Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.mft
File:                     FE2CBAA11AD6DE93E836F49D692AE540D9764331.mft (raw, json)
Hash identifier:          BqNvOafzGxd0D6b+zXXD8c6NwJ9Rr0wCR8YTbq8QAao=
Subject key identifier:   4C:CE:51:61:93:5A:B5:47:86:30:36:F3:BA:4C:02:20:14:DC:39:FA
Authority key identifier: FE:2C:BA:A1:1A:D6:DE:93:E8:36:F4:9D:69:2A:E5:40:D9:76:43:31
Certificate issuer:       /CN=fe2cbaa11ad6de93e836f49d692ae540d9764331
Certificate serial:       35B33E30ED7BF324337B411A9F2C39D81A860448
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_iy6oRrW3pPoNvSdaSrlQNl2QzE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.mft
Manifest number:          017B
Signing time:             Fri 17 May 2024 03:33:08 +0000
Manifest this update:     Fri 17 May 2024 03:28:08 +0000
Manifest next update:     Sat 18 May 2024 06:55:08 +0000
Files and hashes:         1: FE2CBAA11AD6DE93E836F49D692AE540D9764331.crl (hash: AZW78gb0oFHiQaemQMTynwAPNfvZlWoWaXMOWwypbMQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_iy6oRrW3pPoNvSdaSrlQNl2QzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b3:3e:30:ed:7b:f3:24:33:7b:41:1a:9f:2c:39:d8:1a:86:04:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe2cbaa11ad6de93e836f49d692ae540d9764331
        Validity
            Not Before: May 17 03:28:08 2024 GMT
            Not After : May 18 06:55:08 2024 GMT
        Subject: CN=4CCE5161935AB547863036F3BA4C022014DC39FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:b7:08:18:2a:d2:53:5f:ad:5b:39:33:09:
                    0c:44:d4:65:b3:96:31:2b:3d:59:b5:d9:fe:25:1e:
                    4d:95:b5:03:82:bf:f4:b4:ab:4c:d9:3e:d6:27:1c:
                    db:aa:1f:fd:05:b0:0c:82:ac:41:23:93:84:58:5c:
                    8b:7a:08:79:a5:e2:f8:4a:9f:e5:9c:87:3f:3e:9e:
                    ef:01:9a:81:5b:42:2e:66:7a:89:31:45:c9:ab:af:
                    ab:3a:05:27:79:7c:68:66:95:9f:5e:a6:5b:1b:7e:
                    64:9d:45:d0:04:a0:94:0c:02:8b:09:fd:b5:74:cb:
                    22:7e:18:84:ac:f9:c5:34:d4:0b:44:c9:c5:ca:87:
                    40:b5:1a:f4:6c:8c:27:81:db:92:c4:58:7d:60:df:
                    92:f0:95:d3:c6:7a:95:4d:b1:2f:5d:32:39:40:cc:
                    f0:40:18:22:79:87:3f:60:9f:69:61:a2:56:a9:94:
                    71:0d:27:4f:e2:f7:8a:77:7d:99:eb:c2:de:87:dd:
                    d4:a2:a1:46:cf:e0:a0:14:9b:f0:c9:83:55:99:a4:
                    f1:21:da:00:b0:fa:1c:b5:60:e1:75:b1:96:92:de:
                    63:ff:52:aa:68:af:59:e7:6a:bf:4e:bc:84:92:b7:
                    df:98:e2:86:67:02:f7:a2:b8:c0:75:29:73:2a:d2:
                    f4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CE:51:61:93:5A:B5:47:86:30:36:F3:BA:4C:02:20:14:DC:39:FA
            X509v3 Authority Key Identifier:
                keyid:FE:2C:BA:A1:1A:D6:DE:93:E8:36:F4:9D:69:2A:E5:40:D9:76:43:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iy6oRrW3pPoNvSdaSrlQNl2QzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/3/FE2CBAA11AD6DE93E836F49D692AE540D9764331.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:cf:a2:cd:9c:86:46:89:51:18:4b:d2:71:5c:86:21:1d:
         db:05:99:65:e2:87:12:f5:55:bd:56:c5:07:42:6b:0e:48:69:
         f4:95:6a:02:95:eb:7f:6d:60:39:50:bd:74:c3:d1:c4:f4:7f:
         70:b2:d0:54:60:88:9d:27:22:80:d6:5c:0b:f4:56:9a:81:5f:
         8e:88:00:bf:f6:2e:a8:bf:21:99:cc:5a:06:70:98:1e:a4:68:
         0a:bc:17:9b:78:11:6d:b0:d2:4b:68:8d:3c:f1:d9:57:7a:a8:
         af:c7:4f:ff:2a:79:40:9e:0a:7a:22:e2:0a:94:f2:1d:d1:d2:
         d2:9a:95:56:29:d2:48:f1:01:23:e4:16:dd:69:d9:07:21:ce:
         41:2d:10:9c:33:de:bf:8e:3d:6d:02:85:a3:96:bd:38:d7:0d:
         98:d9:2e:3d:d4:9a:65:55:59:3d:4f:76:86:c1:a0:f5:37:83:
         1b:12:9a:22:2c:0d:f1:29:7b:7c:d3:95:ff:99:fa:20:62:75:
         60:6a:34:80:9f:d4:87:ca:77:8b:ca:c1:e9:88:c0:fc:0e:ea:
         17:31:ce:82:66:73:81:df:6a:a4:f1:4c:41:39:d8:b4:ee:12:
         83:d9:ee:5c:98:70:b9:c8:a1:32:dc:ec:d9:d6:10:8b:ca:8d:
         c4:0f:6a:ad
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNbM+MO178yQze0Eanyw52BqGBEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZmUyY2JhYTExYWQ2ZGU5M2U4MzZmNDlkNjkyYWU1NDBk
OTc2NDMzMTAeFw0yNDA1MTcwMzI4MDhaFw0yNDA1MTgwNjU1MDhaMDMxMTAvBgNV
BAMTKDRDQ0U1MTYxOTM1QUI1NDc4NjMwMzZGM0JBNEMwMjIwMTREQzM5RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClH7cIGCrSU1+tWzkzCQxE1GWz
ljErPVm12f4lHk2VtQOCv/S0q0zZPtYnHNuqH/0FsAyCrEEjk4RYXIt6CHml4vhK
n+Wchz8+nu8BmoFbQi5meokxRcmrr6s6BSd5fGhmlZ9eplsbfmSdRdAEoJQMAosJ
/bV0yyJ+GISs+cU01AtEycXKh0C1GvRsjCeB25LEWH1g35LwldPGepVNsS9dMjlA
zPBAGCJ5hz9gn2lholaplHENJ0/i94p3fZnrwt6H3dSioUbP4KAUm/DJg1WZpPEh
2gCw+hy1YOF1sZaS3mP/Uqpor1nnar9OvISSt9+Y4oZnAveiuMB1KXMq0vRdAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUTM5RYZNatUeGMDbzukwCIBTcOfowHwYDVR0j
BBgwFoAU/iy6oRrW3pPoNvSdaSrlQNl2QzEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFi
YzEyLzMvRkUyQ0JBQTExQUQ2REU5M0U4MzZGNDlENjkyQUU1NDBEOTc2NDMzMS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL19peTZvUnJXM3BQb052U2RhU3JsUU5s
MlF6RS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0w
OGJhLTRjZGUtODk3OS00ZmFlYTRiMWJjMTIvMy9GRTJDQkFBMTFBRDZERTkzRTgz
NkY0OUQ2OTJBRTU0MEQ5NzY0MzMxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcdTPos2chkaJURhL0nFc
hiEd2wWZZeKHEvVVvVbFB0JrDkhp9JVqApXrf21gOVC9dMPRxPR/cLLQVGCInSci
gNZcC/RWmoFfjogAv/YuqL8hmcxaBnCYHqRoCrwXm3gRbbDSS2iNPPHZV3qor8dP
/yp5QJ4KeiLiCpTyHdHS0pqVVinSSPEBI+QW3WnZByHOQS0QnDPev449bQKFo5a9
ONcNmNkuPdSaZVVZPU92hsGg9TeDGxKaIiwN8Sl7fNOV/5n6IGJ1YGo0gJ/Uh8p3
i8rB6YjA/A7qFzHOgmZzgd9qpPFMQTnYtO4Sg9nuXJhwucihMtzs2dYQi8qNxA9q
rQ==
-----END CERTIFICATE-----
Generated at Fri May 17 05:44:26 2024 by rpki-client on console-fra.rpki-client.org