Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft
File:                     59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft (raw, json)
Hash identifier:          //3QaMQKJlKce+3UUHSblZ6/zQsF7TygLxs1WGA/2q4=
Subject key identifier:   9E:97:2C:64:CA:27:21:F0:17:A5:4E:41:45:D3:3E:50:9A:CA:5E:A5
Authority key identifier: 59:E2:70:4A:8A:CF:87:C5:48:92:A7:DB:3E:F9:8C:77:F2:23:26:A9
Certificate issuer:       /CN=59e2704a8acf87c54892a7db3ef98c77f22326a9
Certificate serial:       3DA6CA895D969475B66053A6341AEABF2DE95DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WeJwSorPh8VIkqfbPvmMd_IjJqk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft
Manifest number:          017E
Signing time:             Fri 17 May 2024 14:44:22 +0000
Manifest this update:     Fri 17 May 2024 14:39:22 +0000
Manifest next update:     Sat 18 May 2024 16:12:22 +0000
Files and hashes:         1: 59E2704A8ACF87C54892A7DB3EF98C77F22326A9.crl (hash: IDhYoo7awEzq7W4wbXRSeK7/sQX/RNwHTYstyGaPDYQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WeJwSorPh8VIkqfbPvmMd_IjJqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a6:ca:89:5d:96:94:75:b6:60:53:a6:34:1a:ea:bf:2d:e9:5d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e2704a8acf87c54892a7db3ef98c77f22326a9
        Validity
            Not Before: May 17 14:39:22 2024 GMT
            Not After : May 18 16:12:22 2024 GMT
        Subject: CN=9E972C64CA2721F017A54E4145D33E509ACA5EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:2d:b6:71:be:6c:fc:9f:0e:7f:ad:c0:26:
                    34:df:93:7b:c4:a5:11:11:89:37:8f:e6:22:68:1f:
                    a9:fc:a6:6e:19:70:c3:3d:56:ab:45:78:c8:52:a4:
                    40:cd:8c:54:c5:a3:bc:5d:c3:1c:24:70:03:b9:98:
                    60:fe:76:db:d3:a3:43:b1:8b:64:2c:6d:f4:cb:2b:
                    c9:24:34:00:d2:13:bf:f9:f4:0a:cd:d3:48:e4:12:
                    4f:61:af:23:8b:56:40:24:46:ed:90:a9:6a:40:52:
                    eb:5c:b5:c2:3b:9e:23:0d:a3:75:81:38:38:72:86:
                    6f:60:3c:c9:d8:b5:c8:a6:f4:2d:13:86:64:92:d7:
                    0f:a8:68:a4:03:37:59:1b:69:87:4f:16:38:05:b7:
                    c0:d6:5a:ab:7e:59:6c:ee:34:e5:c0:4c:77:c7:df:
                    b3:66:5d:e6:52:5a:16:3a:fe:1f:c9:e0:6c:d4:13:
                    9a:1d:c9:dc:a9:c1:f3:1f:98:a0:2b:c0:5a:9a:75:
                    59:0b:da:22:c8:3a:a8:21:82:64:11:a0:5a:9c:e7:
                    cb:94:67:8c:94:ce:78:91:03:26:b9:f8:d1:9f:a2:
                    2a:c4:a2:d3:02:0f:55:63:c6:4c:6a:af:82:18:df:
                    4f:fc:a5:35:d3:d4:81:9b:ef:66:01:72:a2:e3:7f:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:97:2C:64:CA:27:21:F0:17:A5:4E:41:45:D3:3E:50:9A:CA:5E:A5
            X509v3 Authority Key Identifier:
                keyid:59:E2:70:4A:8A:CF:87:C5:48:92:A7:DB:3E:F9:8C:77:F2:23:26:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeJwSorPh8VIkqfbPvmMd_IjJqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/13/59E2704A8ACF87C54892A7DB3EF98C77F22326A9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b3:56:c4:2a:84:4e:0b:ef:91:6a:39:f5:e8:00:03:83:6a:
         3e:88:06:ee:f0:2c:ef:90:50:3d:ad:24:6a:f3:9b:8a:18:28:
         ba:ed:96:1d:3f:71:64:3f:c6:a2:1b:71:6d:e9:6d:56:5d:a4:
         d8:76:c7:52:5e:e3:3c:57:57:30:12:31:a6:7c:77:95:d6:d7:
         85:e0:0e:ff:b6:57:e8:e8:75:40:c0:6f:c5:9c:25:10:43:e2:
         88:00:d2:1b:d1:37:09:ca:a2:6e:c0:be:4a:77:39:09:e9:5c:
         5e:1a:1e:ca:0f:8f:19:2d:53:bc:9d:e7:8d:18:4a:80:74:6a:
         9b:be:c0:55:be:75:35:f1:6e:93:ff:0d:a1:e6:e9:8d:08:46:
         0a:64:ca:9d:fa:10:57:de:2b:e4:cf:4b:13:21:22:c6:5c:35:
         ab:6a:4f:7d:a7:22:c4:9b:7a:62:7d:c4:e4:c0:8e:a5:7f:f5:
         81:c7:5c:80:04:2f:92:25:6c:91:88:fd:36:da:25:64:a2:ec:
         46:9a:a6:22:72:3f:04:ce:c4:ce:75:fc:6a:d1:3e:79:37:6a:
         ff:86:b6:9c:b9:b0:99:8c:d9:f0:a3:bc:d8:8f:36:ac:c3:a0:
         8e:b8:dd:6a:0f:7e:3a:7a:f8:dc:c7:0a:ea:98:03:b9:6e:20:
         9e:5e:b5:04
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUPabKiV2WlHW2YFOmNBrqvy3pXdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTllMjcwNGE4YWNmODdjNTQ4OTJhN2RiM2VmOThjNzdm
MjIzMjZhOTAeFw0yNDA1MTcxNDM5MjJaFw0yNDA1MTgxNjEyMjJaMDMxMTAvBgNV
BAMTKDlFOTcyQzY0Q0EyNzIxRjAxN0E1NEU0MTQ1RDMzRTUwOUFDQTVFQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs3i22cb5s/J8Of63AJjTfk3vE
pRERiTeP5iJoH6n8pm4ZcMM9VqtFeMhSpEDNjFTFo7xdwxwkcAO5mGD+dtvTo0Ox
i2QsbfTLK8kkNADSE7/59ArN00jkEk9hryOLVkAkRu2QqWpAUutctcI7niMNo3WB
ODhyhm9gPMnYtcim9C0ThmSS1w+oaKQDN1kbaYdPFjgFt8DWWqt+WWzuNOXATHfH
37NmXeZSWhY6/h/J4GzUE5odydypwfMfmKArwFqadVkL2iLIOqghgmQRoFqc58uU
Z4yUzniRAya5+NGfoirEotMCD1Vjxkxqr4IY30/8pTXT1IGb72YBcqLjf+75AgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUnpcsZMonIfAXpU5BRdM+UJrKXqUwHwYDVR0j
BBgwFoAUWeJwSorPh8VIkqfbPvmMd/IjJqkwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2FlNmVkZWVjLTA4YmEtNGNkZS04OTc5LTRmYWVhNGIx
YmMxMi8xMy81OUUyNzA0QThBQ0Y4N0M1NDg5MkE3REIzRUY5OEM3N0YyMjMyNkE5
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvV2VKd1NvclBoOFZJa3FmYlB2bU1k
X0lqSnFrLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVl
Yy0wOGJhLTRjZGUtODk3OS00ZmFlYTRiMWJjMTIvMTMvNTlFMjcwNEE4QUNGODdD
NTQ4OTJBN0RCM0VGOThDNzdGMjIzMjZBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFyzVsQqhE4L75Fq
OfXoAAODaj6IBu7wLO+QUD2tJGrzm4oYKLrtlh0/cWQ/xqIbcW3pbVZdpNh2x1Je
4zxXVzASMaZ8d5XW14XgDv+2V+jodUDAb8WcJRBD4ogA0hvRNwnKom7Avkp3OQnp
XF4aHsoPjxktU7yd540YSoB0apu+wFW+dTXxbpP/DaHm6Y0IRgpkyp36EFfeK+TP
SxMhIsZcNatqT32nIsSbemJ9xOTAjqV/9YHHXIAEL5IlbJGI/TbaJWSi7EaapiJy
PwTOxM51/GrRPnk3av+Gtpy5sJmM2fCjvNiPNqzDoI643WoPfjp6+NzHCuqYA7lu
IJ5etQQ=
-----END CERTIFICATE-----
Generated at Fri May 17 17:36:40 2024 by rpki-client on console-fra.rpki-client.org