Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/FF365058976701FB219A416DD8E7EF480A248886.mft
File:                     FF365058976701FB219A416DD8E7EF480A248886.mft (raw, json)
Hash identifier:          XfortUwiu40KQ0J+iFkFSXT1GvJCva2fZnsXITk06wo=
Subject key identifier:   0C:4B:FD:62:4A:E4:FB:6C:86:BB:4F:80:31:65:73:79:77:3F:A8:23
Authority key identifier: FF:36:50:58:97:67:01:FB:21:9A:41:6D:D8:E7:EF:48:0A:24:88:86
Certificate issuer:       /CN=ff365058976701fb219a416dd8e7ef480a248886
Certificate serial:       3265083FD38B834972C08F0BC5FB8F786DD5482A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zZQWJdnAfshmkFt2OfvSAokiIY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/FF365058976701FB219A416DD8E7EF480A248886.mft
Manifest number:          6C
Signing time:             Mon 16 Sep 2024 03:24:03 +0000
Manifest this update:     Mon 16 Sep 2024 03:19:03 +0000
Manifest next update:     Tue 17 Sep 2024 06:17:03 +0000
Files and hashes:         1: FF365058976701FB219A416DD8E7EF480A248886.crl (hash: F0epQzCP96yT6STdM/VqARLfYffntnRqxTgMTmTXU3Y=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/FF365058976701FB219A416DD8E7EF480A248886.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/FF365058976701FB219A416DD8E7EF480A248886.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_zZQWJdnAfshmkFt2OfvSAokiIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Sep 2024 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:65:08:3f:d3:8b:83:49:72:c0:8f:0b:c5:fb:8f:78:6d:d5:48:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff365058976701fb219a416dd8e7ef480a248886
        Validity
            Not Before: Sep 16 03:19:03 2024 GMT
            Not After : Sep 17 06:17:03 2024 GMT
        Subject: CN=0C4BFD624AE4FB6C86BB4F8031657379773FA823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:24:93:29:b1:60:e7:63:b9:9e:62:52:1a:d9:
                    59:37:54:a1:0e:87:9c:c9:bd:e2:2b:c5:5f:f9:c3:
                    e6:85:71:59:e7:ad:19:7f:e1:56:59:ac:02:8d:34:
                    ee:7f:ad:a0:de:d1:c5:dc:82:0d:99:96:6e:18:24:
                    a8:52:84:65:40:09:52:2c:23:e1:36:82:aa:26:6b:
                    c6:91:32:fc:91:e3:b1:e6:2c:5b:ef:75:91:4c:32:
                    ae:ea:6f:8c:21:bb:b8:96:89:27:07:89:25:cf:76:
                    c7:cf:fa:44:0f:03:58:45:f8:e1:04:52:16:2a:08:
                    92:96:19:34:05:f7:6e:75:2e:6c:39:36:b1:e3:ae:
                    0b:e6:32:f6:42:6f:3a:61:dc:1a:dd:26:1f:41:ea:
                    88:d2:e1:fa:12:fa:cc:7c:42:b5:69:b2:d7:d3:4e:
                    91:e4:bc:46:75:f5:66:1f:c2:21:ea:43:90:6c:3c:
                    c7:92:24:a9:96:82:68:aa:0c:11:ec:2e:f5:e3:b3:
                    b8:20:a5:88:bf:d1:3a:82:ba:f7:21:24:80:3d:44:
                    46:32:d6:a8:88:5c:82:6c:98:f9:dc:cc:a2:7a:b1:
                    b3:64:8d:05:68:4c:aa:15:25:d0:74:eb:e7:9e:f6:
                    a5:97:a2:dc:a5:13:b0:5c:d4:d4:bc:ea:49:a6:ae:
                    fa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4B:FD:62:4A:E4:FB:6C:86:BB:4F:80:31:65:73:79:77:3F:A8:23
            X509v3 Authority Key Identifier:
                keyid:FF:36:50:58:97:67:01:FB:21:9A:41:6D:D8:E7:EF:48:0A:24:88:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/FF365058976701FB219A416DD8E7EF480A248886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zZQWJdnAfshmkFt2OfvSAokiIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/7/FF365058976701FB219A416DD8E7EF480A248886.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5f:26:13:91:9d:d1:f0:cd:d9:c9:76:93:60:5d:31:b9:74:
         35:a7:28:fb:87:aa:1d:d3:bf:d7:6e:25:d9:78:34:44:28:eb:
         be:cf:5a:02:a8:91:4e:e7:c0:e9:ca:15:27:70:3c:7f:32:2c:
         83:3e:3c:3c:7b:07:e7:90:6e:da:4e:da:22:19:eb:ca:92:6a:
         3b:eb:d5:7c:a3:b0:61:5a:16:1a:08:21:70:24:a7:25:38:da:
         ec:7b:ba:94:02:28:f9:fc:5d:d5:4a:be:6f:94:7a:64:4a:4f:
         07:5d:b0:3c:14:d7:0e:95:77:73:77:3f:ca:20:0c:96:6a:4f:
         4d:af:08:66:4a:47:a8:21:85:13:34:c3:43:a6:09:6e:44:12:
         b7:0e:15:ee:54:f1:09:fa:7d:53:0f:7e:4a:79:af:34:cc:64:
         28:4b:08:61:af:cd:41:63:21:31:36:aa:6b:3e:52:b5:65:e3:
         67:0b:03:96:2c:1c:64:8f:74:49:34:f3:51:eb:6b:46:dd:23:
         f3:27:94:ae:cb:84:78:53:14:14:d6:20:53:93:21:a8:3f:4c:
         6d:be:6f:40:fa:77:17:7a:52:23:29:8e:35:e0:36:34:fa:15:
         bb:64:70:1f:6f:18:1a:d9:ca:5e:db:42:0f:ec:e7:51:da:c2:
         54:e9:9c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----