Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
File:                     6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft (raw, json)
Hash identifier:          6JcA6QTHd2KshNHmaZULRbHTpkhJ6FZbcoFPYDsiMd0=
Subject key identifier:   C4:63:ED:7A:BE:FE:E6:F3:00:CD:09:56:6F:68:0E:9F:65:83:C0:EC
Authority key identifier: 6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A
Certificate issuer:       /CN=6a3130acfbfba9017addef637acd312fc763829a
Certificate serial:       158B6B1FB15EDF02EB8CD6176A7537FBA36EA462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
Manifest number:          0195
Signing time:             Thu 21 Nov 2024 22:20:40 +0000
Manifest this update:     Thu 21 Nov 2024 22:15:40 +0000
Manifest next update:     Sat 23 Nov 2024 01:02:40 +0000
Files and hashes:         1: 6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl (hash: h4VGQwMfkeMV0ccSVqzsk3YA4ThYcJudr6IWJryPxcU=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8b:6b:1f:b1:5e:df:02:eb:8c:d6:17:6a:75:37:fb:a3:6e:a4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a3130acfbfba9017addef637acd312fc763829a
        Validity
            Not Before: Nov 21 22:15:40 2024 GMT
            Not After : Nov 23 01:02:40 2024 GMT
        Subject: CN=C463ED7ABEFEE6F300CD09566F680E9F6583C0EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:14:90:73:78:86:f3:b0:4c:42:d7:7d:22:81:
                    cf:b7:4b:2e:41:7f:59:be:a5:67:3c:f5:56:08:8e:
                    7d:59:44:ad:f3:35:79:5b:a4:4f:b6:21:dc:cf:bc:
                    e4:7f:b2:02:5b:82:e5:44:cd:73:54:2a:41:ee:58:
                    74:27:3b:0d:cd:14:13:b0:e9:b0:c4:b4:44:5d:f8:
                    ae:a6:c0:89:f1:42:6f:87:fb:0a:64:14:1e:1c:91:
                    ff:a3:83:3e:ea:ce:f5:42:68:d0:1d:4f:08:45:57:
                    28:58:13:b6:4f:aa:db:0a:34:1b:cb:df:4c:54:d9:
                    d4:ae:94:c4:7a:3c:4f:29:8d:95:ba:6c:db:3c:33:
                    a4:67:2a:b8:f1:aa:ac:b1:fa:ce:1f:4c:8f:01:6f:
                    59:6e:69:25:de:6a:3a:4a:69:0a:92:ff:ee:76:fc:
                    ef:4d:9d:1d:e0:ec:df:21:aa:82:4c:09:2d:be:49:
                    69:b7:12:7f:66:14:58:be:40:5e:b2:ae:0a:bb:01:
                    d3:33:c8:53:53:24:e3:56:5f:23:10:f8:e8:7e:b0:
                    b6:dc:33:55:73:c4:83:25:5f:ff:34:4e:45:2b:14:
                    22:e9:02:08:cc:2a:94:c0:cc:9f:10:8f:37:7a:1a:
                    a2:92:4e:85:81:1e:88:b3:33:e4:84:51:ae:72:2f:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:63:ED:7A:BE:FE:E6:F3:00:CD:09:56:6F:68:0E:9F:65:83:C0:EC
            X509v3 Authority Key Identifier:
                keyid:6A:31:30:AC:FB:FB:A9:01:7A:DD:EF:63:7A:CD:31:2F:C7:63:82:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajEwrPv7qQF63e9jes0xL8djgpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22a80682-c54c-4d5a-9456-b23925309732/1/6A3130ACFBFBA9017ADDEF637ACD312FC763829A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c9:aa:2f:06:cf:60:db:67:e9:9d:9a:d1:61:ec:af:93:1b:
         f8:b3:84:31:ee:c1:40:51:1e:18:73:34:51:b9:fb:64:a6:e6:
         28:d5:ae:a9:3c:1c:c9:1f:96:90:ec:af:ba:72:62:2e:00:c2:
         44:4d:61:ec:39:29:fe:af:33:60:bb:6f:9c:92:32:f3:3c:9d:
         72:a3:59:a4:30:74:90:ff:38:82:72:8e:e3:5d:ae:17:78:ea:
         39:9c:13:42:1b:43:d7:65:8b:f6:77:63:fd:be:a8:f0:a2:8d:
         8c:f2:86:30:4f:4a:e7:d0:28:fe:f5:be:99:b1:7a:8a:b4:70:
         fc:1d:7b:d0:cc:70:d2:0c:1c:fb:3d:4f:00:1a:12:1d:c0:50:
         84:82:68:bf:4d:53:a4:10:b7:88:e9:af:0c:1b:7d:02:43:bb:
         95:2b:69:8d:fa:91:df:60:42:17:07:fd:b0:23:02:fc:d8:e2:
         25:43:b2:e0:2d:fb:53:9e:6c:22:ce:80:97:ab:32:a5:b2:fc:
         ca:56:f7:7c:69:35:39:4b:2e:c6:f1:04:1c:aa:3a:d3:1e:d9:
         4e:f1:8d:2d:aa:7b:0b:09:cc:55:b3:4c:8a:63:c1:df:18:f9:
         78:85:3d:e2:7d:2a:0d:04:62:45:f5:70:56:00:dc:a8:66:b6:
         c6:56:b7:11
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUFYtrH7Fe3wLrjNYXanU3+6NupGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmEzMTMwYWNmYmZiYTkwMTdhZGRlZjYzN2FjZDMxMmZj
NzYzODI5YTAeFw0yNDExMjEyMjE1NDBaFw0yNDExMjMwMTAyNDBaMDMxMTAvBgNV
BAMTKEM0NjNFRDdBQkVGRUU2RjMwMENEMDk1NjZGNjgwRTlGNjU4M0MwRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkFJBzeIbzsExC130igc+3Sy5B
f1m+pWc89VYIjn1ZRK3zNXlbpE+2IdzPvOR/sgJbguVEzXNUKkHuWHQnOw3NFBOw
6bDEtERd+K6mwInxQm+H+wpkFB4ckf+jgz7qzvVCaNAdTwhFVyhYE7ZPqtsKNBvL
30xU2dSulMR6PE8pjZW6bNs8M6RnKrjxqqyx+s4fTI8Bb1luaSXeajpKaQqS/+52
/O9NnR3g7N8hqoJMCS2+SWm3En9mFFi+QF6yrgq7AdMzyFNTJONWXyMQ+Oh+sLbc
M1VzxIMlX/80TkUrFCLpAgjMKpTAzJ8Qjzd6GqKSToWBHoizM+SEUa5yL0w3AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUxGPter7+5vMAzQlWb2gOn2WDwOwwHwYDVR0j
BBgwFoAUajEwrPv7qQF63e9jes0xL8djgpowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjJhODA2ODItYzU0Yy00ZDVhLTk0NTYtYjIzOTI1MzA5
NzMyLzEvNkEzMTMwQUNGQkZCQTkwMTdBRERFRjYzN0FDRDMxMkZDNzYzODI5QS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FqRXdyUHY3cVFGNjNlOWplczB4TDhk
amdwby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMmE4MDY4Mi1j
NTRjLTRkNWEtOTQ1Ni1iMjM5MjUzMDk3MzIvMS82QTMxMzBBQ0ZCRkJBOTAxN0FE
REVGNjM3QUNEMzEyRkM3NjM4MjlBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMmqLwbPYNtn6Z2a0WHs
r5Mb+LOEMe7BQFEeGHM0Ubn7ZKbmKNWuqTwcyR+WkOyvunJiLgDCRE1h7Dkp/q8z
YLtvnJIy8zydcqNZpDB0kP84gnKO412uF3jqOZwTQhtD12WL9ndj/b6o8KKNjPKG
ME9K59Ao/vW+mbF6irRw/B170Mxw0gwc+z1PABoSHcBQhIJov01TpBC3iOmvDBt9
AkO7lStpjfqR32BCFwf9sCMC/NjiJUOy4C37U55sIs6Al6sypbL8ylb3fGk1OUsu
xvEEHKo60x7ZTvGNLap7CwnMVbNMimPB3xj5eIU94n0qDQRiRfVwVgDcqGa2xla3
EQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:19 2024 by rpki-client on console-fra.rpki-client.org