Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
File:                     6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft (raw, json)
Hash identifier:          nEAHzOP6q+k6B8x5JvGblL2Tx3N/KJMqL2U22e+eTSc=
Subject key identifier:   2A:A5:8A:81:D6:90:03:A5:F6:BF:39:61:B1:74:9F:05:12:CF:3C:04
Authority key identifier: 6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F
Certificate issuer:       /CN=6e51cb9a481b5ae99d8be1183e3fb087ff5c8b6f
Certificate serial:       4D5EA1A487D65B8EB9E0D900B0B279D33E077545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
Manifest number:          5B
Signing time:             Fri 22 Nov 2024 03:35:04 +0000
Manifest this update:     Fri 22 Nov 2024 03:30:04 +0000
Manifest next update:     Sat 23 Nov 2024 07:04:04 +0000
Files and hashes:         1: 6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl (hash: n1wNH4fR2l7EXt/C/4oAfybOiZPRoF9HuqNGlCZTlp8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5e:a1:a4:87:d6:5b:8e:b9:e0:d9:00:b0:b2:79:d3:3e:07:75:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e51cb9a481b5ae99d8be1183e3fb087ff5c8b6f
        Validity
            Not Before: Nov 22 03:30:04 2024 GMT
            Not After : Nov 23 07:04:04 2024 GMT
        Subject: CN=2AA58A81D69003A5F6BF3961B1749F0512CF3C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ee:e5:14:b0:e7:a9:02:5e:52:fb:66:10:b9:
                    d5:79:af:8d:1d:d4:a8:36:aa:eb:1c:00:dd:56:fa:
                    19:65:26:e7:2f:1c:b3:63:fd:bb:20:33:27:e7:a9:
                    56:b2:1c:cf:9b:ca:02:99:75:5b:01:95:ed:e4:84:
                    85:fc:f0:a4:8d:29:ae:bf:7e:a1:79:e1:59:b1:f2:
                    ae:e4:93:fb:be:83:71:b9:40:60:44:b1:6e:1d:17:
                    c4:75:49:05:72:be:29:85:dd:a4:b9:7c:e4:39:d8:
                    4d:4e:ea:21:58:e1:9a:d2:ca:3a:c6:69:27:60:f6:
                    c1:39:6c:10:23:fa:82:ad:94:79:0c:57:a3:a7:ef:
                    f8:f9:e5:40:82:e9:bd:85:47:79:ea:7f:fa:96:ee:
                    59:b7:dd:d7:d2:68:16:ed:f5:c9:c6:9a:71:b1:18:
                    de:7c:69:90:93:5e:e0:39:5f:ef:6a:08:05:20:2f:
                    36:a2:7f:98:7f:9e:8a:d5:5d:46:62:c8:72:3f:c4:
                    69:58:d2:92:b1:e0:5e:43:11:4c:51:00:85:8f:1b:
                    fc:bd:94:71:6b:47:ab:f8:81:c4:e0:ae:81:a3:e5:
                    7b:41:00:39:2a:04:e9:d3:f1:c8:13:ef:36:1f:3a:
                    e7:05:7d:86:96:dc:64:97:50:f4:67:a7:89:aa:85:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A5:8A:81:D6:90:03:A5:F6:BF:39:61:B1:74:9F:05:12:CF:3C:04
            X509v3 Authority Key Identifier:
                keyid:6E:51:CB:9A:48:1B:5A:E9:9D:8B:E1:18:3E:3F:B0:87:FF:5C:8B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/blHLmkgbWumdi-EYPj-wh_9ci28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65839fbd-327e-4fce-8a3e-53ff8f0c460e/1/6E51CB9A481B5AE99D8BE1183E3FB087FF5C8B6F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9e:34:0d:ef:f1:1e:a5:a7:97:40:be:97:30:72:0c:f7:0a:
         5f:d8:2f:63:9e:79:5c:07:93:ac:23:48:d9:c7:92:37:b6:3e:
         d4:76:bb:08:d3:01:47:d6:bc:86:81:4a:cf:b1:b8:0f:77:8e:
         41:a5:31:c2:e3:2c:7c:93:98:29:7c:09:56:7b:c1:65:f5:c7:
         36:ba:6f:da:8e:33:a1:c2:4f:bb:49:b1:82:d4:25:4b:14:eb:
         f1:f2:9c:bf:19:e6:d5:d8:c7:f1:a4:7f:ce:b9:1d:0f:1b:a0:
         c3:af:33:3b:4d:48:56:4b:b6:7b:4f:27:5d:2f:31:88:a1:b6:
         da:e2:e0:63:36:c1:cd:ee:80:bf:1f:3f:38:19:ff:cb:07:e4:
         41:30:b0:f5:37:1c:9b:78:f7:26:14:e0:12:e0:c0:5c:7d:0c:
         17:69:84:9f:5d:b2:5e:2b:cd:6e:e0:36:77:e4:35:8c:28:97:
         ab:77:39:71:77:0d:c1:66:3f:92:d9:fc:9e:91:07:87:8a:99:
         dd:5f:e4:f7:e9:8a:e4:f2:c0:1a:cf:a0:8a:8f:ec:b0:e6:2d:
         c9:a5:1c:93:85:7d:8c:b3:64:7b:a0:57:b0:22:74:3c:83:2d:
         63:e9:aa:be:98:a6:4b:14:e7:9b:89:8b:79:65:45:61:de:15:
         e9:12:47:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:41:50 2024 by rpki-client on console-ams.rpki-client.org