Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File:                     E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier:          Vl23+8iwzvZNkrKB+HvFyfRs2fD8MeImlvFAm814dMc=
Subject key identifier:   69:AF:21:1D:57:C5:0F:A5:35:98:90:4E:61:C4:8A:6C:37:C9:7C:E8
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer:       /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial:       41F2CE6EE2BB7333DD9FD6DDD425888A78BCA673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number:          55
Signing time:             Thu 06 Feb 2025 15:24:05 +0000
Manifest this update:     Thu 06 Feb 2025 15:19:05 +0000
Manifest next update:     Sat 08 Feb 2025 15:58:05 +0000
Files and hashes:         1: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: Mb3l17lsy39Kc0Ue/f68YKgeKffmkEodYK+BPpMeS98=)
                          2: AS215368.asa (hash: woWmAWlAdfUVglZTxtjngU+yb37i/M9A1MFxFAQHj+s=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Feb 2025 15:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f2:ce:6e:e2:bb:73:33:dd:9f:d6:dd:d4:25:88:8a:78:bc:a6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
        Validity
            Not Before: Feb  6 15:19:05 2025 GMT
            Not After : Feb  8 15:58:05 2025 GMT
        Subject: CN=69AF211D57C50FA53598904E61C48A6C37C97CE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:3d:37:d2:37:d8:b0:b8:0c:7a:89:e4:3e:
                    20:c1:20:26:6e:ce:e2:67:9e:d6:2d:5b:62:76:47:
                    2d:97:d8:b3:4a:8b:5d:03:d3:41:4b:8d:22:69:30:
                    6f:2c:b7:82:13:54:b0:70:a8:eb:85:68:53:02:ea:
                    24:fa:6f:6a:9b:4a:55:60:8f:4f:73:8f:9f:75:51:
                    d1:c7:b3:fb:db:fc:97:83:07:a6:17:e5:c3:15:e6:
                    f1:9e:88:6d:fb:ed:69:dc:39:cf:b6:48:c2:76:68:
                    b4:f7:89:0d:b2:ea:18:74:9b:d1:74:78:02:57:30:
                    93:db:3a:f4:5a:cd:26:39:75:8d:56:90:e1:e0:dc:
                    d9:73:a8:61:a8:72:4a:23:17:89:4e:7c:c6:32:88:
                    d3:2b:96:e7:f8:0c:da:de:39:ad:ee:f8:eb:ed:6c:
                    fe:84:d3:a5:c2:cd:31:45:4d:17:09:10:09:6a:bd:
                    b9:7f:5f:c9:6b:48:02:30:ae:f5:91:a4:77:49:ae:
                    dc:25:2d:8d:11:47:5c:71:2a:f5:34:4d:40:f3:49:
                    68:89:c0:80:86:bb:59:3e:6b:e5:19:2d:74:17:cb:
                    49:ff:7b:53:fe:31:44:22:98:de:07:e6:60:27:f0:
                    75:1e:55:8d:b2:c0:7d:e7:df:0d:c8:3d:a4:f2:2b:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AF:21:1D:57:C5:0F:A5:35:98:90:4E:61:C4:8A:6C:37:C9:7C:E8
            X509v3 Authority Key Identifier:
                keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:85:ef:1d:91:a8:24:07:85:56:b0:5b:b8:79:32:b4:3e:b8:
         5f:cc:77:47:07:a4:fe:9f:04:7d:99:30:20:24:18:73:cd:1c:
         30:03:93:dd:72:a6:18:d6:e1:b5:19:62:75:f0:2b:f6:b1:7a:
         b8:59:01:1d:d4:cc:de:e3:b3:24:9d:4a:2e:ba:fc:fe:79:8d:
         64:de:92:77:66:45:5a:81:d0:5f:74:de:b2:9e:cf:ca:9d:92:
         80:f2:3c:1f:36:25:dd:87:67:67:d1:6e:84:87:21:1d:06:62:
         13:37:05:fc:5d:bc:db:d7:23:16:5e:61:8e:eb:4c:d8:f2:2f:
         44:eb:26:87:0f:ea:af:46:6f:6b:41:d6:6d:13:43:33:b9:ae:
         b0:8e:09:bc:02:7e:04:64:2d:8c:1f:db:b7:6f:1a:47:18:e8:
         4c:74:90:94:e3:a2:a2:16:ad:a9:62:c0:c8:dd:43:73:24:48:
         69:76:1f:1d:dd:50:35:b5:24:36:42:f4:88:53:5f:8d:af:19:
         fa:a5:14:b7:6c:a4:f7:a5:f3:09:3f:cd:d8:ab:75:d9:6e:7b:
         62:09:45:9d:d0:92:26:b0:b5:7b:65:f6:df:c3:0b:91:5a:d1:
         ef:cc:d1:08:a9:b6:29:4a:cd:54:2b:c1:78:50:84:d3:f2:5e:
         80:3c:b6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 7 01:03:13 2025 by rpki-client