Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/19/ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.mft
File:                     ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.mft (raw, json)
Hash identifier:          vlLOfMhhSOOaVEPl/cN1bxokAUbnaUuzeI5M9Ojc2Rc=
Subject key identifier:   92:80:25:B8:9E:F7:78:FF:A1:A4:46:39:5A:29:0A:0B:C1:7C:C5:41
Authority key identifier: AC:AA:57:6B:51:33:A4:CF:BC:E0:92:A7:A5:C0:9B:CB:64:D3:C7:F8
Certificate issuer:       /CN=acaa576b5133a4cfbce092a7a5c09bcb64d3c7f8
Certificate serial:       615D5653F1CCC9FE6183A41E55264556182AF2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKpXa1EzpM-84JKnpcCby2TTx_g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/19/ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.mft
Manifest number:          0297
Signing time:             Tue 25 Jun 2024 22:13:37 +0000
Manifest this update:     Tue 25 Jun 2024 22:08:37 +0000
Manifest next update:     Thu 27 Jun 2024 00:37:37 +0000
Files and hashes:         1: ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.crl (hash: 5VBQY1yQYlJoxbkWyADq3GXfPQF0jkwOJW7jBJaWpws=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/19/ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/19/ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKpXa1EzpM-84JKnpcCby2TTx_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5d:56:53:f1:cc:c9:fe:61:83:a4:1e:55:26:45:56:18:2a:f2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acaa576b5133a4cfbce092a7a5c09bcb64d3c7f8
        Validity
            Not Before: Jun 25 22:08:37 2024 GMT
            Not After : Jun 27 00:37:37 2024 GMT
        Subject: CN=928025B89EF778FFA1A446395A290A0BC17CC541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:86:6a:3c:94:59:63:dc:03:86:35:af:f9:
                    35:b9:45:b7:fe:d4:06:63:09:4d:43:14:57:c1:df:
                    ef:eb:2f:41:88:8c:00:a9:fb:74:d8:cb:fd:c3:ce:
                    cf:b2:2d:aa:6c:4a:f4:b5:98:29:75:7b:ba:83:f5:
                    86:b2:7f:34:17:22:87:d8:03:89:08:5a:71:2c:11:
                    8c:34:cc:40:92:11:b9:2a:9b:5c:81:f7:0c:9e:5c:
                    43:28:9b:df:dc:dd:f6:1c:1c:12:ff:99:d0:43:23:
                    db:d3:88:4c:af:04:45:e8:38:b2:ad:d8:5b:0d:93:
                    f4:f0:b8:bc:82:4b:1f:68:c1:de:7f:bc:6e:aa:9d:
                    ea:fe:22:47:d4:d2:13:ca:ef:2b:96:dc:8d:7c:b6:
                    dd:02:8a:b1:f1:69:62:d5:df:ab:dd:f3:dd:9c:18:
                    79:9c:0a:07:b6:ab:73:b0:c6:3d:16:6e:34:43:7d:
                    f7:ef:48:68:1f:b9:67:cd:35:2d:1a:51:54:25:85:
                    e7:63:ff:f2:8b:83:4f:97:47:76:f9:f7:bf:8c:67:
                    31:2c:c0:13:44:4d:36:36:0e:06:fc:6d:e4:aa:8f:
                    0a:83:cc:0a:ee:9c:d4:0d:49:8e:b0:66:5c:e4:94:
                    2d:65:7b:db:e9:a4:50:88:2a:8f:7c:79:68:7d:11:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:80:25:B8:9E:F7:78:FF:A1:A4:46:39:5A:29:0A:0B:C1:7C:C5:41
            X509v3 Authority Key Identifier:
                keyid:AC:AA:57:6B:51:33:A4:CF:BC:E0:92:A7:A5:C0:9B:CB:64:D3:C7:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/19/ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKpXa1EzpM-84JKnpcCby2TTx_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/19/ACAA576B5133A4CFBCE092A7A5C09BCB64D3C7F8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:fd:96:0e:9f:95:dd:5c:da:a0:2a:67:61:44:3d:5f:2c:a3:
         a1:df:d6:f1:8e:a2:5a:cd:84:e2:44:7b:6c:ce:77:33:25:18:
         12:0e:f7:54:8a:98:af:29:1c:a4:a6:1c:7e:52:80:91:96:50:
         d2:81:dd:48:e3:78:2b:26:46:1e:7f:90:f2:57:79:4c:ca:30:
         56:4d:69:4c:02:9b:16:96:22:55:53:ca:8a:df:18:e7:6d:db:
         84:80:17:56:1d:78:24:06:6c:f2:c6:e1:33:aa:8a:a9:8b:8d:
         0a:89:28:9d:73:bf:95:61:48:6b:ed:fd:8e:c8:35:bb:19:2b:
         a0:80:e6:7e:81:a8:f1:ff:af:60:d1:20:af:bd:79:ca:34:ea:
         4b:bd:8a:c5:1b:a5:03:97:c2:a5:5a:91:4f:99:5c:2b:09:90:
         87:b4:38:41:1c:0a:50:62:01:f0:7b:9b:f1:ed:a4:28:d9:30:
         39:fe:f3:5b:e3:6d:9f:e5:f5:0d:d9:37:ec:55:ba:3a:8c:87:
         37:62:bc:d9:ff:cf:59:f9:49:60:6e:17:48:24:7e:a2:79:51:
         2f:ee:5d:30:a1:64:5a:a6:ee:ab:68:83:f6:30:55:16:d2:ed:
         b3:65:da:39:bd:bb:a5:3e:b2:88:71:aa:0c:15:7d:eb:36:b4:
         57:f5:26:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:30:25 2024 by rpki-client on console.sobornost.net