Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File:                     CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier:          zwDxjpZaou0hguB6dVgJaDb83FGQJu11uNZKLm3Rt8g=
Subject key identifier:   C9:F6:5D:45:CC:D6:C2:A0:0B:D9:21:05:24:CC:A9:DC:0E:B9:8E:CA
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer:       /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial:       5F470357772686EC34801095ABAB156A4799E520
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number:          017E
Signing time:             Fri 17 May 2024 15:49:54 +0000
Manifest this update:     Fri 17 May 2024 15:44:54 +0000
Manifest next update:     Sat 18 May 2024 18:56:54 +0000
Files and hashes:         1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: hm5otdq0wGEt/3oi0aBTa3WrCCD+wv5tFzhUWXnf070=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:47:03:57:77:26:86:ec:34:80:10:95:ab:ab:15:6a:47:99:e5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
        Validity
            Not Before: May 17 15:44:54 2024 GMT
            Not After : May 18 18:56:54 2024 GMT
        Subject: CN=C9F65D45CCD6C2A00BD9210524CCA9DC0EB98ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a7:77:be:cd:8d:9f:7a:1b:0b:33:dc:13:b1:
                    1b:7e:44:6e:7e:0a:a8:bc:0f:c4:93:24:01:f9:67:
                    e4:d4:75:bc:97:cd:ba:f4:f9:fd:23:65:8f:a8:09:
                    55:c3:d6:53:b8:8d:7e:a5:33:79:fc:5c:b2:74:94:
                    dc:7d:54:00:58:b7:07:38:82:16:e3:8f:bb:ba:99:
                    58:1e:0a:01:07:7f:56:76:1a:2f:e7:cf:2f:f3:a0:
                    95:d9:40:81:5e:5d:5a:af:17:ff:e1:ec:14:4a:94:
                    2c:53:bc:4a:b1:0f:88:13:0a:b4:1e:f7:94:37:ad:
                    2d:d3:44:3c:4f:08:80:5e:55:80:ab:13:3f:a0:34:
                    e1:10:d8:f3:b9:0a:5c:07:98:9a:f9:a4:03:d9:ed:
                    4b:8b:45:13:16:17:f8:a3:f4:8e:32:c4:e9:d4:39:
                    56:43:eb:8a:e5:6e:a3:e3:05:45:a0:b8:14:35:05:
                    06:01:ca:70:cc:86:8f:fc:94:20:37:eb:19:c1:1a:
                    ec:68:f3:1f:b4:9c:60:1c:a9:28:36:b4:d4:7c:ad:
                    6f:9c:fb:2d:b6:6d:95:68:b3:62:a7:30:c8:4b:a4:
                    0a:11:be:43:a5:c8:0c:06:3e:98:87:17:33:70:43:
                    3f:7a:03:14:00:4c:d4:04:70:5c:78:71:db:3b:fa:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F6:5D:45:CC:D6:C2:A0:0B:D9:21:05:24:CC:A9:DC:0E:B9:8E:CA
            X509v3 Authority Key Identifier:
                keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:2c:4a:d2:3d:ca:c3:59:e3:87:52:52:5b:4a:76:d3:aa:
         9b:41:23:2e:32:9f:d1:57:6e:7f:68:13:f5:10:ed:ff:63:1e:
         af:be:40:9a:0a:fc:51:ab:96:27:a4:66:ba:57:26:bd:ca:5e:
         34:05:98:67:01:f2:90:60:e3:2b:69:1c:46:10:e7:d8:75:e4:
         9d:19:7d:3b:2b:90:16:68:72:4e:f9:d9:d7:3e:17:60:d9:03:
         eb:1d:4a:44:47:14:ca:a0:a6:24:c2:69:e4:46:c6:f1:af:90:
         36:65:09:34:9a:e5:48:15:b0:c1:24:6a:92:47:71:79:08:b7:
         b7:17:5a:3b:d8:64:1a:20:73:1f:12:8d:a0:4b:1e:a1:aa:a2:
         ca:91:1b:99:63:be:6b:f9:a0:30:f6:8f:9a:ba:7f:97:c6:43:
         b9:9c:9c:b4:10:ca:3d:d2:5d:54:fe:a2:08:d1:36:c4:1a:e2:
         07:7e:f7:22:40:84:3e:65:a6:4d:57:83:d7:c7:68:6a:c2:cc:
         c4:ee:d1:dc:f3:a7:56:b9:e0:97:10:69:20:bf:f2:0b:02:85:
         8e:4a:99:b6:cc:1a:28:45:78:3f:cd:1c:23:20:c6:e7:51:0f:
         b4:eb:bf:92:db:95:f1:ca:9c:32:e6:fc:bc:a2:59:3b:33:a8:
         7f:ef:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:34:32 2024 by rpki-client on console-fra.rpki-client.org