Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
File:                     A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft (raw, json)
Hash identifier:          j9t1Jvc8C1OqPupwr+Z/k9/+c1xWDeFwr5lCsKhfn5Y=
Subject key identifier:   64:15:AF:C3:0D:4F:90:05:23:04:87:5F:37:14:C9:D6:C0:BC:C0:DD
Authority key identifier: A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12
Certificate issuer:       /CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
Certificate serial:       3B1AB1349BDF50FD2B7328EC8D7A92E7638213AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
Manifest number:          F6
Signing time:             Sun 24 Nov 2024 21:54:31 +0000
Manifest this update:     Sun 24 Nov 2024 21:49:31 +0000
Manifest next update:     Tue 26 Nov 2024 00:47:31 +0000
Files and hashes:         1: A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl (hash: cxvOjSP8hpqqpIjU+cvK7PoDb6HLfypCk7nlhrw6K6w=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1a:b1:34:9b:df:50:fd:2b:73:28:ec:8d:7a:92:e7:63:82:13:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9dd9f6b65491d90c4e19e9c960252466c2c9d12
        Validity
            Not Before: Nov 24 21:49:31 2024 GMT
            Not After : Nov 26 00:47:31 2024 GMT
        Subject: CN=6415AFC30D4F90052304875F3714C9D6C0BCC0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:9d:bf:fb:f0:cc:0a:74:76:6f:67:01:f5:
                    0a:94:94:0d:6d:36:22:9b:ac:00:80:2f:20:b5:80:
                    69:ac:33:e8:a4:92:0c:d4:12:09:e6:46:ad:d8:90:
                    e9:ad:04:1c:36:8b:30:a7:7f:02:50:72:b3:5b:02:
                    b4:c1:d9:9f:2e:07:a5:72:1f:c2:97:dc:2f:ad:d5:
                    8d:0b:3b:1c:18:c0:e3:31:c2:3d:5a:cd:a5:7b:83:
                    da:88:4f:a0:8c:84:c5:5f:03:b1:98:6a:0b:7b:c1:
                    17:2d:17:ed:53:3b:02:47:71:e4:66:fb:70:d2:ad:
                    e4:d9:8a:c2:f1:63:67:da:06:93:27:ae:b9:6d:0b:
                    8a:7e:8c:b9:63:97:c6:29:63:68:cd:b6:49:b6:bc:
                    da:85:c1:a3:b3:a9:06:6e:44:72:fd:05:59:61:64:
                    4a:31:3e:1d:d9:b2:b1:50:6b:56:58:84:15:aa:91:
                    23:f9:6d:c9:d2:1a:0d:91:f9:6f:35:8f:5b:77:b1:
                    d3:b1:89:05:c0:25:ef:3f:b5:e0:4d:79:df:e0:92:
                    74:18:c9:d2:67:93:d7:8f:52:c3:39:bb:28:9c:15:
                    a4:b0:39:b0:00:12:75:29:93:45:01:41:a8:b2:8f:
                    67:c0:49:d4:72:be:2f:21:76:07:74:d5:dd:53:3a:
                    6a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:15:AF:C3:0D:4F:90:05:23:04:87:5F:37:14:C9:D6:C0:BC:C0:DD
            X509v3 Authority Key Identifier:
                keyid:A9:DD:9F:6B:65:49:1D:90:C4:E1:9E:9C:96:02:52:46:6C:2C:9D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd2fa2VJHZDE4Z6clgJSRmwsnRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/1/A9DD9F6B65491D90C4E19E9C960252466C2C9D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:63:0e:95:86:35:51:3c:d4:f0:e3:5b:4f:7a:56:af:48:39:
         8a:c0:97:34:6c:4c:7e:2f:4a:16:5a:6c:fd:fe:de:77:55:ee:
         6b:f8:f1:bb:81:16:e9:9e:a6:1e:5a:52:de:75:4f:06:e0:9e:
         0c:2f:b1:5e:91:79:75:d1:c6:f8:47:2c:82:ec:7f:00:0e:78:
         ba:c9:79:05:fc:29:99:a0:79:82:05:24:dd:89:f4:ac:af:33:
         0e:82:17:69:1c:4b:a1:e0:d3:1f:75:f4:cd:54:92:0a:a4:7c:
         35:de:50:7d:ce:ef:c6:4c:c7:69:bd:cc:29:54:de:42:ce:76:
         2a:58:21:84:68:c9:f8:52:93:37:ca:21:05:db:df:c5:2f:d7:
         3d:81:26:ed:bc:24:f4:28:85:fc:86:ef:06:48:81:66:c7:f9:
         bb:16:77:08:b9:54:59:88:b3:d2:b3:db:b1:3f:8c:f6:74:ce:
         35:0f:49:01:9a:f6:17:4a:a3:a5:20:af:5a:fc:4d:c2:28:74:
         92:36:36:21:ed:f8:9d:de:e9:e7:0e:92:49:00:44:99:c2:3a:
         c1:0c:fc:d6:8d:7d:b9:9b:ab:e3:85:bc:9e:20:db:bb:96:f6:
         1a:76:b9:dc:9e:33:da:45:e0:76:e3:aa:1d:19:4d:3e:4c:c3:
         82:20:56:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:45:32 2024 by rpki-client on console-ams.rpki-client.org