Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
File:                     C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft (raw, json)
Hash identifier:          Ilm/OEQ4JweSp+udr4O43o4zu2hzrsdiwCUktRtolNk=
Subject key identifier:   5B:56:DC:65:43:82:22:F1:D8:0F:EB:B7:66:45:8F:75:AE:EE:68:A9
Authority key identifier: C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC
Certificate issuer:       /CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
Certificate serial:       3AD898610FDE3A73889BDDF17D6C35C7D4DD10EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
Manifest number:          34
Signing time:             Thu 19 Sep 2024 12:23:18 +0000
Manifest this update:     Thu 19 Sep 2024 12:18:18 +0000
Manifest next update:     Sat 21 Sep 2024 12:53:18 +0000
Files and hashes:         1: C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl (hash: lbRu4OAtynhpB3SXkst3r6fBzs+1IbPbZe0+wpuIurM=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 13:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d8:98:61:0f:de:3a:73:88:9b:dd:f1:7d:6c:35:c7:d4:dd:10:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7615031d0a8e02bf58efc7f2330af3d65954efc
        Validity
            Not Before: Sep 19 12:18:18 2024 GMT
            Not After : Sep 21 12:53:18 2024 GMT
        Subject: CN=5B56DC65438222F1D80FEBB766458F75AEEE68A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:23:3c:d4:01:4d:4b:53:2d:e4:af:a5:00:
                    06:7c:e1:21:ea:0a:73:9d:fc:87:de:6d:46:26:1d:
                    b9:43:64:0a:63:94:16:a8:2d:35:cd:cd:b0:a8:7b:
                    c0:ee:bc:93:5c:df:c9:c2:56:8f:d2:b7:7a:0f:87:
                    d4:8c:00:15:b9:25:22:1f:d2:d0:77:05:cb:93:08:
                    7c:0c:01:bc:e4:66:7e:bc:00:ae:ed:2c:7e:74:5c:
                    46:00:04:13:f1:67:48:6b:b9:e6:5c:25:34:63:5b:
                    02:07:f4:37:ca:a1:2b:67:a9:9e:21:52:51:56:7b:
                    39:71:17:29:d6:b3:89:1c:af:97:df:31:84:f1:1a:
                    98:a8:36:75:53:c0:63:62:8d:22:50:92:65:f2:f1:
                    6f:f6:3b:8e:50:09:d1:78:01:5c:89:f6:cf:7d:11:
                    4e:63:be:d7:6c:98:fb:5f:61:75:76:f1:b7:ed:bc:
                    33:50:4d:3a:b6:a9:44:d6:6c:3d:62:c2:99:7b:09:
                    f3:49:6c:e8:6a:16:22:ae:dc:10:71:60:fe:a9:74:
                    47:c2:b8:14:0d:85:b9:d6:60:0a:1c:f6:ac:17:44:
                    6a:36:0b:0e:dd:8f:da:ea:07:a5:95:01:80:0c:58:
                    20:af:1c:9d:38:3d:ef:a1:5f:d2:d7:91:49:4d:2d:
                    29:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:56:DC:65:43:82:22:F1:D8:0F:EB:B7:66:45:8F:75:AE:EE:68:A9
            X509v3 Authority Key Identifier:
                keyid:C7:61:50:31:D0:A8:E0:2B:F5:8E:FC:7F:23:30:AF:3D:65:95:4E:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2FQMdCo4Cv1jvx_IzCvPWWVTvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/1/C7615031D0A8E02BF58EFC7F2330AF3D65954EFC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:79:b4:c2:ac:da:c3:7e:0d:b7:b1:69:a2:10:aa:06:cc:79:
         20:5c:cf:e0:9b:a0:15:d3:b6:df:9f:3b:40:05:c1:c6:04:de:
         c3:af:6b:84:8c:a1:13:27:3c:91:58:0c:16:77:22:1c:bc:a4:
         76:e4:7c:b1:d1:15:41:bc:cf:a9:40:fe:3a:50:a4:02:18:d3:
         f4:0e:3b:ea:61:85:5e:d7:47:9e:14:03:8d:bd:28:5f:af:8c:
         f0:c9:e0:cc:e4:22:6f:b3:c7:cf:d2:ea:b4:5f:16:e5:d2:d0:
         da:f5:7d:ee:8e:36:26:b6:00:d7:d9:36:bd:6b:15:57:d8:a5:
         ec:06:67:b8:13:b2:2d:55:1c:2a:df:0c:13:fa:81:da:9b:16:
         8c:a9:c3:ad:40:89:7a:8c:e3:77:a9:92:2b:e7:28:ba:84:1f:
         f7:b0:bf:39:a1:51:18:fa:91:81:9f:f0:58:0f:8a:d6:9c:9b:
         23:9e:5e:4b:c6:8d:25:3b:84:7a:1f:63:e5:be:9f:73:50:7d:
         92:41:d9:8e:3a:52:23:e4:5d:8e:b7:ea:79:e1:b0:55:fc:c5:
         7a:b0:be:e3:f0:f3:05:c3:27:4a:82:e6:a4:ca:5a:72:57:44:
         e7:d8:7f:9d:21:2b:5a:49:2f:7b:16:ee:fd:bb:c3:a8:ad:3e:
         a9:1e:63:76
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOtiYYQ/eOnOIm93xfWw1x9TdEO4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc2MTUwMzFkMGE4ZTAyYmY1OGVmYzdmMjMzMGFmM2Q2
NTk1NGVmYzAeFw0yNDA5MTkxMjE4MThaFw0yNDA5MjExMjUzMThaMDMxMTAvBgNV
BAMTKDVCNTZEQzY1NDM4MjIyRjFEODBGRUJCNzY2NDU4Rjc1QUVFRTY4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgbyM81AFNS1Mt5K+lAAZ84SHq
CnOd/IfebUYmHblDZApjlBaoLTXNzbCoe8DuvJNc38nCVo/St3oPh9SMABW5JSIf
0tB3BcuTCHwMAbzkZn68AK7tLH50XEYABBPxZ0hrueZcJTRjWwIH9DfKoStnqZ4h
UlFWezlxFynWs4kcr5ffMYTxGpioNnVTwGNijSJQkmXy8W/2O45QCdF4AVyJ9s99
EU5jvtdsmPtfYXV28bftvDNQTTq2qUTWbD1iwpl7CfNJbOhqFiKu3BBxYP6pdEfC
uBQNhbnWYAoc9qwXRGo2Cw7dj9rqB6WVAYAMWCCvHJ04Pe+hX9LXkUlNLSkJAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUW1bcZUOCIvHYD+u3ZkWPda7uaKkwHwYDVR0j
BBgwFoAUx2FQMdCo4Cv1jvx/IzCvPWWVTvwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzEvQzc2MTUwMzFEMEE4RTAyQkY1OEVGQzdGMjMzMEFGM0Q2NTk1NEVGQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gyRlFNZENvNEN2MWp2eF9JekN2UFdX
VlR2dy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x
OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvMS9DNzYxNTAzMUQwQThFMDJCRjU4
RUZDN0YyMzMwQUYzRDY1OTU0RUZDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtnm0wqzaw34Nt7FpohCq
Bsx5IFzP4JugFdO23587QAXBxgTew69rhIyhEyc8kVgMFnciHLykduR8sdEVQbzP
qUD+OlCkAhjT9A476mGFXtdHnhQDjb0oX6+M8MngzOQib7PHz9LqtF8W5dLQ2vV9
7o42JrYA19k2vWsVV9il7AZnuBOyLVUcKt8ME/qB2psWjKnDrUCJeozjd6mSK+co
uoQf97C/OaFRGPqRgZ/wWA+K1pybI55eS8aNJTuEeh9j5b6fc1B9kkHZjjpSI+Rd
jrfqeeGwVfzFerC+4/DzBcMnSoLmpMpacldE59h/nSErWkkvexbu/bvDqK0+qR5j
dg==
-----END CERTIFICATE-----
Generated at Thu Sep 19 17:01:36 2024 by rpki-client on console-ams.rpki-client.org