Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.mft
File:                     28D274261297C12288EF52D49B3AA9F60111564B.mft (raw, json)
Hash identifier:          XuRyAmm9LoKqyv3hbrKRMbh7FesU8nMYR+JOvGocBAQ=
Subject key identifier:   D7:AA:30:B1:55:E7:76:FD:EE:81:AA:D2:46:51:32:CD:12:BF:94:FA
Authority key identifier: 28:D2:74:26:12:97:C1:22:88:EF:52:D4:9B:3A:A9:F6:01:11:56:4B
Certificate issuer:       /CN=28d274261297c12288ef52d49b3aa9f60111564b
Certificate serial:       2DAA9D4721B0B53EDE21F16AE5A96929798BFCC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KNJ0JhKXwSKI71LUmzqp9gERVks.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.mft
Manifest number:          0135
Signing time:             Fri 17 May 2024 02:16:39 +0000
Manifest this update:     Fri 17 May 2024 02:11:39 +0000
Manifest next update:     Sat 18 May 2024 05:32:39 +0000
Files and hashes:         1: 28D274261297C12288EF52D49B3AA9F60111564B.crl (hash: ygOPrsQZJFCFEfnOmhnTSyRXuAZwsuF48LZ1Vd3WOKo=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KNJ0JhKXwSKI71LUmzqp9gERVks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:aa:9d:47:21:b0:b5:3e:de:21:f1:6a:e5:a9:69:29:79:8b:fc:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28d274261297c12288ef52d49b3aa9f60111564b
        Validity
            Not Before: May 17 02:11:39 2024 GMT
            Not After : May 18 05:32:39 2024 GMT
        Subject: CN=D7AA30B155E776FDEE81AAD2465132CD12BF94FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:29:18:14:d3:68:f2:8b:53:e3:dc:c8:cc:d5:
                    bc:bb:c8:1e:42:97:01:fe:62:e4:d8:ab:fe:ca:6c:
                    7c:96:d7:33:72:f1:6a:bd:d0:23:4d:77:c3:ce:5a:
                    03:ae:1e:c4:32:5c:04:e6:f1:72:ec:6e:1f:57:24:
                    5c:8c:d2:8a:0a:25:9a:66:d0:84:b0:15:e0:00:b0:
                    58:5f:91:ef:9f:82:5e:7a:ad:14:6b:11:f8:59:2b:
                    17:d5:67:e0:25:ae:7b:1b:4f:53:d9:d1:6d:a5:3b:
                    b6:91:39:94:69:55:79:3c:c5:69:89:16:f9:96:23:
                    ac:48:99:4d:8f:34:8e:1b:8a:24:97:c7:46:46:50:
                    26:f9:8c:d1:22:cb:79:19:78:2d:8a:9a:cb:f0:ba:
                    6e:55:f4:23:4c:36:f2:d2:3e:56:f1:91:40:94:84:
                    1d:35:0b:f1:70:81:d8:1f:ae:ec:ba:bb:d3:2e:1e:
                    4c:74:85:9e:19:61:61:a0:2a:37:33:31:d5:75:57:
                    34:6a:fd:f8:5a:0d:d0:3d:c6:99:a9:eb:af:c8:9d:
                    81:0e:5f:95:bf:2c:ac:a9:51:06:9e:19:34:f5:a3:
                    18:7a:0b:11:35:6e:69:f7:4e:69:07:e4:50:23:49:
                    70:b1:ba:3c:dc:bd:63:2e:77:98:77:05:fb:43:e2:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:AA:30:B1:55:E7:76:FD:EE:81:AA:D2:46:51:32:CD:12:BF:94:FA
            X509v3 Authority Key Identifier:
                keyid:28:D2:74:26:12:97:C1:22:88:EF:52:D4:9B:3A:A9:F6:01:11:56:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNJ0JhKXwSKI71LUmzqp9gERVks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/24/28D274261297C12288EF52D49B3AA9F60111564B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:af:95:54:0b:ea:ca:b8:36:2a:ac:b0:75:12:77:95:18:75:
         8d:41:74:8f:0e:c6:f8:74:58:aa:57:5c:8c:c0:56:a3:41:b7:
         ee:8b:f7:e5:cd:92:06:13:d9:a0:c5:dd:cd:ae:81:a0:c0:69:
         a7:bd:0a:e6:0f:80:ba:1f:bf:da:ce:c9:3f:bd:58:e4:87:28:
         49:39:22:6c:91:be:17:d7:c7:f2:4e:91:26:43:ef:99:ce:6e:
         21:b2:55:cf:7e:be:bf:3e:b1:53:10:a1:11:55:bb:49:7c:4e:
         ff:e5:87:f8:9f:fb:d6:2d:92:f3:db:48:8e:cb:ab:e5:25:66:
         b5:cf:cf:48:74:8c:2e:30:45:3b:a3:d3:b5:2b:cc:b4:be:28:
         01:8e:24:be:f4:d8:de:ea:8f:f3:0f:70:25:8c:02:dc:c9:87:
         3f:e7:a3:3f:b0:32:8b:29:37:c5:79:df:bd:8c:e4:3d:dd:9d:
         e1:3f:90:c2:e3:6b:64:c5:82:dd:99:ed:be:09:b5:f3:e0:8f:
         a0:49:ef:af:87:3f:5c:bf:da:15:89:0c:b2:7a:c2:f9:8f:75:
         44:33:49:59:1a:c9:e2:88:0c:e8:90:9f:87:47:da:84:f2:10:
         7d:cf:a3:78:ec:2a:2f:6c:b4:ce:f4:17:09:33:4b:26:7d:17:
         da:b6:28:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:17:37 2024 by rpki-client on console-fra.rpki-client.org