Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/2/FD7A8C110A628469378572A2918653F6F8D726D2.mft
File:                     FD7A8C110A628469378572A2918653F6F8D726D2.mft (raw, json)
Hash identifier:          PhcyRM1b9oXihNnyaTFnzYtd7XBylYCMgI0L1A6uLAs=
Subject key identifier:   90:29:15:12:FC:4E:37:D0:0A:D7:BF:A0:DC:D5:AC:C1:51:73:CA:A7
Authority key identifier: FD:7A:8C:11:0A:62:84:69:37:85:72:A2:91:86:53:F6:F8:D7:26:D2
Certificate issuer:       /CN=fd7a8c110a628469378572a2918653f6f8d726d2
Certificate serial:       308086C698420700B0221635B147E1C46CC629ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_XqMEQpihGk3hXKikYZT9vjXJtI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/2/FD7A8C110A628469378572A2918653F6F8D726D2.mft
Manifest number:          56
Signing time:             Mon 28 Oct 2024 19:03:53 +0000
Manifest this update:     Mon 28 Oct 2024 18:58:53 +0000
Manifest next update:     Tue 29 Oct 2024 22:53:53 +0000
Files and hashes:         1: FD7A8C110A628469378572A2918653F6F8D726D2.crl (hash: 6CDdumouwcWFM2Ny4b3Lum+GV7uQiIxi0P/R8v4RVCg=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/2/FD7A8C110A628469378572A2918653F6F8D726D2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/2/FD7A8C110A628469378572A2918653F6F8D726D2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_XqMEQpihGk3hXKikYZT9vjXJtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Oct 2024 14:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:80:86:c6:98:42:07:00:b0:22:16:35:b1:47:e1:c4:6c:c6:29:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7a8c110a628469378572a2918653f6f8d726d2
        Validity
            Not Before: Oct 28 18:58:53 2024 GMT
            Not After : Oct 29 22:53:53 2024 GMT
        Subject: CN=90291512FC4E37D00AD7BFA0DCD5ACC15173CAA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:f0:f8:32:4a:9a:ed:dd:b7:d6:79:49:58:
                    df:2e:f4:e3:41:38:95:e9:9c:1e:55:20:d5:45:c3:
                    c1:1b:61:84:4a:7b:52:ac:39:98:eb:65:3c:c7:6b:
                    49:7f:28:02:be:0d:1e:29:cf:8c:fc:f0:15:e9:4a:
                    8b:29:da:fe:0d:27:ba:a6:b1:19:27:2d:a9:19:d7:
                    08:67:96:f5:3b:e8:6e:1f:3e:70:19:d6:43:72:78:
                    b4:ba:54:c3:ef:a5:61:d2:33:03:12:56:0b:17:3a:
                    d5:9e:69:19:31:d7:06:af:d2:06:78:01:a3:5a:48:
                    54:37:03:8e:a5:b5:30:db:9e:10:c7:0b:e1:89:42:
                    ac:60:fe:12:d8:4a:22:3e:2b:ad:9b:77:71:5d:ff:
                    e1:08:c1:50:b0:ed:a4:a7:ae:61:b9:a4:3b:0c:3e:
                    14:04:64:7f:93:b3:67:c1:9d:06:37:1a:a6:83:0b:
                    16:65:37:31:35:a6:cc:72:83:66:ab:50:d3:3f:55:
                    1b:1f:42:d6:63:8a:e3:ef:d4:ef:34:91:52:2e:3f:
                    e8:0f:fc:c7:45:38:ba:1f:75:74:9c:01:29:ac:76:
                    e7:11:9e:ec:20:13:d3:fa:cf:29:30:c4:cb:d4:2e:
                    2f:19:d7:29:d6:78:07:c0:22:7e:0e:fd:27:f8:b7:
                    d2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:29:15:12:FC:4E:37:D0:0A:D7:BF:A0:DC:D5:AC:C1:51:73:CA:A7
            X509v3 Authority Key Identifier:
                keyid:FD:7A:8C:11:0A:62:84:69:37:85:72:A2:91:86:53:F6:F8:D7:26:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/2/FD7A8C110A628469378572A2918653F6F8D726D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XqMEQpihGk3hXKikYZT9vjXJtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d88b854e-092c-4d79-ac06-af380b08d12b/2/FD7A8C110A628469378572A2918653F6F8D726D2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fe:59:a9:67:9b:d2:49:14:bf:91:90:ff:53:79:a4:ba:1f:
         05:25:7b:ad:6a:d8:6a:a7:05:ed:ab:5e:f6:9e:32:6a:3d:70:
         f5:69:a4:7a:8a:37:9c:f0:82:b3:e3:a8:82:67:09:0d:a8:f9:
         65:b4:76:a9:88:08:96:99:2e:f5:00:aa:ee:b3:e4:71:f8:76:
         94:07:7a:02:0d:4a:44:0d:b9:6d:86:8a:ce:37:9d:92:7d:e5:
         bb:b5:54:c3:2b:8e:bf:cf:c1:c2:e3:4c:ef:1f:e1:0c:47:1e:
         8b:e1:d8:cc:d4:de:0e:83:0b:82:02:d0:5d:85:08:45:e8:e7:
         2e:94:b0:48:2a:20:67:68:04:c4:d5:fa:ef:a3:d0:2b:4b:77:
         4a:e8:f9:04:d6:3d:53:1b:12:68:86:80:d0:65:96:df:3a:f6:
         9c:96:0d:18:ed:be:1d:8a:e6:cd:3f:87:90:fe:2f:b5:46:99:
         08:a9:9b:46:8e:7d:fe:37:99:bc:fb:48:ce:1d:5e:fb:e3:47:
         5f:dc:62:bf:97:a1:cc:30:fe:e8:77:15:66:57:e6:48:d5:25:
         27:2a:f4:64:f1:d4:ca:c6:b6:fc:61:7b:0b:f6:a2:8c:cb:5c:
         18:3e:56:64:01:b3:a9:83:31:b7:25:94:65:48:28:e8:cb:22:
         b5:8b:19:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 21:47:25 2024 by rpki-client on console-fra.rpki-client.org