Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/9/696DD3C41B77EDBBDD37D7E4D020039D402D4B85.mft
File:                     696DD3C41B77EDBBDD37D7E4D020039D402D4B85.mft (raw, json)
Hash identifier:          xHEkGVqx1p2Gwy9T0Ln0R1HFOcNyJKWeAdSGANjPUtQ=
Subject key identifier:   85:7D:53:F6:FF:73:65:0E:13:D1:0A:E3:89:46:0C:39:F2:8E:37:D6
Authority key identifier: 69:6D:D3:C4:1B:77:ED:BB:DD:37:D7:E4:D0:20:03:9D:40:2D:4B:85
Certificate issuer:       /CN=696dd3c41b77edbbdd37d7e4d020039d402d4b85
Certificate serial:       3DCFEE8097CB32257FE62A47B2DBE8DA483D3441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aW3TxBt37bvdN9fk0CADnUAtS4U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/9/696DD3C41B77EDBBDD37D7E4D020039D402D4B85.mft
Manifest number:          8C
Signing time:             Tue 29 Oct 2024 20:40:32 +0000
Manifest this update:     Tue 29 Oct 2024 20:35:32 +0000
Manifest next update:     Wed 30 Oct 2024 23:00:32 +0000
Files and hashes:         1: 696DD3C41B77EDBBDD37D7E4D020039D402D4B85.crl (hash: ij2TOCNSCSDlyj7YkY98SMhOeeHoEK73fjDidx3LzWI=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/9/696DD3C41B77EDBBDD37D7E4D020039D402D4B85.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/9/696DD3C41B77EDBBDD37D7E4D020039D402D4B85.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aW3TxBt37bvdN9fk0CADnUAtS4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Oct 2024 14:44:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:cf:ee:80:97:cb:32:25:7f:e6:2a:47:b2:db:e8:da:48:3d:34:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696dd3c41b77edbbdd37d7e4d020039d402d4b85
        Validity
            Not Before: Oct 29 20:35:32 2024 GMT
            Not After : Oct 30 23:00:32 2024 GMT
        Subject: CN=857D53F6FF73650E13D10AE389460C39F28E37D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:3a:fb:e2:5c:92:b8:87:26:05:eb:5e:58:
                    ca:45:85:f1:45:32:ff:1e:db:c6:ae:82:29:56:0f:
                    da:15:6b:c2:08:fd:be:19:de:19:05:f0:86:93:df:
                    a6:40:b8:cd:e0:d9:d0:98:78:03:a0:f8:2d:f4:9b:
                    84:5e:36:3c:1e:ee:73:02:6a:ef:9b:cc:24:8b:fd:
                    33:85:15:4c:2f:ad:8b:e7:17:5a:b8:39:88:4f:c6:
                    33:b8:8d:0b:f4:1d:ed:a3:24:bc:e4:ad:ff:6d:06:
                    f1:eb:b0:2f:79:86:1d:9d:3a:53:db:35:b6:7a:32:
                    6b:15:51:a9:d8:4c:8f:4b:01:8d:d5:e1:3a:97:06:
                    7b:0e:03:eb:ab:11:de:fa:31:50:6a:d1:2b:f8:d1:
                    8c:62:f7:39:eb:aa:90:ce:8b:fd:ef:bf:b9:9a:b1:
                    a7:7d:59:8f:ca:24:e8:32:2d:4e:72:a8:b5:b6:34:
                    46:c9:52:75:c1:d4:ec:e7:a5:88:51:f2:62:6a:7e:
                    09:d4:69:5e:2f:a7:cf:f8:2f:a2:c5:0b:fe:9b:c9:
                    0a:ae:f2:1f:7b:7a:41:c4:d8:5d:d1:d1:b2:85:58:
                    e6:1f:5f:48:5f:d8:a9:a3:77:75:63:d8:65:43:dd:
                    44:84:dd:cf:ff:30:5d:ec:d7:85:29:b7:53:9d:ad:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7D:53:F6:FF:73:65:0E:13:D1:0A:E3:89:46:0C:39:F2:8E:37:D6
            X509v3 Authority Key Identifier:
                keyid:69:6D:D3:C4:1B:77:ED:BB:DD:37:D7:E4:D0:20:03:9D:40:2D:4B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/9/696DD3C41B77EDBBDD37D7E4D020039D402D4B85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aW3TxBt37bvdN9fk0CADnUAtS4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/9/696DD3C41B77EDBBDD37D7E4D020039D402D4B85.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:3d:e3:28:73:c8:f1:e8:d0:f8:d9:9e:8f:2f:10:9a:01:9f:
         23:f6:84:b1:cb:f0:3e:8a:ac:14:8f:2f:90:d7:f5:98:85:c4:
         d3:6e:16:23:71:3c:24:db:86:c5:5d:db:d9:4e:a1:25:2d:f1:
         8e:28:d3:65:9e:36:7d:79:f9:f3:fc:13:69:a4:c9:e5:08:4b:
         b6:a5:57:c9:b9:02:20:5f:8d:41:d3:a9:12:f1:bb:66:f1:7f:
         e9:5b:9a:b6:09:ab:34:f1:59:02:3b:c9:17:97:1f:aa:c9:0d:
         fb:6b:80:f6:7b:70:08:2c:9e:a1:ed:2f:f3:54:83:64:55:2f:
         9a:68:7f:7b:58:77:83:76:ac:53:ec:9c:4f:14:fb:39:bc:2d:
         25:4f:1b:b2:c1:ed:af:43:09:af:88:0f:03:73:82:eb:06:64:
         ad:8f:5c:4c:5a:ad:11:f4:2b:79:8f:1d:da:14:b0:8f:96:ee:
         84:18:c2:15:83:7a:37:19:8b:8f:83:c9:79:14:66:88:91:b9:
         38:e0:65:df:06:b3:c2:74:4f:09:75:f6:59:79:8b:5d:11:8d:
         54:ee:bf:34:de:4d:57:f0:21:52:ef:0a:44:54:64:13:42:8d:
         51:87:b2:1c:d2:8b:fe:ff:09:f8:22:12:23:34:61:a6:62:ce:
         c0:e0:f8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----