Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
File:                     D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json)
Hash identifier:          3qRNsyofaRpl/HjV+tPU7DEV9g1a6taOufQrmJOxMqw=
Subject key identifier:   D0:F0:6C:EE:52:A8:10:BA:47:8F:28:BE:F9:72:3E:14:B9:75:F9:A4
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Certificate issuer:       /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial:       21D695C7A1BF25B4A588662B9830C328D9164B0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
Manifest number:          02C7
Signing time:             Fri 22 Nov 2024 23:40:34 +0000
Manifest this update:     Fri 22 Nov 2024 23:35:34 +0000
Manifest next update:     Sun 24 Nov 2024 03:13:34 +0000
Files and hashes:         1: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: hI8+M4jVEc1jzyGd0ISe9TKAjeLLHxkbMOa22fU+KJU=)
                          2: AS51019.asa (hash: RqQYQxP2LlV4zO7/d8ske+S6p2B1SREg+ga188kx8/8=)
                          3: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: PeKrYlxO9aJzSjjq2GCsehA7RgIXos16I20n9tzXipg=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d6:95:c7:a1:bf:25:b4:a5:88:66:2b:98:30:c3:28:d9:16:4b:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
        Validity
            Not Before: Nov 22 23:35:34 2024 GMT
            Not After : Nov 24 03:13:34 2024 GMT
        Subject: CN=D0F06CEE52A810BA478F28BEF9723E14B975F9A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9b:df:e0:60:8b:12:cc:7e:50:41:69:e3:61:
                    dc:2e:1d:41:0e:d6:78:2f:de:bf:4d:fc:4b:30:c3:
                    bb:eb:50:74:01:af:48:82:07:23:c5:b7:cd:4e:ff:
                    76:57:59:ed:e7:d7:a6:9f:8d:b8:59:bb:fe:dd:22:
                    6e:dc:b7:cf:9d:8e:c5:84:78:56:80:bb:a4:db:df:
                    f5:51:ec:6a:0f:cd:03:b1:40:2a:36:cb:74:48:6a:
                    32:90:22:83:8e:d9:85:f6:ea:07:56:91:bf:38:56:
                    0a:cf:78:ce:de:b8:30:fc:25:0e:0d:eb:fd:47:af:
                    6c:2c:f4:8c:fc:4e:28:4c:76:b5:c8:2c:85:b6:93:
                    ef:8f:9f:71:6f:e2:24:24:d7:b4:eb:fa:54:5c:5d:
                    6b:a8:e7:0c:2f:49:07:67:d3:fa:2c:8e:89:bc:39:
                    98:93:4b:b7:5c:a0:56:6e:19:1b:af:04:8a:d0:ab:
                    ba:5f:e6:19:9d:16:05:f4:22:aa:39:df:0d:c0:a7:
                    00:cd:a3:41:8b:c2:3a:b3:cd:51:1d:e3:28:27:f0:
                    56:b1:99:05:a9:e6:7e:da:94:ca:56:80:5a:c4:4e:
                    54:95:24:97:6f:9a:1a:33:20:cc:81:87:46:2a:f4:
                    d8:17:eb:9a:b2:46:68:cf:c3:1a:70:bf:7c:65:b0:
                    3b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F0:6C:EE:52:A8:10:BA:47:8F:28:BE:F9:72:3E:14:B9:75:F9:A4
            X509v3 Authority Key Identifier:
                keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a8:2a:1d:6d:ce:79:c7:ae:6a:9c:88:b3:63:0a:c6:3a:68:
         0c:25:58:80:a7:c7:61:e9:29:ab:eb:45:48:55:2b:53:54:7c:
         39:d6:3a:83:b8:df:fb:69:83:88:4d:be:57:86:4f:70:51:51:
         3a:1e:9c:7b:fb:c5:d1:d7:91:ff:88:54:b7:62:51:b4:e5:1d:
         4d:a6:92:3c:4f:6c:a8:e8:2a:3b:55:0d:bf:19:45:93:b5:95:
         ad:79:0a:c0:fc:12:50:74:c5:c3:11:13:22:8a:b2:5b:24:7c:
         11:ac:50:4e:e0:6d:e9:ba:c3:81:bb:c2:bc:11:a8:a7:fc:83:
         fe:91:4a:0a:31:cf:5a:79:24:15:03:96:52:8d:78:af:8b:2c:
         ac:03:e7:70:91:26:00:36:ac:3e:fe:af:e7:81:96:bf:0d:67:
         24:ad:bc:81:13:7b:58:68:37:83:80:a5:86:cb:98:f6:22:bc:
         3c:a5:fe:f6:c1:e8:97:83:51:ef:b7:f8:d8:12:d4:f4:99:f8:
         2c:84:db:79:16:68:f6:6b:31:db:bc:f8:08:29:63:87:65:60:
         7c:08:af:eb:63:b1:57:ac:38:4f:48:1c:91:de:f0:f5:f0:55:
         23:68:ff:43:0f:9e:b5:b0:ad:f9:f8:9c:38:74:8e:8d:d6:a4:
         18:04:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:19:06 2024 by rpki-client on console-fra.rpki-client.org