Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9af6c38e-8050-483d-a2cb-a61c9e2aa468/0/6827F6047A800EBE4B0DC6299C084EF05E0AAADE.mft
File:                     6827F6047A800EBE4B0DC6299C084EF05E0AAADE.mft (raw, json)
Hash identifier:          UXz6arSLrmFZMiBo0PdZud+qQhAzvwpV4C++HvCABlQ=
Subject key identifier:   29:87:4B:CF:AD:1C:75:6D:95:95:CD:D3:C2:B5:F3:8A:E1:A3:45:C7
Authority key identifier: 68:27:F6:04:7A:80:0E:BE:4B:0D:C6:29:9C:08:4E:F0:5E:0A:AA:DE
Certificate issuer:       /CN=6827f6047a800ebe4b0dc6299c084ef05e0aaade
Certificate serial:       3065700B0FCADB4DC72B91E2FC12D270C77A2CDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCf2BHqADr5LDcYpnAhO8F4Kqt4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9af6c38e-8050-483d-a2cb-a61c9e2aa468/0/6827F6047A800EBE4B0DC6299C084EF05E0AAADE.mft
Manifest number:          7D
Signing time:             Sun 24 Nov 2024 23:16:41 +0000
Manifest this update:     Sun 24 Nov 2024 23:11:41 +0000
Manifest next update:     Mon 25 Nov 2024 23:25:41 +0000
Files and hashes:         1: 6827F6047A800EBE4B0DC6299C084EF05E0AAADE.crl (hash: YnaHGuoeXfoMZHrCvTPBhXcxTIx+JEov4rvnXdkRWC0=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9af6c38e-8050-483d-a2cb-a61c9e2aa468/0/6827F6047A800EBE4B0DC6299C084EF05E0AAADE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9af6c38e-8050-483d-a2cb-a61c9e2aa468/0/6827F6047A800EBE4B0DC6299C084EF05E0AAADE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aCf2BHqADr5LDcYpnAhO8F4Kqt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:65:70:0b:0f:ca:db:4d:c7:2b:91:e2:fc:12:d2:70:c7:7a:2c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6827f6047a800ebe4b0dc6299c084ef05e0aaade
        Validity
            Not Before: Nov 24 23:11:41 2024 GMT
            Not After : Nov 25 23:25:41 2024 GMT
        Subject: CN=29874BCFAD1C756D9595CDD3C2B5F38AE1A345C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b6:88:56:a2:ff:36:dd:15:74:34:6a:bd:57:
                    76:21:81:83:2e:b4:0f:2b:e1:b2:ec:be:6c:0e:f6:
                    b0:03:8e:9e:77:4f:0a:0c:3a:8f:ad:69:9f:07:09:
                    42:f1:d6:a1:2e:c2:95:bb:37:23:08:75:9a:e4:0b:
                    b9:c1:a5:00:c9:6c:49:a6:b4:de:21:31:46:dc:5a:
                    2c:4c:af:3f:1d:e0:3a:c5:4b:b0:eb:19:19:75:62:
                    fe:49:10:88:21:39:b3:2c:46:8a:28:df:60:0b:88:
                    26:de:83:c0:05:ae:d3:48:e5:56:39:4f:73:01:91:
                    38:92:df:c9:41:83:fa:42:80:3e:42:cd:73:77:e7:
                    9c:e5:18:11:eb:49:d5:d8:0d:3a:3f:cf:cb:7d:af:
                    c2:2f:f2:39:18:84:e3:70:fc:33:61:45:8f:c0:cb:
                    a9:55:50:b9:6a:3a:77:24:1d:b3:6a:4d:49:65:34:
                    4e:d7:0b:c2:88:ef:c8:c2:1a:90:7d:d0:1a:8b:f8:
                    05:e0:c2:d4:af:d5:1a:f1:26:57:42:53:f5:39:b8:
                    1f:eb:20:83:47:a8:1c:6f:6a:9f:f2:f8:22:45:d0:
                    6b:5f:22:40:0a:4e:32:82:3d:8d:77:98:9c:6d:21:
                    b8:8f:4a:b4:2b:b0:68:e2:ea:6b:6f:79:6a:a9:48:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:87:4B:CF:AD:1C:75:6D:95:95:CD:D3:C2:B5:F3:8A:E1:A3:45:C7
            X509v3 Authority Key Identifier:
                keyid:68:27:F6:04:7A:80:0E:BE:4B:0D:C6:29:9C:08:4E:F0:5E:0A:AA:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9af6c38e-8050-483d-a2cb-a61c9e2aa468/0/6827F6047A800EBE4B0DC6299C084EF05E0AAADE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCf2BHqADr5LDcYpnAhO8F4Kqt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9af6c38e-8050-483d-a2cb-a61c9e2aa468/0/6827F6047A800EBE4B0DC6299C084EF05E0AAADE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3c:bb:7e:70:ff:c1:24:68:0a:c0:88:72:97:29:b4:50:fc:
         7d:0e:88:00:ad:e7:5d:7f:59:4d:7c:dc:33:86:16:64:73:ec:
         71:53:37:dd:2f:6e:a8:53:6c:80:6c:de:fd:2a:44:8a:ec:ea:
         ed:06:bd:1c:19:8a:9c:52:69:cb:ba:b3:c2:fa:0d:ac:b5:e0:
         05:19:fa:54:ef:e5:5b:88:29:6e:7e:76:f9:92:97:01:13:af:
         9c:b2:b6:ff:b9:f0:54:45:d7:89:77:ac:22:5d:cc:c3:6c:11:
         ec:4e:3e:c2:0c:81:e5:f0:7a:df:bf:3f:ec:30:62:60:36:68:
         52:74:bc:97:19:36:e9:3a:cd:1c:82:07:4b:82:fc:85:63:7f:
         84:6f:bb:3c:59:22:6f:10:9d:23:6d:48:40:b3:08:7d:13:ce:
         27:bc:70:78:27:6b:3c:96:bb:2a:12:37:af:44:43:70:9b:f7:
         04:cf:6f:5e:a3:2c:56:a8:ec:0a:85:27:ab:5c:15:eb:06:ef:
         97:dc:3c:2a:d3:7d:93:2b:d9:3f:24:33:43:ab:96:dc:14:c7:
         4b:e8:0d:57:70:4b:b9:50:a2:44:ae:ed:db:12:07:e4:f2:39:
         79:22:ae:77:f3:b2:ca:81:a3:5c:b5:06:e6:71:ce:5a:17:d1:
         00:85:9d:c7
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUMGVwCw/K203HK5Hi/BLScMd6LNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgyN2Y2MDQ3YTgwMGViZTRiMGRjNjI5OWMwODRlZjA1
ZTBhYWFkZTAeFw0yNDExMjQyMzExNDFaFw0yNDExMjUyMzI1NDFaMDMxMTAvBgNV
BAMTKDI5ODc0QkNGQUQxQzc1NkQ5NTk1Q0REM0MyQjVGMzhBRTFBMzQ1QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktohWov823RV0NGq9V3YhgYMu
tA8r4bLsvmwO9rADjp53TwoMOo+taZ8HCULx1qEuwpW7NyMIdZrkC7nBpQDJbEmm
tN4hMUbcWixMrz8d4DrFS7DrGRl1Yv5JEIghObMsRooo32ALiCbeg8AFrtNI5VY5
T3MBkTiS38lBg/pCgD5CzXN355zlGBHrSdXYDTo/z8t9r8Iv8jkYhONw/DNhRY/A
y6lVULlqOnckHbNqTUllNE7XC8KI78jCGpB90BqL+AXgwtSv1RrxJldCU/U5uB/r
IINHqBxvap/y+CJF0GtfIkAKTjKCPY13mJxtIbiPSrQrsGji6mtveWqpSAMNAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKYdLz60cdW2Vlc3TwrXziuGjRccwHwYDVR0j
BBgwFoAUaCf2BHqADr5LDcYpnAhO8F4Kqt4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOWFmNmMzOGUtODA1MC00ODNkLWEyY2ItYTYxYzllMmFh
NDY4LzAvNjgyN0Y2MDQ3QTgwMEVCRTRCMERDNjI5OUMwODRFRjA1RTBBQUFERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FDZjJCSHFBRHI1TERjWXBuQWhPOEY0
S3F0NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85YWY2YzM4ZS04
MDUwLTQ4M2QtYTJjYi1hNjFjOWUyYWE0NjgvMC82ODI3RjYwNDdBODAwRUJFNEIw
REM2Mjk5QzA4NEVGMDVFMEFBQURFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAujy7fnD/wSRoCsCIcpcp
tFD8fQ6IAK3nXX9ZTXzcM4YWZHPscVM33S9uqFNsgGze/SpEiuzq7Qa9HBmKnFJp
y7qzwvoNrLXgBRn6VO/lW4gpbn52+ZKXAROvnLK2/7nwVEXXiXesIl3Mw2wR7E4+
wgyB5fB6378/7DBiYDZoUnS8lxk26TrNHIIHS4L8hWN/hG+7PFkibxCdI21IQLMI
fRPOJ7xweCdrPJa7KhI3r0RDcJv3BM9vXqMsVqjsCoUnq1wV6wbvl9w8KtN9kyvZ
PyQzQ6uW3BTHS+gNV3BLuVCiRK7t2xIH5PI5eSKud/OyyoGjXLUG5nHOWhfRAIWd
xw==
-----END CERTIFICATE-----