Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft
File:                     E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft (raw, json)
Hash identifier:          7S88BHkc9suSArb0Ibd1ZiK6But2/0GMimn+Ry3gEqk=
Subject key identifier:   70:C9:57:61:71:67:AA:0F:53:F6:BD:B0:0E:48:FD:A9:65:A6:70:A1
Authority key identifier: E4:18:F6:67:F3:ED:C7:DF:81:A4:F8:87:F6:61:DD:96:4B:26:BC:B9
Certificate issuer:       /CN=e418f667f3edc7df81a4f887f661dd964b26bcb9
Certificate serial:       4B8C1EFF913B2CDC1B932DC232DD94ECBEAE1E97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Bj2Z_Ptx9-BpPiH9mHdlksmvLk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft
Manifest number:          D8
Signing time:             Mon 16 Sep 2024 01:20:02 +0000
Manifest this update:     Mon 16 Sep 2024 01:15:02 +0000
Manifest next update:     Tue 17 Sep 2024 04:02:02 +0000
Files and hashes:         1: E418F667F3EDC7DF81A4F887F661DD964B26BCB9.crl (hash: h/8snYg1WnSQrwThQ+KaoLGhi1VD8F/WiJfEV1+vZ/U=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Bj2Z_Ptx9-BpPiH9mHdlksmvLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Sep 2024 19:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8c:1e:ff:91:3b:2c:dc:1b:93:2d:c2:32:dd:94:ec:be:ae:1e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e418f667f3edc7df81a4f887f661dd964b26bcb9
        Validity
            Not Before: Sep 16 01:15:02 2024 GMT
            Not After : Sep 17 04:02:02 2024 GMT
        Subject: CN=70C957617167AA0F53F6BDB00E48FDA965A670A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:ad:96:44:86:2e:fd:43:b8:dd:b5:17:f1:
                    3b:cf:0c:73:0f:2c:65:77:b5:51:74:a4:b6:bb:87:
                    90:1f:1d:a9:18:09:2d:14:86:c3:52:e0:99:e1:92:
                    d9:60:c6:ce:51:9d:d8:d0:26:b8:84:bc:57:c0:2a:
                    1b:31:d1:1c:27:98:e0:59:a7:5a:c4:e9:ca:0a:d2:
                    cd:a6:7f:a3:e5:bf:25:eb:91:5f:70:07:16:06:86:
                    ee:4f:8b:cf:1b:95:75:a0:2d:61:8f:c9:b0:4d:9f:
                    b0:53:57:5b:07:35:a6:2a:5e:15:37:b0:fb:67:68:
                    c8:9f:35:24:88:47:ec:47:53:2b:8d:b4:a7:e1:3d:
                    b5:bf:14:51:0a:5c:87:ec:76:6c:3d:05:d4:b3:3b:
                    49:de:94:70:e3:aa:a5:ae:0d:05:95:6c:95:7e:2a:
                    30:80:ef:e1:7a:91:4a:41:eb:26:42:b2:a9:c6:4d:
                    42:22:1e:95:1b:04:94:07:9f:b2:3a:35:82:68:2d:
                    d5:ff:00:81:8a:5d:e8:7a:74:d0:92:c2:d9:58:60:
                    1b:f7:b2:bf:ec:f2:29:c7:dd:de:59:ca:9f:c0:12:
                    aa:49:15:92:20:d3:19:7c:a6:dc:20:39:a6:95:bc:
                    e4:ba:2c:74:02:b5:c0:81:7f:21:ca:6c:cc:86:58:
                    98:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C9:57:61:71:67:AA:0F:53:F6:BD:B0:0E:48:FD:A9:65:A6:70:A1
            X509v3 Authority Key Identifier:
                keyid:E4:18:F6:67:F3:ED:C7:DF:81:A4:F8:87:F6:61:DD:96:4B:26:BC:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bj2Z_Ptx9-BpPiH9mHdlksmvLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/db8d8b7d-c486-4239-9d9f-8f8f5dced8d0/0/E418F667F3EDC7DF81A4F887F661DD964B26BCB9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:42:75:34:84:21:78:12:ee:db:8d:d3:53:37:a0:bf:81:a2:
         07:e9:2d:b3:58:72:90:46:08:f8:a9:14:67:08:4f:bd:9d:cd:
         a9:2e:7c:cc:8f:bb:29:07:ab:f5:84:d7:00:ad:9d:88:93:ce:
         58:ca:37:c3:84:ec:7c:6b:ea:35:73:42:fe:05:40:8f:9d:10:
         bc:c1:b4:7c:be:c6:a3:fc:bf:8e:09:3b:0c:c0:18:ea:03:d6:
         f0:ca:2e:9f:be:64:6c:27:99:9f:37:77:c7:fb:b2:fd:69:99:
         b8:4a:27:47:2a:6a:7d:5c:bf:0a:c5:35:dc:45:68:c7:a0:f6:
         26:d9:5e:7d:cd:01:41:db:6a:b2:3a:a0:ba:89:fa:fd:1a:42:
         19:7a:94:46:17:43:c5:10:78:26:9f:2d:c1:90:0f:f6:10:92:
         93:90:c8:09:f9:bf:fa:1f:6d:e2:71:7a:5d:90:03:92:4f:d1:
         32:71:ed:df:15:de:bd:7b:76:cd:6e:2f:00:96:0c:f7:af:bf:
         58:2d:dd:d1:0b:30:ac:44:2c:48:f1:88:d7:8d:ec:db:5c:e5:
         25:8e:6b:95:c2:57:98:a5:a1:b2:02:41:a4:0e:a0:29:4b:38:
         b6:c1:ba:44:82:60:85:51:d6:9e:2a:ae:f8:d3:51:bc:35:39:
         1a:e8:87:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 06:18:10 2024 by rpki-client on console-fra.rpki-client.org