Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
File:                     7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft (raw, json)
Hash identifier:          6KndpOC/T9PYQArsxlcnme1uMR+ATeg0VsAWbHEg5ZY=
Subject key identifier:   D1:23:C3:EE:5F:AA:70:67:86:20:B8:59:B6:92:8B:D8:E7:F4:FB:28
Authority key identifier: 7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D
Certificate issuer:       /CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
Certificate serial:       2077945AE2650E1E52FFFAACF3D23E513B37C02F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
Manifest number:          04
Signing time:             Fri 22 Nov 2024 07:03:44 +0000
Manifest this update:     Fri 22 Nov 2024 06:58:44 +0000
Manifest next update:     Sat 23 Nov 2024 08:22:44 +0000
Files and hashes:         1: 7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl (hash: BOx1vEiW9UG5GGEe4X2TVKu/M7YArm+MN/VsE/FuoDs=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:77:94:5a:e2:65:0e:1e:52:ff:fa:ac:f3:d2:3e:51:3b:37:c0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd1dd522f6134f070195c5c0e2d4c11cfa6a97d
        Validity
            Not Before: Nov 22 06:58:44 2024 GMT
            Not After : Nov 23 08:22:44 2024 GMT
        Subject: CN=D123C3EE5FAA70678620B859B6928BD8E7F4FB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:01:73:94:93:6e:d4:ea:a0:4d:cc:d7:04:
                    9b:da:20:f3:fd:b0:e4:02:21:e1:a5:f1:9c:25:42:
                    7b:74:ac:73:24:ee:2a:50:ef:d0:5c:b7:c6:05:81:
                    06:a6:7c:74:2c:26:c6:ec:6f:be:9c:9d:f2:b4:aa:
                    80:9b:09:ee:8c:7c:6e:79:a7:88:14:5a:04:9d:6d:
                    eb:ab:60:40:67:46:31:e7:68:5c:b1:42:f1:1b:cd:
                    4e:25:3f:1d:b4:70:84:93:24:f7:58:8b:4a:ca:6a:
                    d5:e3:fb:67:31:01:83:34:22:3c:16:04:41:ed:90:
                    40:f9:29:03:b6:f4:dd:aa:e9:74:72:fa:8d:6d:9c:
                    61:7a:7a:93:a1:dc:fc:13:81:7a:75:b3:52:42:06:
                    f5:de:b3:0f:25:71:ff:5a:86:c7:32:1d:83:3e:af:
                    05:f9:b5:f4:05:1c:43:c6:be:06:67:ed:f2:3a:43:
                    5a:80:7d:24:2e:5c:db:63:16:fa:68:06:81:8c:b6:
                    ba:41:d9:12:d1:2e:d3:d2:cb:e8:27:96:b5:fa:33:
                    a1:56:0d:49:66:2b:70:f9:39:87:a2:41:91:49:2d:
                    f2:c9:cf:ab:1f:9a:ac:d0:5a:42:e7:cc:c9:62:ae:
                    fe:a9:51:6f:a7:ff:22:26:e3:ad:63:51:36:6a:a3:
                    55:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:23:C3:EE:5F:AA:70:67:86:20:B8:59:B6:92:8B:D8:E7:F4:FB:28
            X509v3 Authority Key Identifier:
                keyid:7F:D1:DD:52:2F:61:34:F0:70:19:5C:5C:0E:2D:4C:11:CF:A6:A9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9HdUi9hNPBwGVxcDi1MEc-mqX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/0/7FD1DD522F6134F070195C5C0E2D4C11CFA6A97D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:6e:c9:3f:06:05:6a:4a:f2:3f:8e:4e:c6:97:00:88:29:62:
         3d:cc:f9:6c:45:3f:5a:de:7f:fa:ae:dd:d7:c4:f8:ef:6d:13:
         5a:66:94:e5:d3:a1:bf:37:98:d3:28:2a:3d:7d:93:dd:3d:0c:
         7c:fd:d7:1e:80:1a:76:fb:ed:3f:98:fa:86:32:ca:c7:72:dd:
         e3:86:e2:c2:77:e0:1f:45:25:e7:e4:61:78:ff:8d:c1:88:c8:
         91:6a:c0:af:f6:0e:7c:32:b1:ee:38:2c:95:3c:6c:65:72:52:
         da:4f:f7:d6:54:ed:d2:fe:8c:b7:d0:e8:71:17:01:29:20:86:
         ef:8c:84:9b:4b:cb:40:42:14:52:4d:61:81:f7:4a:39:43:08:
         43:ae:7e:ba:36:e6:c5:19:0f:50:b6:aa:2f:a6:c7:ab:ef:77:
         85:dc:7f:df:ba:d2:ba:06:8d:71:5d:72:0a:8b:53:28:a3:3f:
         3c:08:8e:2d:65:d8:56:92:9d:8c:85:57:e5:52:5e:f3:46:3a:
         4f:e5:24:2c:97:3d:9c:a0:a6:d9:d0:60:68:77:48:fd:55:7a:
         22:da:e9:5d:dd:81:15:46:25:c8:64:b5:c0:8e:c4:7f:c9:c1:
         f0:c1:b9:65:cb:bc:ed:ff:0d:a7:86:6f:2a:9e:a5:dc:d5:0c:
         91:47:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:20 2024 by rpki-client on console-ams.rpki-client.org