Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft
File:                     2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft (raw, json)
Hash identifier:          B/dBSvlVcpFIxLciJCw/ci9KnXoaU5C8kG6GY3YBPIo=
Subject key identifier:   D6:51:9C:45:A6:C5:B0:17:7A:BF:A3:3E:FC:76:27:CD:7E:FE:C2:B4
Authority key identifier: 2E:1E:DE:80:64:0C:9F:48:4F:75:DD:39:C1:3E:D6:C7:0E:07:4A:03
Certificate issuer:       /CN=2e1ede80640c9f484f75dd39c13ed6c70e074a03
Certificate serial:       0EC574D6240262725CAC63C59C1F25856E2A4E6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lh7egGQMn0hPdd05wT7Wxw4HSgM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft
Manifest number:          8A
Signing time:             Mon 10 Jun 2024 16:53:53 +0000
Manifest this update:     Mon 10 Jun 2024 16:48:53 +0000
Manifest next update:     Tue 11 Jun 2024 19:08:53 +0000
Files and hashes:         1: 2E1EDE80640C9F484F75DD39C13ED6C70E074A03.crl (hash: 2dxx26Xe7VIhsN2ApZCwrEpklL1VHaO/1V6lGvnaU88=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lh7egGQMn0hPdd05wT7Wxw4HSgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c5:74:d6:24:02:62:72:5c:ac:63:c5:9c:1f:25:85:6e:2a:4e:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1ede80640c9f484f75dd39c13ed6c70e074a03
        Validity
            Not Before: Jun 10 16:48:53 2024 GMT
            Not After : Jun 11 19:08:53 2024 GMT
        Subject: CN=D6519C45A6C5B0177ABFA33EFC7627CD7EFEC2B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:b7:06:0e:c0:43:38:4f:7b:5b:3c:bf:c0:
                    28:f9:32:e2:1c:d8:34:c7:68:3c:9e:22:03:75:c7:
                    8a:af:d0:87:9f:35:df:77:0d:a6:db:67:94:42:54:
                    d8:37:46:d1:34:2d:3f:ce:5a:11:f3:fe:ee:f7:36:
                    60:8b:43:01:42:d0:74:20:ca:54:7a:2e:d2:c9:0e:
                    28:17:39:d9:aa:6d:30:58:22:20:af:e1:d4:bb:6f:
                    0d:4b:3d:fe:cf:73:ec:2d:94:8d:ab:65:ae:9e:7f:
                    45:00:ea:22:e5:87:1a:1a:39:bd:ab:84:66:39:04:
                    e9:ae:f7:3a:a0:f8:3c:87:50:dc:8a:6e:60:8f:1f:
                    f8:2e:e4:04:22:42:f6:cc:3d:83:ed:67:10:b2:55:
                    10:73:ee:af:0e:77:a1:e3:37:69:24:11:ce:ef:d9:
                    3c:8d:14:0c:60:d5:d6:dd:cd:49:31:58:ed:46:14:
                    97:b4:70:fc:6f:d9:8d:ec:c1:78:1e:60:22:ca:f9:
                    ba:d0:4e:dd:d9:3a:7f:07:69:92:55:41:9a:71:a4:
                    a2:ad:04:68:cf:1f:e0:15:d0:41:85:f8:bf:5b:bc:
                    03:ac:08:7a:be:2d:bb:eb:d0:2d:c9:33:9e:c3:3a:
                    5d:04:1f:8f:8d:22:b2:5e:fd:d8:df:69:02:c7:db:
                    a1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:51:9C:45:A6:C5:B0:17:7A:BF:A3:3E:FC:76:27:CD:7E:FE:C2:B4
            X509v3 Authority Key Identifier:
                keyid:2E:1E:DE:80:64:0C:9F:48:4F:75:DD:39:C1:3E:D6:C7:0E:07:4A:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lh7egGQMn0hPdd05wT7Wxw4HSgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/330c7f5c-faae-4354-b920-e20bd0425bb9/0/2E1EDE80640C9F484F75DD39C13ED6C70E074A03.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:bf:db:d5:1b:78:59:e2:70:19:6a:ad:8f:2a:1e:73:db:b8:
         bf:fa:eb:38:f1:ab:68:e4:f1:e5:df:d3:45:e4:14:e0:90:17:
         4d:b0:1d:44:55:69:78:41:62:31:eb:8e:49:1e:37:d0:d2:ad:
         33:a1:40:66:8c:b1:57:df:b1:f3:0b:50:e8:31:8f:65:21:f5:
         ba:38:15:eb:f9:74:29:03:9b:98:e3:73:1e:f9:d7:99:6f:f7:
         11:88:fb:b6:dc:79:db:22:77:9c:d1:b4:2f:f7:05:a6:b5:fb:
         8b:be:10:3a:ac:f2:6d:09:51:97:1c:91:f7:50:fd:d1:e1:3c:
         24:91:47:52:f1:2f:e1:f0:44:79:e0:55:2a:c3:4c:aa:ae:68:
         b5:22:f0:56:51:87:c9:aa:1d:ff:00:83:64:5b:7e:fa:6b:cf:
         31:5a:36:55:43:95:9f:6b:8b:81:db:1f:da:e0:62:8a:07:12:
         4c:aa:12:cd:03:0d:70:c1:d9:71:df:2a:17:e2:c2:d1:78:27:
         35:b8:7e:60:17:ac:90:87:64:18:b9:78:e5:fa:a6:92:ca:d1:
         ac:d1:4f:cb:e6:0d:05:0c:67:db:ce:0e:36:c8:20:59:cb:fe:
         bf:8e:c1:b8:5e:43:74:5a:ac:56:a6:31:85:c0:1c:39:4b:00:
         c2:e8:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 20:37:07 2024 by rpki-client on console-fra.rpki-client.org