Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
File:                     53A2AA1601CC09214461D03CA771ED50EC1D6325.mft (raw, json)
Hash identifier:          +/807DaVp7m8pfVbp/PvCgp33ZajdUuzATjTyYwRObI=
Subject key identifier:   79:C5:A3:F9:F3:70:F2:73:57:7D:A4:E0:54:99:A5:6A:61:5D:E3:E3
Authority key identifier: 53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25
Certificate issuer:       /CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
Certificate serial:       5685FF01B5D1EAC735D65573EF2274B3B40D4EC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
Manifest number:          31
Signing time:             Fri 17 May 2024 22:02:24 +0000
Manifest this update:     Fri 17 May 2024 21:57:24 +0000
Manifest next update:     Sat 18 May 2024 23:56:24 +0000
Files and hashes:         1: 53A2AA1601CC09214461D03CA771ED50EC1D6325.crl (hash: OVbOb68+DNxCGU3mH/qiEGOFV3/fWi4v4FTXjHzKc7U=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:85:ff:01:b5:d1:ea:c7:35:d6:55:73:ef:22:74:b3:b4:0d:4e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53a2aa1601cc09214461d03ca771ed50ec1d6325
        Validity
            Not Before: May 17 21:57:24 2024 GMT
            Not After : May 18 23:56:24 2024 GMT
        Subject: CN=79C5A3F9F370F273577DA4E05499A56A615DE3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:a4:d1:8e:b8:2b:7c:29:29:b4:50:57:72:
                    5c:9a:11:f7:e3:3b:e7:77:f9:aa:02:0f:54:7b:20:
                    01:47:31:fa:fb:ce:39:c4:89:69:01:ec:4f:f4:3b:
                    65:b1:37:d7:12:9c:72:d5:6f:96:0b:4f:d1:1c:46:
                    9d:ce:29:69:1b:c6:4f:bd:9e:33:f8:ec:17:8e:e4:
                    49:77:d2:ac:81:02:0c:80:bc:dd:29:37:b4:ba:5d:
                    90:e3:45:e2:b3:39:41:07:d9:9e:dc:2e:0f:27:ef:
                    a8:a8:aa:a1:9f:50:66:27:b0:d1:ef:c3:78:5b:72:
                    d5:8e:86:4c:6d:a1:59:12:8e:bd:86:2e:b3:cd:f6:
                    77:91:c9:c3:bc:95:0d:a0:a3:7b:b4:e6:e6:ac:21:
                    d7:3f:f1:8c:d5:5f:ba:fa:4c:a7:6c:b7:85:86:e3:
                    22:cc:c7:a1:01:98:aa:82:32:84:5a:c9:38:22:6e:
                    18:53:6d:9d:64:cc:ce:3b:a2:60:b4:5f:35:56:3e:
                    41:15:35:81:81:93:73:8c:68:f3:9c:17:88:9d:0e:
                    23:aa:61:d8:3e:02:60:26:2b:3e:7b:d2:00:11:18:
                    d3:3c:50:43:f3:16:78:62:a9:64:b0:d0:fd:4d:40:
                    f4:d0:d8:b9:00:83:71:cd:b0:a2:59:7d:ed:46:73:
                    8b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C5:A3:F9:F3:70:F2:73:57:7D:A4:E0:54:99:A5:6A:61:5D:E3:E3
            X509v3 Authority Key Identifier:
                keyid:53:A2:AA:16:01:CC:09:21:44:61:D0:3C:A7:71:ED:50:EC:1D:63:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6KqFgHMCSFEYdA8p3HtUOwdYyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/5/53A2AA1601CC09214461D03CA771ED50EC1D6325.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:2f:b1:e6:14:ff:8a:bb:56:c0:02:a5:8f:50:76:0b:a4:3b:
         9f:5d:40:8f:fa:bf:29:4c:74:f2:b0:4e:8f:9f:0e:2c:27:57:
         43:63:fd:ff:50:ec:f4:4d:fb:d9:96:cf:67:38:82:d5:1c:9e:
         10:8b:35:a3:43:53:cb:60:ed:8b:61:20:85:80:65:3a:fc:48:
         06:34:03:8c:7a:b4:c9:dd:78:7f:c9:9d:78:03:ac:7b:75:61:
         eb:a4:67:37:8a:57:ed:db:ba:44:50:ba:9f:97:06:b1:4f:b5:
         ab:90:da:b4:0e:1b:2a:20:a1:d9:50:45:9f:06:ea:d8:5d:dc:
         1a:74:16:c1:d9:69:1d:e2:83:67:c5:7d:14:39:b2:12:32:af:
         fd:a8:c8:c8:94:7c:aa:05:f0:ea:36:9b:10:a1:6f:c9:da:65:
         d9:35:05:53:f6:12:eb:b1:d7:70:79:74:e0:9f:f8:9c:49:6a:
         a3:ad:b4:13:71:6f:0b:5d:09:1b:4b:e4:1c:90:1a:4b:ba:76:
         26:a6:e0:fc:4a:46:7e:b3:74:2e:ae:ac:03:1d:cd:84:3e:93:
         6d:14:e2:cc:13:90:68:24:09:6b:e6:02:86:e6:bb:bf:25:00:
         71:6f:e8:d1:2b:9a:96:0d:52:a2:86:15:94:d6:f4:c5:46:0e:
         d0:b9:4b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 22:56:55 2024 by rpki-client on console-ams.rpki-client.org