Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.mft
File:                     119CE8E9E7C4D85EEC64153B32AD2938118CF280.mft (raw, json)
Hash identifier:          GufGq4YUgU/OSL6Xeumatvk3DGSihJCgq6Q+NvC5XxM=
Subject key identifier:   39:D0:B2:D6:45:4A:33:B2:76:ED:4E:4B:2C:ED:DF:A9:78:BE:09:EE
Authority key identifier: 11:9C:E8:E9:E7:C4:D8:5E:EC:64:15:3B:32:AD:29:38:11:8C:F2:80
Certificate issuer:       /CN=119ce8e9e7c4d85eec64153b32ad2938118cf280
Certificate serial:       1E07B3466A6DB40567FBBBCC0B1844714B84DC02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EZzo6efE2F7sZBU7Mq0pOBGM8oA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.mft
Manifest number:          0326
Signing time:             Tue 25 Jun 2024 12:48:37 +0000
Manifest this update:     Tue 25 Jun 2024 12:43:37 +0000
Manifest next update:     Wed 26 Jun 2024 15:42:37 +0000
Files and hashes:         1: 119CE8E9E7C4D85EEC64153B32AD2938118CF280.crl (hash: hym69iBqo8/Oe1sDh3nuGCDkFcHxcUkgNNQN4dNVFMQ=)
                          2: AS205789.asa (hash: fNyr4+ZO4lx/cmc26iGkkuevzba5LYLhJw1/6UROwOc=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EZzo6efE2F7sZBU7Mq0pOBGM8oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 15:42:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:07:b3:46:6a:6d:b4:05:67:fb:bb:cc:0b:18:44:71:4b:84:dc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=119ce8e9e7c4d85eec64153b32ad2938118cf280
        Validity
            Not Before: Jun 25 12:43:37 2024 GMT
            Not After : Jun 26 15:42:37 2024 GMT
        Subject: CN=39D0B2D6454A33B276ED4E4B2CEDDFA978BE09EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:44:11:75:88:d5:6e:59:ac:dd:77:74:ee:
                    7e:3b:af:67:7a:0b:aa:4f:1c:c5:b4:ea:67:ca:3a:
                    ae:92:e8:6e:10:6a:c3:50:1d:6b:28:df:61:d7:d6:
                    d8:38:32:2e:1f:bb:ea:24:72:27:9c:10:73:0d:49:
                    9e:4a:af:5c:12:6e:70:75:d5:b3:08:c0:aa:a5:68:
                    4d:41:cb:a9:c2:e0:59:ae:46:d8:a5:5f:01:96:d7:
                    2f:a2:94:7f:16:e7:d4:38:d5:a7:cf:b5:1d:83:46:
                    f5:73:58:3a:35:fe:ae:3f:37:b9:2d:81:29:3e:a8:
                    c3:4f:2a:a9:e4:80:bd:93:9d:ad:83:d0:ac:e4:38:
                    01:92:d0:f1:ea:52:5f:5b:cd:08:57:08:d0:28:99:
                    ae:2a:45:25:49:2d:0a:3c:d8:c9:27:9d:a2:e5:cf:
                    a6:fd:71:1e:96:5b:b3:1c:c0:50:35:96:d6:b5:cb:
                    f1:46:b3:bb:c8:cd:13:1d:f6:2f:8b:1b:b6:13:5f:
                    0d:0c:61:b7:f5:a2:9b:fb:71:07:c6:5e:c0:91:6e:
                    14:f3:b8:0a:c5:eb:bf:3a:3d:f2:6c:4e:e5:c6:43:
                    1e:3b:2d:a7:54:4d:d6:ee:fe:ea:fe:57:cd:91:98:
                    ef:a0:21:2d:5f:d2:d9:2f:b7:92:c0:73:33:b4:84:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:B2:D6:45:4A:33:B2:76:ED:4E:4B:2C:ED:DF:A9:78:BE:09:EE
            X509v3 Authority Key Identifier:
                keyid:11:9C:E8:E9:E7:C4:D8:5E:EC:64:15:3B:32:AD:29:38:11:8C:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZzo6efE2F7sZBU7Mq0pOBGM8oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e7:23:bb:33:32:78:71:a5:19:d7:f5:84:da:8b:c6:07:60:
         b0:1d:5b:aa:9a:8f:29:32:17:2b:f5:5e:a5:a5:34:1b:b4:6c:
         99:a8:c7:ec:08:a9:8e:6f:38:71:e4:c8:15:e8:7f:67:1c:97:
         36:0b:98:b6:7f:97:2a:79:65:c8:3d:30:9d:ad:21:35:83:c8:
         30:36:3c:d0:1c:0d:94:93:c0:66:c3:24:26:72:0f:92:f9:6c:
         d0:39:e3:6f:6b:c8:95:20:d4:1f:5e:75:02:c8:1a:bc:cf:74:
         ae:0a:8a:f8:44:ea:40:9c:1f:c8:d4:a6:b9:9b:f0:46:7d:eb:
         bf:e4:be:44:dc:d4:00:57:0f:0c:2b:80:dc:70:d4:52:7f:ac:
         9a:e4:31:cb:be:d8:f3:37:0f:51:f4:3f:46:62:f1:22:54:61:
         15:c7:ce:aa:d4:c8:a0:8b:76:f7:4f:a1:b1:79:87:fd:b4:a5:
         0c:d2:34:56:c3:3d:40:34:c5:55:12:e8:1d:92:3d:ee:aa:4b:
         74:26:55:07:ea:19:19:49:77:da:58:9b:47:68:1a:98:1c:cb:
         f4:a3:e7:35:04:00:b9:59:9e:e2:fa:85:a8:31:bb:eb:9d:cd:
         4c:ed:d7:ff:4a:aa:2d:1a:de:d9:b5:d5:e4:b4:8b:b1:bd:f0:
         25:62:45:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:30:24 2024 by rpki-client on console.sobornost.net