Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.mft
File:                     87538902A458E166D6258D85B3F8F1B935295942.mft (raw, json)
Hash identifier:          26OYZO4EBJEV9wwvvN/CZXUmNqZIfAMTtuU9zuBxciw=
Subject key identifier:   F1:DF:F3:22:EF:D1:22:DF:B8:B1:43:52:50:A0:E9:24:56:AF:E2:75
Authority key identifier: 87:53:89:02:A4:58:E1:66:D6:25:8D:85:B3:F8:F1:B9:35:29:59:42
Certificate issuer:       /CN=87538902a458e166d6258d85b3f8f1b935295942
Certificate serial:       3888CB85B895E73336760F346E17B4DB66CEC303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1OJAqRY4WbWJY2Fs_jxuTUpWUI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.mft
Manifest number:          01B3
Signing time:             Fri 22 Nov 2024 11:08:28 +0000
Manifest this update:     Fri 22 Nov 2024 11:03:28 +0000
Manifest next update:     Sat 23 Nov 2024 14:21:28 +0000
Files and hashes:         1: 87538902A458E166D6258D85B3F8F1B935295942.crl (hash: etwgjlBpLomaWBKq+GfmS2MHwbO7I+5nk3dqa2wXSk0=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1OJAqRY4WbWJY2Fs_jxuTUpWUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:88:cb:85:b8:95:e7:33:36:76:0f:34:6e:17:b4:db:66:ce:c3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87538902a458e166d6258d85b3f8f1b935295942
        Validity
            Not Before: Nov 22 11:03:28 2024 GMT
            Not After : Nov 23 14:21:28 2024 GMT
        Subject: CN=F1DFF322EFD122DFB8B1435250A0E92456AFE275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:88:6f:58:28:7f:66:1d:5b:0d:a2:fa:32:
                    ae:3b:1d:ed:7f:7b:34:b8:0c:89:77:2f:6f:02:43:
                    bc:62:56:5a:51:99:c8:53:69:e0:6f:83:91:09:00:
                    dd:92:f6:32:3d:ca:3b:0b:12:e5:ef:5a:a8:56:04:
                    ea:08:06:19:09:ab:84:b2:33:90:82:08:fe:03:cd:
                    56:18:27:b0:ad:cd:d0:f3:67:08:b7:3e:2d:40:ca:
                    10:f9:95:bd:73:63:77:b8:a9:c7:ab:9b:ab:51:02:
                    bf:d7:70:96:fa:7f:29:da:21:ea:e2:d3:80:f2:14:
                    ad:18:f7:0c:59:0a:72:9f:b6:9e:07:83:ac:dc:49:
                    ba:e7:38:76:b0:f5:72:6e:d0:a3:b1:f5:a7:25:c8:
                    9a:fa:13:6a:77:22:c6:cc:cd:30:3f:3c:cc:ba:15:
                    64:13:ac:a5:8e:0a:c2:96:4d:9d:ec:a3:c5:57:87:
                    e1:51:e6:00:56:23:55:1f:8b:25:22:3f:10:d8:ff:
                    c0:25:ca:bf:a0:44:66:30:81:af:b9:3c:c7:07:ae:
                    a1:62:0f:54:6e:64:2f:be:89:e8:fd:44:83:4e:af:
                    22:45:ce:55:5c:25:a3:a3:bd:9c:bf:8f:af:54:c4:
                    29:2d:65:98:e9:7d:aa:17:4a:9f:1f:15:cb:4c:5a:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DF:F3:22:EF:D1:22:DF:B8:B1:43:52:50:A0:E9:24:56:AF:E2:75
            X509v3 Authority Key Identifier:
                keyid:87:53:89:02:A4:58:E1:66:D6:25:8D:85:B3:F8:F1:B9:35:29:59:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1OJAqRY4WbWJY2Fs_jxuTUpWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b4:24:eb:c6:7e:32:eb:ce:17:85:fe:5a:19:54:8a:22:e8:
         30:18:07:f6:60:48:e5:1a:06:d7:02:db:24:a6:32:ec:d2:a1:
         45:18:6d:44:4f:69:5e:9f:92:64:70:20:99:1c:1d:69:b0:c8:
         48:f9:82:9b:24:3f:12:d5:28:25:d7:90:1d:c7:a2:b1:06:b7:
         b2:ff:50:03:e2:81:dc:e2:45:6a:ef:d8:5d:ee:41:e3:a3:10:
         10:c3:fe:a8:ec:0f:43:1d:04:c1:9b:a8:08:37:62:31:0c:9f:
         66:39:94:89:7d:23:63:f5:e8:49:10:34:d6:ae:06:ca:37:12:
         95:49:c3:50:bd:da:29:a5:21:ad:30:e9:f6:9a:e9:f6:dd:0b:
         d0:f8:45:10:45:6f:70:da:eb:0e:8f:a0:ce:e8:57:a5:62:8c:
         32:6b:04:fa:60:71:6c:1f:10:01:bc:9e:dc:a2:f8:d5:49:a8:
         e9:86:2f:ea:90:b5:7f:34:96:70:bc:20:b7:ce:d0:03:73:fc:
         a5:49:a7:43:63:62:16:c9:51:e5:39:60:a5:0c:3e:63:40:9b:
         5d:df:90:d3:85:bb:4e:a8:08:7e:68:49:13:0a:9b:4c:91:6a:
         4e:c8:dc:fb:ca:a9:12:e9:b9:fd:e8:eb:f0:81:ac:c4:34:82:
         a5:0d:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:07:15 2024 by rpki-client on console-ams.rpki-client.org