Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
File:                     1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft (raw, json)
Hash identifier:          gQK+p9pag/ZOCtPGi8GtV1RDDda4GoGGpVN2lWsb4Fk=
Subject key identifier:   20:14:BD:94:60:C9:6D:48:94:EA:DA:24:9B:46:FE:49:B0:B9:84:58
Authority key identifier: 1A:78:01:A0:A4:5F:EE:2C:AD:49:A5:10:10:71:39:5A:4B:F0:46:FA
Certificate issuer:       /CN=1a7801a0a45fee2cad49a5101071395a4bf046fa
Certificate serial:       34BA596269D5F7C7E5E68FA6D249B772867E3E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
Manifest number:          96
Signing time:             Sat 09 Nov 2024 21:54:58 +0000
Manifest this update:     Sat 09 Nov 2024 21:49:58 +0000
Manifest next update:     Sun 10 Nov 2024 23:32:58 +0000
Files and hashes:         1: 1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl (hash: rlZvdjgL2d1TJ3kSVhagBDoLa6U+jogqd8DyWGJGfU4=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Nov 2024 20:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ba:59:62:69:d5:f7:c7:e5:e6:8f:a6:d2:49:b7:72:86:7e:3e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7801a0a45fee2cad49a5101071395a4bf046fa
        Validity
            Not Before: Nov  9 21:49:58 2024 GMT
            Not After : Nov 10 23:32:58 2024 GMT
        Subject: CN=2014BD9460C96D4894EADA249B46FE49B0B98458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:4c:92:df:06:f6:9a:e4:e5:98:c7:42:2d:
                    39:24:dd:52:b7:c4:f2:19:e8:2d:e3:af:24:cb:df:
                    df:4d:b3:95:2d:18:cd:8d:57:fc:23:02:f5:3b:c2:
                    bf:53:98:ff:d3:75:48:3c:1b:00:25:1a:ba:2d:62:
                    f9:ed:a8:46:7f:31:30:a9:36:c5:78:c3:3c:57:a4:
                    de:ce:87:a9:db:dd:08:95:86:51:5c:a6:ee:22:5e:
                    54:38:22:68:ee:4d:92:a7:f8:51:8c:73:9c:44:d9:
                    5b:e1:85:c8:d5:92:d2:26:92:69:45:d7:f9:74:73:
                    fe:46:2e:55:4c:4b:8c:17:81:e6:e7:0c:03:a1:42:
                    2a:5f:f8:8e:97:53:92:b3:03:a4:1a:48:58:66:46:
                    18:17:41:fa:da:ae:65:ba:74:b2:41:f1:f7:f8:2e:
                    d8:2e:dc:9f:98:5a:97:15:bf:da:0f:92:51:40:80:
                    73:9a:24:81:dd:ba:d8:81:59:07:95:39:ac:a8:67:
                    a5:a2:e2:1e:8d:0d:3a:c9:b4:f0:c9:4e:5c:ff:d6:
                    1e:ce:aa:25:25:ea:87:81:d8:83:76:98:bb:e3:87:
                    63:21:36:3a:cc:1f:c9:db:71:9f:d7:6d:91:94:6b:
                    13:91:7f:5b:05:56:32:aa:6e:57:ff:67:6e:64:2a:
                    54:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:14:BD:94:60:C9:6D:48:94:EA:DA:24:9B:46:FE:49:B0:B9:84:58
            X509v3 Authority Key Identifier:
                keyid:1A:78:01:A0:A4:5F:EE:2C:AD:49:A5:10:10:71:39:5A:4B:F0:46:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GngBoKRf7iytSaUQEHE5WkvwRvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/0/1A7801A0A45FEE2CAD49A5101071395A4BF046FA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fc:10:cb:95:8c:32:95:e5:2f:70:73:a2:23:bc:85:28:88:
         3b:db:ae:ca:91:40:bd:94:ca:70:aa:d7:ca:4d:bf:23:20:12:
         ea:eb:e0:08:53:ef:29:38:f2:2b:0f:8f:df:87:55:12:2b:d6:
         57:84:09:ec:bc:27:23:0d:b7:31:3d:81:6e:ef:dc:c7:fe:9e:
         ed:c1:b6:0f:46:a8:6a:40:b7:1d:37:51:11:ea:db:2d:81:d8:
         91:54:6c:fa:c1:7f:9b:8b:02:bf:c2:3a:5e:09:83:37:a7:2e:
         41:40:1c:c9:c8:48:d3:e7:c1:c1:25:08:34:9c:18:17:04:e4:
         c5:21:14:50:ae:67:06:05:3a:f7:00:57:88:ba:40:a4:46:1f:
         ea:1a:15:75:b7:00:cc:20:71:7b:78:94:bd:0c:1c:20:cc:74:
         e1:8b:9d:4e:5b:95:9c:c2:1f:e2:98:a2:57:99:ad:2c:2b:db:
         0b:ec:af:16:7d:4b:0c:8b:d2:44:9d:26:fd:cd:99:8f:30:e5:
         ca:84:88:b1:94:56:68:e0:54:b8:3e:44:2c:6d:9e:18:15:48:
         db:26:7f:55:2b:d7:0e:20:e1:7d:f1:f1:ba:b1:e4:82:a5:70:
         38:91:4c:58:9f:34:fd:04:55:9b:17:4b:ce:bd:9e:2c:90:62:
         ce:d6:bf:55
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUNLpZYmnV98fl5o+m0km3coZ+Pp4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMWE3ODAxYTBhNDVmZWUyY2FkNDlhNTEwMTA3MTM5NWE0
YmYwNDZmYTAeFw0yNDExMDkyMTQ5NThaFw0yNDExMTAyMzMyNThaMDMxMTAvBgNV
BAMTKDIwMTRCRDk0NjBDOTZENDg5NEVBREEyNDlCNDZGRTQ5QjBCOTg0NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVFkyS3wb2muTlmMdCLTkk3VK3
xPIZ6C3jryTL399Ns5UtGM2NV/wjAvU7wr9TmP/TdUg8GwAlGrotYvntqEZ/MTCp
NsV4wzxXpN7Oh6nb3QiVhlFcpu4iXlQ4ImjuTZKn+FGMc5xE2VvhhcjVktImkmlF
1/l0c/5GLlVMS4wXgebnDAOhQipf+I6XU5KzA6QaSFhmRhgXQfrarmW6dLJB8ff4
Ltgu3J+YWpcVv9oPklFAgHOaJIHdutiBWQeVOayoZ6Wi4h6NDTrJtPDJTlz/1h7O
qiUl6oeB2IN2mLvjh2MhNjrMH8nbcZ/XbZGUaxORf1sFVjKqblf/Z25kKlRlAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUIBS9lGDJbUiU6tokm0b+SbC5hFgwHwYDVR0j
BBgwFoAUGngBoKRf7iytSaUQEHE5WkvwRvowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlh
YzQ5LzAvMUE3ODAxQTBBNDVGRUUyQ0FENDlBNTEwMTA3MTM5NUE0QkYwNDZGQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0duZ0JvS1JmN2l5dFNhVVFFSEU1V2t2
d1J2by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mZWNiYzQwNC1h
YzQzLTQ0OWItOGM3ZS04ZjFlOTlkOWFjNDkvMC8xQTc4MDFBMEE0NUZFRTJDQUQ0
OUE1MTAxMDcxMzk1QTRCRjA0NkZBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvwQy5WMMpXlL3BzoiO8
hSiIO9uuypFAvZTKcKrXyk2/IyAS6uvgCFPvKTjyKw+P34dVEivWV4QJ7LwnIw23
MT2Bbu/cx/6e7cG2D0aoakC3HTdREerbLYHYkVRs+sF/m4sCv8I6XgmDN6cuQUAc
ychI0+fBwSUINJwYFwTkxSEUUK5nBgU69wBXiLpApEYf6hoVdbcAzCBxe3iUvQwc
IMx04YudTluVnMIf4piiV5mtLCvbC+yvFn1LDIvSRJ0m/c2ZjzDlyoSIsZRWaOBU
uD5ELG2eGBVI2yZ/VSvXDiDhffHxurHkgqVwOJFMWJ80/QRVmxdLzr2eLJBizta/
VQ==
Generated at Sun Nov 10 02:19:42 2024 by rpki-client on console-fra.rpki-client.org