Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
File:                     79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft (raw, json)
Hash identifier:          TdsXz2wOFciPWHH8joUe3qmrdOySDrnT0ZMXv9WWM4A=
Subject key identifier:   45:73:5C:F5:00:94:5A:FC:D4:0C:5B:9A:49:7B:ED:FD:72:40:EC:96
Authority key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
Certificate issuer:       /CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Certificate serial:       1E4340AAAA4A23549379BB8B3781599EE82ACBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
Manifest number:          64
Signing time:             Fri 22 Nov 2024 09:49:43 +0000
Manifest this update:     Fri 22 Nov 2024 09:44:43 +0000
Manifest next update:     Sat 23 Nov 2024 10:37:43 +0000
Files and hashes:         1: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl (hash: 6M6lLZMRugcTCddQuCYoG9dC096n3GrKLCCxZANa6II=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:43:40:aa:aa:4a:23:54:93:79:bb:8b:37:81:59:9e:e8:2a:cb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
        Validity
            Not Before: Nov 22 09:44:43 2024 GMT
            Not After : Nov 23 10:37:43 2024 GMT
        Subject: CN=45735CF500945AFCD40C5B9A497BEDFD7240EC96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:06:28:e3:57:78:76:7e:b5:b2:3a:df:21:d0:
                    9d:b8:35:8d:09:57:33:67:4b:eb:da:07:15:07:85:
                    56:21:d8:42:13:d6:b4:db:04:f2:69:af:96:95:aa:
                    f1:76:e7:e3:da:8a:52:04:7d:67:8c:5e:4b:64:e8:
                    a4:d0:5e:56:94:bc:53:95:ae:aa:0f:41:89:39:22:
                    da:26:5d:22:7b:42:14:c8:53:3f:19:ce:73:6a:85:
                    b2:19:25:de:87:63:98:3a:8e:d5:de:ad:8e:c4:e3:
                    71:07:cb:10:93:1d:ca:c8:c7:89:81:9b:9c:f4:86:
                    3f:ab:8b:f4:a6:f3:76:be:55:0f:1e:7a:58:76:9b:
                    59:01:4c:a1:2b:67:8b:df:d3:75:65:ff:3e:ed:8a:
                    07:dd:25:4e:d6:d4:66:f1:97:bf:23:18:71:8b:56:
                    a4:51:99:1c:bb:83:1c:d0:15:ba:38:7a:cd:ab:6e:
                    55:75:16:23:8e:9d:48:7c:9d:47:9e:ef:89:0a:45:
                    fc:0d:b9:22:ee:98:ae:5b:2f:fc:f6:39:89:30:00:
                    65:ed:fe:c0:c1:d6:fc:09:49:a1:2b:9a:e0:ce:10:
                    34:16:20:40:b9:45:70:42:3e:f4:96:c7:a2:95:04:
                    f9:c4:6f:04:db:55:3e:f1:c6:88:89:9b:2d:1e:9c:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:73:5C:F5:00:94:5A:FC:D4:0C:5B:9A:49:7B:ED:FD:72:40:EC:96
            X509v3 Authority Key Identifier:
                keyid:79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:5f:91:75:9b:2a:b5:eb:ed:5b:56:39:93:a4:45:5f:04:0c:
         1b:7c:20:ed:cc:84:85:62:45:1d:2d:a2:fd:5c:15:39:4a:c2:
         f0:87:c2:b4:4f:bc:62:e7:cf:35:50:f2:85:d0:99:9c:28:0e:
         06:89:b5:7d:c1:da:0d:00:b0:e5:2c:92:11:73:12:98:ec:3c:
         57:be:31:22:97:20:32:d8:43:df:b5:23:cf:3c:ef:37:68:b1:
         5e:f5:8f:ad:23:43:ab:32:d1:2d:df:3d:ed:c1:79:81:d7:3a:
         9a:e7:f0:c3:8e:ca:36:c1:51:97:93:ff:f0:b0:b6:38:b5:c1:
         75:5e:18:ce:1b:2a:85:17:4b:f4:85:35:d2:e9:cc:65:d3:ff:
         72:10:1b:44:03:f3:80:1e:03:00:c1:c9:5e:68:91:69:e7:e1:
         bb:00:38:62:78:eb:4a:2d:25:cc:4f:f8:f6:31:66:28:d3:e2:
         80:ed:f4:00:14:2b:be:ae:dd:93:d6:81:ef:1d:b4:45:00:2d:
         e0:2b:20:ee:92:c1:87:f9:65:ce:e3:26:5c:2d:08:69:0b:06:
         9d:3d:83:bd:3b:d6:65:d5:47:7b:6b:63:3a:da:82:f3:d2:07:
         30:2b:3a:cb:60:72:31:de:db:d0:c7:73:50:15:84:e3:31:65:
         cb:87:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:04 2024 by rpki-client on console-fra.rpki-client.org