Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/5/60BDB8EF236A27DBEC7F5831CF9429B450C6BBA9.mft
File:                     60BDB8EF236A27DBEC7F5831CF9429B450C6BBA9.mft (raw, json)
Hash identifier:          ODNuhdY08nVYbqua7+H5k0Qztf0r9Hm7y5O9G6a6zpA=
Subject key identifier:   74:2A:03:DF:E3:5F:25:9D:8E:55:6E:C9:91:F4:76:01:10:DD:10:63
Authority key identifier: 60:BD:B8:EF:23:6A:27:DB:EC:7F:58:31:CF:94:29:B4:50:C6:BB:A9
Certificate issuer:       /CN=60bdb8ef236a27dbec7f5831cf9429b450c6bba9
Certificate serial:       12C207A5A164371504C21157A69540D412E707CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YL247yNqJ9vsf1gxz5QptFDGu6k.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/5/60BDB8EF236A27DBEC7F5831CF9429B450C6BBA9.mft
Manifest number:          017D
Signing time:             Fri 17 May 2024 08:50:52 +0000
Manifest this update:     Fri 17 May 2024 08:45:52 +0000
Manifest next update:     Sat 18 May 2024 10:05:52 +0000
Files and hashes:         1: 60BDB8EF236A27DBEC7F5831CF9429B450C6BBA9.crl (hash: /Xvh7kP9QJ7fx/3P21Md/3fJqZ8qvbv/jq50JmAp/7A=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/5/60BDB8EF236A27DBEC7F5831CF9429B450C6BBA9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/5/60BDB8EF236A27DBEC7F5831CF9429B450C6BBA9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YL247yNqJ9vsf1gxz5QptFDGu6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c2:07:a5:a1:64:37:15:04:c2:11:57:a6:95:40:d4:12:e7:07:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60bdb8ef236a27dbec7f5831cf9429b450c6bba9
        Validity
            Not Before: May 17 08:45:52 2024 GMT
            Not After : May 18 10:05:52 2024 GMT
        Subject: CN=742A03DFE35F259D8E556EC991F4760110DD1063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:da:b6:1d:5f:37:8e:3f:db:3b:df:ad:d7:
                    2d:7d:61:ea:78:54:63:a2:d1:a5:81:2a:67:1c:4e:
                    ab:e8:80:73:bd:c4:68:09:d7:30:96:d1:10:b3:67:
                    1e:ed:af:79:a9:62:0a:12:87:d4:ec:72:03:1e:24:
                    75:bc:9c:29:00:4b:a8:f4:c8:78:f7:96:de:61:d0:
                    08:3a:48:65:6d:08:05:76:4e:f4:a3:e9:a2:4b:2e:
                    0c:20:c5:cc:8a:8b:fb:dd:52:e6:f6:ef:c6:0c:9d:
                    e7:6b:f7:e8:79:a0:f0:1f:13:b3:94:fb:83:24:a3:
                    d4:11:7e:ac:46:92:ed:40:a6:01:f4:1a:f9:5e:e4:
                    2c:28:c4:39:20:77:cb:d4:d6:16:32:05:4e:0e:e1:
                    00:77:52:03:40:3d:96:12:61:0b:7e:1b:6a:31:7c:
                    fa:2b:4e:1f:92:29:9e:8e:e2:03:70:d3:ef:7f:0f:
                    08:48:65:3b:58:6c:7f:f1:b0:e4:41:3e:7b:68:89:
                    c5:32:4f:25:8b:35:b4:8c:54:75:9f:25:83:47:d5:
                    6a:14:d8:3f:27:52:84:80:0c:be:91:f7:f7:3e:45:
                    04:1d:0f:2a:ad:78:72:ea:18:3b:06:e1:87:8d:23:
                    d7:b6:aa:4c:af:a3:41:99:d6:52:7d:6b:94:36:d6:
                    9f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2A:03:DF:E3:5F:25:9D:8E:55:6E:C9:91:F4:76:01:10:DD:10:63
            X509v3 Authority Key Identifier:
                keyid:60:BD:B8:EF:23:6A:27:DB:EC:7F:58:31:CF:94:29:B4:50:C6:BB:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/5/60BDB8EF236A27DBEC7F5831CF9429B450C6BBA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YL247yNqJ9vsf1gxz5QptFDGu6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/5/60BDB8EF236A27DBEC7F5831CF9429B450C6BBA9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c5:09:1f:54:98:bb:76:d8:f3:ad:14:80:04:6b:91:f8:03:
         27:3f:ed:8a:45:d1:4e:3f:29:b9:d3:73:f4:83:94:bb:1f:49:
         a7:fc:32:ce:6e:76:46:10:a6:01:91:25:d3:c7:e2:5e:37:10:
         ab:9b:84:98:c5:64:eb:dc:6c:b3:f9:91:53:f1:a0:96:c9:0e:
         e9:3d:18:06:43:48:6b:80:a1:dc:0d:1e:79:07:6f:b3:75:f2:
         b9:c3:11:32:0e:46:76:22:f4:80:41:95:e8:d6:ae:0f:ee:48:
         bd:5d:d0:29:ae:98:e3:a4:7b:21:59:00:6d:ca:69:7c:64:27:
         a6:57:fb:02:c7:19:c7:0a:34:63:e3:ca:93:ae:8e:5d:8c:eb:
         86:72:f4:f8:af:93:0e:01:6e:a6:2c:08:ff:b8:8b:ca:9b:62:
         1c:8e:56:6d:b0:c5:e9:23:48:f4:04:31:2e:af:73:e8:bc:27:
         8a:dd:28:05:6e:cf:73:72:07:cc:07:0e:6f:e6:bd:fc:79:4e:
         63:73:29:2e:51:ee:d3:91:50:f4:9d:e3:28:bc:81:6e:2f:97:
         d0:36:c9:ad:8c:83:9a:28:88:c7:ae:6c:cc:9a:09:53:53:b4:
         7c:2d:ab:24:a1:99:3f:c2:8d:d6:31:b2:fb:98:a1:0e:70:2b:
         aa:73:fb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:28:24 2024 by rpki-client on console-ams.rpki-client.org