Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
File:                     DC6B06B855BF97C397BDB8516944B4DB18663F92.mft (raw, json)
Hash identifier:          Clp5Y/tNkETHx5Tpax12RzwQuGYqxJmbI2TiGnq2JDQ=
Subject key identifier:   BB:D3:02:A2:88:6C:EB:8F:0B:B8:6F:2E:19:54:BF:74:00:33:16:51
Authority key identifier: DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92
Certificate issuer:       /CN=dc6b06b855bf97c397bdb8516944b4db18663f92
Certificate serial:       129E46828FF04A90A76EDDD554C2A509F7079B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
Manifest number:          029A
Signing time:             Fri 04 Apr 2025 13:15:33 +0000
Manifest this update:     Fri 04 Apr 2025 13:10:33 +0000
Manifest next update:     Sat 05 Apr 2025 15:22:33 +0000
Files and hashes:         1: DC6B06B855BF97C397BDB8516944B4DB18663F92.crl (hash: 0Ym1jxCVTlV4k3FfLNuzlGj1WiKFHDZs3SILJo9u2F8=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:9e:46:82:8f:f0:4a:90:a7:6e:dd:d5:54:c2:a5:09:f7:07:9b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6b06b855bf97c397bdb8516944b4db18663f92
        Validity
            Not Before: Apr  4 13:10:33 2025 GMT
            Not After : Apr  5 15:22:33 2025 GMT
        Subject: CN=BBD302A2886CEB8F0BB86F2E1954BF7400331651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:96:6b:70:13:c6:11:ce:34:c4:ad:73:1b:
                    f8:25:f3:e8:80:6e:96:00:3c:da:40:a3:03:ba:f1:
                    6f:89:c3:cb:4e:29:d6:eb:9c:17:04:39:1b:02:14:
                    74:79:60:dc:97:e1:bd:9e:20:83:c1:8b:fc:ec:bc:
                    86:62:db:72:88:03:c7:b0:aa:28:a4:8f:43:9a:60:
                    72:fb:2d:94:f2:19:a1:9b:17:3c:bb:0d:aa:37:cd:
                    0b:14:64:a7:2e:60:78:f0:e8:41:e1:74:c9:c9:ed:
                    dc:40:50:58:dd:47:33:2f:e5:3a:1c:19:97:b0:c4:
                    63:77:e1:fa:6b:f1:63:b9:f9:2f:16:99:3f:b7:aa:
                    8c:a1:5c:48:bf:80:be:bb:cc:0b:c5:80:34:9e:d8:
                    19:90:02:f8:00:4f:ca:e7:9b:47:7c:18:54:22:61:
                    55:f7:99:13:26:a3:ef:63:86:6c:96:ae:df:18:48:
                    3d:a1:14:2a:4a:17:fd:c7:97:89:eb:45:60:23:19:
                    bb:7e:88:98:fd:eb:8b:a7:3c:f2:3c:91:e5:47:aa:
                    e3:95:55:ab:d7:a8:03:ce:ea:28:16:20:44:3e:da:
                    36:f4:87:20:14:1f:bb:ba:7d:6e:91:c7:6f:d1:51:
                    8b:f5:b2:68:03:ce:f1:a3:e9:aa:15:e9:72:7a:2f:
                    cd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D3:02:A2:88:6C:EB:8F:0B:B8:6F:2E:19:54:BF:74:00:33:16:51
            X509v3 Authority Key Identifier:
                keyid:DC:6B:06:B8:55:BF:97:C3:97:BD:B8:51:69:44:B4:DB:18:66:3F:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3GsGuFW_l8OXvbhRaUS02xhmP5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/39721b99-0b2e-4f77-9a2f-8c335a3e27ad/0/DC6B06B855BF97C397BDB8516944B4DB18663F92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f7:00:01:b5:6a:ba:65:31:de:0e:e3:36:a4:0c:35:cd:70:
         4c:cc:47:21:62:fa:8a:db:3b:81:d4:cd:93:0e:3b:8d:7e:30:
         eb:d4:8c:5e:74:6d:79:9a:b2:6c:63:b8:ec:4c:60:23:ec:fe:
         98:fe:90:af:ad:7f:b4:c8:1b:af:f3:db:a8:6b:0c:6a:73:cd:
         0a:56:7e:8f:ee:84:68:e5:03:f7:f0:56:44:2e:d4:17:05:8e:
         3b:a7:04:43:5b:5f:fc:f8:15:b1:36:0a:ad:0f:e1:85:5b:51:
         7f:15:b4:ff:06:87:c7:20:44:fe:71:b6:97:33:94:a2:b1:c2:
         70:ed:a4:e8:43:50:82:26:4b:b0:4a:32:bf:bb:3a:db:f9:9b:
         53:e2:e7:01:43:5b:ce:f2:62:1b:aa:c5:99:41:9f:43:bc:12:
         3e:30:62:88:c8:5c:f8:b9:4d:9f:10:59:8a:a6:44:ed:7b:76:
         e6:3f:dc:98:8f:61:bb:ea:bf:18:59:59:86:20:61:19:25:e4:
         13:82:4b:40:e1:aa:0b:d9:bd:06:58:62:81:a2:ed:5e:bd:b7:
         fb:55:6b:fb:9c:a1:66:8f:b5:4f:88:30:be:0b:7f:c2:f9:f5:
         e1:8b:f5:68:9b:26:fb:4a:4a:f9:7d:6a:54:33:8d:e0:3b:41:
         6b:1c:80:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:40 2025 by rpki-client