Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.mft
File:                     B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.mft (raw, json)
Hash identifier:          LHSAEDI58irlx6NoOhbK12a2GIpvdEzPqKuRzHfft4E=
Subject key identifier:   C1:9E:11:F6:AD:E1:0E:41:FD:12:EC:96:35:8E:1C:BA:76:B0:B4:10
Authority key identifier: B5:B8:CF:DF:0D:F2:E9:DD:CC:75:50:E4:18:74:B8:63:B0:E4:03:86
Certificate issuer:       /CN=b5b8cfdf0df2e9ddcc7550e41874b863b0e40386
Certificate serial:       156BE30DB1F17B93CCF86752AA05B3FA5BC3DD88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbjP3w3y6d3MdVDkGHS4Y7DkA4Y.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.mft
Manifest number:          0166
Signing time:             Fri 17 May 2024 22:51:41 +0000
Manifest this update:     Fri 17 May 2024 22:46:41 +0000
Manifest next update:     Sun 19 May 2024 02:31:41 +0000
Files and hashes:         1: B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.crl (hash: lmL20/ZThX9Ra6F4g0lJBE5gGF7jEkBtCawDhmRl1Qk=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tbjP3w3y6d3MdVDkGHS4Y7DkA4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6b:e3:0d:b1:f1:7b:93:cc:f8:67:52:aa:05:b3:fa:5b:c3:dd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b8cfdf0df2e9ddcc7550e41874b863b0e40386
        Validity
            Not Before: May 17 22:46:41 2024 GMT
            Not After : May 19 02:31:41 2024 GMT
        Subject: CN=C19E11F6ADE10E41FD12EC96358E1CBA76B0B410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:b6:bd:b9:43:1f:1f:37:4e:71:45:9e:ee:
                    ac:55:1e:c4:2f:b7:c4:ed:66:1d:22:93:90:de:cc:
                    7e:da:e5:e4:cb:bc:5a:97:40:03:ec:ce:28:21:a7:
                    81:f1:33:1f:b0:d5:49:cf:27:57:0d:fa:e9:43:37:
                    42:cb:f0:0b:0c:df:21:77:d1:90:2f:73:9d:36:02:
                    58:1c:34:b6:01:dc:d1:21:6e:2c:15:3b:f4:b7:bd:
                    84:4b:ef:fa:27:ae:00:52:14:a3:fb:92:7c:cd:af:
                    ad:72:f2:e7:6a:27:de:67:28:d5:8f:12:17:12:85:
                    81:53:e6:ec:64:60:cc:85:71:30:a6:89:e4:76:b6:
                    81:f0:00:6b:ff:51:89:2b:2d:12:86:03:cc:3a:ac:
                    b5:e9:7a:4e:2c:ef:11:cb:96:49:bd:d1:a9:8d:3a:
                    23:46:a3:b4:50:6b:57:95:77:9e:d8:77:ba:f0:36:
                    f1:d7:30:ec:40:3d:1f:dd:e6:96:d0:ed:0f:28:ea:
                    27:50:d1:74:ec:16:56:1c:49:4b:c5:26:1e:d8:05:
                    90:af:e3:b8:27:5d:35:28:bc:19:c1:62:19:53:d1:
                    a4:c1:58:55:d9:fc:8e:c4:2b:de:27:e0:2d:68:ed:
                    91:20:45:f2:4c:ea:31:c1:52:67:a3:d3:fe:b0:cb:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9E:11:F6:AD:E1:0E:41:FD:12:EC:96:35:8E:1C:BA:76:B0:B4:10
            X509v3 Authority Key Identifier:
                keyid:B5:B8:CF:DF:0D:F2:E9:DD:CC:75:50:E4:18:74:B8:63:B0:E4:03:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbjP3w3y6d3MdVDkGHS4Y7DkA4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/23/B5B8CFDF0DF2E9DDCC7550E41874B863B0E40386.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:2f:91:6d:fb:e0:02:46:d0:82:e9:55:1e:a6:79:e8:94:
         f0:62:17:a8:a5:8e:e8:26:9a:47:c9:31:e6:f8:75:70:23:67:
         51:d6:ec:ca:b5:ed:09:18:13:14:f1:b7:a3:ea:97:b9:d8:a8:
         a8:1d:ef:b4:9c:0c:8b:9f:f9:e9:87:e9:da:e9:fe:30:f0:2d:
         8f:6e:25:a2:ab:7a:46:d6:ac:3b:f2:0a:d1:02:ff:56:29:4c:
         2e:d3:65:1d:4e:6e:f7:72:07:8b:82:63:81:f5:51:ad:fb:a7:
         3f:43:03:ad:11:53:80:5d:f6:f0:b9:65:10:09:04:1d:94:73:
         56:44:86:b0:4b:6c:8f:8b:f9:8c:ce:87:df:25:2a:86:3a:81:
         6e:2e:86:d5:b7:e4:6b:7d:34:e3:41:c6:1d:ee:4f:06:11:c5:
         49:b6:25:e5:f8:19:d0:17:85:ee:61:15:8d:71:be:10:84:51:
         e5:c5:f3:91:a8:88:e3:7c:32:ae:3e:db:51:b9:d0:c9:15:a7:
         7a:f5:87:d2:e6:48:10:65:4b:f0:e8:1c:0b:ec:e3:ed:f3:d6:
         0b:1b:ad:20:2f:22:cf:d2:81:e1:01:84:7f:90:4b:72:39:0c:
         37:3f:80:f3:93:ab:49:ae:1f:64:aa:70:3a:e1:f6:7b:06:2b:
         78:c9:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:56:25 2024 by rpki-client on console-ams.rpki-client.org