Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft
File:                     32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft (raw, json)
Hash identifier:          c0TupI+UG3s/bLvy4/rHXwrqF2H0TBGk+WhKALk33nQ=
Subject key identifier:   66:39:F7:99:D6:B4:A9:31:FD:C6:B5:BE:C2:16:F8:9A:5C:82:7D:8F
Authority key identifier: 32:F7:DA:9A:5D:29:D2:B5:1E:F3:E5:BA:CE:EC:E1:59:65:A5:43:FD
Certificate issuer:       /CN=32f7da9a5d29d2b51ef3e5baceece15965a543fd
Certificate serial:       4663F000C918E6BD411E237BC7FEAC66BCCC054E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mvfaml0p0rUe8-W6zuzhWWWlQ_0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft
Manifest number:          0B
Signing time:             Fri 21 Jun 2024 18:15:06 +0000
Manifest this update:     Fri 21 Jun 2024 18:10:06 +0000
Manifest next update:     Sat 22 Jun 2024 22:02:06 +0000
Files and hashes:         1: 32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.crl (hash: Y2SioXgmmteOld1b4rrADgXRE+WwdPnKD2cgvXotEQ4=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mvfaml0p0rUe8-W6zuzhWWWlQ_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Jun 2024 09:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:63:f0:00:c9:18:e6:bd:41:1e:23:7b:c7:fe:ac:66:bc:cc:05:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f7da9a5d29d2b51ef3e5baceece15965a543fd
        Validity
            Not Before: Jun 21 18:10:06 2024 GMT
            Not After : Jun 22 22:02:06 2024 GMT
        Subject: CN=6639F799D6B4A931FDC6B5BEC216F89A5C827D8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:89:26:a9:3f:69:f2:8e:37:46:e2:cf:b0:f4:
                    db:73:1a:47:14:24:9c:63:33:41:a8:a3:db:0b:8b:
                    a5:30:88:ec:58:b8:5b:9b:0b:db:7f:0e:39:af:08:
                    13:73:23:80:0d:5e:59:ec:85:a0:ca:c3:0e:98:ae:
                    79:db:bd:7e:2b:50:a7:ca:dc:fe:1e:79:61:c9:2f:
                    c4:a9:99:29:e9:0c:e5:1c:94:7e:5d:07:8c:c2:7f:
                    82:17:c0:d3:28:aa:e3:96:d6:cf:4e:e2:0f:cc:d7:
                    2a:a4:a8:b8:78:f6:02:20:32:94:39:40:28:1a:32:
                    51:1a:ed:6f:c2:de:30:e2:d5:ec:e4:f9:45:cf:e6:
                    ff:d8:9a:7d:4c:e3:9f:9c:a6:a1:89:5b:97:22:bc:
                    cd:f9:44:bf:e4:f4:04:52:36:b0:bf:ab:b8:01:94:
                    b2:1f:46:5a:b8:ba:f1:e3:e7:82:c2:7f:83:0d:bd:
                    fa:86:0e:6e:41:86:ea:32:2d:60:33:7e:c3:b5:7e:
                    c8:95:9a:82:e0:6d:e4:62:c8:5a:5c:d6:08:7b:6a:
                    85:ef:89:44:ae:26:d0:6f:3f:30:5c:c8:8c:11:40:
                    53:36:eb:d8:fe:66:b5:32:91:09:47:8a:6f:d7:aa:
                    d4:ba:00:43:8b:9a:38:c0:03:7a:1d:61:f8:31:0b:
                    f6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:39:F7:99:D6:B4:A9:31:FD:C6:B5:BE:C2:16:F8:9A:5C:82:7D:8F
            X509v3 Authority Key Identifier:
                keyid:32:F7:DA:9A:5D:29:D2:B5:1E:F3:E5:BA:CE:EC:E1:59:65:A5:43:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mvfaml0p0rUe8-W6zuzhWWWlQ_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/4/32F7DA9A5D29D2B51EF3E5BACEECE15965A543FD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:96:9e:5e:5c:a2:f4:c6:0b:fd:bd:a1:66:55:0d:e2:09:88:
         c9:7d:e3:03:98:6e:a2:50:1d:3a:c1:4d:f5:a3:51:11:a8:66:
         e0:c8:b3:81:7e:f8:0e:52:40:b9:99:d4:35:d8:44:99:af:2c:
         53:68:71:39:74:df:e4:fb:95:65:c5:66:49:56:b8:2b:f5:09:
         88:4d:57:a1:43:70:df:ea:a1:78:6c:9f:1f:2f:9b:2a:9b:b9:
         34:1f:03:41:ee:c5:84:2e:86:76:56:37:8c:61:a7:90:6f:95:
         af:49:31:24:72:aa:e2:29:16:4a:49:4b:d7:35:a4:2f:12:e2:
         58:4e:b7:8c:25:e0:a0:94:d6:59:e7:28:0f:0f:1a:09:56:18:
         e5:cc:ea:1b:1e:d0:51:90:be:c3:29:d1:0c:73:37:d2:2e:a2:
         2d:d3:a2:a2:8f:4d:eb:ad:e3:cf:06:b6:bc:f4:46:7a:3e:fa:
         d3:22:b0:09:85:f5:22:03:67:48:a9:98:e8:01:79:89:65:1e:
         07:86:1e:bc:5c:d1:db:58:75:0c:a9:2e:9f:d9:34:6f:07:fb:
         22:bc:eb:f5:b4:8f:6f:31:95:e1:c4:94:aa:10:4f:76:b8:8f:
         5a:c6:cb:9e:ff:3c:c7:d7:05:29:85:73:50:d7:79:9c:24:2a:
         2c:d5:fa:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:50:42 2024 by rpki-client on console.sobornost.net