Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.mft
File:                     478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.mft (raw, json)
Hash identifier:          JtrXStorMd6gU6QP3RsAxAwwD+8igSBH5HrxYlcEB2c=
Subject key identifier:   76:21:D6:E4:45:F5:AC:5D:2B:E6:7E:F8:EB:0B:8D:47:DD:E3:93:6E
Authority key identifier: 47:8E:73:CA:14:A0:AA:78:D7:1B:1B:F1:AF:3E:A2:4E:56:B9:94:B7
Certificate issuer:       /CN=478e73ca14a0aa78d71b1bf1af3ea24e56b994b7
Certificate serial:       5A17FEC271F6208467B103CB87E5D2F88B88C6B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R45zyhSgqnjXGxvxrz6iTla5lLc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.mft
Manifest number:          02EE
Signing time:             Fri 17 May 2024 07:21:39 +0000
Manifest this update:     Fri 17 May 2024 07:16:39 +0000
Manifest next update:     Sat 18 May 2024 08:25:39 +0000
Files and hashes:         1: 478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.crl (hash: 555YAreqBlxVvlF5mEXd+ut192B7iLHeDUfGMSV/iII=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R45zyhSgqnjXGxvxrz6iTla5lLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:17:fe:c2:71:f6:20:84:67:b1:03:cb:87:e5:d2:f8:8b:88:c6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=478e73ca14a0aa78d71b1bf1af3ea24e56b994b7
        Validity
            Not Before: May 17 07:16:39 2024 GMT
            Not After : May 18 08:25:39 2024 GMT
        Subject: CN=7621D6E445F5AC5D2BE67EF8EB0B8D47DDE3936E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:89:e7:40:85:83:7e:43:49:a4:ba:bf:94:33:
                    6c:7e:5d:17:90:5a:26:1a:2f:22:5d:67:00:63:cf:
                    ae:43:b4:6e:31:c6:63:2a:86:84:f7:cd:9e:23:a9:
                    8c:37:ba:da:8b:b6:33:e6:e4:9e:84:75:07:4b:b7:
                    ee:56:c7:e9:bc:3a:1d:8f:6b:3b:5b:25:8e:27:ff:
                    6c:ee:89:b9:39:ca:cc:10:0d:29:1f:6b:ee:4b:24:
                    d4:49:e6:ec:b9:d2:e2:9b:e3:9f:25:fe:06:88:49:
                    92:e8:31:82:1c:40:83:2c:6d:f5:e8:28:2d:f6:86:
                    ae:8d:b5:83:13:f0:49:3e:f4:2d:25:31:e9:a4:7a:
                    32:2a:58:fa:d0:ea:2c:f2:6a:03:78:e0:fe:0e:56:
                    5e:2b:fc:7f:d3:18:ee:de:30:16:1f:d6:f2:ea:58:
                    03:0b:3a:26:15:b8:be:37:f5:e1:5c:13:00:7c:5d:
                    82:7d:8b:55:f7:fc:00:0a:5a:58:fb:ed:5d:6d:6c:
                    e1:4c:be:cb:d5:45:ca:06:35:a8:6a:3d:65:1b:34:
                    5f:6c:e9:2b:66:70:7d:44:4a:3a:71:99:84:f2:ab:
                    e3:d7:48:d5:93:1e:23:81:66:62:30:79:46:11:54:
                    60:8e:24:df:73:88:b0:51:68:21:a4:c8:1c:64:c2:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:21:D6:E4:45:F5:AC:5D:2B:E6:7E:F8:EB:0B:8D:47:DD:E3:93:6E
            X509v3 Authority Key Identifier:
                keyid:47:8E:73:CA:14:A0:AA:78:D7:1B:1B:F1:AF:3E:A2:4E:56:B9:94:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R45zyhSgqnjXGxvxrz6iTla5lLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/14/478E73CA14A0AA78D71B1BF1AF3EA24E56B994B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e4:61:17:ad:72:2c:66:9d:54:e2:d4:35:55:93:01:cb:e0:
         5a:d4:ef:f6:ed:45:80:44:ac:ed:70:78:77:a3:b3:23:9b:7f:
         af:ac:b1:b3:dd:56:48:97:d3:16:20:36:b3:a9:fb:d7:9c:a9:
         5a:9f:ca:15:32:4e:34:c7:af:be:99:0f:0e:42:4c:f2:a7:9e:
         81:02:76:a8:bf:f4:16:e1:b9:0b:03:ad:ba:89:f7:10:f7:6c:
         56:7c:26:9a:2a:13:14:7f:07:e0:29:b3:13:d2:a8:de:f9:06:
         d5:5f:00:20:e3:20:f1:4c:c2:e7:bd:fc:36:74:cd:eb:dd:71:
         95:4a:a2:7e:ce:e5:e4:19:ba:25:1e:73:1d:f9:f8:06:57:e2:
         3c:ee:33:40:23:b5:8c:87:37:3c:2c:8f:4f:6e:72:b4:ab:f7:
         77:da:7a:98:81:ef:5d:a2:65:9a:28:fc:17:1d:e2:c0:7a:28:
         6c:98:49:e9:c8:a6:61:c3:c1:80:6e:74:51:3d:6d:f7:44:b4:
         14:9e:31:6e:1a:a7:eb:b4:98:6d:0e:a9:4d:0b:dd:78:7c:98:
         bf:4e:fb:72:49:15:8b:fe:26:98:37:00:b9:73:46:7a:39:e9:
         f6:10:54:f2:a3:22:66:79:3a:0c:c0:71:e8:f7:16:4b:fd:0b:
         f8:09:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 10:15:37 2024 by rpki-client on console-ams.rpki-client.org