Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
File:                     79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft (raw, json)
Hash identifier:          VBK15VvAotzbe8AB1Wog+ntYqCZZGH4LsIaiB9hRlgs=
Subject key identifier:   89:57:95:53:2B:F8:F2:88:52:6D:E5:3E:44:0A:86:EE:18:6E:62:29
Authority key identifier: 79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD
Certificate issuer:       /CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
Certificate serial:       34A7768310F8759BB4914D471FA98AA1D835204F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
Manifest number:          3B
Signing time:             Tue 22 Oct 2024 20:42:45 +0000
Manifest this update:     Tue 22 Oct 2024 20:37:45 +0000
Manifest next update:     Wed 23 Oct 2024 23:25:45 +0000
Files and hashes:         1: 79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl (hash: Yy3y/hz59eHm5fZpoZj8y2WYpJAbucYBa8tM8WUht1Y=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 14:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:a7:76:83:10:f8:75:9b:b4:91:4d:47:1f:a9:8a:a1:d8:35:20:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cd5287db23a5a4fe71669dac5433f8a48461bd
        Validity
            Not Before: Oct 22 20:37:45 2024 GMT
            Not After : Oct 23 23:25:45 2024 GMT
        Subject: CN=895795532BF8F288526DE53E440A86EE186E6229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:34:27:e2:0d:d9:12:cb:24:40:94:c9:6a:
                    8f:30:1f:98:51:6e:b7:45:9b:f9:12:96:8e:89:6d:
                    71:e6:cd:ae:86:6f:a4:63:37:0f:39:19:90:8d:d8:
                    51:ab:8a:27:5e:c7:29:20:9f:16:7f:c3:92:e3:46:
                    7e:1e:7e:5e:b0:51:fd:7e:c4:f7:ca:96:ba:3d:17:
                    5a:d4:1b:27:6d:a8:e7:d9:55:7a:88:ad:d4:dc:89:
                    7e:05:9c:49:7b:ad:ae:3f:cf:bf:7b:fe:b0:82:f2:
                    0e:20:ad:ad:66:f2:d7:99:f8:c5:52:0f:86:0f:8c:
                    d9:22:9b:aa:96:52:a0:dc:bf:5d:d5:d2:a3:e1:d6:
                    83:df:f0:b5:0e:92:b5:49:4b:4d:8d:e7:32:5f:77:
                    0e:d9:8a:29:10:40:e4:a1:8c:8b:9f:2d:66:56:9d:
                    71:f6:ab:5e:27:78:7b:3c:b2:6a:68:93:05:36:30:
                    3c:ba:7a:e5:88:ca:c5:2d:3a:7e:08:42:22:76:2f:
                    6a:0f:5f:13:57:ed:b5:08:f6:da:61:d2:43:8b:e2:
                    8a:d8:89:7a:c0:9b:28:a3:5d:7a:6e:2d:64:cc:23:
                    83:d3:e2:00:7a:93:78:a5:1a:c5:67:0a:9e:e0:2e:
                    6b:59:03:f0:21:fe:b3:03:11:b4:34:29:63:c8:89:
                    58:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:57:95:53:2B:F8:F2:88:52:6D:E5:3E:44:0A:86:EE:18:6E:62:29
            X509v3 Authority Key Identifier:
                keyid:79:CD:52:87:DB:23:A5:A4:FE:71:66:9D:AC:54:33:F8:A4:84:61:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec1Sh9sjpaT-cWadrFQz-KSEYb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/2/79CD5287DB23A5A4FE71669DAC5433F8A48461BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:85:86:a6:bf:06:25:a7:f8:46:d4:f7:65:45:ba:3c:89:c5:
         42:48:14:21:cb:6e:c0:b5:7e:af:14:f6:85:5b:4b:09:7d:da:
         41:d9:74:4d:39:2e:8a:15:29:67:26:0a:4c:7e:58:ac:8f:fb:
         04:0a:4c:0c:24:b0:49:6f:9b:39:81:ee:3a:e4:85:6b:49:97:
         40:63:3f:df:07:f0:1f:e4:3a:20:2e:0b:1d:78:d8:7d:7a:9f:
         01:8d:f1:fb:95:f1:97:78:71:21:f9:1d:48:c6:90:c3:73:69:
         a1:a9:72:96:5a:b0:c4:5b:56:6d:c6:a6:a3:e3:1a:52:e0:a7:
         54:2e:b5:11:51:c9:96:82:f8:37:cf:e8:e9:cf:e9:6e:7a:42:
         f9:61:29:30:58:f9:86:31:49:57:2d:a6:f5:a2:38:ac:a4:b2:
         b3:4c:71:92:32:50:7d:0c:a7:90:d5:ba:28:e6:c8:e1:91:0c:
         7c:2f:63:1e:a2:1f:47:f6:9c:b2:79:cb:48:ed:3a:4a:3b:d0:
         f1:6d:aa:11:3b:c6:e3:db:54:e8:5e:69:61:31:b7:92:ed:67:
         af:38:02:31:84:3c:ee:e4:8e:68:e7:6d:13:b8:0d:b5:82:3b:
         6f:1b:03:68:ba:d9:44:ff:88:41:2a:80:b4:08:9b:b9:9b:a8:
         9f:7b:db:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:58:50 2024 by rpki-client on console-fra.rpki-client.org