Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
File:                     193B972646653C886D4001CDAD73EC4E473DA173.mft (raw, json)
Hash identifier:          rdbLDderhkPhbMIWu6RmnahuweZPjYW2GueEOQqDerQ=
Subject key identifier:   EE:03:51:45:96:23:1B:FE:ED:56:88:C5:59:A2:57:AC:CD:76:1C:CC
Authority key identifier: 19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73
Certificate issuer:       /CN=193b972646653c886d4001cdad73ec4e473da173
Certificate serial:       4F827C2FB2B8A7C13AED6262AFFCCE9DFBCEB151
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
Manifest number:          97
Signing time:             Sun 24 Nov 2024 21:43:26 +0000
Manifest this update:     Sun 24 Nov 2024 21:38:26 +0000
Manifest next update:     Mon 25 Nov 2024 22:55:26 +0000
Files and hashes:         1: 193B972646653C886D4001CDAD73EC4E473DA173.crl (hash: jp7maeCpLBKa3DW9dt57oBt95SuZMQp3p6Q4bSNuwmI=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:82:7c:2f:b2:b8:a7:c1:3a:ed:62:62:af:fc:ce:9d:fb:ce:b1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=193b972646653c886d4001cdad73ec4e473da173
        Validity
            Not Before: Nov 24 21:38:26 2024 GMT
            Not After : Nov 25 22:55:26 2024 GMT
        Subject: CN=EE03514596231BFEED5688C559A257ACCD761CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:c2:6c:ef:73:5e:c9:35:34:65:1c:9f:42:
                    53:f0:dd:2d:e8:9b:c1:c5:e5:78:58:df:d7:a9:31:
                    24:c4:76:96:04:d8:6c:40:72:34:35:e2:05:e9:07:
                    59:24:82:77:0e:e0:04:ce:83:5b:1e:e7:c9:9a:f3:
                    6a:a4:9f:33:a2:c8:a4:af:ae:04:c6:ef:64:7e:40:
                    a9:1f:4f:09:06:a8:ce:3b:31:f5:f0:42:df:39:96:
                    7d:1a:03:51:d0:b9:49:37:b5:bb:57:71:90:23:a6:
                    41:a1:43:7d:40:46:5c:85:f1:11:67:ca:33:99:5a:
                    3e:2a:f5:9f:f7:17:09:f8:0e:5f:f1:54:61:a2:b8:
                    62:21:15:e6:47:d7:02:ff:da:f1:5f:1b:6b:f6:89:
                    90:a6:2b:9d:48:ee:fd:81:59:16:e7:f4:c5:ed:b8:
                    e6:c7:78:5b:0f:a0:e9:2c:71:73:40:b3:9b:0c:61:
                    a7:b5:a7:c4:19:30:3b:ee:87:b0:bb:f2:6d:0e:4a:
                    79:1c:85:b2:89:54:cf:9d:7a:30:cd:df:45:e9:cb:
                    30:21:ea:5e:ae:02:82:6e:69:dc:f8:67:85:40:6a:
                    fe:ad:5c:ae:a4:c9:de:83:2b:f8:51:f2:98:b8:42:
                    17:c8:10:f5:90:27:2d:f2:2b:6f:b2:62:30:49:e1:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:03:51:45:96:23:1B:FE:ED:56:88:C5:59:A2:57:AC:CD:76:1C:CC
            X509v3 Authority Key Identifier:
                keyid:19:3B:97:26:46:65:3C:88:6D:40:01:CD:AD:73:EC:4E:47:3D:A1:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTuXJkZlPIhtQAHNrXPsTkc9oXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/0/193B972646653C886D4001CDAD73EC4E473DA173.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:27:97:dd:eb:0d:95:44:95:f3:49:82:4d:d5:c9:a2:e8:e3:
         60:39:1e:dd:d8:73:c2:81:39:4b:83:ed:8f:24:47:9b:5a:cc:
         d9:0c:77:c6:25:e8:6b:4e:94:ba:54:f5:e0:63:f3:54:d4:3d:
         ee:29:24:df:95:77:b0:bb:a9:93:70:93:bc:03:ec:19:1e:8d:
         66:c9:d5:b0:52:c9:bb:e2:55:1e:5f:5c:c6:f5:61:b4:aa:e6:
         e5:d2:f7:b9:82:2b:59:cc:43:7b:7b:fc:7f:fa:56:50:a1:5b:
         93:7d:a4:b7:e3:b6:e4:a8:67:a4:7b:4d:17:52:2c:2c:9b:dd:
         8e:12:34:29:09:ed:be:c8:2f:63:7a:65:b3:18:a5:33:7d:86:
         fc:d6:7c:2d:e7:72:f6:66:2f:35:53:a6:26:fd:4a:e2:d9:a1:
         77:63:31:67:59:f1:23:72:08:38:66:64:cb:fc:dd:3c:74:be:
         59:dd:b4:85:10:8f:75:9e:bb:40:02:4e:08:0f:48:bc:f2:d2:
         0c:39:b9:e1:d9:d9:11:c6:bb:84:6f:b4:0a:22:72:f7:a6:7d:
         9d:b4:35:2a:fc:c6:7e:d2:fa:86:5a:63:f6:11:32:2e:ec:73:
         91:97:d7:c9:21:67:3a:0a:eb:b6:2d:7a:79:46:6a:7c:07:bc:
         00:00:c2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:07:06 2024 by rpki-client on console-fra.rpki-client.org