Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
File:                     C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft (raw, json)
Hash identifier:          lFAMbWavcsXZqVrXNL30xPIeCoLlM0y+3HItvvQ0pUY=
Subject key identifier:   D2:3D:E7:01:F0:62:54:B3:1E:91:64:68:2F:C8:D0:8F:4C:B3:54:DC
Authority key identifier: C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81
Certificate issuer:       /CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
Certificate serial:       0BF8C6AA0030D80D5690095B4BE541B8237835DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
Manifest number:          76
Signing time:             Mon 16 Sep 2024 08:54:10 +0000
Manifest this update:     Mon 16 Sep 2024 08:49:10 +0000
Manifest next update:     Tue 17 Sep 2024 10:05:10 +0000
Files and hashes:         1: C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl (hash: 4Pf4QrdEfyPa9sypitmraipoTB+1NAFDf48VefhDbsg=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f8:c6:aa:00:30:d8:0d:56:90:09:5b:4b:e5:41:b8:23:78:35:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4cad0efcbe305b4494ed2747bb4f82f43ac8c81
        Validity
            Not Before: Sep 16 08:49:10 2024 GMT
            Not After : Sep 17 10:05:10 2024 GMT
        Subject: CN=D23DE701F06254B31E9164682FC8D08F4CB354DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:61:01:2d:ca:d8:e3:a2:94:58:f3:3e:51:
                    47:0d:63:10:3b:0a:54:80:0e:61:29:dc:c2:d6:e4:
                    32:66:7d:66:95:f6:7a:66:a6:09:e6:65:e7:73:a3:
                    22:46:f1:6c:4a:b0:83:a7:09:52:e1:90:2d:30:db:
                    d2:f6:e3:9d:8d:cc:76:b2:76:9f:44:29:ca:53:89:
                    9a:4f:08:f5:63:12:8e:41:0e:01:db:b0:f3:31:32:
                    42:cd:1e:58:ba:60:03:15:2b:c6:ed:19:54:cb:58:
                    b0:f4:83:e2:95:fc:95:f6:55:3a:a7:3d:19:7c:c1:
                    86:ad:81:a0:6f:34:cf:f9:2d:4f:03:a7:d2:3b:e2:
                    46:f5:61:c7:d6:19:70:42:5e:c1:5b:71:4a:af:8e:
                    82:97:f5:c6:af:b4:10:a9:fe:d5:18:d8:30:bb:1a:
                    f6:c2:b0:4b:b6:30:da:cc:61:e0:88:9b:68:db:87:
                    ad:9f:f6:8f:55:81:f7:7a:1f:07:46:dc:69:1f:47:
                    1f:a8:7d:ad:a6:d7:02:fb:d9:94:19:70:fb:5c:91:
                    6c:b0:11:12:90:71:78:6d:3c:f1:4d:63:a1:e3:b2:
                    11:2c:ad:24:78:98:8b:61:6e:6e:d4:0a:a7:3a:26:
                    d0:77:77:8c:e2:4a:e7:d4:11:07:1a:c7:8c:15:40:
                    18:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3D:E7:01:F0:62:54:B3:1E:91:64:68:2F:C8:D0:8F:4C:B3:54:DC
            X509v3 Authority Key Identifier:
                keyid:C4:CA:D0:EF:CB:E3:05:B4:49:4E:D2:74:7B:B4:F8:2F:43:AC:8C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMrQ78vjBbRJTtJ0e7T4L0OsjIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/0/C4CAD0EFCBE305B4494ED2747BB4F82F43AC8C81.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:45:92:ef:28:f2:77:f7:dc:58:48:5f:5e:11:e1:5c:f1:d9:
         ff:05:32:1f:5e:f6:73:aa:a9:a0:50:f9:47:83:93:da:3e:e2:
         eb:9b:96:c9:66:6b:f5:c8:c1:a2:45:3c:da:41:f1:4d:8b:88:
         9a:e8:75:65:e5:51:94:65:c2:53:86:fc:b8:37:b2:e1:6d:e7:
         1d:b3:41:f7:fc:97:49:aa:05:e8:63:b6:d5:17:f2:f5:b1:aa:
         5e:b3:99:8f:8b:dc:82:58:b5:ce:9b:6c:17:da:b9:a1:85:5d:
         a2:00:fa:32:c8:c2:94:99:0c:55:aa:8c:c1:0b:01:99:2b:ef:
         66:3e:a7:37:1e:40:4a:c0:82:80:74:52:dd:fe:ad:91:ee:5c:
         77:68:a9:37:0c:37:2e:ca:53:e4:3a:59:6e:00:c4:2c:e4:95:
         80:bd:f9:a5:13:a9:45:d6:63:44:27:c7:31:0c:f8:ce:bc:4e:
         c4:5e:53:1f:e5:4c:8c:09:7c:36:59:92:fa:71:45:6e:3d:04:
         0c:ac:d5:40:d3:d9:9f:12:e5:b6:0f:d3:54:c7:24:70:eb:b6:
         e2:ec:36:e1:15:72:47:8b:75:27:3e:8d:b9:d6:05:53:4c:a9:
         ad:04:44:6f:bb:2c:aa:31:7d:cd:4f:d8:36:53:ec:5d:8a:d5:
         d6:9a:9f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----