Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft
File:                     775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft (raw, json)
Hash identifier:          Miy705Ijy0/Nb2hOkLSeqkm4CaUiqpynANxRH3VL6yM=
Subject key identifier:   23:9C:2A:A2:EC:38:22:B2:08:5F:57:EE:AA:E1:A9:E0:39:0F:98:77
Authority key identifier: 77:5D:D1:7E:14:50:60:E4:59:9A:65:91:CC:0E:68:AC:2A:E6:EC:3B
Certificate issuer:       /CN=775dd17e145060e4599a6591cc0e68ac2ae6ec3b
Certificate serial:       0C45FAC953D6507E4D749412CDAF1000CC13E5E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft
Manifest number:          05
Signing time:             Sat 01 Feb 2025 20:58:02 +0000
Manifest this update:     Sat 01 Feb 2025 20:53:02 +0000
Manifest next update:     Sun 02 Feb 2025 22:53:02 +0000
Files and hashes:         1: 775DD17E145060E4599A6591CC0E68AC2AE6EC3B.crl (hash: pijoKOnlVnBSFrUJWrA5e8D4w5+1G31ehOkjMsYARmE=)
                          2: AS213768.asa (hash: STN7/gpSTzTnV+2a1yuX1MKiPFhViLW1NgtMlmyfpUI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:45:fa:c9:53:d6:50:7e:4d:74:94:12:cd:af:10:00:cc:13:e5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=775dd17e145060e4599a6591cc0e68ac2ae6ec3b
        Validity
            Not Before: Feb  1 20:53:02 2025 GMT
            Not After : Feb  2 22:53:02 2025 GMT
        Subject: CN=239C2AA2EC3822B2085F57EEAAE1A9E0390F9877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:dc:87:51:79:52:49:75:03:3d:3a:19:fb:
                    0f:8e:6a:0a:0d:2d:71:f3:1d:ab:2f:36:b1:fe:8d:
                    e1:a8:d6:bc:9d:86:98:10:07:25:79:96:2b:72:dc:
                    39:aa:cc:ab:97:de:1e:78:cc:bf:a4:ae:95:e6:fc:
                    3b:f0:b8:bb:a9:3a:e0:bb:bb:d0:53:09:16:80:d7:
                    c2:1f:a7:ed:88:8e:f3:57:99:9b:67:c8:bb:be:94:
                    8e:8d:17:c0:c8:fa:9f:f0:2d:e1:ab:b4:ce:3d:4e:
                    bf:9d:29:5b:c7:a1:a5:85:b8:78:4b:98:98:a5:3b:
                    0f:f2:fb:bc:d6:e1:07:fa:ae:07:7f:0c:47:91:8e:
                    97:2b:1e:a4:e6:da:29:62:0f:a5:0c:fd:53:5b:03:
                    04:06:5b:6b:60:9d:f9:97:f7:46:3c:12:59:e8:7c:
                    0a:3c:bc:69:85:39:08:21:22:8b:db:b7:6e:f8:88:
                    ed:ae:58:7c:45:10:6f:6b:5f:07:7a:7a:f3:bd:ef:
                    7c:db:fa:cc:23:a0:4e:3b:27:00:87:46:c0:2f:72:
                    01:08:4e:8e:16:9c:76:38:dc:c7:e7:42:5b:ef:5e:
                    36:a4:ea:94:75:c7:2d:5a:5b:05:f0:09:b6:17:7d:
                    82:16:99:7f:cb:1f:1b:13:71:cc:f4:f6:4d:15:e9:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9C:2A:A2:EC:38:22:B2:08:5F:57:EE:AA:E1:A9:E0:39:0F:98:77
            X509v3 Authority Key Identifier:
                keyid:77:5D:D1:7E:14:50:60:E4:59:9A:65:91:CC:0E:68:AC:2A:E6:EC:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d13RfhRQYORZmmWRzA5orCrm7Ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f9719fb9-23e3-4e31-a08d-68affbad991f/0/775DD17E145060E4599A6591CC0E68AC2AE6EC3B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d8:35:b2:5f:c9:d5:4f:e4:ab:74:10:ef:ee:9a:36:57:f9:
         96:5f:52:ba:98:74:b8:fe:d6:3a:16:3a:c2:0f:3c:71:d0:b0:
         48:73:2e:48:0e:74:ac:38:44:d2:0c:6c:58:8e:0e:84:6c:33:
         4b:8e:0e:e8:31:d1:0b:42:dc:73:70:5f:14:9c:45:95:88:7c:
         88:9b:30:a5:6a:27:d9:15:ed:cf:a1:22:8c:47:d5:ab:c8:49:
         b0:16:d5:32:4a:e1:5e:c0:f3:ed:da:f2:b8:b6:ea:61:62:92:
         bd:6d:28:87:c8:44:30:00:9d:74:ea:c6:f2:c9:11:bc:26:76:
         69:59:09:26:2a:8a:c4:74:b6:ed:a0:94:99:0a:5d:3b:9c:b4:
         de:53:6c:2f:a7:ca:f4:37:50:cd:e7:d1:26:19:ad:24:87:33:
         22:a4:d8:78:cc:64:56:32:b2:37:a5:b6:95:6b:e4:7e:a3:e6:
         b8:ca:e6:d5:86:52:3c:bb:b6:59:f7:3c:2d:e7:a3:c0:95:8d:
         e6:b7:8c:90:6f:b9:1b:84:95:64:91:1f:65:fb:41:0a:1e:cc:
         9b:04:a7:41:af:ac:03:58:eb:3a:cb:23:f4:fc:33:83:93:4a:
         0f:f7:30:5a:1e:5b:60:bc:6d:7a:1a:d7:29:73:25:f2:e1:c2:
         f0:8d:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 05:55:15 2025 by rpki-client