Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
File:                     DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft (raw, json)
Hash identifier:          5jjBNgnrgHs2iEcHl9ic79yu3tOPTJvo+++WFmpgbds=
Subject key identifier:   A5:C7:FA:B9:3F:ED:A3:77:3F:C7:B6:6C:82:C6:62:33:A5:CF:C2:79
Authority key identifier: DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62
Certificate issuer:       /CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
Certificate serial:       72C28C861EFED57262AD49CF9E02B885D4EAB80B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
Manifest number:          74
Signing time:             Fri 22 Nov 2024 00:47:04 +0000
Manifest this update:     Fri 22 Nov 2024 00:42:04 +0000
Manifest next update:     Sat 23 Nov 2024 04:09:04 +0000
Files and hashes:         1: DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl (hash: AhPJGX5CouzSYKRVXFbxNIy6Mdy22R2U+EQ9N2657ko=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:c2:8c:86:1e:fe:d5:72:62:ad:49:cf:9e:02:b8:85:d4:ea:b8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dab7e20bea5ccb84f826c64da1757d1df5b6ff62
        Validity
            Not Before: Nov 22 00:42:04 2024 GMT
            Not After : Nov 23 04:09:04 2024 GMT
        Subject: CN=A5C7FAB93FEDA3773FC7B66C82C66233A5CFC279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:98:e1:44:8a:37:61:02:14:05:bc:5f:e0:
                    c4:e8:95:01:be:39:ca:67:55:b8:b8:3f:0d:65:07:
                    68:7f:fa:12:08:f1:b3:71:51:f6:0c:b7:40:2d:d1:
                    f9:53:b9:3f:fd:ef:0a:8f:0d:01:9c:a3:53:ce:59:
                    25:c6:02:a7:61:8e:4e:3f:7d:84:f5:95:a5:8a:be:
                    20:41:7c:b7:3c:d9:4e:b3:4b:11:c9:4b:06:5a:81:
                    81:7b:dd:00:b9:9a:0f:a1:ba:32:de:15:ae:20:92:
                    81:64:3c:33:95:a4:8a:c7:78:40:ef:a6:4a:4a:1c:
                    73:a0:79:a6:be:19:d0:b6:a4:70:19:5d:57:10:f4:
                    d0:94:dd:ee:51:17:c2:30:d9:06:74:6e:13:20:c6:
                    da:09:74:80:12:4e:e2:cb:7e:3c:51:08:97:36:46:
                    0b:76:23:15:03:f1:8e:ae:d8:9a:a5:9a:53:93:20:
                    ae:12:d6:ab:ab:d0:34:1e:5f:7b:9c:dd:90:5d:2d:
                    db:fb:15:74:d3:4e:fd:a2:f3:97:fb:b6:76:c0:c8:
                    6e:3b:b9:db:1a:54:06:e9:bc:43:ca:20:04:88:9b:
                    78:ed:2c:14:4e:af:a0:4d:e9:76:7f:02:f9:41:ac:
                    e4:56:f4:79:0b:e5:6c:22:02:fa:40:b2:dc:e8:83:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C7:FA:B9:3F:ED:A3:77:3F:C7:B6:6C:82:C6:62:33:A5:CF:C2:79
            X509v3 Authority Key Identifier:
                keyid:DA:B7:E2:0B:EA:5C:CB:84:F8:26:C6:4D:A1:75:7D:1D:F5:B6:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2rfiC-pcy4T4JsZNoXV9HfW2_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3011944d-7eb3-4f63-a159-cff02c026abf/0/DAB7E20BEA5CCB84F826C64DA1757D1DF5B6FF62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7e:45:2d:87:f2:eb:c6:1a:68:c1:9d:60:3f:2c:8e:f1:f9:
         17:34:ad:b2:52:1d:42:7b:8a:68:75:de:3f:c2:4b:1f:07:67:
         53:94:ed:bf:a6:64:53:12:d2:ee:79:e3:88:53:10:60:d2:5e:
         69:ac:75:82:02:d6:40:25:44:68:c1:4d:9a:c9:82:0b:a2:1e:
         81:ed:91:09:f5:07:16:f9:ae:35:98:7f:cc:bb:e8:52:21:ec:
         87:e2:e5:ee:47:22:8e:a1:f3:9f:19:2d:4c:2d:b9:0f:fb:d8:
         2b:53:d1:41:10:a1:d1:15:7e:ee:1b:27:f0:ea:d9:15:1b:bf:
         3f:fe:69:19:b4:58:a5:a3:2e:31:99:25:f7:77:4f:9f:9a:68:
         5a:10:cd:38:47:b5:3e:74:dd:d0:a5:5b:33:ef:40:ed:fd:a7:
         d6:a7:35:39:88:fa:54:00:a8:b7:4a:71:77:b8:fd:72:1d:19:
         99:bd:fa:85:b9:a7:0a:11:a7:42:c4:e1:70:c5:d5:e2:14:dd:
         1b:bf:d5:12:eb:3d:ab:85:1b:f6:07:42:aa:20:1d:a6:2c:6c:
         4f:90:7c:23:55:0b:7a:21:74:ae:af:3f:3d:02:69:c3:22:bd:
         d5:44:cd:74:44:8d:7f:d4:e1:a8:db:c3:2e:95:f1:9a:b7:00:
         2a:ba:d7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:44:43 2024 by rpki-client on console-fra.rpki-client.org