Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
File:                     7D7059638411E3231E759E74A813BF9376209E77.mft (raw, json)
Hash identifier:          77Na2UIQRavq0uGavm5wek4S8u6YmbL3qQNH+n1m2RM=
Subject key identifier:   5A:04:00:B0:4E:EA:F8:B6:D3:54:30:2F:DF:0F:3F:4A:F1:B5:D2:55
Authority key identifier: 7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77
Certificate issuer:       /CN=7d7059638411e3231e759e74a813bf9376209e77
Certificate serial:       69C36481B1159912A19936FA175AC31AC5C401D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
Manifest number:          AF
Signing time:             Sun 03 Nov 2024 00:21:57 +0000
Manifest this update:     Sun 03 Nov 2024 00:16:57 +0000
Manifest next update:     Mon 04 Nov 2024 01:15:57 +0000
Files and hashes:         1: 7D7059638411E3231E759E74A813BF9376209E77.crl (hash: ZCTZ/DjgQ6tw0rQTz5We54LS0NwPXxjo93G5fMV/xX4=)
                          2: AS215849.asa (hash: 9UZCyM4teIzSn1Im2N0q8YebSfMGXCtXc/dqDr5kuPE=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 03 Nov 2024 19:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c3:64:81:b1:15:99:12:a1:99:36:fa:17:5a:c3:1a:c5:c4:01:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d7059638411e3231e759e74a813bf9376209e77
        Validity
            Not Before: Nov  3 00:16:57 2024 GMT
            Not After : Nov  4 01:15:57 2024 GMT
        Subject: CN=5A0400B04EEAF8B6D354302FDF0F3F4AF1B5D255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:89:a5:5a:cf:40:bc:91:eb:71:24:b1:11:
                    eb:8a:6a:3a:5d:42:33:94:a2:c4:b7:f1:08:58:aa:
                    f4:05:30:5e:31:e8:63:7f:dd:07:66:87:30:b6:1a:
                    8c:db:8c:3e:f0:08:2a:60:ff:09:90:d1:68:f1:98:
                    23:12:22:c2:d3:c0:d1:74:70:cc:b6:c6:4c:b5:ac:
                    7f:5c:4e:c1:6e:00:3b:11:b4:db:f8:b3:7a:c2:41:
                    75:57:9a:0b:fa:25:b0:ef:5f:74:1c:7c:07:cf:40:
                    93:7a:1a:b1:74:25:dc:a6:66:c3:08:ef:27:c7:3a:
                    09:fe:3b:8e:7d:5f:09:1c:8d:37:14:f8:77:85:ed:
                    a3:7b:ef:7b:f4:23:a7:e4:9a:a2:03:9f:1f:3a:f7:
                    e7:27:c8:6f:14:2b:72:9c:bb:d9:a6:53:91:ca:ee:
                    78:04:d8:12:33:54:a2:4b:2a:19:1e:76:46:ca:74:
                    e6:54:2f:6e:c8:e4:bf:7d:d4:c1:d8:d6:06:6f:36:
                    77:20:96:c4:1c:c2:9d:a4:a0:44:f7:3b:5d:d9:cb:
                    84:83:17:13:15:02:19:b8:fc:21:ba:35:b2:15:11:
                    c3:c8:8e:e2:14:d0:ee:08:41:56:03:a6:dc:43:81:
                    4b:5e:ba:42:22:ea:8a:fa:af:50:e8:5f:02:e9:0f:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:04:00:B0:4E:EA:F8:B6:D3:54:30:2F:DF:0F:3F:4A:F1:B5:D2:55
            X509v3 Authority Key Identifier:
                keyid:7D:70:59:63:84:11:E3:23:1E:75:9E:74:A8:13:BF:93:76:20:9E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXBZY4QR4yMedZ50qBO_k3Ygnnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/6/7D7059638411E3231E759E74A813BF9376209E77.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5c:d6:c1:fc:19:c7:d3:22:d9:32:ff:e5:ed:6e:fd:e0:8e:
         45:61:dd:16:db:65:06:26:dc:fd:f1:ed:50:50:fe:29:1d:97:
         93:29:e1:fa:67:9d:0c:d0:a3:22:c9:27:69:15:f0:88:c6:ce:
         e4:71:14:64:9c:fd:c6:3f:31:fa:3f:7b:af:56:2c:50:e5:17:
         61:cc:d5:88:5c:97:41:f2:7c:ad:68:6a:27:16:5d:1c:0f:ac:
         69:b1:15:5e:4b:a9:d6:59:72:ff:bc:e2:05:5f:38:e4:34:b7:
         0b:bf:8d:ed:a0:31:9a:4d:0b:45:3d:ec:36:96:e7:e2:f0:79:
         c4:fd:56:21:f4:28:a2:85:d0:1a:46:97:d6:42:ed:bf:4d:8a:
         b4:af:ae:95:2d:c3:2d:b3:14:5f:ae:0d:be:b8:29:7e:ed:bb:
         08:e1:7f:ee:e0:4e:99:ee:6f:99:4e:63:26:3b:79:b4:44:86:
         96:0a:4c:8a:1c:e4:6d:62:22:e4:61:02:90:5e:ab:8d:a6:c6:
         89:b8:1f:56:04:2a:f0:ec:0a:e6:bf:d6:64:2e:0d:dd:1c:5b:
         c1:3a:22:88:f5:1f:20:92:95:d7:5e:1c:e6:9c:d5:3c:4d:9a:
         92:08:e7:a6:9d:79:e7:8a:64:5f:31:9b:1e:f4:ae:df:5e:89:
         46:7f:75:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 02:36:04 2024 by rpki-client on console-ams.rpki-client.org