Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
File:                     627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft (raw, json)
Hash identifier:          5LH8fR17An3ZXPYV6FVxeAjhGl+5pFFw96ymwHvdlDg=
Subject key identifier:   A1:76:78:D5:A5:B1:FA:31:D3:BA:B7:B4:00:E3:97:6A:2B:8D:E0:63
Authority key identifier: 62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE
Certificate issuer:       /CN=627288b3a2f25873aa73906dd37bafff0b1ef5de
Certificate serial:       179331B2059356F48C61F80F227AF92A807F65F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
Manifest number:          017E
Signing time:             Fri 17 May 2024 18:06:29 +0000
Manifest this update:     Fri 17 May 2024 18:01:29 +0000
Manifest next update:     Sat 18 May 2024 19:11:29 +0000
Files and hashes:         1: 627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl (hash: +k/CJMHhbOa4ZivmqlLQePXDJ+PlZ+ZFB39sg9UXY9g=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:93:31:b2:05:93:56:f4:8c:61:f8:0f:22:7a:f9:2a:80:7f:65:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=627288b3a2f25873aa73906dd37bafff0b1ef5de
        Validity
            Not Before: May 17 18:01:29 2024 GMT
            Not After : May 18 19:11:29 2024 GMT
        Subject: CN=A17678D5A5B1FA31D3BAB7B400E3976A2B8DE063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:15:cd:7f:1d:dc:22:c5:28:5a:65:1c:60:1d:
                    21:2a:2c:5c:a9:c6:d6:44:7a:48:8e:be:91:d3:b7:
                    96:36:fe:f5:e6:e9:f8:96:45:64:48:e2:51:f0:04:
                    61:06:68:06:8e:be:9d:32:23:dc:24:a7:22:68:bf:
                    65:35:c9:92:d0:6d:39:d8:c4:3c:b4:d6:25:74:d2:
                    19:37:9b:5d:24:51:d6:03:2b:84:bb:1b:02:81:9e:
                    b4:cc:b8:46:76:14:0d:c5:7b:88:9f:93:40:bd:55:
                    6e:f4:66:e2:d3:22:e0:5a:df:4e:1b:9a:0a:ea:cf:
                    11:e2:a9:e5:ba:b7:f2:2d:a9:8e:fb:f1:de:6e:92:
                    a7:8f:a1:da:0b:ad:01:7b:29:98:5a:b6:06:0f:ca:
                    ea:db:a6:92:92:9e:c6:08:c1:86:98:53:71:75:a7:
                    40:5f:66:69:51:ac:ac:cf:f0:15:1a:53:a7:7d:44:
                    be:70:83:e0:ea:86:61:6f:75:73:62:80:cd:0f:15:
                    fa:4d:97:b9:ca:d7:26:00:58:b4:f3:c7:2a:a6:a4:
                    cc:a8:7b:fa:3c:bf:3f:9d:6a:16:d6:0e:1d:e1:c0:
                    5f:2f:3f:de:67:35:49:e8:51:16:09:db:26:c5:96:
                    3f:d6:f3:a9:bf:8e:41:b3:29:ad:dd:a6:10:f4:7a:
                    13:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:76:78:D5:A5:B1:FA:31:D3:BA:B7:B4:00:E3:97:6A:2B:8D:E0:63
            X509v3 Authority Key Identifier:
                keyid:62:72:88:B3:A2:F2:58:73:AA:73:90:6D:D3:7B:AF:FF:0B:1E:F5:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnKIs6LyWHOqc5Bt03uv_wse9d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/10/627288B3A2F25873AA73906DD37BAFFF0B1EF5DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ce:f1:3d:18:8c:95:6d:53:01:9e:73:59:3c:2a:2c:26:4d:
         a1:4e:6b:85:77:dd:ed:3f:5c:10:7a:b1:1f:ca:e3:9b:fe:2f:
         f9:8a:08:ad:8c:6d:66:84:78:4a:86:bf:64:06:7a:0a:80:1d:
         26:a4:56:ef:8d:6d:55:9f:82:46:3f:68:52:22:29:25:b3:b3:
         cf:7a:10:73:2b:80:29:c1:d0:e0:64:91:8c:ad:e7:30:c6:ab:
         2a:bc:af:a0:d8:ee:2c:10:69:9f:e7:5d:d0:62:c3:59:ca:af:
         9a:91:94:66:b2:0a:99:64:5d:05:92:e0:ea:74:97:7c:53:f7:
         61:6e:b1:d8:6f:3d:d7:b6:20:71:c5:5a:c5:58:20:66:da:66:
         90:08:eb:58:38:48:06:60:b6:61:4a:34:ab:2a:a8:1b:96:0b:
         e8:2a:a1:02:98:41:d9:11:94:b3:45:0d:b9:f7:0d:ac:e0:ce:
         26:08:59:7b:1c:33:f4:e8:f1:61:e2:02:72:f0:65:b3:36:4c:
         c9:76:b3:3a:a4:f2:f8:7a:1e:2c:5e:15:a0:cb:f6:f0:ec:e3:
         c9:9f:8f:b5:56:9c:db:84:64:7d:29:e1:65:4c:cb:b1:63:d9:
         22:80:b9:8c:e1:ff:80:41:39:92:67:81:19:e2:75:1c:77:26:
         2a:b6:5d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----