Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
File:                     4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft (raw, json)
Hash identifier:          jc1CSOdw72xFpJikkEcj41Z5prP5Pncl6SUOMlC0buo=
Subject key identifier:   9D:EF:10:58:E7:09:23:1C:04:6E:E4:41:79:D4:AC:0B:2D:40:E3:1D
Authority key identifier: 4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD
Certificate issuer:       /CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
Certificate serial:       6C0FF73224C507FB187DE3008BD37AF6F0D0DD3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
Manifest number:          30
Signing time:             Thu 26 Dec 2024 05:57:36 +0000
Manifest this update:     Thu 26 Dec 2024 05:52:36 +0000
Manifest next update:     Fri 27 Dec 2024 09:02:36 +0000
Files and hashes:         1: 4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl (hash: aT4Lss5rckIB50xvvhnTHj+dDzgWbeK7l8X3Mk9X8Y4=)
                          2: AS213915.asa (hash: JhCbGVFzlqO3KC//0XOSCTOLUCS41YpMnqWiaYg/Zc8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Dec 2024 04:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:0f:f7:32:24:c5:07:fb:18:7d:e3:00:8b:d3:7a:f6:f0:d0:dd:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48949512b3f7bf9a91b8bc897e7e18a4127cdd
        Validity
            Not Before: Dec 26 05:52:36 2024 GMT
            Not After : Dec 27 09:02:36 2024 GMT
        Subject: CN=9DEF1058E709231C046EE44179D4AC0B2D40E31D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:69:7e:1a:b1:4e:49:16:1e:ac:37:0b:ea:0a:
                    27:df:13:6c:8a:16:8c:45:07:0c:f0:83:99:7b:72:
                    4a:af:51:cc:b3:c0:25:6f:6f:c8:ec:1c:00:e0:16:
                    a4:66:32:e3:06:a6:45:38:1b:bf:1f:56:10:f4:22:
                    87:bc:49:77:7b:c5:3e:c2:36:bc:0e:8f:4c:fe:cc:
                    57:9c:02:21:e3:25:7f:cb:c5:0e:ad:d3:2b:25:ac:
                    a6:ee:6d:81:eb:e9:79:c6:7d:15:d1:f9:79:a8:25:
                    59:56:b0:25:3f:5c:af:27:9f:f6:19:ef:48:62:89:
                    21:cb:e3:60:ff:a9:5e:4c:2a:b3:01:57:ff:2e:6e:
                    7a:2a:45:86:e0:32:58:b1:ee:59:5f:b9:e9:33:81:
                    fc:62:0c:e2:9b:83:7e:6c:5f:bc:ca:75:ff:bb:e3:
                    6c:27:4b:7a:32:68:2d:d8:3a:1a:ac:ed:43:ed:39:
                    c1:8c:1d:b1:27:42:12:92:a0:d8:36:e7:65:db:35:
                    4e:97:c1:6e:db:d0:dd:e5:d8:b2:b2:05:b7:36:94:
                    f3:2e:2b:a9:3a:e2:fc:f7:ae:59:81:b9:35:77:00:
                    49:b3:f7:24:b7:f1:e2:ce:c9:35:51:3e:d1:ff:7e:
                    42:0d:fb:8f:28:b6:92:27:35:a2:0d:3d:30:fc:fb:
                    0f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EF:10:58:E7:09:23:1C:04:6E:E4:41:79:D4:AC:0B:2D:40:E3:1D
            X509v3 Authority Key Identifier:
                keyid:4B:48:94:95:12:B3:F7:BF:9A:91:B8:BC:89:7E:7E:18:A4:12:7C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0iUlRKz97-akbi8iX5-GKQSfN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c0ed046-fa95-45c3-9146-971db8a9e8bb/7/4B48949512B3F7BF9A91B8BC897E7E18A4127CDD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:db:5e:4a:29:46:fd:f0:f6:1d:98:15:ef:97:be:8d:17:7f:
         64:0f:f3:da:c7:e7:70:63:19:db:e9:19:15:73:1e:7f:91:a3:
         dd:3c:fb:e0:d2:32:1c:4b:6a:40:f5:3e:1c:10:40:92:bf:f2:
         04:d8:ff:4d:bf:e8:7e:e2:0c:0c:b5:71:58:eb:fe:95:39:e0:
         56:c3:c9:12:ec:18:09:c1:36:8e:ac:11:bd:bc:c0:4e:3f:aa:
         a8:8a:e1:58:7e:1f:dc:77:4d:a6:ea:d6:4e:ca:8c:70:9f:13:
         0b:79:75:e6:db:3b:0f:63:af:72:99:b4:3b:ce:69:77:db:d8:
         9a:91:9b:1f:ea:51:bb:36:5b:51:86:3b:eb:bd:fc:f6:d5:62:
         4b:2e:0f:10:47:4d:7f:c8:e2:02:8d:c0:c4:d6:a9:e4:43:bc:
         78:55:25:dc:dc:66:a0:6b:ed:77:0a:30:3f:55:84:68:f5:70:
         c6:58:70:36:2d:00:2d:7c:4a:cb:24:2f:5c:33:9d:2d:cb:10:
         cc:26:95:a8:98:4a:4a:39:16:3c:7a:43:d9:cf:25:ad:61:19:
         ca:7b:e0:d1:d6:26:97:dd:85:98:b9:02:35:7e:a6:be:5f:f1:
         08:14:32:b4:d3:6c:df:21:84:db:68:05:5a:a8:67:f3:02:a2:
         b2:46:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 26 09:09:45 2024 by rpki-client on console-fra.rpki-client.org