Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft
File:                     DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft (raw, json)
Hash identifier:          VA14ZuVSeRcD2TL/j7iacJoNxGkdbtv6uXRxs1iujrA=
Subject key identifier:   31:18:0F:DB:84:C4:3F:02:F8:0B:E1:97:96:78:E3:94:25:7C:07:77
Authority key identifier: DD:A3:7A:F6:93:5A:69:E2:BE:1C:7D:86:46:85:80:72:6A:8B:30:DE
Certificate issuer:       /CN=dda37af6935a69e2be1c7d86468580726a8b30de
Certificate serial:       1216C942C92E07E9821833B5DEECED830E1DC035
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3aN69pNaaeK-HH2GRoWAcmqLMN4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft
Manifest number:          0323
Signing time:             Tue 25 Jun 2024 23:43:37 +0000
Manifest this update:     Tue 25 Jun 2024 23:38:37 +0000
Manifest next update:     Wed 26 Jun 2024 23:47:37 +0000
Files and hashes:         1: DDA37AF6935A69E2BE1C7D86468580726A8B30DE.crl (hash: OWuJYzNf4LXk58YhC93a+VrgW6/YD+c38yET8lQB53k=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3aN69pNaaeK-HH2GRoWAcmqLMN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:16:c9:42:c9:2e:07:e9:82:18:33:b5:de:ec:ed:83:0e:1d:c0:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dda37af6935a69e2be1c7d86468580726a8b30de
        Validity
            Not Before: Jun 25 23:38:37 2024 GMT
            Not After : Jun 26 23:47:37 2024 GMT
        Subject: CN=31180FDB84C43F02F80BE1979678E394257C0777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5e:76:c2:ef:ca:7d:31:28:04:a3:bb:5a:89:
                    51:93:7c:57:61:6f:d5:b4:c8:72:bb:8e:3e:22:64:
                    93:36:3e:94:87:4f:5d:23:b2:2e:bf:31:24:95:2d:
                    09:88:65:4c:52:20:a5:74:d6:30:02:c1:1d:07:52:
                    5b:7b:eb:c8:0b:ac:36:d3:0b:90:c7:97:72:7b:4a:
                    f1:14:de:6c:1f:38:cb:49:1d:1c:10:18:45:54:b1:
                    b4:19:5a:29:98:ca:58:e5:87:c0:17:0c:7d:72:38:
                    49:ae:44:20:ee:e4:59:4e:34:f6:e9:54:37:0a:25:
                    0b:b3:b0:47:5f:55:6f:37:09:78:31:99:3c:d4:ae:
                    a4:7e:f2:02:1f:7e:fc:cb:97:ae:60:ed:d6:f9:07:
                    bd:35:36:1e:3a:0b:35:62:b2:27:28:34:90:33:09:
                    1a:df:3e:b4:54:ea:3c:54:cb:dd:ad:18:32:d9:77:
                    0b:fc:a4:5b:9a:bb:c3:d3:c2:e7:c7:d1:cb:4b:4a:
                    5b:d1:8d:8e:5d:f1:d0:f8:97:e9:0c:ae:a6:a7:ed:
                    c8:34:65:be:94:32:3a:59:c9:c1:9e:98:93:c6:cb:
                    bf:1e:7b:10:82:ed:6b:3e:64:24:9d:d4:9f:84:d3:
                    c6:da:00:a0:c3:0d:8b:71:14:18:a9:5b:5b:e9:f2:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:18:0F:DB:84:C4:3F:02:F8:0B:E1:97:96:78:E3:94:25:7C:07:77
            X509v3 Authority Key Identifier:
                keyid:DD:A3:7A:F6:93:5A:69:E2:BE:1C:7D:86:46:85:80:72:6A:8B:30:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3aN69pNaaeK-HH2GRoWAcmqLMN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/4/DDA37AF6935A69E2BE1C7D86468580726A8B30DE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d5:d4:f0:c6:5e:d6:b1:7e:66:ab:ca:39:14:e9:19:70:78:
         d8:8f:e0:0e:71:20:75:a9:1c:5d:9d:e6:30:f2:1f:e2:4b:be:
         73:94:43:fd:a9:f8:9c:ee:49:2f:2c:6a:b1:a4:80:5e:99:b2:
         5b:ba:6d:22:bd:77:33:80:c9:b3:f2:bb:22:89:34:a6:39:b6:
         94:a4:e3:5a:ed:c7:7a:a1:14:16:9e:d8:2a:26:df:00:91:05:
         44:a2:ce:88:29:8e:b1:85:7f:8e:54:de:7a:83:e0:df:2d:ee:
         9d:04:19:f7:67:36:7a:d4:1b:e9:92:8d:06:de:9e:5a:29:b7:
         0d:de:3f:dd:d0:c4:25:d2:2a:60:ce:28:33:d1:91:27:bd:34:
         e0:68:fe:e9:93:67:73:58:6f:a4:7a:60:09:25:a3:f9:25:45:
         6d:dc:31:ce:50:3d:63:e6:a7:d4:de:af:88:83:9e:26:f7:d4:
         02:ef:01:ce:f7:72:96:6b:85:10:09:d9:51:a0:f1:b1:af:e9:
         3f:c7:14:a7:8d:25:83:57:f6:fb:66:0d:55:f3:2c:55:b1:1e:
         a2:bb:e0:5b:1f:41:9d:b5:b1:e5:89:97:05:c4:f5:21:95:1b:
         d2:22:07:77:bd:6c:b5:97:da:85:0d:5d:6f:24:24:ba:46:d9:
         40:47:80:76
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUEhbJQskuB+mCGDO13uztgw4dwDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGRhMzdhZjY5MzVhNjllMmJlMWM3ZDg2NDY4NTgwNzI2
YThiMzBkZTAeFw0yNDA2MjUyMzM4MzdaFw0yNDA2MjYyMzQ3MzdaMDMxMTAvBgNV
BAMTKDMxMTgwRkRCODRDNDNGMDJGODBCRTE5Nzk2NzhFMzk0MjU3QzA3NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXnbC78p9MSgEo7taiVGTfFdh
b9W0yHK7jj4iZJM2PpSHT10jsi6/MSSVLQmIZUxSIKV01jACwR0HUlt768gLrDbT
C5DHl3J7SvEU3mwfOMtJHRwQGEVUsbQZWimYyljlh8AXDH1yOEmuRCDu5FlONPbp
VDcKJQuzsEdfVW83CXgxmTzUrqR+8gIffvzLl65g7db5B701Nh46CzVisicoNJAz
CRrfPrRU6jxUy92tGDLZdwv8pFuau8PTwufH0ctLSlvRjY5d8dD4l+kMrqan7cg0
Zb6UMjpZycGemJPGy78eexCC7Ws+ZCSd1J+E08baAKDDDYtxFBipW1vp8sH7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUMRgP24TEPwL4C+GXlnjjlCV8B3cwHwYDVR0j
BBgwFoAU3aN69pNaaeK+HH2GRoWAcmqLMN4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2I1NzVlYTctNzg2Zi00YjJkLWE0NTUtNzlkN2ZjNDNl
Y2VlLzQvRERBMzdBRjY5MzVBNjlFMkJFMUM3RDg2NDY4NTgwNzI2QThCMzBERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNhTjY5cE5hYWVLLUhIMkdSb1dBY21x
TE1ONC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YjU3NWVhNy03
ODZmLTRiMmQtYTQ1NS03OWQ3ZmM0M2VjZWUvNC9EREEzN0FGNjkzNUE2OUUyQkUx
QzdEODY0Njg1ODA3MjZBOEIzMERFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNXU8MZe1rF+ZqvKORTp
GXB42I/gDnEgdakcXZ3mMPIf4ku+c5RD/an4nO5JLyxqsaSAXpmyW7ptIr13M4DJ
s/K7Iok0pjm2lKTjWu3HeqEUFp7YKibfAJEFRKLOiCmOsYV/jlTeeoPg3y3unQQZ
92c2etQb6ZKNBt6eWim3Dd4/3dDEJdIqYM4oM9GRJ7004Gj+6ZNnc1hvpHpgCSWj
+SVFbdwxzlA9Y+an1N6viIOeJvfUAu8BzvdylmuFEAnZUaDxsa/pP8cUp40lg1f2
+2YNVfMsVbEeorvgWx9BnbWx5YmXBcT1IZUb0iIHd71stZfahQ1dbyQkukbZQEeA
dg==
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:30:26 2024 by rpki-client on console.sobornost.net