Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
File:                     B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft (raw, json)
Hash identifier:          yOFDNDYFXoF0uJ5FiYcfQHLDFBW7jG4/0DjwNWGGlZA=
Subject key identifier:   DD:EC:D1:3A:54:8F:88:52:5B:C3:D8:93:DD:F1:FE:09:C0:67:E7:B7
Authority key identifier: B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E
Certificate issuer:       /CN=b1d3049ab90b73314f2adfcad639336d9320b35e
Certificate serial:       31B038740939C3382CEE41FFDA1799D829FCC231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
Manifest number:          8E
Signing time:             Tue 29 Apr 2025 07:56:09 +0000
Manifest this update:     Tue 29 Apr 2025 07:51:09 +0000
Manifest next update:     Wed 30 Apr 2025 08:53:09 +0000
Files and hashes:         1: B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl (hash: C4Eb0cMzB1Hf5UbPa7Ec57CMikeIWoqNXAjFHXNSvSA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 08:46:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b0:38:74:09:39:c3:38:2c:ee:41:ff:da:17:99:d8:29:fc:c2:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d3049ab90b73314f2adfcad639336d9320b35e
        Validity
            Not Before: Apr 29 07:51:09 2025 GMT
            Not After : Apr 30 08:53:09 2025 GMT
        Subject: CN=DDECD13A548F88525BC3D893DDF1FE09C067E7B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:be:3b:52:14:d8:61:38:ba:74:45:56:fc:e9:
                    2a:08:e8:6f:aa:f8:26:dd:10:5b:39:6d:c3:9c:d5:
                    8b:46:13:ba:20:6f:b2:13:58:5e:49:cd:43:f1:b0:
                    b5:07:5e:d2:ff:9d:b7:6f:19:6f:70:5f:a1:18:c5:
                    24:50:9c:ed:0a:9d:94:cf:2d:7b:1d:ef:41:6a:0f:
                    55:2e:85:06:a7:b7:62:87:ee:51:55:28:e8:aa:e9:
                    55:4b:1c:76:f5:7a:55:83:00:6e:23:95:b8:4a:58:
                    73:5e:5d:b7:53:0e:fd:b9:d5:0e:ad:52:87:65:23:
                    4a:43:4f:c4:3d:2c:98:2f:17:2e:45:8f:0d:ca:e5:
                    a7:3e:95:09:5e:b1:2a:e4:33:f2:c6:f0:fe:11:da:
                    c1:64:50:a9:64:b2:f6:85:6a:4e:9b:4f:34:ca:64:
                    99:c9:a3:be:e3:48:f5:46:2d:f0:b6:2f:51:c4:56:
                    33:d3:93:04:60:d7:d3:8d:b0:82:fd:1f:5c:44:99:
                    d9:22:fa:16:60:8d:ce:90:5e:c3:a8:3d:fd:d4:5b:
                    a2:39:5e:eb:e0:01:0a:10:22:f4:b6:30:77:d0:2b:
                    04:7d:f2:9e:42:28:ec:98:a9:cf:87:35:95:84:38:
                    d3:f1:c5:22:4d:86:f1:a3:2d:ce:fb:d4:59:90:28:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:EC:D1:3A:54:8F:88:52:5B:C3:D8:93:DD:F1:FE:09:C0:67:E7:B7
            X509v3 Authority Key Identifier:
                keyid:B1:D3:04:9A:B9:0B:73:31:4F:2A:DF:CA:D6:39:33:6D:93:20:B3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdMEmrkLczFPKt_K1jkzbZMgs14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/80a6dc53-b20d-453a-b7e5-3e06ef42bd26/0/B1D3049AB90B73314F2ADFCAD639336D9320B35E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:1b:7a:ac:31:9c:3d:db:79:d0:9e:c0:9b:65:7c:ef:09:5b:
         c0:c6:b0:34:34:91:66:7e:1a:bc:86:4a:3b:ce:90:73:c0:5e:
         44:28:8f:75:71:db:ff:31:16:69:c3:03:26:13:61:65:50:e3:
         ff:63:83:41:73:17:76:5c:fd:e4:3b:9a:f3:35:ee:72:56:aa:
         40:cb:2c:52:bd:85:77:85:65:59:7b:e1:03:8e:56:e0:05:5e:
         66:40:ea:0a:50:55:34:18:a4:ac:08:0a:c6:db:d8:80:d6:9a:
         11:a6:92:06:1d:64:2b:7c:a7:67:e5:fc:19:6c:56:60:b8:cf:
         ae:53:dc:f9:f0:e1:df:cc:dc:72:9e:13:d9:28:d5:4a:70:c6:
         8e:95:3b:68:f2:e8:a8:e6:db:d5:75:ef:2c:c5:0e:5c:cd:35:
         43:45:22:6c:eb:86:93:28:d6:ab:3d:e9:92:8d:ad:5d:ec:ca:
         1b:a5:79:5b:5a:60:9e:f1:4b:d1:89:02:8f:55:fc:9b:ab:cd:
         78:e3:7f:33:2f:64:2b:23:e1:09:32:bb:fd:05:d9:e2:2f:bb:
         73:e5:60:16:af:7a:88:79:df:82:0c:ac:37:80:54:88:68:d8:
         93:2d:95:7c:4c:18:92:5d:fe:eb:2e:23:5f:e2:e3:ac:c4:00:
         a4:e3:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:54:33 2025 by rpki-client