Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File:                     CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier:          1oIqRPLKbVMLn/kDw/HPW2REybm3kRqKWTcapI791HE=
Subject key identifier:   8B:F7:BC:9C:AC:1D:1B:FF:88:04:4C:0C:E2:4A:60:A0:A6:B2:47:0A
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer:       /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial:       2B55ABD0AD77DC6275AB170F5E137C86DCAAAD87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number:          0284
Signing time:             Fri 22 Nov 2024 05:51:41 +0000
Manifest this update:     Fri 22 Nov 2024 05:46:41 +0000
Manifest next update:     Sat 23 Nov 2024 06:40:41 +0000
Files and hashes:         1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: U3pqL6yxrNU4GYc9mAOxchsju4fswMyIevU0mULbppE=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:55:ab:d0:ad:77:dc:62:75:ab:17:0f:5e:13:7c:86:dc:aa:ad:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
        Validity
            Not Before: Nov 22 05:46:41 2024 GMT
            Not After : Nov 23 06:40:41 2024 GMT
        Subject: CN=8BF7BC9CAC1D1BFF88044C0CE24A60A0A6B2470A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:fb:df:51:bb:1e:1b:a4:e2:e2:60:e5:30:
                    e2:c3:06:48:88:fc:7d:50:fd:83:9f:5c:bd:db:75:
                    02:ba:dc:73:fd:64:21:38:29:7e:41:80:07:09:ee:
                    be:9d:c8:48:41:60:a5:db:0b:e0:f9:c5:44:4f:05:
                    96:83:37:f1:cd:ed:59:f2:03:ce:04:21:5c:f2:3d:
                    07:a5:6f:3c:36:4e:bd:aa:2f:08:21:b3:c4:fe:b3:
                    1b:48:b8:11:52:1a:2b:15:d9:ce:fe:40:80:60:10:
                    5a:6f:d0:8c:e1:bc:56:e1:37:92:64:f1:56:40:4a:
                    07:91:32:7b:dd:18:00:57:d0:49:9d:49:ac:10:83:
                    67:f5:25:16:ae:b3:a7:e7:25:80:b9:50:ac:3c:e7:
                    e3:4f:77:d4:9d:bf:f2:f7:01:32:20:25:1c:69:a7:
                    d6:6a:a1:cb:e1:d8:1d:d7:46:ed:d7:25:bb:dc:fb:
                    9d:8d:7a:1c:7e:59:32:4e:fa:98:80:a9:32:48:d9:
                    c4:98:2d:44:48:2f:6c:8c:f3:1e:54:ee:97:02:57:
                    b7:f6:96:57:94:3f:c0:df:49:7e:11:61:bb:ed:93:
                    6e:c5:6f:45:8e:69:64:e2:ba:1d:d8:dd:5f:9c:47:
                    74:55:03:6f:17:3f:e7:ad:ee:81:a7:ad:85:4e:2e:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F7:BC:9C:AC:1D:1B:FF:88:04:4C:0C:E2:4A:60:A0:A6:B2:47:0A
            X509v3 Authority Key Identifier:
                keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:50:46:43:14:38:83:f8:44:a2:81:e7:e8:0c:47:f8:5d:ac:
         32:f1:bf:1a:31:0f:c7:cb:9d:82:99:1a:03:3d:69:d7:6d:40:
         9c:3a:b1:1d:16:d3:4a:eb:7f:bb:0e:d1:6b:4d:c6:6f:8a:0e:
         75:ea:ea:84:46:84:8c:72:a8:8d:04:d4:40:85:96:a7:93:37:
         3c:7c:0d:d8:54:f0:9d:cc:83:3e:97:c8:9e:d5:4a:02:4c:4b:
         6e:95:cf:89:45:b5:82:5e:52:5c:b5:7a:d2:42:84:07:f6:78:
         27:f4:63:a7:b0:2c:e4:2e:7b:21:0b:88:3c:27:75:38:1c:30:
         57:24:40:4e:f8:31:78:ee:e3:f5:50:45:04:7c:e7:37:ac:53:
         64:cb:55:3d:02:c7:95:f2:1f:44:0f:25:be:2d:ea:72:30:25:
         08:ce:cf:e4:c5:8e:0d:a9:9f:f0:24:a4:ed:ca:db:56:db:9a:
         5c:57:be:7d:5b:c2:4e:7b:50:76:90:40:e8:5e:69:be:32:2a:
         ba:55:93:be:e1:9a:a8:a0:6b:82:c0:c5:f2:86:3c:15:8f:c9:
         b7:28:bc:a9:a3:fa:1e:fa:d5:c9:d5:39:29:90:b7:61:8e:0e:
         f1:b4:6b:c8:c3:40:31:d6:1d:ca:38:49:7d:e5:92:fc:12:d1:
         35:81:4f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 07:03:45 2024 by rpki-client on console-fra.rpki-client.org