Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft
File:                     DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft (raw, json)
Hash identifier:          Boz0kK09QJ/azW7JC+OTh3PI/gKc3NDZ4UVWkVge9M8=
Subject key identifier:   12:B2:66:42:78:03:9A:CD:47:14:FF:68:62:F8:83:4E:55:8E:3C:C2
Authority key identifier: DD:A3:7A:F6:93:5A:69:E2:BE:1C:7D:86:46:85:80:72:6A:8B:30:DE
Certificate issuer:       /CN=dda37af6935a69e2be1c7d86468580726a8b30de
Certificate serial:       79CA1320620A5078794AE3C556E6D1E45776E959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3aN69pNaaeK-HH2GRoWAcmqLMN4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft
Manifest number:          02DE
Signing time:             Tue 07 May 2024 08:14:58 +0000
Manifest this update:     Tue 07 May 2024 08:09:58 +0000
Manifest next update:     Wed 08 May 2024 09:24:58 +0000
Files and hashes:         1: DDA37AF6935A69E2BE1C7D86468580726A8B30DE.crl (hash: 6a0ET24ke/68RcnSCNfoO0rt7bahzbnMJgqOvnmbYTk=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3aN69pNaaeK-HH2GRoWAcmqLMN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ca:13:20:62:0a:50:78:79:4a:e3:c5:56:e6:d1:e4:57:76:e9:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dda37af6935a69e2be1c7d86468580726a8b30de
        Validity
            Not Before: May  7 08:09:58 2024 GMT
            Not After : May  8 09:24:58 2024 GMT
        Subject: CN=12B2664278039ACD4714FF6862F8834E558E3CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:ee:8e:26:e5:4c:db:4a:be:4d:dd:44:13:
                    0b:d8:cf:07:41:4e:73:60:e9:9f:51:46:12:da:94:
                    e1:86:63:d8:3c:63:47:69:20:67:cb:b5:1b:ff:cc:
                    51:e2:e6:3a:64:2a:e9:5d:95:8d:f3:18:26:b5:cf:
                    0c:9d:cd:cb:63:ee:38:9e:c4:2b:f7:47:71:e9:50:
                    83:54:50:f0:42:42:df:ea:e9:3a:8b:fa:21:93:a2:
                    a2:e2:4c:6e:ee:d4:1f:65:7a:dd:0c:5e:75:76:62:
                    9b:a5:08:c7:c1:d7:9a:a5:4e:79:e4:86:2a:cb:10:
                    ec:e5:78:3c:05:e8:99:51:cf:1b:a8:df:d2:74:32:
                    8c:44:d6:35:b2:f3:c9:8a:f0:96:e1:bd:20:d1:b9:
                    86:f7:4a:97:fe:45:e0:75:50:ca:74:5e:69:10:e4:
                    c0:fb:4c:f8:36:d4:a9:f0:04:cd:ef:36:f0:69:2a:
                    2a:8a:1b:aa:98:17:ca:5f:55:3f:c9:0a:9b:4b:6c:
                    e5:22:19:d7:a7:e2:96:fb:44:bb:7b:ea:48:d3:41:
                    d0:1b:3e:0a:4e:8b:65:e2:48:7f:17:93:c5:4d:ff:
                    05:0b:19:7b:aa:88:80:9c:47:70:bf:fd:4a:cf:94:
                    ef:84:1c:9c:52:3d:81:26:b9:f4:c1:6c:fd:cd:23:
                    e6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B2:66:42:78:03:9A:CD:47:14:FF:68:62:F8:83:4E:55:8E:3C:C2
            X509v3 Authority Key Identifier:
                keyid:DD:A3:7A:F6:93:5A:69:E2:BE:1C:7D:86:46:85:80:72:6A:8B:30:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aN69pNaaeK-HH2GRoWAcmqLMN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:87:0b:1d:45:e0:89:4e:f2:09:aa:da:e3:9e:49:bd:83:c3:
         8a:6d:df:55:6f:65:1f:e7:ab:2a:81:73:a5:24:bd:b5:d0:c6:
         3b:ea:c0:0e:47:7b:e8:13:c2:53:05:8e:a5:af:cb:af:d1:29:
         86:07:7d:b2:f2:e6:27:ce:40:53:06:29:ca:bf:f1:4d:bd:bd:
         e6:e1:01:e6:45:44:34:6c:03:4c:8a:84:28:59:5e:ee:c0:cb:
         5f:98:d3:3f:2b:06:07:20:0a:51:cb:09:3c:c5:2f:5c:2a:e9:
         d6:5b:ab:01:f0:e2:da:d7:cf:00:fc:7e:93:21:97:33:67:da:
         dc:33:22:76:8d:a1:be:6e:b5:c6:c6:d1:21:ba:ea:fa:bd:37:
         49:9d:cf:08:0b:71:6c:ac:a2:78:2a:90:e8:67:7d:a7:0c:c3:
         83:d6:bf:de:8e:09:2c:c3:c1:80:66:77:5f:cc:a3:2f:a0:68:
         a4:7c:56:bb:4f:5a:be:95:95:e7:2d:a8:58:0a:ad:ac:45:ff:
         f8:c4:2c:24:c9:8b:49:a6:3b:be:bb:29:bc:e8:7e:67:a8:d3:
         01:1f:43:7c:4a:e5:ef:be:99:10:4e:e5:b8:4e:98:ba:f3:27:
         bc:2b:09:2a:f5:fe:1c:90:cf:fe:a1:b7:56:d3:52:74:18:29:
         ef:8c:ba:ab
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUecoTIGIKUHh5SuPFVubR5Fd26VkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGRhMzdhZjY5MzVhNjllMmJlMWM3ZDg2NDY4NTgwNzI2
YThiMzBkZTAeFw0yNDA1MDcwODA5NThaFw0yNDA1MDgwOTI0NThaMDMxMTAvBgNV
BAMTKDEyQjI2NjQyNzgwMzlBQ0Q0NzE0RkY2ODYyRjg4MzRFNTU4RTNDQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+O6OJuVM20q+Td1EEwvYzwdB
TnNg6Z9RRhLalOGGY9g8Y0dpIGfLtRv/zFHi5jpkKuldlY3zGCa1zwydzctj7jie
xCv3R3HpUINUUPBCQt/q6TqL+iGToqLiTG7u1B9let0MXnV2YpulCMfB15qlTnnk
hirLEOzleDwF6JlRzxuo39J0MoxE1jWy88mK8JbhvSDRuYb3Spf+ReB1UMp0XmkQ
5MD7TPg21KnwBM3vNvBpKiqKG6qYF8pfVT/JCptLbOUiGden4pb7RLt76kjTQdAb
PgpOi2XiSH8Xk8VN/wULGXuqiICcR3C//UrPlO+EHJxSPYEmufTBbP3NI+ZhAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUErJmQngDms1HFP9oYviDTlWOPMIwHwYDVR0j
BBgwFoAU3aN69pNaaeK+HH2GRoWAcmqLMN4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2I1NzVlYTctNzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNl
Y2VlLzQvRERBMzdBRjY5MzVBNjlFMkJFMUM3RDg2NDY4NTgwNzI2QThCMzBERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhTjY5cE5hYWVLLUhIMkdSb1dBY21x
TE1ONC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YjU3NWVhNy03
ODZmLTRiMmQtYTQ1NS03OWQ3ZmM0M2VjZWUvNC9EREEzN0FGNjkzNUE2OUUyQkUx
QzdEODY0Njg1ODA3MjZBOEIzMERFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4cLHUXgiU7yCara455J
vYPDim3fVW9lH+erKoFzpSS9tdDGO+rADkd76BPCUwWOpa/Lr9Ephgd9svLmJ85A
UwYpyr/xTb295uEB5kVENGwDTIqEKFle7sDLX5jTPysGByAKUcsJPMUvXCrp1lur
AfDi2tfPAPx+kyGXM2fa3DMido2hvm61xsbRIbrq+r03SZ3PCAtxbKyieCqQ6Gd9
pwzDg9a/3o4JLMPBgGZ3X8yjL6BopHxWu09avpWV5y2oWAqtrEX/+MQsJMmLSaY7
vrspvOh+Z6jTAR9DfErl776ZEE7luE6YuvMnvCsJKvX+HJDP/qG3VtNSdBgp74y6
qw==
-----END CERTIFICATE-----