Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
File:                     FB64D48D941F2F324279CF863188D26D2056D11D.mft (raw, json)
Hash identifier:          pLXh6iRKPfVvRIA/GiE3cGhJPDBDXNMXuFPBdv1q0Bs=
Subject key identifier:   43:81:2F:6B:66:44:87:7F:C5:B0:74:7A:7A:87:81:27:AC:9F:90:E3
Authority key identifier: FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D
Certificate issuer:       /CN=fb64d48d941f2f324279cf863188d26d2056d11d
Certificate serial:       783CD96B83B67A1B56507E74BE5E622DB91E939B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
Manifest number:          0127
Signing time:             Fri 17 May 2024 20:32:24 +0000
Manifest this update:     Fri 17 May 2024 20:27:24 +0000
Manifest next update:     Sat 18 May 2024 21:47:24 +0000
Files and hashes:         1: FB64D48D941F2F324279CF863188D26D2056D11D.crl (hash: sCeYv5mfYKdr9xIaHuxX58GhZkDowB2bqhMO77wmo1g=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3c:d9:6b:83:b6:7a:1b:56:50:7e:74:be:5e:62:2d:b9:1e:93:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb64d48d941f2f324279cf863188d26d2056d11d
        Validity
            Not Before: May 17 20:27:24 2024 GMT
            Not After : May 18 21:47:24 2024 GMT
        Subject: CN=43812F6B6644877FC5B0747A7A878127AC9F90E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e4:93:2c:5a:c8:a0:9d:79:b9:80:70:03:d7:
                    c9:c0:98:18:2b:c8:30:ae:4f:17:e8:aa:73:72:21:
                    e1:f5:3d:2f:61:04:cd:53:8c:e6:f3:76:3e:f6:e9:
                    81:3a:f4:59:f9:41:80:2e:1f:84:b1:59:83:1d:1d:
                    58:ef:f4:ee:2e:ab:51:9c:4b:de:02:04:0b:c7:10:
                    9e:65:72:07:23:8f:70:89:4c:dd:59:d9:93:cb:bc:
                    48:fb:96:51:f3:68:9b:27:ce:27:86:1e:2c:61:71:
                    b4:10:6c:bb:c1:f8:3f:fa:cd:69:8a:05:34:d4:ac:
                    e0:b0:12:b0:7b:e5:84:6e:17:cc:9c:22:38:be:55:
                    a6:74:38:14:cb:cd:69:2a:68:63:e4:ae:87:fc:a7:
                    f7:f6:b8:c3:ad:f4:9b:c5:9b:ec:d9:f3:f9:42:98:
                    52:65:a5:13:ef:08:24:e2:d7:e7:3a:1e:13:29:22:
                    45:aa:2b:fb:1a:74:de:91:b2:01:1a:5f:d7:81:09:
                    06:17:75:5e:23:ff:bc:d4:48:86:0e:d0:ca:e8:1a:
                    32:83:4d:8c:57:df:ae:d5:39:06:14:2f:79:4e:d3:
                    a4:26:e5:3d:5b:da:0b:4a:0e:90:77:40:2b:d8:9f:
                    29:5b:7e:30:8b:51:7f:d9:a4:c3:b8:30:dd:bf:b9:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:81:2F:6B:66:44:87:7F:C5:B0:74:7A:7A:87:81:27:AC:9F:90:E3
            X509v3 Authority Key Identifier:
                keyid:FB:64:D4:8D:94:1F:2F:32:42:79:CF:86:31:88:D2:6D:20:56:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2TUjZQfLzJCec-GMYjSbSBW0R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/0/FB64D48D941F2F324279CF863188D26D2056D11D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:22:81:19:31:ec:0f:85:03:bd:c3:73:42:a1:b2:b3:d4:cd:
         1a:62:16:ba:db:3e:e4:8d:31:32:0c:78:13:55:c1:da:75:28:
         e6:29:ac:96:11:25:30:30:70:fd:ac:de:da:de:36:1e:7a:9a:
         90:a5:bb:9a:1c:68:b4:2e:41:57:b3:a2:8e:f9:94:8a:85:00:
         5b:c6:70:b1:ce:45:c9:2b:b1:ce:dc:5e:b0:d6:15:cf:16:6e:
         7b:44:be:a4:b2:8f:12:a2:2f:35:c4:c3:eb:70:28:fb:1f:eb:
         40:d2:2e:01:f3:91:a5:9a:ff:d3:11:6f:2b:28:10:5d:90:07:
         54:2f:98:57:f1:a2:3a:59:1b:f5:f4:77:f6:b0:49:9c:4e:26:
         10:fd:8c:41:d4:08:e0:d7:f7:a4:9d:4a:37:f1:fd:a8:b6:5f:
         eb:03:e4:7f:bf:1b:5c:72:5d:5f:d6:6d:ba:9e:8d:d0:c1:f6:
         dd:bd:45:ea:90:ce:f6:da:7d:ca:2d:9f:8b:0c:ae:24:0b:f4:
         f5:d9:07:78:c9:1c:62:23:c2:2f:a7:4d:b6:de:77:3f:a1:fb:
         68:55:24:84:5f:0d:bc:a5:71:fe:c6:c6:1e:fd:63:8f:40:63:
         32:29:38:de:45:84:38:06:3e:8f:22:3f:ab:1c:43:00:dd:f0:
         8d:db:ab:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:45:49 2024 by rpki-client on console-fra.rpki-client.org