Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
File:                     AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft (raw, json)
Hash identifier:          TPZzc8LjxK1yNwSVb9MNLUtv5ThkJQe5pUn/l1K4HxQ=
Subject key identifier:   4D:EF:36:E7:CB:D3:46:9E:80:6E:38:6B:41:CE:FC:87:B9:44:FB:4A
Authority key identifier: AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2
Certificate issuer:       /CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
Certificate serial:       1077591DD26D8696301CC9CFF9D3DC518E59AECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
Manifest number:          66
Signing time:             Fri 22 Nov 2024 10:17:25 +0000
Manifest this update:     Fri 22 Nov 2024 10:12:25 +0000
Manifest next update:     Sat 23 Nov 2024 13:19:25 +0000
Files and hashes:         1: AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl (hash: 9omrGM8/577Xar73ZhldJqefySmipLkABmsiKrXs4YI=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:77:59:1d:d2:6d:86:96:30:1c:c9:cf:f9:d3:dc:51:8e:59:ae:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad7bda1d05907a5fb9fa4e7e3cfb4b9ae21287c2
        Validity
            Not Before: Nov 22 10:12:25 2024 GMT
            Not After : Nov 23 13:19:25 2024 GMT
        Subject: CN=4DEF36E7CBD3469E806E386B41CEFC87B944FB4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e1:12:63:e5:35:f5:70:2a:a6:6a:25:27:19:
                    b6:ac:57:db:ba:35:44:71:33:bf:55:8f:11:0f:fd:
                    d8:7c:f8:29:67:11:f7:b3:03:52:8c:8a:c7:9a:0b:
                    ff:17:ad:28:be:eb:89:68:46:e9:fc:1a:2d:98:d6:
                    f8:de:88:f3:e9:6d:ad:58:80:66:b5:40:08:63:e2:
                    f8:77:67:b6:bd:a0:19:a8:98:ea:35:57:b1:f7:bf:
                    4c:41:6f:18:2f:88:70:bc:fc:63:12:bd:54:34:83:
                    e3:48:48:4b:8a:f0:2f:8d:7e:f9:ef:d7:35:03:2e:
                    41:b3:21:d7:26:92:37:a5:ee:7a:32:b8:bc:c9:db:
                    53:d7:83:98:88:d4:51:96:8f:c2:be:70:ea:c5:f1:
                    33:f9:f2:67:c1:ef:b7:04:98:aa:17:68:47:16:63:
                    74:df:09:68:68:4a:17:0c:45:4b:fb:f6:2b:51:37:
                    e6:82:f0:21:7a:64:eb:94:03:44:e9:7c:60:a8:73:
                    d5:ec:6f:15:7b:73:6e:a5:06:3e:f8:18:e6:7b:59:
                    e5:3c:c2:8b:36:47:1b:4e:90:7e:b1:fe:03:92:5e:
                    40:65:4e:fd:09:13:da:af:b8:6b:2c:26:dd:22:ef:
                    09:d6:1a:16:82:3f:21:f8:7d:d9:03:cd:52:56:ca:
                    7f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EF:36:E7:CB:D3:46:9E:80:6E:38:6B:41:CE:FC:87:B9:44:FB:4A
            X509v3 Authority Key Identifier:
                keyid:AD:7B:DA:1D:05:90:7A:5F:B9:FA:4E:7E:3C:FB:4B:9A:E2:12:87:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rXvaHQWQel-5-k5-PPtLmuISh8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/0/AD7BDA1D05907A5FB9FA4E7E3CFB4B9AE21287C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:89:c2:1b:cf:3f:aa:fa:a1:97:f5:3f:82:18:7f:f1:9c:ee:
         05:a2:61:8a:e2:d8:52:cc:35:ab:3d:2e:c7:45:b5:c6:b0:75:
         6d:02:3d:b2:39:37:94:35:61:3c:5f:db:38:94:4f:9d:97:95:
         48:5a:19:0a:b4:d0:21:5f:cb:39:4f:40:8a:d4:0f:03:c7:a4:
         72:6a:e4:67:cb:30:41:d4:90:20:d0:41:ee:cb:62:af:9e:f8:
         12:03:67:cc:ad:de:70:6b:88:70:3f:dd:9b:b8:be:92:eb:df:
         46:37:52:8d:d6:02:a6:04:67:b8:c4:8c:d3:f8:73:0b:dd:4c:
         3d:f8:0f:04:29:3e:ff:54:92:cd:ef:2a:d3:fc:e2:9e:06:17:
         76:2d:83:52:6c:84:21:ea:21:b8:08:cc:f0:b7:30:8a:61:67:
         32:47:74:a6:9a:d9:98:17:36:5d:de:db:92:9d:6a:dc:9e:6e:
         48:04:e2:68:da:ad:c0:d9:15:fc:56:d2:17:49:83:05:24:d3:
         74:90:c2:af:68:2d:e5:5e:e8:a0:55:1a:90:05:15:87:32:52:
         78:b3:87:1a:6f:64:62:b1:f6:de:34:36:c7:af:bd:e3:7a:09:
         be:4e:3d:ea:5e:d2:a4:17:2a:b3:c8:3b:a3:94:d4:53:d1:74:
         51:4f:f8:53
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEHdZHdJthpYwHMnP+dPcUY5ZrsswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWQ3YmRhMWQwNTkwN2E1ZmI5ZmE0ZTdlM2NmYjRiOWFl
MjEyODdjMjAeFw0yNDExMjIxMDEyMjVaFw0yNDExMjMxMzE5MjVaMDMxMTAvBgNV
BAMTKDRERUYzNkU3Q0JEMzQ2OUU4MDZFMzg2QjQxQ0VGQzg3Qjk0NEZCNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44RJj5TX1cCqmaiUnGbasV9u6
NURxM79VjxEP/dh8+ClnEfezA1KMiseaC/8XrSi+64loRun8Gi2Y1vjeiPPpba1Y
gGa1QAhj4vh3Z7a9oBmomOo1V7H3v0xBbxgviHC8/GMSvVQ0g+NISEuK8C+Nfvnv
1zUDLkGzIdcmkjel7noyuLzJ21PXg5iI1FGWj8K+cOrF8TP58mfB77cEmKoXaEcW
Y3TfCWhoShcMRUv79itRN+aC8CF6ZOuUA0TpfGCoc9XsbxV7c26lBj74GOZ7WeU8
wos2RxtOkH6x/gOSXkBlTv0JE9qvuGssJt0i7wnWGhaCPyH4fdkDzVJWyn+ZAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUTe8258vTRp6AbjhrQc78h7lE+0owHwYDVR0j
BBgwFoAUrXvaHQWQel+5+k5+PPtLmuISh8IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdm
ZTc5LzAvQUQ3QkRBMUQwNTkwN0E1RkI5RkE0RTdFM0NGQjRCOUFFMjEyODdDMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JYdmFIUVdRZWwtNS1rNS1QUHRMbXVJ
U2g4SS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yM2NkZjljYS1k
ZDY0LTRmMzEtYWJmMy0wZjMyYjhlN2ZlNzkvMC9BRDdCREExRDA1OTA3QTVGQjlG
QTRFN0UzQ0ZCNEI5QUUyMTI4N0MyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYnCG88/qvqhl/U/ghh/
8ZzuBaJhiuLYUsw1qz0ux0W1xrB1bQI9sjk3lDVhPF/bOJRPnZeVSFoZCrTQIV/L
OU9AitQPA8ekcmrkZ8swQdSQINBB7stir574EgNnzK3ecGuIcD/dm7i+kuvfRjdS
jdYCpgRnuMSM0/hzC91MPfgPBCk+/1SSze8q0/zingYXdi2DUmyEIeohuAjM8Lcw
imFnMkd0pprZmBc2Xd7bkp1q3J5uSATiaNqtwNkV/FbSF0mDBSTTdJDCr2gt5V7o
oFUakAUVhzJSeLOHGm9kYrH23jQ2x6+943oJvk496l7SpBcqs8g7o5TUU9F0UU/4
Uw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:52:25 2024 by rpki-client on console-ams.rpki-client.org