Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.mft
File:                     6A4F35CEDC6A01683A678AB4E598897526A40880.mft (raw, json)
Hash identifier:          G6AaNMeS+30y5cF92j8h8B4wckvuh21rfqelWXDTqOg=
Subject key identifier:   45:9B:31:0D:DD:33:E3:75:ED:33:F9:42:40:A1:16:61:82:BE:8C:4D
Authority key identifier: 6A:4F:35:CE:DC:6A:01:68:3A:67:8A:B4:E5:98:89:75:26:A4:08:80
Certificate issuer:       /CN=6a4f35cedc6a01683a678ab4e598897526a40880
Certificate serial:       667AF424DB40B65E67FD59EBA7FCB661F2D0590F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ak81ztxqAWg6Z4q05ZiJdSakCIA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.mft
Manifest number:          9D
Signing time:             Mon 16 Sep 2024 07:37:17 +0000
Manifest this update:     Mon 16 Sep 2024 07:32:17 +0000
Manifest next update:     Tue 17 Sep 2024 11:05:17 +0000
Files and hashes:         1: 6A4F35CEDC6A01683A678AB4E598897526A40880.crl (hash: /V77FOplS8DIbKVxLvYMT/2Q2goJrHMgjWXYaiuA96E=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ak81ztxqAWg6Z4q05ZiJdSakCIA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7a:f4:24:db:40:b6:5e:67:fd:59:eb:a7:fc:b6:61:f2:d0:59:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a4f35cedc6a01683a678ab4e598897526a40880
        Validity
            Not Before: Sep 16 07:32:17 2024 GMT
            Not After : Sep 17 11:05:17 2024 GMT
        Subject: CN=459B310DDD33E375ED33F94240A1166182BE8C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:f2:b2:14:01:2f:e6:46:b1:f2:b2:e5:53:
                    71:12:60:f5:a5:69:8e:40:55:41:38:76:3d:04:c9:
                    6f:94:e4:27:85:97:44:56:a9:3a:8d:d8:b2:7e:ad:
                    49:9e:e2:8a:27:66:e7:04:e8:42:ff:d7:34:af:e8:
                    86:38:49:34:67:f9:71:a4:14:18:7e:80:7f:f2:f1:
                    3c:79:81:80:9f:fc:33:14:5f:46:3f:02:68:6a:5d:
                    9e:fb:a9:3f:e6:e3:8c:a8:04:54:16:e5:63:15:e8:
                    b9:82:77:ca:be:53:7f:16:bd:89:14:0f:09:99:69:
                    b7:3d:1f:1f:7a:11:22:95:fb:52:29:ef:08:a2:3e:
                    a6:4c:1a:e6:a4:cf:20:1f:fe:78:8b:78:d7:fb:03:
                    f6:a7:07:80:a3:94:9f:3a:e9:bc:c2:34:9d:13:ea:
                    f1:59:88:9b:17:b4:6b:cc:02:94:10:32:2a:c0:70:
                    07:3c:71:13:0d:47:78:07:5f:1b:96:fa:cb:d4:f3:
                    1a:c2:95:ea:41:c3:54:62:2f:73:6b:1e:1c:02:64:
                    eb:29:87:27:95:f9:fd:b8:20:b0:62:bf:9f:db:5a:
                    71:df:91:7a:ec:52:e4:31:91:9e:6e:4d:57:65:10:
                    c3:65:3b:ab:87:ec:ab:11:ca:bb:2f:b2:3f:93:6d:
                    37:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9B:31:0D:DD:33:E3:75:ED:33:F9:42:40:A1:16:61:82:BE:8C:4D
            X509v3 Authority Key Identifier:
                keyid:6A:4F:35:CE:DC:6A:01:68:3A:67:8A:B4:E5:98:89:75:26:A4:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ak81ztxqAWg6Z4q05ZiJdSakCIA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/1/6A4F35CEDC6A01683A678AB4E598897526A40880.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:47:29:4a:c4:b0:96:b8:c9:b9:47:9c:ea:10:0a:77:b8:61:
         97:5f:54:08:14:77:3f:33:b6:1a:e9:ed:4f:f5:e2:2c:92:ea:
         54:be:9a:ac:01:f0:4b:ca:5f:a6:e8:4b:3a:23:21:28:83:15:
         7b:1a:a9:9c:b3:8c:6e:0a:42:ce:ae:3e:0b:ef:a1:99:3c:ee:
         70:ec:5e:ed:7e:4a:b4:8f:48:e9:a5:15:19:92:4e:e9:64:23:
         39:b0:c4:30:ad:8c:63:6d:23:1e:68:2e:fc:32:87:ea:e5:30:
         13:3b:d9:e3:a5:a9:b6:c7:07:4b:9b:29:70:9f:bc:65:f3:34:
         0e:a9:04:64:c6:a5:9b:66:0e:e8:ae:80:60:d2:06:6d:aa:f0:
         90:e8:29:9e:ba:d3:42:58:1c:c8:d9:83:5a:0a:a8:5c:ae:d0:
         01:ec:ec:3b:91:b1:ea:76:f4:89:43:e9:4c:b4:be:1e:4f:c1:
         ef:8d:25:4a:88:78:e6:25:73:c2:ed:42:e5:0d:2b:78:5f:28:
         0e:fa:8a:91:97:29:76:fc:b2:72:58:9a:60:52:78:fb:7d:2b:
         29:70:48:7e:67:4f:eb:f2:53:27:dc:6a:3b:9b:5b:9e:a3:eb:
         d6:c3:f4:92:ce:c9:13:0e:6a:c4:96:b7:e2:b3:c3:24:0d:03:
         36:57:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----