Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/0/4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.mft
File:                     4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.mft (raw, json)
Hash identifier:          C8NUQhoc3uaVERVZc9KzpQd1VgewZGeI7Mbmm+GhD9E=
Subject key identifier:   E0:81:15:E4:86:51:67:89:4C:A8:F7:15:B3:DA:C3:D7:ED:1E:B9:FE
Authority key identifier: 4A:E2:AC:2E:3A:0C:9B:F1:EE:26:C1:63:A7:0C:F6:66:19:2F:7B:2F
Certificate issuer:       /CN=4ae2ac2e3a0c9bf1ee26c163a70cf666192f7b2f
Certificate serial:       0C3D620DA7CAF09CAF83664D86AB8838E22AE214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SuKsLjoMm_HuJsFjpwz2Zhkvey8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/0/4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.mft
Manifest number:          3C
Signing time:             Thu 19 Sep 2024 17:17:46 +0000
Manifest this update:     Thu 19 Sep 2024 17:12:46 +0000
Manifest next update:     Fri 20 Sep 2024 18:48:46 +0000
Files and hashes:         1: 4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.crl (hash: Qg1n0QGGR8ufbK34It5w04KQfOcNTByFpyjHX15gXRc=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/0/4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/0/4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SuKsLjoMm_HuJsFjpwz2Zhkvey8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 13:50:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3d:62:0d:a7:ca:f0:9c:af:83:66:4d:86:ab:88:38:e2:2a:e2:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae2ac2e3a0c9bf1ee26c163a70cf666192f7b2f
        Validity
            Not Before: Sep 19 17:12:46 2024 GMT
            Not After : Sep 20 18:48:46 2024 GMT
        Subject: CN=E08115E4865167894CA8F715B3DAC3D7ED1EB9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f0:ce:54:19:eb:28:48:29:bd:ca:36:20:b9:
                    e2:bf:53:40:dc:7d:47:90:34:bc:ff:3c:83:be:bc:
                    ee:75:27:42:06:89:ae:4c:79:62:c3:33:96:8f:8b:
                    2c:25:19:da:2e:9e:12:1a:42:a0:3e:70:81:71:d4:
                    bf:32:fe:e2:01:f8:9b:b0:b0:9c:dd:a4:48:09:25:
                    e5:c2:63:64:68:ba:a8:6f:3b:6a:bb:3f:52:0c:9c:
                    f1:d1:6b:49:cb:94:25:d3:b2:51:58:a0:0b:ea:aa:
                    61:04:bc:3e:5b:e9:f5:d9:ae:90:20:0e:d1:71:c3:
                    50:57:0b:b1:db:2d:e8:9f:a3:3f:25:8f:5a:46:b9:
                    9e:a9:e7:89:84:88:73:bb:61:ac:c7:5d:7d:e4:6a:
                    75:2e:89:2f:d6:2e:a3:3f:5b:91:c7:17:81:e9:64:
                    ed:88:00:ea:2d:2f:9a:af:79:3c:60:dd:33:ce:cd:
                    a6:8c:a8:4c:5a:3b:55:39:12:9e:b8:3a:ad:14:54:
                    06:44:89:2b:a1:a9:3a:8b:51:4a:f9:6c:16:7f:02:
                    c8:25:14:9b:68:09:80:a5:0e:89:8f:f6:81:dc:f3:
                    48:f2:b7:7b:bc:b4:80:3d:34:bb:75:70:df:ea:78:
                    cd:db:d3:71:5e:15:09:aa:2d:b0:c3:10:3d:f5:93:
                    d9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:81:15:E4:86:51:67:89:4C:A8:F7:15:B3:DA:C3:D7:ED:1E:B9:FE
            X509v3 Authority Key Identifier:
                keyid:4A:E2:AC:2E:3A:0C:9B:F1:EE:26:C1:63:A7:0C:F6:66:19:2F:7B:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/0/4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SuKsLjoMm_HuJsFjpwz2Zhkvey8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b0c75df9-5b92-48c0-bbda-a43bd19ef7d3/0/4AE2AC2E3A0C9BF1EE26C163A70CF666192F7B2F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5a:1f:20:b0:50:91:b3:6d:8f:d9:db:e2:7f:11:d7:9b:3b:
         2a:41:a4:e0:26:a8:58:93:b8:f4:97:af:24:8a:f6:73:14:ec:
         57:a2:45:93:9e:04:3f:7a:fe:b5:a7:2d:d7:e8:35:43:05:88:
         f1:ec:3b:f1:c5:f9:3a:b3:85:a9:63:80:e4:7a:08:93:20:b7:
         f1:6d:5c:0d:67:09:c8:f6:79:9d:ce:50:05:b3:de:d2:ab:4c:
         d3:43:81:7f:b7:83:6d:82:a0:a8:e3:b8:75:b6:f8:ad:a5:4f:
         73:89:de:66:1c:50:e4:fc:1e:fd:6b:11:36:12:02:12:7e:bf:
         d0:c1:27:da:94:03:97:0c:e1:93:d3:1b:7e:61:23:6e:26:1f:
         96:21:49:88:86:3d:40:09:98:83:59:0a:9e:eb:d8:ea:8d:40:
         33:0a:ff:6e:6c:92:c6:97:8c:14:78:0a:76:42:15:79:82:98:
         b0:1e:d2:de:e0:19:9d:e0:9c:39:48:93:bb:db:ca:99:63:1a:
         0a:d8:0d:34:f8:80:93:80:96:52:78:fc:7c:71:8f:c8:fd:8c:
         db:23:a5:b8:6f:83:45:57:10:03:16:3a:cc:f4:3f:75:b9:46:
         08:c0:d5:a7:3a:3d:a2:47:18:d7:9c:14:9f:d5:ac:2f:97:8a:
         65:00:b9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:52:19 2024 by rpki-client on console-fra.rpki-client.org