Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/2/4E7C224E615938F60A6741A6953354F1A7CCAF5A.mft
File:                     4E7C224E615938F60A6741A6953354F1A7CCAF5A.mft (raw, json)
Hash identifier:          i/G3nOSsb33SHnmsGSh4VysfNZtOUeTKsehUsdPcNwg=
Subject key identifier:   C2:7C:4F:0A:28:F7:B5:7A:6E:7D:AA:99:7E:C7:11:ED:B3:0F:84:2A
Authority key identifier: 4E:7C:22:4E:61:59:38:F6:0A:67:41:A6:95:33:54:F1:A7:CC:AF:5A
Certificate issuer:       /CN=4e7c224e615938f60a6741a6953354f1a7ccaf5a
Certificate serial:       168CFFC8AF6A6181ECFC449EA08936A47EA7FACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TnwiTmFZOPYKZ0GmlTNU8afMr1o.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/2/4E7C224E615938F60A6741A6953354F1A7CCAF5A.mft
Manifest number:          01C7
Signing time:             Fri 17 May 2024 07:55:35 +0000
Manifest this update:     Fri 17 May 2024 07:50:35 +0000
Manifest next update:     Sat 18 May 2024 10:54:35 +0000
Files and hashes:         1: 4E7C224E615938F60A6741A6953354F1A7CCAF5A.crl (hash: /1zrtkv3+g5RbyhpIUS4q9Gjq6OaiDCkDhYb50isxkg=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/2/4E7C224E615938F60A6741A6953354F1A7CCAF5A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/2/4E7C224E615938F60A6741A6953354F1A7CCAF5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TnwiTmFZOPYKZ0GmlTNU8afMr1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8c:ff:c8:af:6a:61:81:ec:fc:44:9e:a0:89:36:a4:7e:a7:fa:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e7c224e615938f60a6741a6953354f1a7ccaf5a
        Validity
            Not Before: May 17 07:50:35 2024 GMT
            Not After : May 18 10:54:35 2024 GMT
        Subject: CN=C27C4F0A28F7B57A6E7DAA997EC711EDB30F842A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:1a:2d:54:2d:a7:da:d9:f4:95:93:7c:ec:99:
                    12:e5:9c:2e:b7:42:b1:55:62:45:af:7f:56:51:71:
                    d7:8d:bb:c8:90:54:40:5e:01:c9:98:15:41:66:e1:
                    c3:c2:ed:03:6c:5e:95:fa:e6:40:d6:f0:5a:1e:d1:
                    51:34:04:e5:51:5f:0a:0d:31:fd:6f:1d:d7:b1:8f:
                    98:33:c4:f9:34:17:45:f4:fa:e6:46:b5:17:b4:aa:
                    fa:f4:fb:6f:af:24:75:62:40:be:41:79:e9:5b:73:
                    28:c0:6c:f8:46:13:55:5c:37:0d:45:43:c0:25:7c:
                    5c:8c:56:68:b4:1d:44:de:92:4c:44:71:6b:fc:6d:
                    5e:a4:25:ac:ff:73:3e:3b:d7:7d:4a:56:80:b0:af:
                    66:f0:9f:bc:a9:6b:a6:5d:46:d6:9f:1c:ed:0c:cc:
                    81:9f:ae:d3:86:8d:38:25:c2:ca:28:83:83:b2:4c:
                    95:b7:c6:08:29:48:2e:9c:b4:ec:63:89:06:22:5c:
                    1e:57:ce:87:93:84:66:c1:02:c9:19:f6:fc:ed:b5:
                    05:56:4e:9f:36:bc:c9:1d:a0:bc:e0:55:52:6f:b6:
                    16:48:d9:c6:51:81:9d:77:64:e4:da:ea:41:8b:62:
                    e1:f5:0f:4b:7d:64:e7:cc:0e:f5:43:54:fd:7a:60:
                    e9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7C:4F:0A:28:F7:B5:7A:6E:7D:AA:99:7E:C7:11:ED:B3:0F:84:2A
            X509v3 Authority Key Identifier:
                keyid:4E:7C:22:4E:61:59:38:F6:0A:67:41:A6:95:33:54:F1:A7:CC:AF:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/2/4E7C224E615938F60A6741A6953354F1A7CCAF5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnwiTmFZOPYKZ0GmlTNU8afMr1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/2/4E7C224E615938F60A6741A6953354F1A7CCAF5A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:07:97:5d:c8:d0:27:96:ae:41:31:e5:a1:3e:27:17:75:dc:
         15:3f:98:fe:ce:b2:86:03:3f:f8:ad:ba:23:6f:2d:b2:de:28:
         9d:2e:c5:93:dc:9d:55:da:05:a9:f4:fa:ca:1d:fb:86:eb:28:
         ab:fc:c7:35:8d:b7:cb:2d:3c:15:cd:df:72:75:78:82:3e:6c:
         58:b6:4e:b0:94:55:51:2f:45:85:30:da:66:97:f5:82:38:d1:
         f8:a2:da:bf:97:be:ff:d9:bd:65:b8:27:48:67:64:59:9e:40:
         7c:66:53:1d:a2:7e:fa:32:49:fe:ea:2e:6b:35:0f:49:50:c2:
         6c:88:bf:2c:ad:c2:d7:68:09:d6:00:f7:8e:d0:1e:f3:d7:02:
         9d:6e:bf:cd:3c:33:29:20:8d:17:f0:af:69:70:9e:27:8a:bc:
         cc:37:35:1e:19:eb:ff:53:08:62:f6:45:7b:a0:94:84:ee:c6:
         b6:dd:01:ed:b6:45:3f:6b:7b:79:ad:cd:0f:73:8f:dc:0e:f5:
         43:2d:80:bf:dd:a4:c5:7f:c6:f7:fc:af:29:88:e6:d5:3f:c0:
         ae:be:c2:8c:52:2c:aa:cc:1f:20:4d:5f:5a:98:ff:72:5c:9c:
         ae:37:6a:2e:60:be:8c:4d:e0:98:1d:a6:48:91:38:07:6c:c1:
         50:13:e4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:31:41 2024 by rpki-client on console-fra.rpki-client.org