Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File:                     6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier:          wqF5uHPN3ZDqgKEEvFs8XMtWE/AUjROjIqMp4/GXp7E=
Subject key identifier:   65:66:B5:EE:1A:5B:10:0E:75:F7:64:E4:C7:72:66:2D:AD:0E:C7:2C
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       17B08D0CFC09F7750B18433A132F707A5C519593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number:          9A
Signing time:             Fri 17 May 2024 17:34:10 +0000
Manifest this update:     Fri 17 May 2024 17:29:10 +0000
Manifest next update:     Sat 18 May 2024 18:47:10 +0000
Files and hashes:         1: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: vo1fSGmhZQkeLYjpgskDft94xNcmWuvPCXf3W5wGf3M=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b0:8d:0c:fc:09:f7:75:0b:18:43:3a:13:2f:70:7a:5c:51:95:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: May 17 17:29:10 2024 GMT
            Not After : May 18 18:47:10 2024 GMT
        Subject: CN=6566B5EE1A5B100E75F764E4C772662DAD0EC72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4e:f0:94:09:1f:87:da:f9:b9:19:88:8f:f3:
                    df:f7:e9:9d:a2:be:9c:47:7e:2b:29:0c:90:7f:38:
                    9d:77:cd:a0:2b:92:c0:87:c5:70:34:92:64:92:7d:
                    55:46:57:b4:49:66:5a:11:49:31:37:93:bd:ed:f1:
                    7a:e8:f6:bd:b0:52:29:02:aa:be:34:02:1b:b4:fa:
                    b0:eb:9b:6b:fc:20:21:f7:de:7f:60:36:c0:4a:f3:
                    8e:bc:fd:fb:85:08:f5:1b:d8:bc:79:a9:7d:02:c0:
                    48:37:77:75:43:e5:55:cc:f6:b0:c5:62:40:a8:45:
                    d6:a0:42:3e:03:29:be:44:6a:f6:55:93:96:66:24:
                    85:a1:7d:6c:ad:f4:2d:b4:0a:1e:05:97:cf:8f:09:
                    64:13:f0:c1:90:fb:39:a9:f2:9c:b6:c5:90:c5:3e:
                    f8:96:c4:f8:17:ee:38:1f:75:c4:17:02:af:9a:f6:
                    7b:cc:34:52:20:b1:f5:2b:f5:08:05:bb:c7:22:21:
                    3e:8e:33:f9:45:29:e2:40:ce:81:17:cb:eb:a1:84:
                    5b:7c:1e:df:87:83:9d:06:34:0b:2a:90:34:b9:9c:
                    28:64:12:d3:15:82:1b:8c:6c:f6:8a:f9:62:d7:b6:
                    a7:8e:52:d3:c6:d7:57:84:a7:11:61:ec:f6:9b:84:
                    08:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:B5:EE:1A:5B:10:0E:75:F7:64:E4:C7:72:66:2D:AD:0E:C7:2C
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:db:12:23:b4:e3:8e:8a:ea:d6:e4:b7:17:08:e4:d6:fa:e8:
         6d:3c:50:cc:e9:7a:37:75:79:52:4d:75:b1:76:f8:f9:27:51:
         54:fa:e7:55:22:c6:ef:f3:f3:c5:5f:0e:57:1d:16:67:34:68:
         a4:71:55:06:9f:0f:f7:ed:65:9d:5b:8d:d1:5a:da:08:4b:62:
         5e:1e:33:b8:27:10:e5:13:44:ac:ca:a5:17:a4:45:54:84:1f:
         3c:06:e5:c5:04:ad:bd:39:15:dc:77:95:2c:85:f1:25:e7:05:
         02:ca:fe:fc:65:58:40:7e:0b:ce:8f:d9:20:ce:df:5b:f5:0f:
         5d:df:2a:3b:3d:8e:42:bf:6c:b2:10:7b:42:94:f3:3d:7a:47:
         84:2f:e2:fa:9e:1d:11:e0:a4:1a:fe:9b:9a:67:1a:d4:f6:7b:
         44:3d:eb:b3:47:c5:33:73:1e:71:1f:7b:24:97:3a:08:0d:ff:
         11:a8:d9:5c:a8:16:f7:2d:24:f6:7b:d2:d0:32:a6:fc:2d:bd:
         e4:c3:70:f3:9a:f7:94:67:88:be:2d:4b:b6:92:a9:4c:2c:73:
         cd:e4:c1:24:47:17:48:14:b8:74:3c:0d:74:40:03:34:d4:bd:
         0d:a6:04:97:bc:e0:f5:75:0b:40:ac:e2:a9:da:46:61:68:56:
         46:21:f0:5b
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUF7CNDPwJ93ULGEM6Ey9welxRlZMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmEzMTMwYWNmYmZiYTkwMTdhZGRlZjYzN2FjZDMxMmZj
NzYzODI5YTAeFw0yNDA1MTcxNzI5MTBaFw0yNDA1MTgxODQ3MTBaMDMxMTAvBgNV
BAMTKDY1NjZCNUVFMUE1QjEwMEU3NUY3NjRFNEM3NzI2NjJEQUQwRUM3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMTvCUCR+H2vm5GYiP89/36Z2i
vpxHfispDJB/OJ13zaArksCHxXA0kmSSfVVGV7RJZloRSTE3k73t8Xro9r2wUikC
qr40Ahu0+rDrm2v8ICH33n9gNsBK8468/fuFCPUb2Lx5qX0CwEg3d3VD5VXM9rDF
YkCoRdagQj4DKb5EavZVk5ZmJIWhfWyt9C20Ch4Fl8+PCWQT8MGQ+zmp8py2xZDF
PviWxPgX7jgfdcQXAq+a9nvMNFIgsfUr9QgFu8ciIT6OM/lFKeJAzoEXy+uhhFt8
Ht+Hg50GNAsqkDS5nChkEtMVghuMbPaK+WLXtqeOUtPG11eEpxFh7PabhAghAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUZWa17hpbEA5192Tkx3JmLa0OxywwHwYDVR0j
BBgwFoAUajEwrPv7qQF63e9jes0xL8djgpowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5
NzMyLzEvNkEzMTMwQUNGQkZCQTkwMTdBRERFRjYzN0FDRDMxMkZDNzYzODI5QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FqRXdyUHY3cVFGNjNlOWplczB4TDhk
amdwby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmE4MDY4Mi1j
NTRjLTRkNWEtOTQ1Ni1iMjM5MjUzMDk3MzIvMS82QTMxMzBBQ0ZCRkJBOTAxN0FE
REVGNjM3QUNEMzEyRkM3NjM4MjlBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA9sSI7Tjjorq1uS3Fwjk
1vrobTxQzOl6N3V5Uk11sXb4+SdRVPrnVSLG7/PzxV8OVx0WZzRopHFVBp8P9+1l
nVuN0VraCEtiXh4zuCcQ5RNErMqlF6RFVIQfPAblxQStvTkV3HeVLIXxJecFAsr+
/GVYQH4Lzo/ZIM7fW/UPXd8qOz2OQr9sshB7QpTzPXpHhC/i+p4dEeCkGv6bmmca
1PZ7RD3rs0fFM3MecR97JJc6CA3/EajZXKgW9y0k9nvS0DKm/C295MNw85r3lGeI
vi1LtpKpTCxzzeTBJEcXSBS4dDwNdEADNNS9DaYEl7zg9XULQKziqdpGYWhWRiHw
Ww==
-----END CERTIFICATE-----
Generated at Fri May 17 19:34:26 2024 by rpki-client on console-fra.rpki-client.org