Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.mft
File:                     87538902A458E166D6258D85B3F8F1B935295942.mft (raw, json)
Hash identifier:          GECMn/ORYtVAP7EpGy5G8bCZS6vfzDhQfmOzYHLRnlg=
Subject key identifier:   7A:87:2D:89:6A:90:4F:3B:B9:A4:5E:9B:AB:AB:8C:5F:AC:9C:0F:10
Authority key identifier: 87:53:89:02:A4:58:E1:66:D6:25:8D:85:B3:F8:F1:B9:35:29:59:42
Certificate issuer:       /CN=87538902a458e166d6258d85b3f8f1b935295942
Certificate serial:       54136A371702D43B5CADC494770FBC4C37C8C8EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h1OJAqRY4WbWJY2Fs_jxuTUpWUI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.mft
Manifest number:          B5
Signing time:             Fri 17 May 2024 04:54:21 +0000
Manifest this update:     Fri 17 May 2024 04:49:21 +0000
Manifest next update:     Sat 18 May 2024 06:40:21 +0000
Files and hashes:         1: 87538902A458E166D6258D85B3F8F1B935295942.crl (hash: fAWgoxraecy6yJkVorkg3LV+aOXFPQ9fxdqWzoAd2J8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h1OJAqRY4WbWJY2Fs_jxuTUpWUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:13:6a:37:17:02:d4:3b:5c:ad:c4:94:77:0f:bc:4c:37:c8:c8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87538902a458e166d6258d85b3f8f1b935295942
        Validity
            Not Before: May 17 04:49:21 2024 GMT
            Not After : May 18 06:40:21 2024 GMT
        Subject: CN=7A872D896A904F3BB9A45E9BABAB8C5FAC9C0F10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:b6:da:da:58:0b:aa:05:08:a5:40:79:ac:
                    b8:cf:8a:17:ca:e8:42:c6:4d:df:d6:f0:12:a9:3b:
                    3b:0f:f1:e2:f4:80:6b:f6:35:52:54:7f:23:b3:44:
                    cf:0b:22:83:6f:3d:a4:fc:47:c6:89:69:fc:f1:2d:
                    ee:a8:22:1f:ed:b0:27:66:eb:28:83:4c:a6:de:a3:
                    6d:57:42:2f:7c:52:74:00:98:f3:ca:97:f5:4b:3d:
                    2d:06:ad:ed:59:8e:a9:9c:8e:f0:d9:64:fe:a8:e6:
                    ba:52:b5:53:f5:a8:c7:02:4b:05:92:a3:1a:fd:d9:
                    8f:1c:f6:87:bb:49:d4:a4:09:55:98:b6:f9:e1:cb:
                    fc:0a:c0:d6:0c:a7:d4:d4:34:4f:02:56:62:60:a7:
                    f6:06:5b:00:d1:df:f2:10:ef:2a:3a:38:96:5a:bd:
                    68:d2:36:97:32:71:9c:6e:50:75:1f:83:7a:d6:51:
                    ce:e4:3a:66:c5:7d:f9:8c:ed:94:90:de:91:e6:ce:
                    a4:85:44:af:0a:73:d4:0c:99:23:13:18:ab:8e:49:
                    b7:1d:4f:0a:7a:55:93:56:2c:aa:87:26:30:c9:80:
                    7f:b5:66:25:c6:86:40:9b:5c:6f:72:c4:1c:2a:ae:
                    0c:a1:eb:8c:2b:1a:88:a4:80:7d:40:f7:bf:5d:9b:
                    09:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:87:2D:89:6A:90:4F:3B:B9:A4:5E:9B:AB:AB:8C:5F:AC:9C:0F:10
            X509v3 Authority Key Identifier:
                keyid:87:53:89:02:A4:58:E1:66:D6:25:8D:85:B3:F8:F1:B9:35:29:59:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1OJAqRY4WbWJY2Fs_jxuTUpWUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/1/87538902A458E166D6258D85B3F8F1B935295942.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:95:0b:a5:c6:18:f4:86:1d:cf:60:06:6f:ef:f6:5d:01:a0:
         60:60:4a:26:79:35:3e:28:9b:0f:47:ac:9b:9e:8d:f6:7c:37:
         ae:13:93:48:e4:52:67:9f:4f:56:0e:ce:fe:78:db:5f:ed:21:
         75:b9:d3:7e:f8:b0:84:10:aa:eb:7b:3c:e8:a7:92:53:b7:79:
         a9:15:4f:0d:77:67:7a:98:5d:98:84:4c:22:ec:dd:d5:d4:ac:
         98:4b:25:04:a3:6f:8f:b3:ba:e8:b2:a7:34:6e:e3:ec:45:31:
         f3:64:9e:ea:e6:b8:a1:b1:a1:c2:23:73:c2:30:ef:02:1f:1f:
         66:ba:32:c1:9a:0b:f0:b8:df:3a:34:ca:24:2f:cd:e6:19:5c:
         c9:82:74:8c:9a:19:2a:b0:0c:98:59:01:ba:27:3d:11:af:3b:
         97:e7:7d:7b:1c:37:a9:1a:56:ba:1f:06:ba:b9:48:f2:75:5a:
         15:18:9f:43:35:56:6a:08:9b:6f:c2:31:27:44:45:be:58:1a:
         e9:1b:e6:f1:97:fa:52:2c:32:37:4b:b1:25:72:71:c1:53:40:
         07:89:48:cb:8b:6f:72:4b:ca:41:95:16:4a:9b:31:f4:be:c9:
         a6:c6:53:70:af:3e:bf:87:89:e1:db:08:37:35:c6:62:a0:c0:
         59:5e:d3:b3
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVBNqNxcC1DtcrcSUdw+8TDfIyO8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODc1Mzg5MDJhNDU4ZTE2NmQ2MjU4ZDg1YjNmOGYxYjkz
NTI5NTk0MjAeFw0yNDA1MTcwNDQ5MjFaFw0yNDA1MTgwNjQwMjFaMDMxMTAvBgNV
BAMTKDdBODcyRDg5NkE5MDRGM0JCOUE0NUU5QkFCQUI4QzVGQUM5QzBGMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2rba2lgLqgUIpUB5rLjPihfK
6ELGTd/W8BKpOzsP8eL0gGv2NVJUfyOzRM8LIoNvPaT8R8aJafzxLe6oIh/tsCdm
6yiDTKbeo21XQi98UnQAmPPKl/VLPS0Gre1ZjqmcjvDZZP6o5rpStVP1qMcCSwWS
oxr92Y8c9oe7SdSkCVWYtvnhy/wKwNYMp9TUNE8CVmJgp/YGWwDR3/IQ7yo6OJZa
vWjSNpcycZxuUHUfg3rWUc7kOmbFffmM7ZSQ3pHmzqSFRK8Kc9QMmSMTGKuOSbcd
Twp6VZNWLKqHJjDJgH+1ZiXGhkCbXG9yxBwqrgyh64wrGoikgH1A979dmwlrAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUeoctiWqQTzu5pF6bq6uMX6ycDxAwHwYDVR0j
BBgwFoAUh1OJAqRY4WbWJY2Fs/jxuTUpWUIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvM2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgy
MzUyLzEvODc1Mzg5MDJBNDU4RTE2NkQ2MjU4RDg1QjNGOEYxQjkzNTI5NTk0Mi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2gxT0pBcVJZNFdiV0pZMkZzX2p4dVRV
cFdVSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zZGE0ZDhiNC1h
MTU3LTQ2MzQtYWIxOC0zZWY5ZDA5ODIzNTIvMS84NzUzODkwMkE0NThFMTY2RDYy
NThEODVCM0Y4RjFCOTM1Mjk1OTQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpULpcYY9IYdz2AGb+/2
XQGgYGBKJnk1PiibD0esm56N9nw3rhOTSORSZ59PVg7O/njbX+0hdbnTfviwhBCq
63s86KeSU7d5qRVPDXdnephdmIRMIuzd1dSsmEslBKNvj7O66LKnNG7j7EUx82Se
6ua4obGhwiNzwjDvAh8fZroywZoL8LjfOjTKJC/N5hlcyYJ0jJoZKrAMmFkBuic9
Ea87l+d9exw3qRpWuh8GurlI8nVaFRifQzVWagibb8IxJ0RFvlga6Rvm8Zf6Uiwy
N0uxJXJxwVNAB4lIy4tvckvKQZUWSpsx9L7JpsZTcK8+v4eJ4dsINzXGYqDAWV7T
sw==
-----END CERTIFICATE-----
Generated at Fri May 17 08:09:13 2024 by rpki-client on console-ams.rpki-client.org