Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
File:                     5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft (raw, json)
Hash identifier:          uV1eaNHPRdc004MfFPXRD/ZWyq2dtz7R2NYQgbJKEkw=
Subject key identifier:   38:DB:08:D7:2D:60:A7:82:37:07:4A:A0:5F:26:E0:77:E6:F1:E1:BA
Authority key identifier: 5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3
Certificate issuer:       /CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
Certificate serial:       7F96671F68DD1DF9AD529C47B9042EBBE566AD5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
Manifest number:          4F
Signing time:             Sun 29 Sep 2024 09:20:53 +0000
Manifest this update:     Sun 29 Sep 2024 09:15:53 +0000
Manifest next update:     Mon 30 Sep 2024 11:58:53 +0000
Files and hashes:         1: 5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl (hash: +a84gEADDd2vsDgEhUi2fQxN9Qk4wtSK3Z14Zk2DGjA=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Sep 2024 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:96:67:1f:68:dd:1d:f9:ad:52:9c:47:b9:04:2e:bb:e5:66:ad:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dbf811e504a4fa2c29d3b4f11dfb713642873d3
        Validity
            Not Before: Sep 29 09:15:53 2024 GMT
            Not After : Sep 30 11:58:53 2024 GMT
        Subject: CN=38DB08D72D60A78237074AA05F26E077E6F1E1BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:da:a0:33:0c:92:42:7c:5f:b4:56:6c:1d:4e:
                    15:cd:5f:05:84:30:ba:ec:5f:c0:4a:d3:00:57:06:
                    cc:c6:19:47:f1:1b:56:60:3d:69:dd:6a:db:f8:ec:
                    d6:b1:64:29:c4:80:fa:c4:20:ec:07:8d:a5:8e:e3:
                    04:ec:74:0d:43:7a:c1:64:17:ee:69:8d:65:1f:9f:
                    fa:16:25:45:e2:18:4d:c1:8f:45:a6:1e:59:12:19:
                    61:9d:cb:5d:2b:4d:21:21:b0:9e:85:6e:9d:e1:12:
                    1b:0d:be:d0:d3:71:39:03:be:aa:d6:a3:fb:29:b4:
                    f2:37:9c:fe:9c:c8:9d:79:04:18:1c:96:f1:de:4a:
                    9e:cd:d2:53:ed:b2:a8:65:86:25:3b:80:5f:eb:8f:
                    eb:27:1f:87:e0:52:9b:e7:8a:ee:19:6b:19:78:79:
                    39:5f:57:ff:d1:64:1e:2a:58:54:9f:b2:d6:6f:fa:
                    a7:d0:5a:a6:7b:65:c4:f2:b0:a0:31:b4:12:21:2d:
                    91:41:08:cd:88:9c:8d:a4:90:4c:8e:cb:14:f5:2f:
                    46:03:34:4e:22:d0:19:7f:2d:65:12:e5:3a:19:ac:
                    e3:98:91:de:29:ef:d0:20:75:4f:4f:57:93:23:8a:
                    81:cd:38:0c:6f:60:e2:24:90:42:a4:29:ae:fd:cd:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DB:08:D7:2D:60:A7:82:37:07:4A:A0:5F:26:E0:77:E6:F1:E1:BA
            X509v3 Authority Key Identifier:
                keyid:5D:BF:81:1E:50:4A:4F:A2:C2:9D:3B:4F:11:DF:B7:13:64:28:73:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xb-BHlBKT6LCnTtPEd-3E2Qoc9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/0/5DBF811E504A4FA2C29D3B4F11DFB713642873D3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:fa:cd:77:fc:b4:be:8d:2e:cc:d6:49:17:8b:c6:ef:df:84:
         ea:f4:2a:e4:2f:84:2c:c7:ab:19:b8:3b:ba:57:c9:08:f4:ad:
         44:55:0a:08:55:c6:5c:8f:ad:89:59:0e:ea:6c:2d:0d:a5:c3:
         c5:6b:34:70:64:d9:72:b8:02:cb:72:8d:9a:ae:8a:66:c3:66:
         59:7d:6b:0e:8d:4f:13:05:18:f6:65:a6:0f:89:20:64:86:49:
         2c:8e:ba:e9:96:01:c1:34:4f:3a:b9:d4:f6:ab:31:a7:c8:43:
         e9:da:32:93:8a:54:72:90:7b:94:c0:23:da:a1:86:83:15:62:
         f3:05:6c:bf:ef:71:83:d5:a1:9c:14:fa:ee:59:24:1f:f6:d1:
         18:f9:1c:b3:c8:82:bb:9c:4c:37:eb:2a:5f:8f:a0:8b:71:91:
         e9:90:08:00:b0:c3:48:8e:56:6f:37:36:2b:1a:6f:79:e9:d8:
         47:2f:6c:63:4e:04:f9:21:d0:7a:83:1c:39:03:71:c5:3c:39:
         c9:5e:2c:67:08:4e:2d:a3:84:57:69:c2:4b:89:b9:16:b8:2b:
         02:0c:99:45:8a:b5:c2:72:90:07:12:37:b4:70:1e:cd:2f:ee:
         6d:a7:d6:73:d6:3d:db:2e:41:65:c8:bc:c8:1b:52:78:35:03:
         8c:90:7d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 12:31:16 2024 by rpki-client on console-ams.rpki-client.org