Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File:                     3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier:          YFgVGhbzrIgEc/iBEH7SZ7zlpr9dS1fqJjveVH6XMrg=
Subject key identifier:   5F:00:67:E8:EE:32:D9:48:59:72:70:DF:31:90:46:3C:FE:EC:06:DD
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer:       /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial:       14811208F84AC5DEBD5528D8085461B007D4D8CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number:          01F7
Signing time:             Fri 22 Nov 2024 01:56:26 +0000
Manifest this update:     Fri 22 Nov 2024 01:51:26 +0000
Manifest next update:     Sat 23 Nov 2024 02:35:26 +0000
Files and hashes:         1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: NGbbwNWGEUQCSoXUzHRj31XWSyDZpsjq2vgPwrudWcQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:81:12:08:f8:4a:c5:de:bd:55:28:d8:08:54:61:b0:07:d4:d8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
        Validity
            Not Before: Nov 22 01:51:26 2024 GMT
            Not After : Nov 23 02:35:26 2024 GMT
        Subject: CN=5F0067E8EE32D948597270DF3190463CFEEC06DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:68:c3:d2:f2:9e:db:7d:f2:ad:c9:0d:11:
                    76:c6:a1:83:46:87:0d:01:65:0e:33:9a:91:68:6b:
                    da:6e:14:e3:c4:22:1d:f3:93:ff:83:c9:d1:b2:21:
                    0b:dd:c0:b9:89:e5:10:69:e3:47:fd:2a:e7:a3:35:
                    b0:9b:d3:9b:d4:1f:d0:bd:22:f7:82:48:fd:80:f2:
                    d5:31:52:27:08:e2:10:e4:32:5b:e5:ee:15:f1:1d:
                    e1:a5:98:cd:a0:8d:72:80:e2:52:ea:91:77:18:08:
                    5b:37:69:94:73:a3:52:7b:0d:c1:d6:0b:0c:3b:3a:
                    bd:4b:56:d0:c6:15:b6:5d:f0:49:19:b7:f0:54:4f:
                    d5:58:1d:30:31:a1:7c:76:a0:b3:a2:30:40:0b:1b:
                    90:5c:cc:11:8e:d8:49:66:fc:07:0b:46:cd:81:59:
                    30:ba:94:be:6f:b8:6d:e3:f2:a2:3b:e4:b7:67:2a:
                    ec:a3:46:78:bf:6c:e2:3e:43:20:1f:a8:04:95:10:
                    3a:28:c1:0a:07:6f:6a:7a:b4:dc:be:cd:af:5d:59:
                    52:b8:33:0c:48:a1:99:5d:bb:e7:bf:57:85:e6:26:
                    38:e8:68:c7:e5:b8:ce:36:94:fb:f1:63:c0:8b:f4:
                    7f:6d:7d:e7:5b:0b:b2:f0:f1:0d:5d:a7:73:85:58:
                    78:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:00:67:E8:EE:32:D9:48:59:72:70:DF:31:90:46:3C:FE:EC:06:DD
            X509v3 Authority Key Identifier:
                keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:49:1f:06:d9:89:3b:1c:28:3c:1f:cf:15:56:cc:be:2d:6c:
         08:47:67:63:64:87:c4:27:95:6c:a4:78:ca:1d:a5:00:15:fa:
         be:30:59:8b:08:4f:13:00:1d:b5:da:2e:76:78:e1:d7:bb:db:
         5f:9d:2e:9b:5e:9c:3b:c5:83:3f:c7:22:d7:20:04:e6:51:2b:
         d5:1b:75:81:bd:99:a1:54:0f:02:46:52:e0:d8:f0:d7:7b:76:
         43:5c:9b:bc:25:a1:37:f8:c1:b1:3f:fd:70:56:56:b9:91:6e:
         7b:c9:b1:bd:7a:dd:fc:04:78:e6:3f:32:4e:b6:5d:48:6a:be:
         05:f9:09:17:1e:ba:8e:ee:90:c1:24:44:a6:b7:6f:04:ee:9d:
         2f:a9:6b:5d:42:c1:7b:ed:51:17:9b:93:0a:06:cf:1d:f3:bf:
         ea:61:9b:32:47:f1:f5:a1:1d:9c:d1:82:f9:bc:16:9f:ce:ed:
         c1:b6:be:60:ed:dd:31:00:04:b2:3e:1a:ea:c9:9a:94:43:67:
         65:62:1d:55:09:e7:21:87:f8:c7:33:7f:38:eb:77:24:dc:cf:
         1b:63:3e:a0:f9:97:a1:58:c9:66:b7:29:4f:a0:78:7c:99:c6:
         9c:d2:5b:d1:90:6a:fc:16:f6:20:20:e4:81:5f:91:0e:a3:8a:
         18:ca:d4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:59:13 2024 by rpki-client on console-ams.rpki-client.org