Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/1/AFE88BB6B8C27B032AEF245A4A94479E52E7408D.mft
File:                     AFE88BB6B8C27B032AEF245A4A94479E52E7408D.mft (raw, json)
Hash identifier:          4SJdlF0EipGMgiM+580vm0QBHTSbOmliVlV1u3LQWbk=
Subject key identifier:   9C:DA:88:C5:EF:EE:2C:A1:EA:BB:F0:BC:4C:52:2B:FE:C3:EF:8B:05
Authority key identifier: AF:E8:8B:B6:B8:C2:7B:03:2A:EF:24:5A:4A:94:47:9E:52:E7:40:8D
Certificate issuer:       /CN=afe88bb6b8c27b032aef245a4a94479e52e7408d
Certificate serial:       15C05AE31C800901480B4BB7431DC552A9B99FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-iLtrjCewMq7yRaSpRHnlLnQI0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/1/AFE88BB6B8C27B032AEF245A4A94479E52E7408D.mft
Manifest number:          01
Signing time:             Thu 21 Sep 2023 21:52:52 +0000
Manifest this update:     Thu 21 Sep 2023 21:47:52 +0000
Manifest next update:     Sat 23 Sep 2023 01:09:52 +0000
Files and hashes:         1: AFE88BB6B8C27B032AEF245A4A94479E52E7408D.crl (hash: bbVUKNGgs+TkoyVBIxUI/rEETJ0CBbmkMXizsQk8xxE=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/1/AFE88BB6B8C27B032AEF245A4A94479E52E7408D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/1/AFE88BB6B8C27B032AEF245A4A94479E52E7408D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-iLtrjCewMq7yRaSpRHnlLnQI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Sep 2023 17:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c0:5a:e3:1c:80:09:01:48:0b:4b:b7:43:1d:c5:52:a9:b9:9f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe88bb6b8c27b032aef245a4a94479e52e7408d
        Validity
            Not Before: Sep 21 21:47:52 2023 GMT
            Not After : Sep 23 01:09:52 2023 GMT
        Subject: CN=9CDA88C5EFEE2CA1EABBF0BC4C522BFEC3EF8B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1e:be:30:f2:f8:51:a7:90:f3:76:6c:3a:62:
                    66:ba:d1:20:39:11:b0:a3:3f:e2:c3:06:0a:b2:91:
                    57:0a:49:a8:a0:5b:aa:46:d2:90:86:46:a9:1f:2d:
                    df:7b:8c:28:11:d3:bd:3f:7e:ef:05:a8:0e:ed:01:
                    9d:45:87:43:7f:e8:d3:1a:45:2a:1f:c0:65:ee:e1:
                    8a:84:7b:10:ed:e2:7e:c1:8a:f4:32:42:4f:a9:9e:
                    2b:f8:f4:47:cc:b5:6c:84:61:ce:87:4a:00:1d:46:
                    0a:58:4a:00:9f:b8:61:76:7c:b2:b9:4f:9c:e7:86:
                    52:df:34:a8:80:0b:ec:02:64:18:75:c5:5c:9b:87:
                    c7:c7:47:ba:cb:be:ea:21:55:4b:0b:f1:4f:6b:05:
                    93:ed:75:fe:1d:df:7b:c4:e9:ff:f6:bb:c1:d3:58:
                    cd:07:4b:e6:07:e8:9c:5e:2c:df:95:28:63:5c:b4:
                    7c:e7:05:a6:18:38:c7:bd:29:d8:2f:4f:7a:db:ac:
                    cc:9b:68:1e:d4:4b:58:1a:6d:b2:5a:2e:c1:6f:1d:
                    e3:0b:2d:71:cb:13:33:f1:9e:90:c1:d1:f4:1f:45:
                    e1:f1:82:b3:fa:93:5b:45:0f:92:fe:84:27:a7:67:
                    91:05:3b:ab:eb:f8:df:5d:d8:c4:6f:bb:8c:74:03:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:DA:88:C5:EF:EE:2C:A1:EA:BB:F0:BC:4C:52:2B:FE:C3:EF:8B:05
            X509v3 Authority Key Identifier:
                keyid:AF:E8:8B:B6:B8:C2:7B:03:2A:EF:24:5A:4A:94:47:9E:52:E7:40:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/1/AFE88BB6B8C27B032AEF245A4A94479E52E7408D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-iLtrjCewMq7yRaSpRHnlLnQI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/32bfd357-d83b-400a-8c46-4fbd1119f4a3/1/AFE88BB6B8C27B032AEF245A4A94479E52E7408D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d5:56:82:be:29:d2:d1:67:f9:04:a4:e1:1a:1f:48:63:30:
         c0:31:37:3f:96:3e:d7:6e:c0:f0:d1:24:56:8c:86:27:ac:15:
         c3:9c:d2:86:00:d4:91:0f:2b:7f:e8:82:2e:69:1c:df:1d:62:
         e3:39:99:07:0f:26:ac:62:69:51:4c:81:a9:09:6d:1b:13:67:
         d1:57:5e:2f:9c:d2:6a:2f:1f:94:cf:6e:89:df:04:5a:a6:2f:
         7e:7e:5c:fc:a1:b9:c4:5b:cd:66:48:c1:38:9b:3d:4d:38:3f:
         48:15:82:61:a4:f7:92:7c:5a:fa:96:1e:f2:df:93:4b:7b:e5:
         b4:3a:cd:1f:0c:05:a1:00:50:11:d1:ab:3c:7e:e3:05:31:c6:
         cd:42:37:1a:8b:b8:68:7b:e2:94:20:8e:d8:83:f0:5f:3a:85:
         00:4d:c0:f1:f6:06:f1:25:4a:40:27:b9:91:22:1a:b2:f4:9a:
         dd:2f:1c:19:d9:4b:b7:4a:62:16:8a:4e:27:17:0d:de:ea:10:
         9c:6e:08:63:da:4f:51:fb:6c:bb:de:ab:2d:ad:05:02:84:41:
         a6:49:d3:8e:6d:bd:57:02:b7:52:6a:88:6d:b1:ee:b3:ee:de:
         cf:32:8c:8e:d2:3a:69:fc:0b:19:e9:6c:22:37:ea:5d:1a:4e:
         d2:f2:60:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 22:26:45 2023 by rpki-client on console-ams.rpki-client.org