Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
File:                     0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft (raw, json)
Hash identifier:          bcdVL4koOH4WaAep7BCsCexzS7gF5bPijDPy+tW4N+E=
Subject key identifier:   28:FE:8F:EA:9E:08:07:E1:D5:77:2A:E5:3F:D8:28:3C:1B:47:D1:19
Authority key identifier: 0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23
Certificate issuer:       /CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
Certificate serial:       4ED4742E39B3C8865B51121FF230DCA1B31254D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
Manifest number:          02C8
Signing time:             Thu 21 Nov 2024 21:59:48 +0000
Manifest this update:     Thu 21 Nov 2024 21:54:48 +0000
Manifest next update:     Fri 22 Nov 2024 22:12:48 +0000
Files and hashes:         1: 0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl (hash: 3S2c5DlmeWI0ICCAdf65YnNBkk+XTHrZ1mmQB1Uxkjg=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d4:74:2e:39:b3:c8:86:5b:51:12:1f:f2:30:dc:a1:b3:12:54:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eed1b7b26c35d22b50c5d0cd85544be88dd8f23
        Validity
            Not Before: Nov 21 21:54:48 2024 GMT
            Not After : Nov 22 22:12:48 2024 GMT
        Subject: CN=28FE8FEA9E0807E1D5772AE53FD8283C1B47D119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:38:2e:c2:9f:2c:15:a5:f6:72:0d:7e:56:0d:
                    6f:e7:4e:ed:41:ac:2f:ed:19:da:10:64:a1:db:92:
                    d6:75:bd:97:39:34:cc:6e:53:f0:7c:b9:89:d8:dd:
                    b7:cc:f8:4f:68:4f:2e:e4:95:a6:aa:0e:c0:b1:a6:
                    e5:80:90:e3:b4:72:d1:42:af:05:f5:e2:6b:6a:b1:
                    8a:f5:58:61:04:eb:63:ef:f3:5f:c4:37:ac:7e:2f:
                    ac:8b:79:5e:34:ce:22:0e:c2:ab:a7:60:2c:39:50:
                    ba:c7:3c:9d:f0:03:26:ae:ab:c3:0d:57:8c:45:9e:
                    7f:75:5c:09:94:67:1c:d1:e4:ba:d8:d8:7b:08:0c:
                    fe:41:19:1d:b7:0f:d8:5e:71:7e:ce:c0:5a:d7:8d:
                    d1:3d:1e:22:ea:9b:f1:e3:b8:e2:3f:13:86:56:61:
                    1d:4b:d3:b9:fa:6f:02:dd:68:04:57:0a:b1:f0:fe:
                    24:d4:8c:b5:f1:f6:c0:57:21:be:11:34:a3:a8:7e:
                    c0:b0:2a:21:2c:14:ac:fe:28:ea:30:dd:9b:1a:b5:
                    9d:2c:7c:b1:c2:88:14:d3:f2:a2:43:43:7a:ae:35:
                    08:4b:45:b1:cd:ac:8d:be:7a:a9:43:aa:71:c0:92:
                    77:04:4b:54:71:c8:29:99:67:32:77:a4:cd:8d:2d:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FE:8F:EA:9E:08:07:E1:D5:77:2A:E5:3F:D8:28:3C:1B:47:D1:19
            X509v3 Authority Key Identifier:
                keyid:0E:ED:1B:7B:26:C3:5D:22:B5:0C:5D:0C:D8:55:44:BE:88:DD:8F:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Du0beybDXSK1DF0M2FVEvojdjyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/0/0EED1B7B26C35D22B50C5D0CD85544BE88DD8F23.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:07:a3:24:29:77:99:83:19:05:c0:f1:17:61:7b:bb:38:85:
         78:10:e0:1a:f5:2b:9b:72:5f:9d:30:36:5a:92:73:7a:ad:43:
         8b:fa:0c:c5:09:3f:f0:9b:7d:50:ec:4d:95:11:fa:68:53:19:
         53:84:05:20:8a:72:3e:30:71:19:58:fd:20:d0:36:76:d1:58:
         35:3e:52:47:1e:bc:4e:90:c4:6a:6e:11:4a:c1:a0:f3:f4:7b:
         d7:a7:38:f8:18:61:0b:12:1c:d9:1f:6a:d4:85:23:a7:aa:2e:
         f1:52:b4:c3:b8:7a:dd:f4:f1:43:25:a6:1c:1a:4a:43:84:11:
         ed:4d:f0:03:1d:12:ef:37:f9:c9:b1:e7:17:73:c7:ca:33:d5:
         31:85:58:85:b9:33:cf:8e:c2:e8:3f:51:e5:ee:28:38:c5:d9:
         e7:1c:3e:39:fa:39:6e:84:83:28:b9:d9:76:97:10:07:15:52:
         73:e8:81:d6:b3:08:ab:6d:b8:b6:8a:67:fc:83:4c:16:e4:68:
         e0:4c:71:f9:a9:4b:93:de:93:43:ae:66:35:3a:1a:c6:a8:b2:
         4c:9f:44:dc:4e:f2:26:49:7b:ad:65:67:c0:49:8c:f3:69:76:
         0d:33:2c:71:e3:8f:5b:d1:06:34:77:a1:63:c9:3b:96:cb:eb:
         b0:e7:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:59:20 2024 by rpki-client on console-fra.rpki-client.org