Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
File:                     DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json)
Hash identifier:          2t4/0x8HuTO0irC5kkM4ps+hpy1Fu87oTd0Nle2iRHE=
Subject key identifier:   FB:62:8B:32:3C:89:46:6A:B5:D6:6F:D6:F7:BE:6F:4C:72:4E:57:51
Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
Certificate issuer:       /CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Certificate serial:       369C9B602457CF136AE5ACB6833C1168F51E231B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
Manifest number:          01EC
Signing time:             Mon 25 Nov 2024 04:12:50 +0000
Manifest this update:     Mon 25 Nov 2024 04:07:50 +0000
Manifest next update:     Tue 26 Nov 2024 05:35:50 +0000
Files and hashes:         1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: GpgaB7H8yGFFZ4Hacwv2GulRewOWZzkZz799w9LevDE=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9c:9b:60:24:57:cf:13:6a:e5:ac:b6:83:3c:11:68:f5:1e:23:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92
        Validity
            Not Before: Nov 25 04:07:50 2024 GMT
            Not After : Nov 26 05:35:50 2024 GMT
        Subject: CN=FB628B323C89466AB5D66FD6F7BE6F4C724E5751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:5f:22:92:4b:34:49:e3:16:34:85:01:c2:
                    5c:12:9b:bc:eb:30:b9:b8:5f:46:ad:2f:ee:95:ac:
                    71:ab:bb:c4:76:ec:a6:33:3d:58:06:51:f3:71:44:
                    e0:3d:af:07:3b:60:75:fe:71:8f:4b:ee:1b:7d:e6:
                    11:a0:52:c2:af:96:49:26:e8:af:63:f2:49:6a:2e:
                    49:ab:64:7a:ac:86:ab:76:5e:32:1e:87:85:16:32:
                    26:4c:41:c8:3c:be:fe:09:ca:7a:a4:51:eb:b1:56:
                    b4:e1:68:6f:92:fe:49:37:e8:3a:a7:6c:76:c7:75:
                    79:29:c0:6a:ec:ee:cc:fc:e5:ef:51:9f:c8:68:03:
                    b8:35:00:59:e2:a7:6a:b0:8b:23:9a:19:53:11:54:
                    5e:1e:5a:a4:ba:db:3d:b4:af:71:02:c5:61:9b:c1:
                    a0:55:3f:e5:cc:86:23:c0:2b:5a:b4:b1:12:f5:95:
                    83:ad:e6:0d:c4:86:b2:6f:df:23:3c:c0:16:36:5b:
                    83:03:e0:52:5b:27:d8:76:c5:e9:7e:95:6e:fe:54:
                    00:72:28:bc:3a:25:07:80:32:25:55:19:c5:2a:05:
                    5e:31:15:bd:b7:b3:7a:9a:6f:09:b3:32:d2:f5:35:
                    73:39:7a:ca:c3:ca:ad:99:89:9e:a1:e2:a7:c6:3c:
                    2f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:62:8B:32:3C:89:46:6A:B5:D6:6F:D6:F7:BE:6F:4C:72:4E:57:51
            X509v3 Authority Key Identifier:
                keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ed:01:3b:ad:2a:84:c4:7b:bb:60:f0:c8:10:90:21:a9:90:
         6b:04:42:13:95:4e:86:57:1a:51:da:26:2c:5b:dc:b3:55:88:
         6c:15:1d:b1:5c:45:4f:00:f4:2a:91:43:6a:9f:22:19:bd:ba:
         38:71:22:3e:86:53:3c:2f:fa:eb:ea:5c:f4:ad:0b:91:02:57:
         00:21:32:9c:de:d6:9f:a9:d0:fd:07:d4:fd:06:43:1c:e3:51:
         67:6e:00:a2:a1:82:37:4e:07:c3:de:d4:38:28:47:c8:78:e3:
         54:cd:32:07:0f:5c:0a:5e:3b:1d:7b:e4:e3:61:8d:1d:74:64:
         64:0f:d8:f4:ec:d5:4e:0c:35:c4:77:13:53:76:01:5c:53:99:
         9b:2a:e9:9a:0a:35:6d:e7:05:60:fe:60:2e:6e:2a:b5:64:59:
         97:ac:31:fd:1f:cb:8d:3d:8f:9f:48:11:4f:91:63:f0:b8:ba:
         c6:88:bd:9f:cb:8d:74:e0:4f:fc:14:d4:73:6f:33:a5:30:6c:
         f1:76:08:6f:33:1a:5f:13:e8:aa:37:7f:9f:3d:e4:f2:c0:31:
         68:0d:e5:5c:8a:96:60:e9:2b:4c:30:08:57:59:fd:54:8d:22:
         6a:69:f0:a5:2d:3b:ee:f3:d6:a7:73:74:4a:93:65:71:ea:1d:
         1f:9b:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 06:08:19 2024 by rpki-client on console-ams.rpki-client.org