Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/0/7F0DC1478EE06ECDCB36C5E4CD83673191CCBEF2.mft
File:                     7F0DC1478EE06ECDCB36C5E4CD83673191CCBEF2.mft (raw, json)
Hash identifier:          FEJo7kOV7VOl0ke2RIrshZuacAllmokL2FSJDmEp/qY=
Subject key identifier:   BD:31:62:E2:12:59:84:ED:1A:FD:91:D8:29:76:D5:B9:B8:82:0B:CA
Authority key identifier: 7F:0D:C1:47:8E:E0:6E:CD:CB:36:C5:E4:CD:83:67:31:91:CC:BE:F2
Certificate issuer:       /CN=7f0dc1478ee06ecdcb36c5e4cd83673191ccbef2
Certificate serial:       18C8BAF16FA1B82B8BF14BD01AFEDEFA2DFEAAC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fw3BR47gbs3LNsXkzYNnMZHMvvI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/0/7F0DC1478EE06ECDCB36C5E4CD83673191CCBEF2.mft
Manifest number:          CD
Signing time:             Fri 14 Jun 2024 00:20:32 +0000
Manifest this update:     Fri 14 Jun 2024 00:15:32 +0000
Manifest next update:     Sat 15 Jun 2024 03:19:32 +0000
Files and hashes:         1: 7F0DC1478EE06ECDCB36C5E4CD83673191CCBEF2.crl (hash: kgRcxJ36m3j1eCMPiYkgkw7wVbTMtBkpbmMJWJRAmkM=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/0/7F0DC1478EE06ECDCB36C5E4CD83673191CCBEF2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/0/7F0DC1478EE06ECDCB36C5E4CD83673191CCBEF2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fw3BR47gbs3LNsXkzYNnMZHMvvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Jun 2024 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c8:ba:f1:6f:a1:b8:2b:8b:f1:4b:d0:1a:fe:de:fa:2d:fe:aa:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f0dc1478ee06ecdcb36c5e4cd83673191ccbef2
        Validity
            Not Before: Jun 14 00:15:32 2024 GMT
            Not After : Jun 15 03:19:32 2024 GMT
        Subject: CN=BD3162E2125984ED1AFD91D82976D5B9B8820BCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9b:21:7a:88:4e:5a:73:22:c6:52:ce:14:87:
                    9c:3b:7a:0b:4f:85:67:ba:11:66:52:3f:90:78:40:
                    1b:b6:2c:e6:92:2c:f5:87:6c:01:41:8b:5b:98:41:
                    a2:5c:28:45:21:01:6d:3d:f6:9a:a0:e6:df:43:e8:
                    80:7a:52:3d:45:e8:c4:d1:a0:48:3f:d8:32:fc:6f:
                    56:03:f3:33:73:97:9e:f0:48:a9:04:83:9b:ea:a8:
                    0f:f8:f9:46:6f:0e:af:08:f6:7e:a7:e0:76:a9:1b:
                    15:6b:0d:e9:ff:8e:32:43:f2:82:c4:c3:1a:8d:a0:
                    48:15:0d:1e:18:3d:08:40:64:19:f0:f0:84:b6:ca:
                    be:29:da:a3:8c:80:42:5e:52:0d:71:03:f7:f1:2b:
                    82:40:32:67:29:c2:80:a4:2d:61:f0:a1:18:fe:12:
                    16:f7:76:0b:57:96:b0:0b:d9:fe:6c:64:de:db:ad:
                    18:55:81:83:59:15:f0:02:2d:5a:6a:56:6d:d8:17:
                    96:e7:4a:20:00:f9:d7:f6:3d:7b:1a:1b:21:bf:fa:
                    bc:e3:e3:af:17:b4:cc:c8:68:f6:63:ec:f0:19:03:
                    1f:6f:24:c7:f0:af:0b:57:55:54:c2:11:37:f1:a2:
                    58:04:47:83:59:88:d5:8b:a9:b3:55:cb:3b:49:c1:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:31:62:E2:12:59:84:ED:1A:FD:91:D8:29:76:D5:B9:B8:82:0B:CA
            X509v3 Authority Key Identifier:
                keyid:7F:0D:C1:47:8E:E0:6E:CD:CB:36:C5:E4:CD:83:67:31:91:CC:BE:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/0/7F0DC1478EE06ECDCB36C5E4CD83673191CCBEF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fw3BR47gbs3LNsXkzYNnMZHMvvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a6e77863-5f7e-4f53-bc36-887d1616f828/0/7F0DC1478EE06ECDCB36C5E4CD83673191CCBEF2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f5:f8:a7:1b:f5:0e:78:a1:35:56:08:28:52:25:73:57:44:
         ea:77:d9:af:63:6a:c7:25:cf:f3:cf:e3:bd:98:a5:e6:ea:ec:
         00:31:28:03:f9:a7:6f:0a:9a:c5:f3:5a:5a:6c:97:39:d7:f1:
         c0:b8:0f:34:a0:85:47:59:50:22:58:9d:5b:e4:60:71:20:43:
         7a:3f:6a:22:ef:1c:45:2b:87:a9:8b:51:65:3f:97:f9:dc:28:
         75:8a:95:2a:3f:26:db:26:f8:d3:87:ce:b7:3e:45:e9:a9:27:
         0f:ee:d7:c6:46:99:c3:e9:16:16:21:5c:4a:d5:5d:f9:9e:7d:
         3a:25:a9:23:99:a3:b8:56:e5:33:58:cc:06:88:55:e7:b4:13:
         38:71:37:68:cc:b5:32:e7:43:36:9d:30:16:25:0f:70:cc:0e:
         69:79:45:8b:8d:10:c9:41:20:f6:a4:f1:23:bf:e0:58:1c:5a:
         af:49:3f:db:e0:f7:bb:25:b7:4e:49:65:a1:dd:c5:b7:29:c1:
         c9:b5:79:af:40:96:3c:79:56:5a:04:72:12:d4:02:97:1c:73:
         19:4b:7c:b2:36:7b:f6:e2:7c:77:fd:28:0c:c5:ec:dd:f0:14:
         a7:f6:bf:3e:a5:fc:a9:57:a0:02:ca:b1:a9:4e:fb:a8:7f:8d:
         d3:14:4b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 01:11:52 2024 by rpki-client on console-fra.rpki-client.org