Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
File:                     2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft (raw, json)
Hash identifier:          TRSdL+PgMc1eidb1375y3WHjz7udbgf5r4Dmsa7rWc8=
Subject key identifier:   34:57:EA:82:CA:5A:0B:DC:35:26:AE:F6:6F:73:A9:63:63:98:29:F8
Authority key identifier: 22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD
Certificate issuer:       /CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
Certificate serial:       3E20C259D836136C85DB72CB3267F9FE67F818DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
Manifest number:          B3
Signing time:             Fri 17 May 2024 11:44:21 +0000
Manifest this update:     Fri 17 May 2024 11:39:21 +0000
Manifest next update:     Sat 18 May 2024 14:09:21 +0000
Files and hashes:         1: 2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl (hash: 3/fIkkGTXNzXQSsnw+12d6Jf/qaVcFYcak6YtMo1f3c=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:20:c2:59:d8:36:13:6c:85:db:72:cb:32:67:f9:fe:67:f8:18:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2211e25c2234c1e5a2bfcf7fdcac54b01af373bd
        Validity
            Not Before: May 17 11:39:21 2024 GMT
            Not After : May 18 14:09:21 2024 GMT
        Subject: CN=3457EA82CA5A0BDC3526AEF66F73A963639829F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:77:43:ac:4f:e7:fb:5a:ed:bb:6e:5f:b8:78:
                    ff:73:0d:0b:6d:39:1d:f7:01:af:b1:73:f2:bb:e6:
                    ef:a3:9e:f5:c8:96:12:3f:a7:80:a8:bf:e4:e2:d0:
                    39:6c:ef:6d:60:a8:9c:2a:1f:da:e3:82:1e:fe:a6:
                    f9:c7:1a:f5:58:45:d4:86:15:ae:59:93:0a:c8:91:
                    05:66:27:a3:65:5c:af:b1:e6:e4:51:20:f2:33:58:
                    d0:09:c3:be:e5:b2:b4:ab:53:a5:c4:8c:4e:67:55:
                    63:8c:63:38:3e:6d:5f:88:3f:dc:7f:65:e7:7b:bd:
                    7e:37:64:75:fd:71:29:39:44:a0:a4:f0:3b:1a:30:
                    9b:1a:37:0d:83:16:eb:0c:9c:25:f1:f6:ef:66:9b:
                    8f:e1:7a:4a:ee:92:fd:aa:d0:93:0b:8d:1e:9f:af:
                    04:91:bf:db:10:e3:c9:20:93:a3:12:77:2e:81:cc:
                    aa:ac:d4:f0:22:23:c8:41:f5:1c:db:bc:ae:9b:d6:
                    4e:b5:b4:93:cc:0f:9d:44:18:e6:78:75:7b:e7:82:
                    fe:62:9d:07:79:28:25:ad:74:7f:7b:32:5d:44:6f:
                    d7:40:44:34:10:1a:53:c8:64:0f:57:42:54:1f:08:
                    8d:09:5e:4a:c8:de:9a:51:91:26:cc:6f:ae:bf:b7:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:57:EA:82:CA:5A:0B:DC:35:26:AE:F6:6F:73:A9:63:63:98:29:F8
            X509v3 Authority Key Identifier:
                keyid:22:11:E2:5C:22:34:C1:E5:A2:BF:CF:7F:DC:AC:54:B0:1A:F3:73:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IhHiXCI0weWiv89_3KxUsBrzc70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/0/2211E25C2234C1E5A2BFCF7FDCAC54B01AF373BD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:66:45:a6:6e:5a:31:9d:7f:9c:40:50:b4:b4:f1:86:f2:a7:
         ee:ec:79:10:cb:8a:aa:e3:da:84:a7:14:ab:1a:27:44:e3:bf:
         b9:43:67:85:38:55:f7:6a:c5:99:56:9c:35:c8:15:66:66:29:
         6c:14:92:72:bc:eb:15:e0:b5:2b:64:74:97:57:81:e2:0b:7c:
         97:6f:39:77:33:5e:2d:39:d8:5c:c3:98:23:2e:d5:b7:cf:81:
         84:20:d3:f0:91:2a:36:50:3d:ed:54:d4:ad:5b:42:dd:af:cd:
         e9:d5:56:fb:f9:f6:7f:a1:1a:c0:7e:79:36:f6:9a:12:c4:6f:
         69:f0:63:d4:c3:66:e1:d9:26:b7:f7:4a:09:0c:78:fe:9d:23:
         7c:98:47:4d:b1:88:ac:e8:89:1d:89:90:6c:ad:cc:54:ba:e9:
         1d:f9:26:c6:29:d8:f1:0b:d0:06:a2:b9:09:8e:bf:f8:48:b5:
         1c:f0:17:6e:b9:73:04:f9:c6:f6:5e:9c:52:d6:ac:35:d4:8b:
         73:e1:8b:6f:ef:b5:43:54:2f:5a:9b:13:aa:aa:5a:67:37:d4:
         8b:9c:43:87:65:d8:e7:d9:e7:96:91:f5:c0:27:af:39:59:14:
         fa:6e:44:98:3b:7e:8b:28:53:e3:42:4a:e1:7a:17:96:99:55:
         0b:0e:3a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:34:43 2024 by rpki-client on console-ams.rpki-client.org