Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/1/F20A9342F5BF4B788A6DA73BF5003344E46047B9.mft
File:                     F20A9342F5BF4B788A6DA73BF5003344E46047B9.mft (raw, json)
Hash identifier:          cdUS2SAYWBZMH6U+LweYvSdbZlbpi38gMkdVeQzimvc=
Subject key identifier:   A2:2E:4A:D3:A6:BE:2A:22:5D:EA:E1:FF:AA:42:AB:FC:C0:59:EC:DF
Authority key identifier: F2:0A:93:42:F5:BF:4B:78:8A:6D:A7:3B:F5:00:33:44:E4:60:47:B9
Certificate issuer:       /CN=f20a9342f5bf4b788a6da73bf5003344e46047b9
Certificate serial:       659502A99F7FAFFD8D5853E218C1DE074BC8833A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gqTQvW_S3iKbac79QAzRORgR7k.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/1/F20A9342F5BF4B788A6DA73BF5003344E46047B9.mft
Manifest number:          75
Signing time:             Mon 16 Sep 2024 04:32:14 +0000
Manifest this update:     Mon 16 Sep 2024 04:27:14 +0000
Manifest next update:     Tue 17 Sep 2024 07:34:14 +0000
Files and hashes:         1: F20A9342F5BF4B788A6DA73BF5003344E46047B9.crl (hash: p9HTSCY7f7nVM4f9p5ARrvNL6c1ZjMAELAR3wYGfXcQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/1/F20A9342F5BF4B788A6DA73BF5003344E46047B9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/1/F20A9342F5BF4B788A6DA73BF5003344E46047B9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gqTQvW_S3iKbac79QAzRORgR7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:95:02:a9:9f:7f:af:fd:8d:58:53:e2:18:c1:de:07:4b:c8:83:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20a9342f5bf4b788a6da73bf5003344e46047b9
        Validity
            Not Before: Sep 16 04:27:14 2024 GMT
            Not After : Sep 17 07:34:14 2024 GMT
        Subject: CN=A22E4AD3A6BE2A225DEAE1FFAA42ABFCC059ECDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4a:07:cd:7b:4c:f4:5d:b3:8b:45:45:36:50:
                    b5:75:71:7b:6e:0b:86:b4:cc:25:10:a5:e7:c1:d1:
                    c3:ae:d8:f7:b3:0b:49:19:ce:1e:87:4d:bd:f8:f1:
                    96:d4:5b:a5:92:1f:24:b3:ab:48:30:cd:84:43:15:
                    26:70:a4:2f:6f:7f:99:73:50:8f:55:4c:b9:20:99:
                    42:f8:c2:f4:3b:05:1b:99:68:a4:c8:05:a4:ba:67:
                    12:f1:01:c5:ca:27:6d:df:c7:4d:f3:c8:52:fa:bf:
                    93:34:8a:f4:7b:e3:6c:ae:6d:64:67:5e:5a:26:29:
                    62:c6:18:2f:cc:ff:a7:cb:44:99:d7:4c:16:e0:90:
                    92:d9:be:d8:e6:a9:11:7f:c9:2e:e0:05:cd:96:9d:
                    74:15:59:85:d5:a9:a8:73:8f:62:fa:aa:85:35:1f:
                    c2:c9:a8:5c:99:b8:10:f6:d9:98:49:e0:a6:43:34:
                    a5:c5:17:13:a5:b2:f5:92:33:05:88:2c:68:80:d1:
                    99:21:ab:7c:a9:36:cb:c2:47:e1:34:36:22:1b:de:
                    37:5a:13:19:d7:5b:fc:5b:60:c7:c3:e9:35:28:25:
                    6a:c9:2c:f0:9a:f3:d2:70:cf:7b:d4:83:e9:2a:8d:
                    5d:0f:f7:40:b0:04:1e:89:f3:98:c3:a2:db:2b:0a:
                    5b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2E:4A:D3:A6:BE:2A:22:5D:EA:E1:FF:AA:42:AB:FC:C0:59:EC:DF
            X509v3 Authority Key Identifier:
                keyid:F2:0A:93:42:F5:BF:4B:78:8A:6D:A7:3B:F5:00:33:44:E4:60:47:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/1/F20A9342F5BF4B788A6DA73BF5003344E46047B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gqTQvW_S3iKbac79QAzRORgR7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/855c7d5a-15c4-4589-85fa-b491a071048c/1/F20A9342F5BF4B788A6DA73BF5003344E46047B9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e4:46:df:eb:92:f6:b3:a8:57:39:73:33:ba:6b:b8:4a:93:
         5f:db:e0:fe:7c:10:c8:b6:af:c8:5f:55:fd:3d:c7:88:09:f0:
         e7:9a:a8:01:1e:b3:62:33:ba:99:4f:b7:4b:0b:de:ea:1c:3e:
         0e:8c:ef:4d:f7:0e:3b:f7:4a:d7:0e:69:39:f0:8a:8e:0b:c7:
         b5:b0:36:07:09:c4:7f:c9:39:44:82:0c:a8:a4:f4:2f:45:0f:
         42:b2:73:61:ba:3d:1d:0b:64:fc:89:9d:c3:b1:a1:46:dd:ee:
         91:c8:62:4d:02:49:b0:1a:a0:6e:07:fa:7f:b0:5d:33:ad:67:
         94:64:80:ad:e9:37:e5:18:a4:36:25:9a:00:78:c4:cd:be:9b:
         b5:c4:a8:53:ba:7a:49:93:0e:c3:83:cd:fd:f1:0a:2e:d0:ba:
         bf:5c:33:86:95:f3:21:15:bd:2a:7b:c6:d5:f7:47:1e:34:d9:
         2a:a9:31:90:9c:2b:ad:65:c8:b3:79:70:0c:a8:3a:b0:47:ba:
         9e:3f:60:3e:d0:c1:31:38:04:52:ff:38:9b:bb:23:1e:a5:34:
         f4:69:ea:dc:64:5b:12:90:82:64:47:2f:e8:4f:15:37:8e:28:
         8b:95:5f:a9:e3:25:91:fb:b8:5c:cd:1f:17:13:f7:73:38:d8:
         8f:ab:b1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----