Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
File:                     AC428C8EED241857F73D0F3D483ABECB240519D0.mft (raw, json)
Hash identifier:          BT0auIC0awy9HlYiWj7j1pmV3wDBw2Cq8GxMk7xT6U8=
Subject key identifier:   1A:E7:E3:D5:A5:C9:46:66:27:FA:92:68:F9:5A:97:5E:1A:A0:B1:84
Authority key identifier: AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
Certificate issuer:       /CN=ac428c8eed241857f73d0f3d483abecb240519d0
Certificate serial:       13DF86D67358578460698746A0D523BF5E93F136
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
Manifest number:          0126
Signing time:             Sat 15 Jun 2024 04:21:07 +0000
Manifest this update:     Sat 15 Jun 2024 04:16:07 +0000
Manifest next update:     Sun 16 Jun 2024 06:31:07 +0000
Files and hashes:         1: 3139352e3139312e34392e302f32342d3234203d3e203539343332.roa (hash: ANzfUvSqq6wAAaPrIcvZMUd2t6kg1nvjEfIS7C5iQTM=)
                          2: AC428C8EED241857F73D0F3D483ABECB240519D0.crl (hash: QcN3nZZPCgqwBpbkY6eLg/BKtvholcuk2PTeh5HzZhg=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:df:86:d6:73:58:57:84:60:69:87:46:a0:d5:23:bf:5e:93:f1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac428c8eed241857f73d0f3d483abecb240519d0
        Validity
            Not Before: Jun 15 04:16:07 2024 GMT
            Not After : Jun 16 06:31:07 2024 GMT
        Subject: CN=1AE7E3D5A5C9466627FA9268F95A975E1AA0B184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:bb:21:bc:2e:fe:82:80:b2:6d:3f:af:0f:
                    bc:4d:a6:f1:93:0b:6e:78:56:e0:9b:44:19:32:0f:
                    95:21:53:a8:ac:fc:03:72:47:a3:9e:ee:c6:66:50:
                    85:fe:4b:b6:3a:52:c3:9e:e7:4b:40:05:e4:ad:fd:
                    2d:e6:cb:73:2d:c1:2e:7f:5d:fe:34:3f:a0:af:95:
                    b3:8c:4c:fb:5b:c7:8e:c0:48:e8:bc:f4:50:4a:19:
                    9c:f1:a2:f0:10:08:7b:b8:f0:ff:7d:45:4d:a7:15:
                    00:2f:cb:de:57:e4:a7:38:30:d4:c3:25:d0:1e:fd:
                    9d:ed:67:94:d8:5d:8e:4c:f4:64:7a:fd:45:fe:68:
                    46:0e:00:cf:7c:be:b5:d5:c3:76:c8:af:99:e0:88:
                    98:96:f4:1d:e3:78:e4:b1:42:b5:a8:21:b1:74:b1:
                    2d:03:1e:0c:34:68:ea:16:28:c3:eb:3c:df:57:84:
                    91:67:dd:6b:7d:0c:20:04:d9:59:41:16:cc:65:13:
                    72:b1:da:32:7b:9c:c5:3d:67:b7:4e:54:c3:4f:51:
                    0d:91:bc:5c:f2:96:c0:51:2a:37:fb:d7:44:5c:62:
                    14:26:4c:3e:45:e5:53:25:f9:e8:22:df:e1:49:00:
                    67:68:89:8f:e8:e9:6f:46:35:e5:e2:e8:8d:01:10:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E7:E3:D5:A5:C9:46:66:27:FA:92:68:F9:5A:97:5E:1A:A0:B1:84
            X509v3 Authority Key Identifier:
                keyid:AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:01:4c:5c:4f:f4:6c:9c:b5:8f:53:27:0b:a7:72:ba:46:18:
         5e:ed:95:4a:f6:76:fa:5b:38:e9:3b:b0:15:eb:de:fa:07:d6:
         e5:65:00:cb:fd:3d:80:b6:79:e9:01:ee:dc:c8:2a:88:8d:c7:
         e6:29:e1:da:1c:46:29:4f:b1:88:d6:10:f2:85:29:d6:7f:28:
         66:58:78:50:fe:58:82:9c:d9:db:0c:f5:cf:84:a1:b5:91:32:
         4d:a0:27:18:cf:3e:0e:7a:05:d0:7b:5c:93:69:e3:73:67:4a:
         74:72:2a:b9:13:c4:79:ad:a7:4f:cb:18:b7:fa:92:bc:8b:fc:
         49:ae:d4:e0:95:3c:1f:5f:a6:b5:8a:b4:cb:cb:35:c4:3d:77:
         10:17:58:9c:e0:79:81:79:15:6d:d6:7b:48:3d:f5:d1:91:c9:
         36:c7:2d:e6:53:cc:3e:8f:b4:09:bb:2a:62:99:12:44:75:e9:
         71:62:5c:fb:66:df:ff:fe:24:44:84:1e:2d:55:d5:f7:fc:1c:
         b8:7c:47:25:8d:c6:4b:16:6e:8b:6e:db:17:95:a4:61:76:f3:
         97:b7:cb:f7:92:15:77:5f:9f:dc:97:52:51:d3:25:9f:f2:b2:
         17:df:47:3f:d8:3d:b9:98:7a:9d:f0:3a:46:55:fd:e8:61:ce:
         c7:6b:cc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 05:34:36 2024 by rpki-client on console-fra.rpki-client.org