Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
File:                     F066639311596E151E78E34CCC584DC5F500F585.mft (raw, json)
Hash identifier:          Krk6qPXczQpADvuPaV8+l3qYUOspGzBvzkrPOG18Il0=
Subject key identifier:   49:17:D6:84:F2:FC:E6:6C:1C:52:C0:A0:40:BE:31:A1:E0:12:94:5A
Authority key identifier: F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85
Certificate issuer:       /CN=F066639311596E151E78E34CCC584DC5F500F585
Certificate serial:       1C7D233074D13984956837631D9833831CE396DE
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
Manifest number:          045E
Signing time:             Wed 07 May 2025 06:29:47 +0000
Manifest this update:     Wed 07 May 2025 06:24:47 +0000
Manifest next update:     Thu 08 May 2025 08:55:47 +0000
Files and hashes:         1: F066639311596E151E78E34CCC584DC5F500F585.crl (hash: JvhJWsWq9siKpGu49q1QriqKi2mr29oD/XsooXu+vx4=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7d:23:30:74:d1:39:84:95:68:37:63:1d:98:33:83:1c:e3:96:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F066639311596E151E78E34CCC584DC5F500F585
        Validity
            Not Before: May  7 06:24:47 2025 GMT
            Not After : May  8 08:55:47 2025 GMT
        Subject: CN=4917D684F2FCE66C1C52C0A040BE31A1E012945A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cd:cb:c6:a8:27:68:9b:3b:a1:3a:57:60:5b:
                    6d:f5:88:41:16:f3:49:25:b5:76:25:97:b6:97:6b:
                    94:49:c3:f1:45:51:93:be:27:64:7f:4e:7d:4e:6d:
                    f5:ae:af:e0:51:d9:7a:ff:b9:2a:8a:a5:ef:3a:d2:
                    c9:40:cd:91:63:f2:5c:9d:ef:a5:38:0c:02:95:83:
                    f0:50:97:ee:45:c0:81:7a:95:3a:d5:5d:cc:58:a8:
                    59:15:ee:96:e8:5a:af:9f:a7:a7:ec:c1:d3:57:23:
                    51:6d:2b:d2:7c:23:89:58:66:63:cc:c6:7f:55:67:
                    cd:c7:97:20:24:80:cb:98:6a:f9:72:9d:69:6c:ee:
                    b9:6d:38:d1:1e:d5:0d:45:40:ab:04:79:74:38:2f:
                    0d:a3:9a:48:7d:38:2c:b0:11:88:fe:b4:b6:a0:78:
                    12:d6:66:39:72:7f:d0:14:e9:fc:84:0f:52:dc:6e:
                    89:4b:c3:73:6d:ad:65:88:b2:bb:cd:e4:8d:e4:64:
                    c2:59:20:7d:0d:66:ce:91:a0:3c:bb:e9:07:2d:84:
                    68:cf:b5:c6:4a:e1:10:90:0b:58:cb:5e:e9:42:bf:
                    dc:53:40:e5:8d:ae:4e:56:6b:59:ee:4e:dd:96:c0:
                    13:da:98:dd:09:7a:ca:7e:80:fe:9d:54:99:6d:d5:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:17:D6:84:F2:FC:E6:6C:1C:52:C0:A0:40:BE:31:A1:E0:12:94:5A
            X509v3 Authority Key Identifier:
                keyid:F0:66:63:93:11:59:6E:15:1E:78:E3:4C:CC:58:4D:C5:F5:00:F5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F066639311596E151E78E34CCC584DC5F500F585.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F066639311596E151E78E34CCC584DC5F500F585.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:84:5b:d4:63:73:97:eb:a6:6b:3a:02:24:f5:08:a4:18:ca:
         26:b8:0e:e8:88:f5:c1:d7:88:73:c1:64:bf:a6:4f:ce:8a:43:
         0c:32:cb:02:a6:9c:28:fc:9b:6f:3d:2f:5a:c1:1d:73:b5:ef:
         5f:22:8f:1c:64:fd:97:31:aa:a5:8a:17:1c:8f:fa:58:56:39:
         a9:55:eb:76:32:31:d0:c9:42:2d:1d:5f:51:85:6e:64:8b:5c:
         e5:50:3d:99:14:49:89:e3:a1:4a:ed:84:e1:46:e5:7d:62:1d:
         b7:ef:c2:40:24:35:8e:fc:60:18:85:45:cb:64:fd:09:81:7a:
         2a:3b:ab:56:16:eb:0c:77:93:93:6f:eb:d8:71:1d:61:43:e3:
         75:37:1c:e4:4b:79:af:d7:e2:d6:c3:76:00:43:1b:64:0e:d2:
         67:4b:eb:34:b0:00:59:c0:32:3d:63:2f:b1:18:cf:57:c9:68:
         45:89:cd:00:c8:2b:0b:f7:0c:df:21:55:8f:40:01:2b:f3:a7:
         7a:fa:00:07:2e:5c:22:f7:a7:28:1a:9b:75:ef:f7:60:4b:8f:
         9d:06:f3:ed:ac:97:c4:15:90:4c:bc:89:5a:a2:5b:d0:1c:96:
         79:fb:ee:5d:23:9b:3d:57:22:cb:b4:6c:6b:91:b4:73:66:42:
         9d:3e:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 22:07:52 2025 by rpki-client