Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
File:                     D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft (raw, json)
Hash identifier:          vjDfokWerqbhllYFYG6CmZhGsHf426JgoOIaXycjOzQ=
Subject key identifier:   4A:58:64:A6:4C:E3:DA:24:2F:8F:EA:18:00:96:B0:46:F2:BA:72:3C
Authority key identifier: D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85
Certificate issuer:       /CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
Certificate serial:       206250CA2597C818190DF209CAFAD801FB9A7B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
Manifest number:          01D5
Signing time:             Fri 17 May 2024 07:00:24 +0000
Manifest this update:     Fri 17 May 2024 06:55:24 +0000
Manifest next update:     Sat 18 May 2024 08:40:24 +0000
Files and hashes:         1: D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl (hash: IOkUP77bXwPpk3LoEB5cahEL9nA9Oimq5ri0n9wT0O0=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:62:50:ca:25:97:c8:18:19:0d:f2:09:ca:fa:d8:01:fb:9a:7b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93ef0701e8ca6ed0a0e6d46a38b8d8cf3091285
        Validity
            Not Before: May 17 06:55:24 2024 GMT
            Not After : May 18 08:40:24 2024 GMT
        Subject: CN=4A5864A64CE3DA242F8FEA180096B046F2BA723C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:60:8e:91:e1:2e:41:27:c4:45:02:07:7b:
                    32:89:63:d9:d3:3e:1f:13:df:9a:28:90:3b:f2:10:
                    c1:f5:c4:20:bf:e6:b8:a5:18:f4:23:44:8c:b4:10:
                    ed:d1:67:a0:33:20:e1:3f:39:cb:f3:b9:15:06:ca:
                    2c:bf:7f:1f:8b:42:dc:8b:94:c3:01:c5:d6:44:1a:
                    4b:94:8c:53:7d:f9:00:30:0b:e5:ca:fb:c1:79:d7:
                    21:30:0c:ed:a0:e6:3b:d7:12:ad:9a:01:88:21:f2:
                    09:68:4c:99:bb:a9:c6:d0:71:1f:8b:4c:bc:8c:58:
                    3b:9a:70:86:32:dd:e7:41:32:69:03:88:64:68:47:
                    a0:d3:a6:65:63:f2:ce:ab:88:51:a1:02:c7:8d:6a:
                    54:41:30:6e:46:d2:f7:cb:89:ba:2c:f9:53:6f:2a:
                    10:aa:46:e6:5a:0e:2a:08:86:75:e6:7c:c5:12:6b:
                    38:62:26:80:fe:8e:eb:85:0a:41:39:70:53:19:0e:
                    1d:b0:ad:04:bd:09:22:6b:b0:a8:87:8d:19:51:ca:
                    c0:c3:dc:b0:1d:e6:7b:93:ea:53:09:76:c9:07:af:
                    73:24:b5:2d:13:91:e0:3e:87:85:b4:89:72:56:52:
                    32:2c:8c:6d:d2:44:2f:77:88:6c:97:09:9f:01:db:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:58:64:A6:4C:E3:DA:24:2F:8F:EA:18:00:96:B0:46:F2:BA:72:3C
            X509v3 Authority Key Identifier:
                keyid:D9:3E:F0:70:1E:8C:A6:ED:0A:0E:6D:46:A3:8B:8D:8C:F3:09:12:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T7wcB6Mpu0KDm1Go4uNjPMJEoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/0/D93EF0701E8CA6ED0A0E6D46A38B8D8CF3091285.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:3a:6c:bc:c1:d8:8e:0f:ba:1f:5f:c2:d5:ec:fe:58:ea:b5:
         02:7d:34:fd:7a:ed:22:c2:5a:31:d6:fd:ed:0a:9b:a4:56:8d:
         7a:50:c3:03:be:6c:58:04:4c:d7:2b:82:84:18:4d:4d:00:49:
         94:aa:04:c4:1e:92:14:b0:c4:cb:97:50:d3:01:b4:f7:61:3a:
         53:73:ba:a9:a1:59:62:9c:5c:3a:71:f6:12:a7:7f:22:17:fd:
         95:c8:61:a0:b1:12:3a:04:ec:d2:5d:df:60:7e:70:98:3a:e9:
         ec:98:38:e1:f6:1b:d0:8c:e3:49:86:eb:65:12:3b:1c:d1:3c:
         5b:77:c8:3f:97:7f:ca:6d:36:66:f5:4e:09:e4:9b:bc:e6:98:
         f3:ac:c0:d1:31:8d:61:e7:d9:d6:87:1a:4d:e3:9f:5e:2b:9a:
         fd:d1:7e:df:69:38:36:39:5e:ab:96:a7:88:3c:fd:3b:cd:0f:
         13:30:12:5f:ec:ce:27:a9:63:41:d8:e1:b9:3c:7c:b9:c5:f2:
         66:75:d7:b6:11:39:90:8f:79:fc:7c:a9:9b:7a:2d:b5:19:4e:
         a8:e5:64:d2:30:20:7b:c3:6a:81:09:61:9d:61:91:61:ac:bc:
         bc:b1:18:d3:c7:b9:f3:9c:22:66:00:eb:4d:65:f8:84:ef:cf:
         d9:ee:55:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 09:34:37 2024 by rpki-client on console-fra.rpki-client.org