Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/0/5E77ED69DBCFE777C8E2575EA30D546DAD6DA2B7.mft
File:                     5E77ED69DBCFE777C8E2575EA30D546DAD6DA2B7.mft (raw, json)
Hash identifier:          5mucoJZaCP3FOS/bJCXN1x3i9NakrHlphMQZyoJDG4E=
Subject key identifier:   B8:1E:0A:62:3E:94:C9:C6:2E:5B:52:B0:D5:75:98:4C:96:82:D0:92
Authority key identifier: 5E:77:ED:69:DB:CF:E7:77:C8:E2:57:5E:A3:0D:54:6D:AD:6D:A2:B7
Certificate issuer:       /CN=5e77ed69dbcfe777c8e2575ea30d546dad6da2b7
Certificate serial:       1C2579D2FC5383C72045C2E636E3AEEA236A64A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XnftadvP53fI4ldeow1Uba1torc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/0/5E77ED69DBCFE777C8E2575EA30D546DAD6DA2B7.mft
Manifest number:          31
Signing time:             Fri 20 Sep 2024 05:40:29 +0000
Manifest this update:     Fri 20 Sep 2024 05:35:29 +0000
Manifest next update:     Sat 21 Sep 2024 09:26:29 +0000
Files and hashes:         1: 5E77ED69DBCFE777C8E2575EA30D546DAD6DA2B7.crl (hash: f6MMuKC0vSEylNDylF/tycKX0RwauVv/8sxe5/qU9dc=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/0/5E77ED69DBCFE777C8E2575EA30D546DAD6DA2B7.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/0/5E77ED69DBCFE777C8E2575EA30D546DAD6DA2B7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XnftadvP53fI4ldeow1Uba1torc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:25:79:d2:fc:53:83:c7:20:45:c2:e6:36:e3:ae:ea:23:6a:64:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e77ed69dbcfe777c8e2575ea30d546dad6da2b7
        Validity
            Not Before: Sep 20 05:35:29 2024 GMT
            Not After : Sep 21 09:26:29 2024 GMT
        Subject: CN=B81E0A623E94C9C62E5B52B0D575984C9682D092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:6a:ee:45:f2:4a:e4:30:2c:70:c1:7a:65:
                    72:52:7a:03:d8:e9:89:13:4a:02:12:f6:7a:72:a2:
                    1e:b9:fc:53:28:5a:26:ea:e3:5c:00:cb:f6:bf:64:
                    bf:d6:f8:ae:96:51:3c:c9:b6:e9:5f:b0:66:f6:33:
                    dc:f3:92:ee:b0:d1:f8:4e:e2:b6:ff:18:be:2e:ef:
                    f5:ea:26:b3:02:d6:e8:a6:04:18:21:b9:30:c7:49:
                    e0:34:a1:a2:1e:58:04:c2:d6:82:19:7c:95:58:ab:
                    09:99:f6:fa:d4:64:8a:39:29:46:3a:6a:1d:78:db:
                    00:c0:cf:ee:6b:11:ce:42:94:6d:3e:31:d9:10:20:
                    79:20:44:93:42:6b:c4:db:61:91:82:c7:dd:af:4f:
                    1d:ad:9a:ae:9b:be:2a:e0:0c:44:4a:a3:a1:fd:74:
                    a1:c7:af:07:80:0e:66:87:7e:2e:04:ad:b7:43:16:
                    c2:7a:7e:b8:bd:6f:c0:46:0a:57:ef:fe:1f:84:d8:
                    c0:d2:e0:11:5e:30:4f:6d:86:f3:b6:04:e6:f7:cd:
                    ed:70:d2:7c:47:29:ce:ad:58:4a:16:f1:bc:0a:d9:
                    a8:4f:be:b9:8e:db:a5:d5:c0:74:98:71:a0:1c:2e:
                    9f:38:7b:b6:74:cb:5b:ec:61:d5:3e:0a:62:6b:af:
                    18:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:0A:62:3E:94:C9:C6:2E:5B:52:B0:D5:75:98:4C:96:82:D0:92
            X509v3 Authority Key Identifier:
                keyid:5E:77:ED:69:DB:CF:E7:77:C8:E2:57:5E:A3:0D:54:6D:AD:6D:A2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/0/5E77ED69DBCFE777C8E2575EA30D546DAD6DA2B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnftadvP53fI4ldeow1Uba1torc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e302e6-881e-4d93-ae3e-9b7c97a9b9d0/0/5E77ED69DBCFE777C8E2575EA30D546DAD6DA2B7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:8c:20:fc:f6:51:7f:51:7b:9b:88:2a:d7:82:7b:f6:db:
         a8:82:d2:6c:20:e3:bb:69:30:ff:d7:1d:b0:2e:1c:ca:15:d4:
         06:6f:a2:a3:fa:8b:81:53:bb:35:3d:01:fc:80:f6:3e:77:97:
         de:10:10:24:6d:63:06:fd:e8:d8:59:c1:84:39:67:f7:82:0e:
         24:c4:34:47:97:a7:0d:a3:2f:94:72:fa:9c:8a:5a:78:ac:94:
         dc:9e:3d:1f:4a:58:dc:d7:95:60:53:84:69:c0:cd:dd:72:32:
         26:d3:7a:71:2c:98:8c:05:75:01:3f:c2:ca:87:ed:29:e8:3b:
         4a:c5:c7:b7:81:02:84:18:24:82:36:af:50:ef:bb:18:7a:6c:
         f9:6f:8f:35:1c:eb:28:cc:5b:2f:57:84:8c:36:68:ce:54:bb:
         64:19:a4:92:60:23:69:db:2f:2d:6c:f3:10:88:0a:35:48:b5:
         8c:83:f8:f6:5a:78:12:ce:c2:aa:07:65:63:a5:85:74:64:8c:
         c1:05:f4:72:ff:ce:56:ea:9b:e9:e8:e7:ae:47:56:fd:f0:6c:
         b7:81:e6:1f:96:29:30:67:1c:49:53:40:77:69:61:3f:c2:fc:
         0a:d6:07:12:e1:5f:ac:50:b7:dd:44:1b:7a:0d:75:c6:b2:48:
         42:b0:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 08:12:23 2024 by rpki-client on console-fra.rpki-client.org