Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.mft
File:                     277DB6AB779E3D5333C97AB2285B988001C5E0C6.mft (raw, json)
Hash identifier:          5gTNCLx5Brt1VvQFWRTC04W8/rtDyDiDk+L/3P7etLw=
Subject key identifier:   72:B8:C1:3E:B7:08:43:02:EB:01:38:90:B9:E4:A5:FF:19:FE:4C:1C
Authority key identifier: 27:7D:B6:AB:77:9E:3D:53:33:C9:7A:B2:28:5B:98:80:01:C5:E0:C6
Certificate issuer:       /CN=277db6ab779e3d5333c97ab2285b988001c5e0c6
Certificate serial:       0286DFCC910AB67A5E7D27247525CC5B5B3F321F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J322q3eePVMzyXqyKFuYgAHF4MY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.mft
Manifest number:          5D
Signing time:             Fri 22 Nov 2024 12:24:19 +0000
Manifest this update:     Fri 22 Nov 2024 12:19:19 +0000
Manifest next update:     Sat 23 Nov 2024 14:58:19 +0000
Files and hashes:         1: 277DB6AB779E3D5333C97AB2285B988001C5E0C6.crl (hash: NlgdsHLZqyWXtqLgNSPExgj556fbkdomgVbnwq4yw0I=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/J322q3eePVMzyXqyKFuYgAHF4MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:86:df:cc:91:0a:b6:7a:5e:7d:27:24:75:25:cc:5b:5b:3f:32:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=277db6ab779e3d5333c97ab2285b988001c5e0c6
        Validity
            Not Before: Nov 22 12:19:19 2024 GMT
            Not After : Nov 23 14:58:19 2024 GMT
        Subject: CN=72B8C13EB7084302EB013890B9E4A5FF19FE4C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:4e:c5:95:f3:6f:63:aa:f3:19:88:30:c0:
                    4d:77:c5:90:92:c2:92:21:4c:27:06:f8:2b:6d:39:
                    e3:18:17:11:5d:38:02:07:9a:44:60:6a:4f:9b:59:
                    70:d9:45:6b:ea:37:77:4c:02:df:27:93:b5:16:2e:
                    a8:b5:27:ba:e9:3d:19:61:08:cb:9c:38:d2:64:da:
                    e9:48:b0:02:3e:ec:5e:ec:65:55:b2:99:97:85:01:
                    87:38:e0:83:ac:35:46:f7:30:cd:36:35:ee:c1:6f:
                    28:52:3d:9d:30:29:a3:07:3a:20:92:a9:85:59:06:
                    78:02:2a:d1:e2:f2:2e:3e:b7:54:bf:25:f6:42:75:
                    fc:f6:3f:d3:88:43:41:bc:88:ab:90:fa:01:1c:d9:
                    06:1a:e4:03:80:cb:91:bd:67:a0:f9:49:08:2e:08:
                    6a:3d:c9:93:9c:2d:11:22:54:09:c3:62:9b:15:6c:
                    91:25:b4:54:f5:d6:be:22:25:bc:59:8d:79:6a:be:
                    e7:d2:e4:fe:a6:8d:6b:33:bd:1b:74:a2:96:c2:cc:
                    71:62:b0:46:29:f7:18:28:9d:22:26:51:f9:c6:93:
                    3d:27:e3:14:c3:c6:58:89:b1:81:72:aa:b8:b2:36:
                    40:b7:61:fd:21:c2:46:d7:4e:4c:33:e0:d7:3b:06:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B8:C1:3E:B7:08:43:02:EB:01:38:90:B9:E4:A5:FF:19:FE:4C:1C
            X509v3 Authority Key Identifier:
                keyid:27:7D:B6:AB:77:9E:3D:53:33:C9:7A:B2:28:5B:98:80:01:C5:E0:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J322q3eePVMzyXqyKFuYgAHF4MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/0/277DB6AB779E3D5333C97AB2285B988001C5E0C6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a4:a7:88:0e:61:28:11:89:b5:f0:59:cb:3b:0d:ec:bc:49:
         2d:da:23:80:3a:ca:7f:20:41:fc:c6:c3:b8:45:92:de:0d:1b:
         1a:e7:54:d0:ca:78:96:be:d9:d8:bb:e2:06:6d:c7:c1:3b:8d:
         13:3c:20:76:0a:ec:51:ac:3b:29:b7:7a:48:9b:3a:fd:e0:0a:
         71:6c:58:25:92:63:fe:d7:d9:f2:fe:87:b3:a8:9a:ad:10:0d:
         28:f4:18:38:a7:39:7b:30:c1:5b:6a:1c:e9:0e:50:07:cd:0e:
         37:98:68:e9:7f:7d:fa:7e:09:3d:e4:ef:72:84:16:16:1a:e3:
         a8:91:a3:ae:31:48:5f:de:fb:ca:85:90:51:c1:58:b6:65:63:
         fd:5f:ea:27:c4:a0:72:77:f4:ff:e9:92:0a:04:41:12:ae:11:
         9b:a5:37:ac:ea:63:e4:dd:e8:3e:76:26:1d:d2:3e:e2:37:52:
         7e:f1:83:75:ea:21:6b:ef:92:8f:8f:67:da:28:b0:1e:9e:57:
         ae:35:5a:97:70:66:f7:d4:3d:0a:9f:47:6c:3f:0c:e2:b2:09:
         01:e4:d2:52:25:8c:d9:af:5f:1d:96:1c:a5:10:fc:23:8a:cb:
         db:70:6a:34:e3:c2:01:c0:df:c4:16:50:a1:32:5d:b4:7d:4a:
         88:21:ca:18
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUAobfzJEKtnpefSckdSXMW1s/Mh8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc3ZGI2YWI3NzllM2Q1MzMzYzk3YWIyMjg1Yjk4ODAw
MWM1ZTBjNjAeFw0yNDExMjIxMjE5MTlaFw0yNDExMjMxNDU4MTlaMDMxMTAvBgNV
BAMTKDcyQjhDMTNFQjcwODQzMDJFQjAxMzg5MEI5RTRBNUZGMTlGRTRDMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5k7FlfNvY6rzGYgwwE13xZCS
wpIhTCcG+CttOeMYFxFdOAIHmkRgak+bWXDZRWvqN3dMAt8nk7UWLqi1J7rpPRlh
CMucONJk2ulIsAI+7F7sZVWymZeFAYc44IOsNUb3MM02Ne7BbyhSPZ0wKaMHOiCS
qYVZBngCKtHi8i4+t1S/JfZCdfz2P9OIQ0G8iKuQ+gEc2QYa5AOAy5G9Z6D5SQgu
CGo9yZOcLREiVAnDYpsVbJEltFT11r4iJbxZjXlqvufS5P6mjWszvRt0opbCzHFi
sEYp9xgonSImUfnGkz0n4xTDxliJsYFyqriyNkC3Yf0hwkbXTkwz4Nc7BrJfAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUcrjBPrcIQwLrATiQueSl/xn+TBwwHwYDVR0j
BBgwFoAUJ322q3eePVMzyXqyKFuYgAHF4MYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzRjMTU3MmMtZTk3Yy00MTAwLWFlZmYtMTM3M2Y0ZTk0
MzNhLzAvMjc3REI2QUI3NzlFM0Q1MzMzQzk3QUIyMjg1Qjk4ODAwMUM1RTBDNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0ozMjJxM2VlUFZNenlYcXlLRnVZZ0FI
RjRNWS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83NGMxNTcyYy1l
OTdjLTQxMDAtYWVmZi0xMzczZjRlOTQzM2EvMC8yNzdEQjZBQjc3OUUzRDUzMzND
OTdBQjIyODVCOTg4MDAxQzVFMEM2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqSniA5hKBGJtfBZyzsN
7LxJLdojgDrKfyBB/MbDuEWS3g0bGudU0Mp4lr7Z2LviBm3HwTuNEzwgdgrsUaw7
Kbd6SJs6/eAKcWxYJZJj/tfZ8v6Hs6iarRANKPQYOKc5ezDBW2oc6Q5QB80ON5ho
6X99+n4JPeTvcoQWFhrjqJGjrjFIX977yoWQUcFYtmVj/V/qJ8Sgcnf0/+mSCgRB
Eq4Rm6U3rOpj5N3oPnYmHdI+4jdSfvGDdeoha++Sj49n2iiwHp5XrjVal3Bm99Q9
Cp9HbD8M4rIJAeTSUiWM2a9fHZYcpRD8I4rL23BqNOPCAcDfxBZQoTJdtH1KiCHK
GA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:07:15 2024 by rpki-client on console-ams.rpki-client.org