Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
File:                     3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft (raw, json)
Hash identifier:          8YNuPQfnF3qUiRi2C81rBu1ibc9yob6HmKI0Kh0gQXI=
Subject key identifier:   A5:78:3F:0B:0E:FB:02:0F:E0:80:04:53:69:9A:8F:ED:0E:5D:44:EE
Authority key identifier: 36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4
Certificate issuer:       /CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
Certificate serial:       4ED68DE594D024D0535087E9B3BFEBFD8FAD96B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
Manifest number:          0113
Signing time:             Fri 17 May 2024 11:23:44 +0000
Manifest this update:     Fri 17 May 2024 11:18:44 +0000
Manifest next update:     Sat 18 May 2024 12:59:44 +0000
Files and hashes:         1: 3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl (hash: LoGyOs6B22boIGNrVe/9BezIbOtPFa1C99R4agF6aZY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d6:8d:e5:94:d0:24:d0:53:50:87:e9:b3:bf:eb:fd:8f:ad:96:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3611b3e6dae8e0d1b16d5bdafcda3d8370ff3bf4
        Validity
            Not Before: May 17 11:18:44 2024 GMT
            Not After : May 18 12:59:44 2024 GMT
        Subject: CN=A5783F0B0EFB020FE0800453699A8FED0E5D44EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:76:95:02:92:1d:1a:e4:39:a4:7f:50:4c:98:
                    b9:9d:82:c5:56:d1:f6:76:f6:b0:c3:05:24:bb:aa:
                    08:6c:e5:35:02:fb:a4:0f:ec:e8:7e:f2:f4:c5:99:
                    d6:f2:54:bc:67:6e:36:ff:0b:73:84:21:22:51:6b:
                    bf:53:61:62:86:47:e3:e6:b2:9f:10:28:55:e8:e0:
                    af:bf:9b:58:ac:68:31:e3:be:6e:25:2a:29:17:80:
                    38:44:61:32:45:65:e9:35:4c:26:92:44:0e:f1:2c:
                    31:72:ce:01:74:13:44:fb:62:38:7c:1d:da:7a:b3:
                    a9:eb:cc:3c:cb:c5:56:a8:27:26:88:61:bb:12:f3:
                    de:c1:04:c5:12:c7:6a:dc:54:ea:ad:a3:ae:65:a5:
                    bd:ce:98:4b:70:dd:97:b5:42:da:5b:2a:ff:19:d3:
                    41:42:bd:3c:e5:f7:58:cc:e9:f7:0f:ea:40:de:47:
                    e2:dc:41:30:ab:47:aa:89:64:38:83:2b:d3:b4:19:
                    54:4f:72:a3:23:6a:16:15:45:9f:14:b7:61:46:5b:
                    cb:68:ba:6f:fd:62:50:fc:91:06:42:a5:61:c4:3f:
                    6d:29:1c:e7:e1:46:66:e7:4d:eb:4e:5c:22:8e:80:
                    b8:57:ee:1c:d8:18:dd:1c:7b:62:c4:40:ce:56:7a:
                    5d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:78:3F:0B:0E:FB:02:0F:E0:80:04:53:69:9A:8F:ED:0E:5D:44:EE
            X509v3 Authority Key Identifier:
                keyid:36:11:B3:E6:DA:E8:E0:D1:B1:6D:5B:DA:FC:DA:3D:83:70:FF:3B:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhGz5tro4NGxbVva_No9g3D_O_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/66bd92f1-415b-4765-8a16-dbfc4593c1a8/5/3611B3E6DAE8E0D1B16D5BDAFCDA3D8370FF3BF4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3e:64:f7:a8:8b:2a:9d:3d:8f:3d:65:6e:0e:36:de:26:78:
         48:4b:55:5c:d4:5e:a8:9d:68:14:49:c4:bc:83:e7:77:ad:a4:
         81:c2:ad:fb:bd:b8:da:53:d7:3f:f7:1e:9d:5a:f0:d1:8e:4c:
         8f:5a:cc:7e:88:31:92:8f:14:29:e9:c7:da:3e:26:7f:e3:38:
         a9:d6:0c:92:18:e4:43:7f:75:da:c8:65:3e:35:e0:7b:8d:d4:
         a6:d1:dd:2c:b1:78:ee:eb:ad:f5:b1:1a:32:36:c4:64:65:a5:
         aa:be:55:5b:5b:b0:88:5c:48:ee:29:3a:c3:10:5e:6e:ca:ac:
         03:40:63:2a:15:3d:cb:b0:2e:76:7b:b1:49:11:33:04:77:57:
         99:30:d2:b3:81:1e:fd:19:4d:d4:be:0b:0a:d6:d3:bd:20:00:
         a3:ef:52:22:de:51:1f:13:0f:92:e1:f3:36:af:81:7a:04:0e:
         43:e8:02:14:88:9c:7d:6e:18:24:b4:87:1a:be:69:64:f0:7f:
         00:51:cb:aa:a7:95:71:85:b7:f9:d1:a9:cf:81:ba:b0:9a:12:
         2c:43:f8:59:39:10:05:79:23:d2:f9:c1:7e:dd:d6:55:cd:33:
         30:ed:bc:27:0b:43:72:b7:60:c7:55:a8:6f:58:e3:b0:34:c6:
         4e:71:38:5e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTtaN5ZTQJNBTUIfps7/r/Y+tlrAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYxMWIzZTZkYWU4ZTBkMWIxNmQ1YmRhZmNkYTNkODM3
MGZmM2JmNDAeFw0yNDA1MTcxMTE4NDRaFw0yNDA1MTgxMjU5NDRaMDMxMTAvBgNV
BAMTKEE1NzgzRjBCMEVGQjAyMEZFMDgwMDQ1MzY5OUE4RkVEMEU1RDQ0RUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDudpUCkh0a5Dmkf1BMmLmdgsVW
0fZ29rDDBSS7qghs5TUC+6QP7Oh+8vTFmdbyVLxnbjb/C3OEISJRa79TYWKGR+Pm
sp8QKFXo4K+/m1isaDHjvm4lKikXgDhEYTJFZek1TCaSRA7xLDFyzgF0E0T7Yjh8
Hdp6s6nrzDzLxVaoJyaIYbsS897BBMUSx2rcVOqto65lpb3OmEtw3Ze1QtpbKv8Z
00FCvTzl91jM6fcP6kDeR+LcQTCrR6qJZDiDK9O0GVRPcqMjahYVRZ8Ut2FGW8to
um/9YlD8kQZCpWHEP20pHOfhRmbnTetOXCKOgLhX7hzYGN0ce2LEQM5Wel1NAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUpXg/Cw77Ag/ggARTaZqP7Q5dRO4wHwYDVR0j
BBgwFoAUNhGz5tro4NGxbVva/No9g3D/O/QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjZiZDkyZjEtNDE1Yi00NzY1LThhMTYtZGJmYzQ1OTNj
MWE4LzUvMzYxMUIzRTZEQUU4RTBEMUIxNkQ1QkRBRkNEQTNEODM3MEZGM0JGNC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL05oR3o1dHJvNE5HeGJWdmFfTm85ZzNE
X09fUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82NmJkOTJmMS00
MTViLTQ3NjUtOGExNi1kYmZjNDU5M2MxYTgvNS8zNjExQjNFNkRBRThFMEQxQjE2
RDVCREFGQ0RBM0Q4MzcwRkYzQkY0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeT5k96iLKp09jz1lbg42
3iZ4SEtVXNReqJ1oFEnEvIPnd62kgcKt+7242lPXP/cenVrw0Y5Mj1rMfogxko8U
KenH2j4mf+M4qdYMkhjkQ3912shlPjXge43UptHdLLF47uut9bEaMjbEZGWlqr5V
W1uwiFxI7ik6wxBebsqsA0BjKhU9y7AudnuxSREzBHdXmTDSs4Ee/RlN1L4LCtbT
vSAAo+9SIt5RHxMPkuHzNq+BegQOQ+gCFIicfW4YJLSHGr5pZPB/AFHLqqeVcYW3
+dGpz4G6sJoSLEP4WTkQBXkj0vnBft3WVc0zMO28JwtDcrdgx1Wob1jjsDTGTnE4
Xg==
-----END CERTIFICATE-----
Generated at Fri May 17 14:34:43 2024 by rpki-client on console-ams.rpki-client.org