Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.mft
File:                     18EA67C383ED563521AA295BC37F774A4B39406D.mft (raw, json)
Hash identifier:          r8E/PQiM1MORU33MZ1qPj8ww8cVQaLZTpLgAGnYQtXA=
Subject key identifier:   40:E6:3F:3E:EB:01:97:0E:F7:40:F7:B7:5A:52:18:75:92:63:16:5F
Authority key identifier: 18:EA:67:C3:83:ED:56:35:21:AA:29:5B:C3:7F:77:4A:4B:39:40:6D
Certificate issuer:       /CN=18ea67c383ed563521aa295bc37f774a4b39406d
Certificate serial:       3912D4EE5A28ADFDFF62F42E4A4F18362AAAE4A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GOpnw4PtVjUhqilbw393Sks5QG0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.mft
Manifest number:          70
Signing time:             Fri 22 Nov 2024 01:31:33 +0000
Manifest this update:     Fri 22 Nov 2024 01:26:33 +0000
Manifest next update:     Sat 23 Nov 2024 04:43:33 +0000
Files and hashes:         1: 18EA67C383ED563521AA295BC37F774A4B39406D.crl (hash: cI61VNdq1PwqwQABgbCiZWxMPn2g5fm2ND9bQy+XkrM=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GOpnw4PtVjUhqilbw393Sks5QG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:12:d4:ee:5a:28:ad:fd:ff:62:f4:2e:4a:4f:18:36:2a:aa:e4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18ea67c383ed563521aa295bc37f774a4b39406d
        Validity
            Not Before: Nov 22 01:26:33 2024 GMT
            Not After : Nov 23 04:43:33 2024 GMT
        Subject: CN=40E63F3EEB01970EF740F7B75A5218759263165F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:a5:d7:6d:cf:a4:01:9e:f7:18:12:74:49:
                    d7:9c:c9:c0:a5:8d:93:a7:ad:4a:c2:f0:1b:e3:69:
                    45:8a:66:81:3b:e2:63:07:d9:9d:4b:ed:c3:58:a8:
                    83:d2:0a:4e:75:dc:7f:8b:36:b2:be:87:22:96:33:
                    9b:62:06:19:d9:99:13:52:f6:02:0d:21:a2:e2:93:
                    c4:2c:e5:1c:d7:27:d2:e8:b1:ae:7d:aa:c1:5d:b4:
                    54:1f:9e:04:ba:e8:f6:76:b3:c4:b8:66:be:66:9e:
                    9d:76:15:52:d2:c0:5e:3d:fa:4a:2b:44:fa:6e:0d:
                    80:77:e8:30:d9:ad:c0:3e:56:19:05:58:47:e7:0a:
                    c8:e1:91:45:85:19:7f:e1:26:73:2a:78:7f:43:87:
                    6a:28:3b:15:df:dc:4e:53:a7:b6:4c:3d:d7:86:0a:
                    0b:4d:56:07:73:b2:59:69:51:b3:3b:13:d0:ac:a3:
                    3a:4c:e1:e5:d7:6d:17:f7:64:00:30:eb:4f:af:7a:
                    70:f2:96:69:76:3f:8b:02:7c:dc:94:b2:f0:c5:33:
                    b5:20:9e:65:d8:ba:da:37:93:b3:76:1d:8c:fe:b3:
                    b5:d2:7f:4f:36:f3:76:74:0a:70:02:98:36:9c:f5:
                    a2:3b:53:ef:8f:5b:d7:34:93:b6:a1:1d:6a:7d:fe:
                    11:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E6:3F:3E:EB:01:97:0E:F7:40:F7:B7:5A:52:18:75:92:63:16:5F
            X509v3 Authority Key Identifier:
                keyid:18:EA:67:C3:83:ED:56:35:21:AA:29:5B:C3:7F:77:4A:4B:39:40:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOpnw4PtVjUhqilbw393Sks5QG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/2/18EA67C383ED563521AA295BC37F774A4B39406D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:68:05:e7:80:e4:55:9d:cf:3c:de:d5:5f:f8:56:4e:e4:27:
         dc:eb:ec:c4:a5:5c:27:dc:8b:77:e9:7a:72:d1:50:76:cf:f8:
         c0:ec:83:2e:cd:d2:ae:ae:a9:a0:d0:18:c8:af:6f:7b:f0:f4:
         c7:ea:b0:03:01:f6:a0:3a:0e:e0:38:40:59:3f:46:e4:8d:7f:
         5f:65:02:f4:8f:f4:a5:d8:fa:6b:5a:7c:8e:85:c5:cc:f5:b7:
         84:f1:88:d2:54:2b:0f:8b:40:9f:1e:3d:d1:ec:49:6a:44:73:
         ba:8c:88:03:3d:0e:7f:f7:f7:41:c9:6b:64:a7:40:4f:e6:e7:
         ff:fe:07:0b:42:ee:9c:e7:fe:a8:c3:c7:5b:a1:b5:df:1a:e5:
         84:ae:b9:c7:5c:28:fc:9c:f7:6f:47:46:c8:76:75:39:6c:b8:
         ec:be:15:2b:71:20:53:19:4a:61:3e:a7:5a:51:8a:9d:11:bc:
         a0:6d:7e:a7:74:e6:cd:e5:93:39:40:28:25:ec:a1:14:76:59:
         92:8f:dc:50:84:07:8a:54:24:a9:9b:36:c0:5b:3f:ca:5a:bd:
         b2:a0:94:be:d8:d4:5a:b7:e0:d0:c8:b2:13:2d:c4:b5:ad:95:
         ce:f5:49:ae:2d:35:f2:23:8e:b0:79:de:1a:fa:0f:2f:5b:ee:
         cb:3a:bc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----