Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.mft
File:                     698CBB9E641A60FE66E1B58C92ACD281637ED767.mft (raw, json)
Hash identifier:          44yp4s0meqa6IUSHXgWGDgtwaPClyUmbKRt+lk+acGc=
Subject key identifier:   DC:39:C0:E3:D0:8B:3F:05:8A:AA:C2:0A:5F:2A:5F:FE:93:65:85:B1
Authority key identifier: 69:8C:BB:9E:64:1A:60:FE:66:E1:B5:8C:92:AC:D2:81:63:7E:D7:67
Certificate issuer:       /CN=698CBB9E641A60FE66E1B58C92ACD281637ED767
Certificate serial:       7AAC17CB4455348BAD1DB0E9F6E828B24474FCAF
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/698CBB9E641A60FE66E1B58C92ACD281637ED767.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.mft
Manifest number:          07
Signing time:             Tue 25 Jun 2024 20:12:54 +0000
Manifest this update:     Tue 25 Jun 2024 20:07:54 +0000
Manifest next update:     Wed 26 Jun 2024 23:31:54 +0000
Files and hashes:         1: 698CBB9E641A60FE66E1B58C92ACD281637ED767.crl (hash: MA9yTcihigUgndJnJu9Lg6oB9o9mUyJ5vDTyyPGbhnI=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/698CBB9E641A60FE66E1B58C92ACD281637ED767.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/A715A7C4243DFD5608AC7C5962055125B94D1763.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pxWnxCQ9_VYIrHxZYgVRJblNF2M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 18:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ac:17:cb:44:55:34:8b:ad:1d:b0:e9:f6:e8:28:b2:44:74:fc:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698CBB9E641A60FE66E1B58C92ACD281637ED767
        Validity
            Not Before: Jun 25 20:07:54 2024 GMT
            Not After : Jun 26 23:31:54 2024 GMT
        Subject: CN=DC39C0E3D08B3F058AAAC20A5F2A5FFE936585B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:86:91:e7:4b:83:9f:c0:f0:10:79:40:e4:39:
                    e5:05:5b:cb:f4:91:b5:39:2b:0c:80:e2:7e:d6:a2:
                    bd:13:c3:a2:22:17:2c:de:08:6c:e3:08:f6:9c:b2:
                    d9:2b:30:c7:d0:13:bb:2b:0b:27:17:21:88:c9:f2:
                    c5:ef:ec:0f:8e:00:56:df:bf:aa:d4:bc:0c:18:04:
                    16:46:df:87:22:22:9c:3f:a1:ee:80:38:28:5f:5f:
                    0b:cf:c8:c7:87:63:6d:49:2e:2b:05:be:04:80:1d:
                    b7:5e:2d:59:a8:6a:33:ad:29:8d:7f:e1:f9:f4:93:
                    39:99:32:0a:c9:af:72:2c:96:1c:e4:e0:ae:48:f3:
                    bd:94:0c:3a:e0:e3:2c:9d:fc:b8:5d:1a:36:04:d8:
                    38:a3:c1:d5:36:09:92:e3:38:e6:7c:25:ee:8e:24:
                    2c:17:c8:fb:11:7c:a9:8d:f0:9f:df:df:1e:6c:ce:
                    77:0a:99:9a:fb:cf:08:53:c8:8a:45:a3:c6:34:a5:
                    a1:92:db:d5:dd:c4:17:0f:28:45:62:5f:01:c4:34:
                    0f:91:41:16:78:64:59:12:08:fe:e0:f3:14:19:fa:
                    64:8f:a9:d6:49:f1:b8:49:4a:5b:85:de:89:e7:ac:
                    80:63:6a:c7:0c:7f:aa:37:a5:d5:70:a6:3c:49:54:
                    a7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:39:C0:E3:D0:8B:3F:05:8A:AA:C2:0A:5F:2A:5F:FE:93:65:85:B1
            X509v3 Authority Key Identifier:
                keyid:69:8C:BB:9E:64:1A:60:FE:66:E1:B5:8C:92:AC:D2:81:63:7E:D7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/1/698CBB9E641A60FE66E1B58C92ACD281637ED767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/2/698CBB9E641A60FE66E1B58C92ACD281637ED767.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:80:87:c0:38:16:42:07:d8:1b:2b:9d:f4:e4:fa:53:c6:b7:
         88:f5:a2:8a:61:f3:69:58:a5:7b:54:7c:81:ca:6b:de:26:fe:
         23:d3:4d:c2:2e:2b:c4:8a:1a:2d:49:84:cb:6a:db:5a:5f:01:
         88:c3:54:44:ea:2e:05:f4:8d:3f:57:33:b0:95:d8:4c:01:03:
         51:3d:dc:61:47:02:a6:39:ec:68:de:d2:97:05:bb:7a:f4:87:
         39:cb:3e:33:01:1f:59:2a:09:bd:05:af:85:d3:be:b1:f5:9c:
         7f:b2:73:1c:3f:54:69:e8:76:2d:f4:55:a3:59:74:13:a8:a7:
         eb:e2:7f:0f:d5:fd:fc:ba:a4:e9:c6:f1:d2:d5:88:e9:d9:ad:
         cd:33:0b:3d:bd:91:fd:6e:0d:35:98:44:ab:a9:bf:6d:56:9e:
         cb:1a:20:17:fa:41:2f:8d:7a:40:37:cb:af:49:49:8c:5d:b3:
         14:53:7d:b5:05:28:71:ad:e5:1f:1a:59:58:7f:23:ef:19:d1:
         44:eb:21:3e:a7:e0:82:b8:0e:8d:1e:55:22:54:3c:53:43:26:
         57:95:f9:c2:f8:c7:54:dd:10:d8:b4:74:a8:db:d0:58:76:05:
         36:ab:0a:fd:d4:70:92:ca:f6:8f:71:be:de:48:f1:24:17:5a:
         d3:0b:10:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:30:20 2024 by rpki-client on console.sobornost.net