Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
File:                     6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft (raw, json)
Hash identifier:          3SPpo6XHAbb7O8A+ql22bBLlIihx2WY63sxHeECWhSQ=
Subject key identifier:   FF:DE:E7:7E:98:33:20:90:11:99:A6:32:E7:22:B4:69:4C:74:D9:32
Authority key identifier: 6A:AA:F9:85:68:FC:24:ED:74:25:FF:75:AB:D5:F1:45:10:1F:BA:A3
Certificate issuer:       /CN=6aaaf98568fc24ed7425ff75abd5f145101fbaa3
Certificate serial:       6103D5D3157C314CF291ADA4D3F44EF629018359
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aqr5hWj8JO10Jf91q9XxRRAfuqM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
Manifest number:          017E
Signing time:             Fri 17 May 2024 03:23:06 +0000
Manifest this update:     Fri 17 May 2024 03:18:06 +0000
Manifest next update:     Sat 18 May 2024 06:35:06 +0000
Files and hashes:         1: 6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.crl (hash: iwgGUDMKfsPD1Sd8a4w2EcK3md71ir2ETL5hH6r55+c=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aqr5hWj8JO10Jf91q9XxRRAfuqM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:03:d5:d3:15:7c:31:4c:f2:91:ad:a4:d3:f4:4e:f6:29:01:83:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aaaf98568fc24ed7425ff75abd5f145101fbaa3
        Validity
            Not Before: May 17 03:18:06 2024 GMT
            Not After : May 18 06:35:06 2024 GMT
        Subject: CN=FFDEE77E983320901199A632E722B4694C74D932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:d8:4b:a4:75:34:4b:09:31:15:5d:66:0a:
                    d2:c0:e9:f5:76:36:80:d8:ae:e6:80:09:d4:87:21:
                    b4:4d:0f:e8:55:82:63:aa:57:30:aa:c1:b0:23:56:
                    86:e7:7e:d5:50:30:3b:ff:de:ce:df:0b:b5:bb:dd:
                    30:bb:8f:a3:f7:0b:39:ca:03:bd:f7:e5:5b:46:a8:
                    11:7f:71:e5:85:12:3f:b7:80:ff:f5:97:49:76:f6:
                    3c:02:6c:00:20:94:43:88:50:d0:d2:7f:29:fd:c1:
                    e2:8f:f6:01:f9:33:c3:83:8b:53:e9:bf:1c:32:67:
                    6f:ea:be:1c:bf:eb:49:e3:c9:3e:4d:a1:0c:fd:56:
                    c7:b3:e6:be:58:4c:86:66:6a:4a:32:be:14:79:b2:
                    13:7b:a4:70:b2:d7:41:3b:10:df:fa:56:e8:26:d7:
                    f9:6d:82:3d:ee:0d:eb:dd:82:a9:2d:86:69:01:36:
                    df:dc:af:1f:18:ea:41:5f:b3:66:7c:11:79:aa:98:
                    f1:5f:e5:ae:d0:5e:a6:08:43:74:7b:07:52:5c:79:
                    50:e9:80:ff:96:99:a3:77:ae:98:4d:e8:69:64:7b:
                    c0:4a:f9:be:71:a5:a2:08:bc:a9:1e:15:6f:30:19:
                    ee:80:ea:5f:c4:26:69:52:a8:56:0d:36:24:c1:3b:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:DE:E7:7E:98:33:20:90:11:99:A6:32:E7:22:B4:69:4C:74:D9:32
            X509v3 Authority Key Identifier:
                keyid:6A:AA:F9:85:68:FC:24:ED:74:25:FF:75:AB:D5:F1:45:10:1F:BA:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqr5hWj8JO10Jf91q9XxRRAfuqM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/11/6AAAF98568FC24ED7425FF75ABD5F145101FBAA3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:14:ea:f0:53:e0:96:6c:2c:f3:20:2b:8c:c1:c3:a3:6b:
         30:8a:57:33:6f:87:04:ed:2d:31:2d:64:91:59:03:21:be:2e:
         00:14:92:fe:de:0e:cb:a6:51:c1:49:e8:96:c0:22:b4:ad:9a:
         ca:b2:af:dc:28:1a:f4:06:04:66:9f:e0:c3:fc:d8:bd:5f:e7:
         11:1f:b8:10:61:90:a7:f7:6a:2d:c2:e4:59:43:bb:ec:da:54:
         0e:20:1b:f7:51:e2:b5:b1:79:e6:8a:d1:5c:15:80:93:78:75:
         7a:38:fd:97:9b:a2:7f:b2:bd:be:cd:19:97:94:7c:3b:71:2c:
         87:4d:86:8c:e4:0e:2a:23:3e:c7:e9:3f:03:cb:b1:bb:09:42:
         09:f6:61:a0:60:df:b4:30:ac:b8:10:ec:f3:73:40:c6:46:e2:
         88:86:f2:a5:4e:e9:37:02:89:49:15:3f:65:09:ce:6d:7a:cd:
         80:c2:83:66:d4:e8:66:5e:94:bb:72:21:15:e0:9f:47:a1:ce:
         dd:b1:1b:4f:5b:6c:05:4a:f4:6c:38:5c:03:85:60:f2:4e:47:
         e8:0f:0f:17:3e:0f:ad:6a:ff:43:50:44:1f:fe:7c:3f:ba:54:
         15:ea:82:12:de:bd:b9:cd:be:09:65:1b:1d:2f:18:37:1a:95:
         72:b2:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:56:29 2024 by rpki-client on console-ams.rpki-client.org