Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
File:                     42CC538CA37931CF39A85418E983E932F716DF8A.mft (raw, json)
Hash identifier:          nH/d7q0XsE943zZchvmctjiwfsWxrusfbkWUZGzzYa4=
Subject key identifier:   EE:D4:16:D8:AB:51:6D:BD:1B:48:F7:61:88:E3:BF:F6:3B:07:E8:53
Authority key identifier: 42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A
Certificate issuer:       /CN=42CC538CA37931CF39A85418E983E932F716DF8A
Certificate serial:       74B7158C14F0D034083834B7AFC6B971BC95CF9B
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/42CC538CA37931CF39A85418E983E932F716DF8A.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
Manifest number:          0199
Signing time:             Sun 24 Nov 2024 13:40:43 +0000
Manifest this update:     Sun 24 Nov 2024 13:35:43 +0000
Manifest next update:     Mon 25 Nov 2024 17:25:43 +0000
Files and hashes:         1: 42CC538CA37931CF39A85418E983E932F716DF8A.crl (hash: auMh8IC6shrQhYod/I6O5v7rdXMHVWZevtvlw5VVTGs=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/42CC538CA37931CF39A85418E983E932F716DF8A.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 04:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b7:15:8c:14:f0:d0:34:08:38:34:b7:af:c6:b9:71:bc:95:cf:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42CC538CA37931CF39A85418E983E932F716DF8A
        Validity
            Not Before: Nov 24 13:35:43 2024 GMT
            Not After : Nov 25 17:25:43 2024 GMT
        Subject: CN=EED416D8AB516DBD1B48F76188E3BFF63B07E853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:64:40:2d:68:7d:bd:06:e1:21:5d:81:5f:1a:
                    dd:94:8a:f3:2c:9f:97:d6:67:e8:f6:ea:c7:eb:fa:
                    0b:84:b1:64:a6:ed:79:1c:56:57:99:2a:1f:07:ce:
                    28:46:ff:09:1e:b2:2c:fa:0c:31:49:21:f1:7e:e6:
                    b0:42:d1:93:a4:6d:2d:87:98:d2:32:cf:c2:d1:ad:
                    3c:21:b1:0d:03:1e:ce:45:74:0b:6d:60:25:54:8f:
                    35:f9:4e:c5:44:d7:d5:16:58:40:d2:71:d0:6a:12:
                    21:1e:d3:f0:54:d6:12:44:5b:b3:6d:78:ac:3d:80:
                    23:c8:c8:ff:34:93:28:85:bd:1f:5a:07:48:06:f2:
                    fa:0d:47:29:2f:d3:b7:89:b6:80:49:d3:fb:8e:09:
                    df:f5:94:94:42:6f:a6:54:b4:04:bb:52:92:1f:1d:
                    62:5b:e2:f7:fa:7b:54:ae:c9:db:3f:90:00:d7:b4:
                    32:d0:a4:46:c5:c6:bb:65:45:4a:87:c0:d4:37:10:
                    67:6b:49:e6:53:d3:9b:72:6c:36:e1:75:fe:8f:a7:
                    53:8f:63:ed:8d:08:51:3a:bd:8a:d2:32:6f:0c:6c:
                    2d:a8:68:9c:12:af:fd:9f:15:8e:51:60:32:5c:5d:
                    f1:7b:32:3e:72:a4:44:9c:bd:97:1b:c7:bc:36:c7:
                    70:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D4:16:D8:AB:51:6D:BD:1B:48:F7:61:88:E3:BF:F6:3B:07:E8:53
            X509v3 Authority Key Identifier:
                keyid:42:CC:53:8C:A3:79:31:CF:39:A8:54:18:E9:83:E9:32:F7:16:DF:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/42CC538CA37931CF39A85418E983E932F716DF8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/0/42CC538CA37931CF39A85418E983E932F716DF8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3c:fd:d4:1b:53:33:c8:4c:6d:13:0b:89:a4:19:1d:a4:d6:
         2b:b5:8b:4a:80:ea:ea:24:d5:ed:f9:ef:e2:aa:d5:b2:c7:05:
         82:94:1f:c6:27:59:cb:73:19:c1:9c:d2:ae:ca:19:cc:a1:fe:
         6d:6a:4f:ea:78:e4:8f:fe:d8:c0:10:b6:da:ac:1a:c2:e5:84:
         bc:08:f9:12:e7:b0:a3:0a:21:16:f5:e5:14:a3:de:f0:d6:23:
         ee:c9:71:53:1a:53:72:f0:ae:be:c9:e5:5c:c7:a1:cb:b4:86:
         90:70:57:56:2b:4b:2a:21:e0:24:c8:96:8f:fd:86:cb:7c:4d:
         26:fb:88:ce:c2:17:27:53:01:c7:60:08:58:60:f7:00:aa:7f:
         26:3d:af:8a:e9:ce:be:29:95:c2:7a:b2:79:79:2b:61:6d:5e:
         50:c1:22:12:d1:26:6d:9b:38:b2:dd:e4:51:4c:cc:a7:b7:58:
         4b:85:a7:09:1f:fe:79:44:e7:00:cc:34:ad:b4:e7:ae:a1:9f:
         ba:54:2c:1f:8d:d5:8a:fa:34:3e:f8:5f:4f:53:ac:7e:48:15:
         a5:2b:4a:45:1a:f7:50:38:31:2b:64:7d:72:b1:b5:5c:9e:49:
         33:88:1b:63:ad:81:2c:5f:51:2c:1a:b4:f2:d6:4f:6c:63:64:
         94:d5:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 16:53:45 2024 by rpki-client on console-ams.rpki-client.org