Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft
File:                     E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft (raw, json)
Hash identifier:          LrdGu92siAPTB7pGo5KWkrOJE2UoxN4DwOXMmiYsi+M=
Subject key identifier:   FE:3F:02:09:37:15:A3:09:D3:53:8C:B1:51:96:8B:8E:66:3F:6E:F5
Authority key identifier: E4:18:F6:67:F3:ED:C7:DF:81:A4:F8:87:F6:61:DD:96:4B:26:BC:B9
Certificate issuer:       /CN=e418f667f3edc7df81a4f887f661dd964b26bcb9
Certificate serial:       1C98C66494C0962C818FA3814220FEB5CFD26842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Bj2Z_Ptx9-BpPiH9mHdlksmvLk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft
Manifest number:          013D
Signing time:             Mon 25 Nov 2024 14:13:16 +0000
Manifest this update:     Mon 25 Nov 2024 14:08:16 +0000
Manifest next update:     Tue 26 Nov 2024 15:04:16 +0000
Files and hashes:         1: E418F667F3EDC7DF81A4F887F661DD964B26BCB9.crl (hash: k8v+rg/2pBmm1dzC7n25yklDuGhem/oAokWBdTgdylY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Bj2Z_Ptx9-BpPiH9mHdlksmvLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:98:c6:64:94:c0:96:2c:81:8f:a3:81:42:20:fe:b5:cf:d2:68:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e418f667f3edc7df81a4f887f661dd964b26bcb9
        Validity
            Not Before: Nov 25 14:08:16 2024 GMT
            Not After : Nov 26 15:04:16 2024 GMT
        Subject: CN=FE3F02093715A309D3538CB151968B8E663F6EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:45:12:1f:58:0a:15:8e:d0:73:a2:85:4b:d0:
                    f4:50:05:ae:e3:17:6a:2c:ac:a6:95:45:2c:10:a1:
                    68:9f:23:d6:25:aa:29:fc:3d:3a:ba:c0:b5:b3:30:
                    06:9a:9a:f8:26:bc:4b:d7:24:d3:cc:ef:db:6c:26:
                    6b:6b:ad:b3:fd:6a:f2:0b:40:21:86:31:c8:14:be:
                    67:54:73:5c:20:c2:fa:fa:34:47:de:9b:50:b5:15:
                    66:41:37:fb:fe:6e:48:f8:b8:7a:41:3f:af:83:d7:
                    32:79:d4:3f:c4:70:c5:51:54:40:59:02:95:34:f0:
                    b1:c4:6e:d4:2c:5a:a2:3f:b4:92:5a:87:71:fe:a0:
                    16:26:89:f7:fd:c1:5d:5c:ca:a7:53:d6:e3:af:b1:
                    b8:9a:8b:54:92:7b:d4:1d:0c:bc:39:f8:01:45:64:
                    dd:f0:26:f6:ba:31:c8:0f:b5:69:0b:55:ee:d2:c6:
                    8f:00:14:ab:a8:a8:5b:c9:ba:8b:a8:9b:a4:d1:fd:
                    dc:c9:f6:23:f4:8b:ff:24:54:75:2e:3a:a9:69:eb:
                    2e:f8:60:8d:f0:ae:95:83:e8:0a:5f:e3:2e:9a:92:
                    8c:da:bf:29:1e:dd:a3:a1:cd:b5:24:28:93:96:17:
                    8a:5e:a3:25:0e:c6:a8:3f:0c:0f:61:a9:8d:33:70:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3F:02:09:37:15:A3:09:D3:53:8C:B1:51:96:8B:8E:66:3F:6E:F5
            X509v3 Authority Key Identifier:
                keyid:E4:18:F6:67:F3:ED:C7:DF:81:A4:F8:87:F6:61:DD:96:4B:26:BC:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bj2Z_Ptx9-BpPiH9mHdlksmvLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2f:87:ab:8f:50:91:b3:f2:95:cb:7a:92:1b:ea:b7:47:da:
         37:a3:04:31:db:3c:38:4f:3e:ce:ee:68:54:7c:3f:34:44:c7:
         03:db:16:0e:9b:eb:16:9a:ab:0c:8d:d7:ef:03:03:77:c0:34:
         d2:4f:61:ee:9f:9d:3e:19:66:f4:65:83:0d:ee:10:03:60:64:
         48:a4:fe:4f:70:79:6e:3b:5b:80:76:45:dc:50:12:a7:fb:66:
         33:d8:f8:c9:c9:69:2e:85:d2:ff:ff:78:b7:9a:4a:47:a3:67:
         54:ef:0b:fd:c1:56:49:21:f8:14:d4:23:26:aa:2a:91:73:ca:
         9e:df:17:cf:94:3f:d2:e4:f8:08:14:cf:3c:c6:e8:d7:b2:b2:
         07:4b:95:9b:4d:98:27:8b:d3:3b:5b:77:22:36:7e:59:2b:94:
         d6:dd:da:f8:43:26:d2:6c:46:51:68:89:40:df:0a:89:64:04:
         a1:ae:f7:f8:22:af:25:fe:89:04:d0:6a:3b:fb:07:bf:df:19:
         eb:c0:de:23:b4:66:a6:3b:13:5e:5e:80:55:b3:f7:1e:0f:30:
         40:a7:3b:b5:49:e1:de:4c:0f:58:21:46:70:39:c9:fd:09:bf:
         20:00:37:5d:cd:6d:d2:50:c3:bc:ff:35:3f:b6:65:b2:41:c4:
         0e:96:4c:f9
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHJjGZJTAliyBj6OBQiD+tc/SaEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTQxOGY2NjdmM2VkYzdkZjgxYTRmODg3ZjY2MWRkOTY0
YjI2YmNiOTAeFw0yNDExMjUxNDA4MTZaFw0yNDExMjYxNTA0MTZaMDMxMTAvBgNV
BAMTKEZFM0YwMjA5MzcxNUEzMDlEMzUzOENCMTUxOTY4QjhFNjYzRjZFRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMRRIfWAoVjtBzooVL0PRQBa7j
F2osrKaVRSwQoWifI9Ylqin8PTq6wLWzMAaamvgmvEvXJNPM79tsJmtrrbP9avIL
QCGGMcgUvmdUc1wgwvr6NEfem1C1FWZBN/v+bkj4uHpBP6+D1zJ51D/EcMVRVEBZ
ApU08LHEbtQsWqI/tJJah3H+oBYmiff9wV1cyqdT1uOvsbiai1SSe9QdDLw5+AFF
ZN3wJva6McgPtWkLVe7Sxo8AFKuoqFvJuouom6TR/dzJ9iP0i/8kVHUuOqlp6y74
YI3wrpWD6Apf4y6akozavyke3aOhzbUkKJOWF4peoyUOxqg/DA9hqY0zcG4bAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU/j8CCTcVownTU4yxUZaLjmY/bvUwHwYDVR0j
BBgwFoAU5Bj2Z/Ptx9+BpPiH9mHdlksmvLkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGI4ZDhiN2QtYzQ4Ni00MjM5LTlkOWYtOGY4ZjVkY2Vk
OGQwLzAvRTQxOEY2NjdGM0VEQzdERjgxQTRGODg3RjY2MUREOTY0QjI2QkNCOS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVCajJaX1B0eDktQnBQaUg5bUhkbGtz
bXZMay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kYjhkOGI3ZC1j
NDg2LTQyMzktOWQ5Zi04ZjhmNWRjZWQ4ZDAvMC9FNDE4RjY2N0YzRURDN0RGODFB
NEY4ODdGNjYxREQ5NjRCMjZCQ0I5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfS+Hq49QkbPylct6khvq
t0faN6MEMds8OE8+zu5oVHw/NETHA9sWDpvrFpqrDI3X7wMDd8A00k9h7p+dPhlm
9GWDDe4QA2BkSKT+T3B5bjtbgHZF3FASp/tmM9j4yclpLoXS//94t5pKR6NnVO8L
/cFWSSH4FNQjJqoqkXPKnt8Xz5Q/0uT4CBTPPMbo17KyB0uVm02YJ4vTO1t3IjZ+
WSuU1t3a+EMm0mxGUWiJQN8KiWQEoa73+CKvJf6JBNBqO/sHv98Z68DeI7RmpjsT
Xl6AVbP3Hg8wQKc7tUnh3kwPWCFGcDnJ/Qm/IAA3Xc1t0lDDvP81P7ZlskHEDpZM
+Q==
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:09 2024 by rpki-client on console-fra.rpki-client.org