Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
File:                     5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft (raw, json)
Hash identifier:          4Vb7cnKlMVLBZ/wH3vUPRZgNWb8BL99peLkTHcON4eA=
Subject key identifier:   BF:C0:5E:85:96:D6:A2:3C:F7:4E:5D:BA:35:72:86:C7:89:A8:E3:CD
Authority key identifier: 5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB
Certificate issuer:       /CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
Certificate serial:       7A373A8DF9640EBAE4F6B78D26263AE61EF0122C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
Manifest number:          13
Signing time:             Fri 22 Nov 2024 02:14:12 +0000
Manifest this update:     Fri 22 Nov 2024 02:09:12 +0000
Manifest next update:     Sat 23 Nov 2024 04:35:12 +0000
Files and hashes:         1: 5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl (hash: C3PEhYcfwKZ6hKNQ7uaAEhfc1MZMj/6xXXopJvvZyV0=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:37:3a:8d:f9:64:0e:ba:e4:f6:b7:8d:26:26:3a:e6:1e:f0:12:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5edbd6e79c689c56a84fa46cd7c9fa3151dfe0bb
        Validity
            Not Before: Nov 22 02:09:12 2024 GMT
            Not After : Nov 23 04:35:12 2024 GMT
        Subject: CN=BFC05E8596D6A23CF74E5DBA357286C789A8E3CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a1:63:2b:fa:bc:a6:03:ef:56:fb:c2:e4:ec:
                    97:c6:a1:04:47:5e:9f:7c:01:75:4d:cd:a0:18:69:
                    ea:b2:92:87:29:60:c5:9e:b5:0a:cd:35:ad:5c:ac:
                    a2:36:b7:d6:89:32:5c:21:f5:8a:6e:06:df:92:66:
                    98:98:31:6f:2f:e4:b6:79:9b:49:62:13:22:de:e9:
                    e0:b0:5a:5e:2b:1c:cd:3f:de:32:49:54:48:b7:d8:
                    3b:43:10:69:a2:36:76:fe:8d:e6:19:40:0d:4f:72:
                    17:c5:2f:01:8c:58:25:46:f5:32:eb:ac:29:28:af:
                    42:ba:cb:4e:6c:bb:73:a9:a5:78:62:e9:90:29:d6:
                    48:cb:9a:56:b6:25:df:14:89:fd:3e:8a:ee:6f:e4:
                    05:99:60:f6:a0:26:bd:a8:b5:d4:f9:23:e9:a4:9d:
                    5e:d6:e0:a7:b6:25:6d:a7:0e:44:68:82:15:35:4a:
                    70:b3:31:4b:5d:44:27:d4:b6:02:0e:01:97:bc:ef:
                    b9:b3:b5:f9:92:2c:27:10:31:1d:20:10:0a:b1:7b:
                    d6:e1:b3:52:ff:10:ae:e2:4d:15:77:e0:55:9b:1a:
                    2e:36:ac:5b:f5:e1:97:c4:15:5f:fd:f3:fc:a8:71:
                    52:36:e4:5e:56:ab:d9:39:ff:c8:c2:0f:8d:8e:c8:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C0:5E:85:96:D6:A2:3C:F7:4E:5D:BA:35:72:86:C7:89:A8:E3:CD
            X509v3 Authority Key Identifier:
                keyid:5E:DB:D6:E7:9C:68:9C:56:A8:4F:A4:6C:D7:C9:FA:31:51:DF:E0:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtvW55xonFaoT6Rs18n6MVHf4Ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/553623c4-33bd-438a-a93e-018d65c4e837/0/5EDBD6E79C689C56A84FA46CD7C9FA3151DFE0BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ef:4a:bc:67:df:22:fb:7b:6f:87:1f:5e:cf:c7:fd:2a:93:
         cc:ca:c4:fa:af:fe:60:9d:4e:5b:8b:74:f3:17:55:52:58:ec:
         7c:0c:24:f7:eb:f1:c4:e8:cc:05:6c:37:41:35:d1:38:fd:63:
         ee:02:46:0c:94:13:f5:40:d6:ee:a5:78:97:91:48:a2:8d:2e:
         ad:61:e4:ac:ec:5b:24:dc:6d:6d:0c:be:01:10:fc:a2:e6:00:
         b3:e1:14:59:5c:3f:23:cc:45:a3:6c:88:e3:f4:5e:55:21:d8:
         de:1c:00:19:84:63:52:3c:67:64:a3:65:fa:6a:03:ad:e1:88:
         f6:f6:42:5c:e5:f7:3a:e0:00:82:06:ce:62:3b:b4:e0:9d:fc:
         02:98:fe:07:d2:c4:de:2e:a1:b8:26:ec:f6:b8:74:ad:d9:1f:
         a0:83:2f:88:a6:8d:94:1e:d4:82:e3:33:97:c2:61:45:8f:bb:
         57:5f:e1:58:b4:d8:73:ef:84:51:74:27:da:89:23:b8:49:86:
         24:83:d3:0c:3b:8b:8d:f3:21:9b:54:d2:57:2a:e7:d5:e1:c7:
         7b:c9:5b:20:76:57:e8:94:d9:21:d9:d0:63:4f:0a:87:59:5d:
         4e:38:26:de:a9:c8:86:0c:01:fb:fe:32:8d:39:dc:92:d1:72:
         90:81:66:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:20 2024 by rpki-client on console-fra.rpki-client.org