Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/14/355142ADDACF18C2354AA5A19195B887E36BA297.mft
File:                     355142ADDACF18C2354AA5A19195B887E36BA297.mft (raw, json)
Hash identifier:          dYzRN8Fb4bxVRnO3wyGjDBViFwM+q0nE/Mhci8QPGHY=
Subject key identifier:   5D:F1:5C:E7:D0:D5:63:5F:13:50:EA:B4:2F:F8:55:9B:72:2C:D6:ED
Authority key identifier: 35:51:42:AD:DA:CF:18:C2:35:4A:A5:A1:91:95:B8:87:E3:6B:A2:97
Certificate issuer:       /CN=355142addacf18c2354aa5a19195b887e36ba297
Certificate serial:       3378204255A08E292E84235AEBB898A26D60C30F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NVFCrdrPGMI1SqWhkZW4h-Nropc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/14/355142ADDACF18C2354AA5A19195B887E36BA297.mft
Manifest number:          017E
Signing time:             Fri 17 May 2024 20:22:45 +0000
Manifest this update:     Fri 17 May 2024 20:17:45 +0000
Manifest next update:     Sat 18 May 2024 22:42:45 +0000
Files and hashes:         1: 355142ADDACF18C2354AA5A19195B887E36BA297.crl (hash: GnmjLYGGgjQU1yDQlnYMZdEpBkODxM8N5VQI+2M0kxk=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/14/355142ADDACF18C2354AA5A19195B887E36BA297.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/14/355142ADDACF18C2354AA5A19195B887E36BA297.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NVFCrdrPGMI1SqWhkZW4h-Nropc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:78:20:42:55:a0:8e:29:2e:84:23:5a:eb:b8:98:a2:6d:60:c3:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=355142addacf18c2354aa5a19195b887e36ba297
        Validity
            Not Before: May 17 20:17:45 2024 GMT
            Not After : May 18 22:42:45 2024 GMT
        Subject: CN=5DF15CE7D0D5635F1350EAB42FF8559B722CD6ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:46:a3:4e:7c:b3:00:7a:57:13:8f:9e:6d:b7:
                    6d:87:f9:88:29:42:cf:5e:99:a4:69:9e:a5:44:e1:
                    8d:ee:81:bc:22:c1:60:9c:2a:7a:d7:68:5a:30:9d:
                    0b:26:6f:93:39:96:36:4f:84:7b:e5:cf:4a:9d:fd:
                    12:25:53:f4:d2:18:41:e8:5a:eb:ea:91:d8:60:b0:
                    0d:3b:3e:66:f7:17:1e:5e:66:1b:46:9c:c6:b9:25:
                    c7:5c:55:2f:0b:75:47:93:c8:b1:96:74:7d:b9:9d:
                    9e:5c:27:2c:12:d8:f2:e6:39:14:19:05:f4:23:b0:
                    3f:aa:29:f7:cc:f4:dd:52:12:1e:b6:a5:68:94:f9:
                    9a:5e:c9:8e:c6:7b:04:71:da:81:80:f9:38:e1:df:
                    49:88:a9:82:a7:ee:75:ff:b5:bd:b5:6b:eb:65:ea:
                    fc:d1:68:e1:29:59:38:30:6d:ad:88:1b:d4:0a:43:
                    55:29:2a:15:68:d2:36:16:78:5d:dd:09:60:0e:a1:
                    bb:7f:0d:de:11:6b:e8:1c:08:7f:69:2a:bf:b4:de:
                    6b:7a:8d:c6:5f:e0:01:27:86:47:ae:31:3a:e7:86:
                    32:1f:dd:cb:ad:d6:59:16:e2:04:02:68:1d:2d:8b:
                    7a:6f:90:28:d9:5c:15:9e:b7:79:bd:c8:2f:00:a3:
                    47:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F1:5C:E7:D0:D5:63:5F:13:50:EA:B4:2F:F8:55:9B:72:2C:D6:ED
            X509v3 Authority Key Identifier:
                keyid:35:51:42:AD:DA:CF:18:C2:35:4A:A5:A1:91:95:B8:87:E3:6B:A2:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/14/355142ADDACF18C2354AA5A19195B887E36BA297.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NVFCrdrPGMI1SqWhkZW4h-Nropc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/14/355142ADDACF18C2354AA5A19195B887E36BA297.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:6e:1e:d3:6c:22:ec:d3:d2:29:90:22:c1:73:7f:1f:05:c0:
         d5:4e:fd:04:c6:f7:4e:c7:7f:65:5f:1a:bb:ad:1f:30:66:d2:
         55:16:e0:3f:87:9e:7e:24:e2:cb:c7:73:47:39:60:2b:20:3d:
         25:83:4f:2f:ca:9f:71:04:1a:0f:80:98:c5:fb:4a:37:34:6c:
         ee:21:ab:d4:34:dd:e4:14:67:94:83:23:1d:cc:0a:de:b3:f9:
         90:73:84:67:b6:83:37:b3:50:75:08:ad:98:89:f0:67:51:c4:
         c5:b2:0f:4f:34:bc:2d:76:7c:a8:52:8f:df:6e:59:c9:99:6d:
         d9:68:72:31:be:25:a7:d7:3b:89:47:5c:6a:bd:8a:e4:3a:04:
         79:68:f0:54:47:9e:ac:d6:de:61:02:f6:b1:ad:ea:35:d3:09:
         e4:3d:48:c7:5c:c6:2f:ef:92:42:18:02:45:03:56:32:24:18:
         9f:ae:f4:02:c2:bb:13:b1:3c:99:1b:2a:f5:72:33:b1:9d:80:
         82:4d:f3:60:36:c5:25:38:64:26:58:5f:c2:e0:16:2f:c6:1c:
         e2:2b:b6:c9:9d:5d:26:b7:85:fb:5e:79:3c:27:b2:cd:d3:02:
         6f:ed:92:cf:a7:25:9b:88:50:ff:4f:62:ae:26:df:ad:2c:88:
         dd:04:1f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:03:37 2024 by rpki-client on console-fra.rpki-client.org