bc:ef:cc:3b:9d:
         68:a6:38:5a:46:fa:ce:96:a2:11:d5:5c:37:34:76:d5:a6:2a:
         90:dd:57:89:0d:5a:5a:12:54:e0:84:96:e3:c2:26:a8:09:ed:
         56:be:fb:59:5a:ee:bd:3e:42:ae:3e:53:24:29:6b:71:ca:66:
         c5:64:21:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 19:48:22 2024 by rpki-client on console-ams.rpki-client.org