Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/3/E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.mft
File:                     E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.mft (raw, json)
Hash identifier:          XMy8xl37BOO6b9c2fQpdJ4PNSkzufGesqB7qXJSuPPk=
Subject key identifier:   37:90:2C:EB:42:45:55:83:D0:F7:6B:AC:33:34:94:9B:62:F4:19:A9
Authority key identifier: E0:13:A3:78:E0:B0:4B:53:88:9F:C4:F7:BC:F4:2A:3B:7B:0A:62:1E
Certificate issuer:       /CN=e013a378e0b04b53889fc4f7bcf42a3b7b0a621e
Certificate serial:       36084A5515548A9F750A3015A6DE6E7BFB0BF4E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BOjeOCwS1OIn8T3vPQqO3sKYh4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/3/E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.mft
Manifest number:          0193
Signing time:             Fri 22 Nov 2024 10:21:27 +0000
Manifest this update:     Fri 22 Nov 2024 10:16:27 +0000
Manifest next update:     Sat 23 Nov 2024 12:24:27 +0000
Files and hashes:         1: E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.crl (hash: W+MCjywkG9hT8xRdnHv+NH7IzKlR645tRfyhrr/rLzU=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/3/E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/3/E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BOjeOCwS1OIn8T3vPQqO3sKYh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:08:4a:55:15:54:8a:9f:75:0a:30:15:a6:de:6e:7b:fb:0b:f4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e013a378e0b04b53889fc4f7bcf42a3b7b0a621e
        Validity
            Not Before: Nov 22 10:16:27 2024 GMT
            Not After : Nov 23 12:24:27 2024 GMT
        Subject: CN=37902CEB42455583D0F76BAC3334949B62F419A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c4:7b:60:02:32:79:5d:2a:ff:bd:c9:57:49:
                    0d:b0:9e:c4:d8:71:4a:2e:d6:0b:af:99:44:c5:aa:
                    c1:c9:81:6c:fa:39:2f:8e:31:ad:c8:8e:bf:d9:35:
                    fc:51:8c:4c:49:a6:03:02:bc:04:88:82:f7:84:a6:
                    69:0d:57:a8:3e:20:7f:e3:30:1b:60:52:9f:f3:c8:
                    ac:10:0b:c0:d1:1e:03:56:de:ac:a8:cb:95:47:7e:
                    0d:d3:72:4f:3c:de:9a:7d:f9:00:c6:2d:62:a5:62:
                    b2:27:6b:62:94:70:9f:7b:de:67:22:81:97:26:9d:
                    f9:ae:28:a6:54:e1:86:d5:9a:27:9e:0c:af:ac:0f:
                    c6:73:3c:6a:61:87:75:df:e8:0e:a3:fe:7a:89:5c:
                    4a:20:4b:d6:a0:04:a6:ce:75:47:ae:1a:e6:5b:4f:
                    1c:53:da:f1:6c:93:54:45:fc:56:ca:f0:e3:1d:13:
                    9f:90:1f:fa:c0:8b:76:7f:be:d1:de:62:63:cf:03:
                    8f:bc:da:d9:f7:29:dd:64:da:1f:7a:8d:ac:9b:e2:
                    8d:75:6e:02:f6:1f:8b:f7:f4:6a:f3:11:b2:d7:36:
                    7b:0c:b5:fa:24:80:b6:69:f9:de:a3:8e:00:a6:b4:
                    58:3b:38:a5:27:ee:0b:01:30:8e:bc:2a:a6:e1:16:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:90:2C:EB:42:45:55:83:D0:F7:6B:AC:33:34:94:9B:62:F4:19:A9
            X509v3 Authority Key Identifier:
                keyid:E0:13:A3:78:E0:B0:4B:53:88:9F:C4:F7:BC:F4:2A:3B:7B:0A:62:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/3/E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BOjeOCwS1OIn8T3vPQqO3sKYh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/3/E013A378E0B04B53889FC4F7BCF42A3B7B0A621E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:aa:99:89:90:a8:98:39:0c:ca:24:d0:b2:97:31:e7:99:
         57:88:0d:5d:41:77:9d:6a:52:f5:55:99:a2:8d:75:fb:b0:80:
         79:c3:1b:50:b4:f7:92:c2:0e:17:d5:33:60:60:f9:3f:23:63:
         9f:b8:6e:e8:bb:16:45:0e:58:60:3c:80:55:76:89:39:9b:db:
         67:3b:52:89:20:a5:24:e9:1a:43:43:04:c8:7c:82:66:5d:d0:
         e2:91:92:24:d4:0f:37:c8:7b:6e:a1:eb:a9:d2:1f:cf:d6:ba:
         0d:5c:7c:2b:87:21:5a:51:78:db:33:6a:b6:2d:09:be:bb:91:
         11:8e:75:a2:5f:4f:78:2c:c3:50:ca:0d:60:25:ef:d6:a4:f7:
         0b:36:d3:b4:81:e6:a7:68:5d:39:29:20:37:a1:5b:8e:99:81:
         a2:4c:fb:87:bf:7d:7b:d6:68:0c:32:d6:b3:81:e7:f2:66:23:
         4f:e9:83:2b:aa:bb:12:d6:a8:f3:02:fb:b9:6e:7e:b3:3b:cb:
         11:95:e1:9c:be:23:8c:a8:cc:6d:46:6c:91:1e:6c:29:e5:2d:
         46:5e:ab:5b:ef:26:4c:23:88:b2:a4:3f:30:3c:9b:0d:1b:2e:
         f3:b4:e8:66:db:82:3f:88:e7:09:89:d8:44:bf:3e:32:90:a9:
         91:6d:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:04 2024 by rpki-client on console-fra.rpki-client.org