Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
File:                     40B5208BE500E368704ABCF5103C6E71ED3633EE.mft (raw, json)
Hash identifier:          E5Ia6SZUQBP0T924GgQOUdL0cpJuQbi0OzOmld9K5GQ=
Subject key identifier:   28:CE:D5:4A:0C:04:F9:7B:50:D6:2E:E9:6D:69:D2:6B:5E:15:F1:BF
Authority key identifier: 40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE
Certificate issuer:       /CN=40b5208be500e368704abcf5103c6e71ed3633ee
Certificate serial:       4EC40726CD2D998000D9F508F0B8CE52C4B5F734
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
Manifest number:          0201
Signing time:             Fri 17 May 2024 03:18:31 +0000
Manifest this update:     Fri 17 May 2024 03:13:31 +0000
Manifest next update:     Sat 18 May 2024 06:28:31 +0000
Files and hashes:         1: 40B5208BE500E368704ABCF5103C6E71ED3633EE.crl (hash: QySBh9Ydol9xqLeF6JGMQ4feOxfhtKexrvK5aNSZ0a8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c4:07:26:cd:2d:99:80:00:d9:f5:08:f0:b8:ce:52:c4:b5:f7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b5208be500e368704abcf5103c6e71ed3633ee
        Validity
            Not Before: May 17 03:13:31 2024 GMT
            Not After : May 18 06:28:31 2024 GMT
        Subject: CN=28CED54A0C04F97B50D62EE96D69D26B5E15F1BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:20:8f:38:cc:8d:4a:16:ee:ac:2f:9b:d7:11:
                    86:6b:19:12:6a:a1:5b:41:80:a7:37:2c:0d:95:f7:
                    27:d0:b5:20:f7:4b:7d:88:3e:42:7d:0f:c2:50:92:
                    7b:03:38:b4:18:7f:9a:9c:b5:49:56:cd:3f:b3:e5:
                    c3:36:5b:91:d5:c6:d1:55:cf:dc:9d:18:70:66:8e:
                    04:0c:ae:18:b0:a1:6a:0a:0f:98:b9:25:63:4f:23:
                    3a:69:d9:0f:3b:77:91:7d:67:1a:8f:f1:dd:3c:8c:
                    c1:69:82:0d:af:a9:ff:9e:5e:1a:97:a5:cb:2e:70:
                    d4:61:a0:92:ff:06:fe:d5:1d:aa:7d:df:3f:b1:94:
                    61:da:68:f7:52:a1:86:cf:17:31:a6:2a:53:a9:35:
                    65:d9:ac:88:b4:da:8d:3d:46:58:a8:42:e8:74:b7:
                    35:c4:0c:bf:ef:1b:05:84:c0:b8:e1:e9:70:e6:8f:
                    45:73:52:0c:6e:4e:d9:d1:fa:c1:02:4f:06:a5:db:
                    8a:e3:50:e2:a3:82:35:5c:f9:dd:67:80:ec:ef:0c:
                    cc:e9:07:c0:4e:28:53:9c:42:eb:0a:b6:72:80:bb:
                    d7:2d:b1:59:a5:b1:7a:1e:57:21:40:55:29:91:ef:
                    cf:f5:cf:71:58:18:6d:8e:50:5b:ad:19:0b:17:96:
                    b5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CE:D5:4A:0C:04:F9:7B:50:D6:2E:E9:6D:69:D2:6B:5E:15:F1:BF
            X509v3 Authority Key Identifier:
                keyid:40:B5:20:8B:E5:00:E3:68:70:4A:BC:F5:10:3C:6E:71:ED:36:33:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLUgi-UA42hwSrz1EDxuce02M-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/0/40B5208BE500E368704ABCF5103C6E71ED3633EE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:4c:dc:b5:2c:18:b7:79:db:54:b9:6c:cb:3e:f3:36:d8:cd:
         2c:d5:67:f2:65:48:73:11:21:d6:3b:eb:1a:f0:61:78:f8:49:
         f7:f0:e8:8c:f5:d5:b3:5f:5d:5b:05:2b:65:8f:e7:a1:aa:df:
         92:ce:55:44:ce:06:99:20:57:53:25:b0:16:aa:b0:07:d5:e9:
         40:63:51:57:1c:01:2e:09:f4:2c:2c:a1:f5:45:8b:5c:ae:e1:
         72:ee:91:1f:f1:39:60:f2:94:fa:fe:8b:13:5c:b4:15:7d:29:
         d9:8d:95:4e:31:9e:48:5a:ba:7d:65:cc:21:75:45:83:c1:09:
         d0:10:84:21:8b:74:bc:e9:ba:8c:28:f5:f4:db:74:7d:02:e3:
         4c:c8:99:9c:20:e0:8c:ad:d4:c0:31:e5:91:ed:00:c3:06:17:
         91:67:0f:b2:b0:59:ae:5d:9a:1a:9d:4f:b1:5a:32:56:85:26:
         09:b9:5b:70:fd:05:08:e6:63:fb:64:58:2a:d7:79:db:0d:9a:
         1b:43:b6:0f:25:cb:dc:b6:7c:fb:c1:6b:8f:c1:e1:b9:55:5c:
         5b:c3:53:f3:f2:e7:db:8f:75:cf:c9:e8:5a:13:3a:26:8b:a8:
         b4:68:b2:4a:ae:12:a4:c7:05:ad:6b:13:c8:69:79:77:bd:37:
         df:36:cd:be
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUTsQHJs0tmYAA2fUI8LjOUsS19zQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBiNTIwOGJlNTAwZTM2ODcwNGFiY2Y1MTAzYzZlNzFl
ZDM2MzNlZTAeFw0yNDA1MTcwMzEzMzFaFw0yNDA1MTgwNjI4MzFaMDMxMTAvBgNV
BAMTKDI4Q0VENTRBMEMwNEY5N0I1MEQ2MkVFOTZENjlEMjZCNUUxNUYxQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChII84zI1KFu6sL5vXEYZrGRJq
oVtBgKc3LA2V9yfQtSD3S32IPkJ9D8JQknsDOLQYf5qctUlWzT+z5cM2W5HVxtFV
z9ydGHBmjgQMrhiwoWoKD5i5JWNPIzpp2Q87d5F9ZxqP8d08jMFpgg2vqf+eXhqX
pcsucNRhoJL/Bv7VHap93z+xlGHaaPdSoYbPFzGmKlOpNWXZrIi02o09RlioQuh0
tzXEDL/vGwWEwLjh6XDmj0VzUgxuTtnR+sECTwal24rjUOKjgjVc+d1ngOzvDMzp
B8BOKFOcQusKtnKAu9ctsVmlsXoeVyFAVSmR78/1z3FYGG2OUFutGQsXlrXHAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKM7VSgwE+XtQ1i7pbWnSa14V8b8wHwYDVR0j
BBgwFoAUQLUgi+UA42hwSrz1EDxuce02M+4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1
MGU4LzAvNDBCNTIwOEJFNTAwRTM2ODcwNEFCQ0Y1MTAzQzZFNzFFRDM2MzNFRS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1FMVWdpLVVBNDJod1NyejFFRHh1Y2Uw
Mk0tNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1l
ZTYwLTQwMDUtYmFkNy1iNDI4MThjZjUwZTgvMC80MEI1MjA4QkU1MDBFMzY4NzA0
QUJDRjUxMDNDNkU3MUVEMzYzM0VFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUzctSwYt3nbVLlsyz7z
NtjNLNVn8mVIcxEh1jvrGvBhePhJ9/DojPXVs19dWwUrZY/noarfks5VRM4GmSBX
UyWwFqqwB9XpQGNRVxwBLgn0LCyh9UWLXK7hcu6RH/E5YPKU+v6LE1y0FX0p2Y2V
TjGeSFq6fWXMIXVFg8EJ0BCEIYt0vOm6jCj19Nt0fQLjTMiZnCDgjK3UwDHlke0A
wwYXkWcPsrBZrl2aGp1PsVoyVoUmCblbcP0FCOZj+2RYKtd52w2aG0O2DyXL3LZ8
+8Frj8HhuVVcW8NT8/Ln2491z8noWhM6JouotGiySq4SpMcFrWsTyGl5d7033zbN
vg==
-----END CERTIFICATE-----
Generated at Fri May 17 03:56:29 2024 by rpki-client on console-ams.rpki-client.org