Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
File:                     E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft (raw, json)
Hash identifier:          nRNAVLcyxqBM6GP2CCd19b6VyEhUw3Mv+hLP/7aX7SY=
Subject key identifier:   CC:7C:7F:56:90:C3:C4:30:34:72:E0:A9:86:D6:EF:AC:B4:6B:32:0C
Authority key identifier: E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11
Certificate issuer:       /CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
Certificate serial:       0C2D07C1B3A580868266D50D8CD7F9EF77D5817E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
Manifest number:          02FE
Signing time:             Mon 25 Nov 2024 08:53:19 +0000
Manifest this update:     Mon 25 Nov 2024 08:48:19 +0000
Manifest next update:     Tue 26 Nov 2024 12:39:19 +0000
Files and hashes:         1: E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl (hash: bG7aKAIYtegLoS+q1PgyeffzNVuu16x9tIBYuelVO9I=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:2d:07:c1:b3:a5:80:86:82:66:d5:0d:8c:d7:f9:ef:77:d5:81:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8bc9876174d9a7385fce9343e2bb7d98f523b11
        Validity
            Not Before: Nov 25 08:48:19 2024 GMT
            Not After : Nov 26 12:39:19 2024 GMT
        Subject: CN=CC7C7F5690C3C4303472E0A986D6EFACB46B320C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:db:c1:45:f0:44:67:36:ee:4e:9a:da:83:0f:
                    80:ec:51:26:a3:8e:08:77:9f:25:1c:b1:4c:47:be:
                    a7:b3:0b:1f:53:b0:b7:38:e5:53:ab:f9:90:ae:9c:
                    16:1d:b0:1d:ee:e8:aa:e3:44:f2:20:cb:e6:5a:91:
                    ce:e6:02:e1:c5:e9:3d:3e:c8:70:16:cc:c2:cf:d4:
                    13:eb:2b:35:f7:e4:fc:09:14:45:c4:37:af:84:ae:
                    7c:4d:79:ee:81:47:19:c9:a3:1b:43:6e:f0:47:70:
                    b2:ce:b2:74:fd:54:cf:31:67:8a:a0:92:65:5a:78:
                    5b:25:b1:97:fa:39:80:09:09:61:63:3a:fa:03:1e:
                    28:12:90:85:c0:de:b9:f5:a7:dd:85:3b:7a:65:a7:
                    07:31:13:74:27:8f:e1:8d:30:d0:a6:45:30:19:06:
                    b9:6d:ea:68:8d:17:ef:59:e6:71:69:ff:9a:81:15:
                    35:98:e0:23:a7:18:8b:16:8d:66:f7:36:c4:bc:cf:
                    a1:bf:d2:de:6e:2a:50:d9:ec:ce:34:aa:3e:2f:23:
                    54:46:cc:c9:32:12:c6:16:9d:4c:09:ce:2c:95:af:
                    d5:bc:99:b8:82:d1:3f:6e:33:bf:f2:9b:6a:8c:94:
                    1f:93:ea:51:c1:2c:58:83:bd:dc:04:d2:40:7a:7d:
                    39:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7C:7F:56:90:C3:C4:30:34:72:E0:A9:86:D6:EF:AC:B4:6B:32:0C
            X509v3 Authority Key Identifier:
                keyid:E8:BC:98:76:17:4D:9A:73:85:FC:E9:34:3E:2B:B7:D9:8F:52:3B:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LyYdhdNmnOF_Ok0Piu32Y9SOxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/0/E8BC9876174D9A7385FCE9343E2BB7D98F523B11.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:c9:c4:a7:60:24:a1:36:6d:8b:77:83:48:e3:18:f9:18:06:
         cc:6b:8f:86:28:c7:b6:8e:be:31:49:49:0c:99:db:10:8b:e2:
         e9:c7:a5:b2:c0:1f:d4:9f:3d:18:0b:9d:ee:f4:03:fc:f5:21:
         24:c4:bb:8b:bf:68:d0:23:88:90:0b:bc:38:f1:eb:06:af:26:
         a7:94:b0:f5:fe:ec:27:06:58:a2:80:15:4c:7c:af:52:74:ce:
         dc:5a:01:ef:eb:c8:29:60:59:7a:48:1d:31:07:47:ec:c6:d4:
         49:f1:ac:4f:10:ce:ff:1e:0b:f3:d1:f8:a5:3a:c9:b9:50:6e:
         3d:98:57:de:f1:63:d0:ed:04:f9:39:ce:84:f9:4d:19:3b:a3:
         62:cb:97:c3:7d:77:e3:15:58:62:e1:76:d4:1e:57:c7:16:55:
         12:57:20:37:14:a1:de:56:32:7e:48:43:97:6e:29:b6:40:70:
         ae:fc:9b:74:c2:d5:dc:c5:e3:6a:d4:9c:54:7b:37:60:e0:e3:
         62:20:9a:e4:76:69:9f:ed:e1:d0:e6:8d:f3:9f:19:5a:ae:e3:
         8b:31:8b:68:10:94:78:a5:15:58:56:9f:90:5b:bc:ce:51:38:
         1a:79:db:ef:b8:9c:86:fe:8a:bb:0b:2d:64:3e:86:78:d0:4d:
         bb:d3:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 11:54:13 2024 by rpki-client on console-fra.rpki-client.org