Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/3/D4E7163BEE1E1A417CAD66582B4E72813091F93B.mft
File:                     D4E7163BEE1E1A417CAD66582B4E72813091F93B.mft (raw, json)
Hash identifier:          w6V7De++lauSnkDemuHTbDt0T/b1bdS3PG0fQt5v6KY=
Subject key identifier:   6F:7A:3A:CE:A8:55:A7:67:31:29:1F:B3:79:54:4D:36:E2:0E:E6:9F
Authority key identifier: D4:E7:16:3B:EE:1E:1A:41:7C:AD:66:58:2B:4E:72:81:30:91:F9:3B
Certificate issuer:       /CN=d4e7163bee1e1a417cad66582b4e72813091f93b
Certificate serial:       06E787DF2E887BE333E4C3D37198F86CD405567A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OcWO-4eGkF8rWZYK05ygTCR-Ts.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/3/D4E7163BEE1E1A417CAD66582B4E72813091F93B.mft
Manifest number:          2B
Signing time:             Fri 17 May 2024 08:22:54 +0000
Manifest this update:     Fri 17 May 2024 08:17:54 +0000
Manifest next update:     Sat 18 May 2024 09:55:54 +0000
Files and hashes:         1: D4E7163BEE1E1A417CAD66582B4E72813091F93B.crl (hash: 2R0sDhmj1vRHf7zBNXcHkopizhqPYKgtCVps+BzSBh8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/3/D4E7163BEE1E1A417CAD66582B4E72813091F93B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/3/D4E7163BEE1E1A417CAD66582B4E72813091F93B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1OcWO-4eGkF8rWZYK05ygTCR-Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e7:87:df:2e:88:7b:e3:33:e4:c3:d3:71:98:f8:6c:d4:05:56:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e7163bee1e1a417cad66582b4e72813091f93b
        Validity
            Not Before: May 17 08:17:54 2024 GMT
            Not After : May 18 09:55:54 2024 GMT
        Subject: CN=6F7A3ACEA855A76731291FB379544D36E20EE69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:36:79:ca:3d:40:8d:70:34:48:7b:47:ef:f1:
                    e6:c8:dd:9b:21:22:7b:4c:4d:a1:2d:d9:f5:d3:a0:
                    c2:09:04:f9:ae:60:28:5b:b6:af:ac:ad:47:bf:78:
                    29:09:b5:b4:8e:42:1c:13:d3:56:da:ab:a6:7f:9b:
                    0a:b9:5d:76:e6:21:76:33:f7:21:64:fd:87:1f:77:
                    e2:d8:71:61:26:8b:96:bd:8a:34:39:e4:7a:ab:de:
                    6f:2c:09:6a:55:b8:d8:f5:15:3a:10:0c:89:87:c1:
                    25:2a:3b:86:41:33:fb:0b:f3:3e:c8:ce:71:70:bf:
                    5e:c8:8c:fd:1e:06:b6:18:f4:ba:19:59:9f:f2:46:
                    b2:bf:bc:06:26:bd:c3:43:51:9a:45:2c:46:57:c1:
                    67:c7:88:2f:24:8f:1c:52:8d:12:4c:2f:a1:b9:f6:
                    d4:97:12:6a:c7:01:c7:aa:7c:ad:d5:d7:0f:89:d6:
                    71:30:ff:c8:47:4e:ad:60:f4:d7:b7:4f:94:59:f7:
                    22:93:ee:fa:dd:30:51:02:6c:aa:1f:f6:7e:01:34:
                    8f:22:f5:fc:bd:af:bd:03:22:42:81:fd:a6:d0:9c:
                    57:57:35:dc:e2:30:c3:87:b0:11:fa:88:af:33:10:
                    36:ae:6e:53:da:46:97:ee:d7:59:94:a2:3f:1a:44:
                    8b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:3A:CE:A8:55:A7:67:31:29:1F:B3:79:54:4D:36:E2:0E:E6:9F
            X509v3 Authority Key Identifier:
                keyid:D4:E7:16:3B:EE:1E:1A:41:7C:AD:66:58:2B:4E:72:81:30:91:F9:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/3/D4E7163BEE1E1A417CAD66582B4E72813091F93B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OcWO-4eGkF8rWZYK05ygTCR-Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/3/D4E7163BEE1E1A417CAD66582B4E72813091F93B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:56:67:d8:20:2c:6e:5a:55:19:bf:56:82:9c:47:29:8b:99:
         14:18:77:3e:68:43:3d:55:36:a3:54:7d:ce:ef:3d:a1:7f:27:
         6a:89:e1:00:d1:31:56:6d:21:ed:fe:11:b5:57:a9:37:6c:e0:
         d2:36:af:e3:76:bc:6f:dc:dc:fb:ea:14:d6:ea:57:b0:50:60:
         8a:1d:2e:8f:d1:a9:99:98:cb:73:1d:02:c9:0c:a3:f7:fa:36:
         85:da:39:37:8d:8b:07:5d:99:c5:53:48:37:21:64:49:45:b4:
         ea:7c:cb:f0:bf:a8:06:d6:c6:c1:a9:05:bb:26:6a:e6:4a:fb:
         ce:6e:eb:8b:d4:7f:ab:9c:dc:e2:d8:55:2c:c9:db:e5:7f:36:
         87:e7:4c:9f:7c:ac:88:e8:9a:04:5b:b8:80:50:c1:e4:96:f3:
         fe:92:fa:21:38:0a:f3:28:20:a5:14:60:42:4d:0a:91:f7:20:
         f7:0a:54:99:55:c3:2e:80:6c:1a:52:64:6c:33:fa:16:08:c2:
         3b:0e:b9:af:fd:66:1f:25:e2:1b:a7:3a:dc:34:f5:7e:16:eb:
         d0:52:8a:39:05:1c:34:7d:6a:ff:5a:3a:37:4f:0f:bc:03:17:
         6d:8b:a1:87:b8:83:59:5e:a0:08:e8:a0:bf:31:68:19:5d:28:
         8f:16:f9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:15:36 2024 by rpki-client on console-ams.rpki-client.org