Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.mft
File:                     2E691E5E8FD0150777299D0461FEE88C1E6A715C.mft (raw, json)
Hash identifier:          Q5bFPg6P882J7d57URbTgYV955nsZudk8KmzZZZaz6I=
Subject key identifier:   41:20:67:97:FC:C6:93:0C:5E:0D:F0:A5:9C:34:E4:08:29:BB:8A:4C
Authority key identifier: 2E:69:1E:5E:8F:D0:15:07:77:29:9D:04:61:FE:E8:8C:1E:6A:71:5C
Certificate issuer:       /CN=2e691e5e8fd0150777299d0461fee88c1e6a715c
Certificate serial:       06D2A6B5F26170B4A4A1C13E25E4457EB9500807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LmkeXo_QFQd3KZ0EYf7ojB5qcVw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.mft
Manifest number:          02EF
Signing time:             Fri 17 May 2024 10:56:39 +0000
Manifest this update:     Fri 17 May 2024 10:51:39 +0000
Manifest next update:     Sat 18 May 2024 14:06:39 +0000
Files and hashes:         1: 2E691E5E8FD0150777299D0461FEE88C1E6A715C.crl (hash: bRpt3aBQuyC79FmUt7M/bFTsqCqYYLgE9HOCHzT9Pxw=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LmkeXo_QFQd3KZ0EYf7ojB5qcVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d2:a6:b5:f2:61:70:b4:a4:a1:c1:3e:25:e4:45:7e:b9:50:08:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e691e5e8fd0150777299d0461fee88c1e6a715c
        Validity
            Not Before: May 17 10:51:39 2024 GMT
            Not After : May 18 14:06:39 2024 GMT
        Subject: CN=41206797FCC6930C5E0DF0A59C34E40829BB8A4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a9:1e:bc:84:61:ec:d5:a2:1a:49:6d:59:1e:
                    0b:ba:f7:cc:54:e4:01:5e:d4:02:4f:f2:19:d2:bb:
                    9a:4e:3b:bc:50:d0:c5:64:8b:c0:87:92:6f:1a:9a:
                    7d:78:1e:31:d7:48:3b:0c:da:45:b1:a0:76:9f:05:
                    a8:76:34:10:84:c4:89:12:12:b0:fa:6a:8b:48:7d:
                    89:c8:80:4b:95:a3:57:cf:9e:56:19:ee:77:b6:b2:
                    97:60:98:e3:d3:2f:32:97:3a:11:e1:d3:60:2c:57:
                    2c:fc:56:4a:34:e1:52:6c:f3:5a:e9:c5:17:6a:25:
                    2b:dd:9e:c5:cc:0b:f1:58:e7:ae:7b:61:cf:54:11:
                    aa:85:34:11:64:b4:c3:02:ac:63:36:b9:8f:d4:c4:
                    0a:49:c0:01:d4:fd:a1:29:a4:5a:4b:09:01:1e:06:
                    17:c0:87:6f:61:70:d6:73:5f:66:9f:88:40:ea:c7:
                    27:87:66:c2:b0:89:99:a2:5a:f3:49:f9:33:d4:f1:
                    98:8c:5c:84:4d:f0:6d:8b:69:9a:8f:47:70:08:26:
                    53:65:81:87:13:6d:c2:c8:68:18:43:54:2e:7e:91:
                    f7:e4:32:30:dd:dd:8b:58:13:22:d6:23:a9:73:ea:
                    f8:cb:7f:e2:44:d5:0b:37:e8:f7:48:83:76:00:96:
                    e9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:20:67:97:FC:C6:93:0C:5E:0D:F0:A5:9C:34:E4:08:29:BB:8A:4C
            X509v3 Authority Key Identifier:
                keyid:2E:69:1E:5E:8F:D0:15:07:77:29:9D:04:61:FE:E8:8C:1E:6A:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmkeXo_QFQd3KZ0EYf7ojB5qcVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/15/2E691E5E8FD0150777299D0461FEE88C1E6A715C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:be:9a:e5:66:89:12:34:df:21:fd:f2:af:e6:31:95:c5:64:
         77:b7:ae:41:98:20:01:b8:99:06:07:82:f3:fb:f9:79:f5:94:
         ec:fa:bf:02:39:51:94:a5:e4:ba:7d:b2:57:41:91:f8:cb:35:
         40:94:aa:96:f6:f8:19:5f:e3:26:65:6b:e8:8f:e3:a2:9a:0b:
         47:40:f5:f4:e0:3b:fb:b1:19:65:0b:a0:90:8b:57:67:cb:ed:
         64:27:4e:97:0d:44:49:70:67:2b:7b:b9:d3:22:bf:8e:1d:4c:
         f4:d1:e3:f7:b9:7f:76:7c:05:b7:6e:98:2c:2b:ec:93:4f:96:
         74:40:85:d2:2a:26:20:0f:31:3a:2d:4c:82:b9:ca:c7:3b:eb:
         54:c4:d3:28:dc:de:d8:78:71:38:63:1a:07:43:7d:fa:b8:43:
         6e:3b:5e:5c:e0:cf:60:f0:53:5e:32:47:b7:50:d5:e6:41:16:
         87:71:76:00:d1:57:37:15:8a:66:88:a5:ab:f5:e4:a9:6f:53:
         7f:b5:c5:9d:e0:5c:1e:6b:15:67:c4:6f:81:94:be:40:0d:e6:
         96:97:73:8e:92:e1:2f:a8:94:7c:a2:f4:de:48:4a:74:06:23:
         f7:32:c8:ad:34:aa:80:df:6c:09:cb:4c:90:9d:15:ab:2e:a1:
         af:dc:2d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:34:44 2024 by rpki-client on console-ams.rpki-client.org