Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.mft
File:                     B9542CF5B0923A9011033E2F7CA543D6A25A48C1.mft (raw, json)
Hash identifier:          BR+LLXCTPSdfxFktHGWgewSRjfqTC1z4dU/l3lHNvys=
Subject key identifier:   CD:E6:8E:EE:BD:86:59:2F:92:17:D5:53:4A:5E:B2:39:A4:94:DD:37
Authority key identifier: B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1
Certificate issuer:       /CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
Certificate serial:       665CB072964CE2CAD5FA4DBBF9CD5C3892CF909F
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.mft
Manifest number:          0112
Signing time:             Sun 30 Jun 2024 16:09:00 +0000
Manifest this update:     Sun 30 Jun 2024 16:04:00 +0000
Manifest next update:     Mon 01 Jul 2024 18:30:00 +0000
Files and hashes:         1: 326130363a396634343a663134303a3a2f34342d3438203d3e20323135363734.roa (hash: ugXzwUU/+w/qdko801fUvszpgqSQbGy5nq6Q38PQPN4=)
                          2: 326130363a396634343a663130303a3a2f34342d3438203d3e20323133323933.roa (hash: WPwSkzQmftTMdP2NF4msAGlQy0pqynxEH9ybKWc3p34=)
                          3: 326130363a396634343a3a2f33322d3332203d3e20313530323439.roa (hash: tcC60R3OjaHeGwSTmORXDpyKu9qV4IybL5Q+nNsDgC0=)
                          4: 326130363a396634343a663133303a3a2f34342d3438203d3e20323135363833.roa (hash: o8VCBUQYHTq+uKsdJwzlb2ifyiIzF583f3zpiX9ztY0=)
                          5: 326130363a396634343a3a2f33362d3438203d3e20313939343539.roa (hash: dF+ul8qucFwNhwS18S5luRCbpkOYSoLS05POUgZo/uo=)
                          6: 326130363a396634343a663131303a3a2f34342d3438203d3e20323136333637.roa (hash: 65qnsbZ/PSu/u6744mywa+3nJ5nDW89U54q9iXre4NM=)
                          7: 326130363a396634343a663132303a3a2f34342d3438203d3e20323033363836.roa (hash: MLANoXxWYaJcGfNL+XeDpDntVMZmEEbOcXznOzAVG2k=)
                          8: B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl (hash: g50SzpAMsrSDt083Z0llQ7PWEg2hiFG2c2E/5rAiwoI=)
                          9: 9682B2FF0EB7AE18049761215DA092A02BD2405E.cer (hash: sfTrV6pq3UNV5+SFSEma986Vd/AYpInm5lK0E8eQSik=)
                          10: 326130363a396634343a663137303a3a2f34342d3438203d3e203437333131.roa (hash: 9jhhlQBf5kEZO6AiRK1xrjoSGlpjxtl7nlHc8pH6akw=)
                          11: 326130363a396634343a3364643a3a2f34382d3438203d3e20313530323439.roa (hash: 6Sirl1mPFlYkSeJDnTK4fKPOsLXorMMY9ZXc/Akijpk=)
                          12: 326130363a396634343a663365303a3a2f34382d3438203d3e20313530323439.roa (hash: 0fjvdOyyF8A2Z2dyvEMEgnnB9O61IydZOhRYZtOKiCk=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jul 2024 11:07:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5c:b0:72:96:4c:e2:ca:d5:fa:4d:bb:f9:cd:5c:38:92:cf:90:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9542CF5B0923A9011033E2F7CA543D6A25A48C1
        Validity
            Not Before: Jun 30 16:04:00 2024 GMT
            Not After : Jul  1 18:30:00 2024 GMT
        Subject: CN=CDE68EEEBD86592F9217D5534A5EB239A494DD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:8b:f6:09:f7:94:0b:14:c6:7f:d3:f1:4d:
                    a7:d0:8b:17:02:dc:bf:f5:8e:4c:f1:cd:25:fc:9f:
                    7f:da:2a:68:87:a7:0e:db:bf:30:c5:05:85:02:a2:
                    e3:84:bf:ea:fa:ac:fc:49:5e:5a:fd:b9:91:00:f8:
                    4e:3b:24:88:77:ef:f4:da:6c:33:81:5b:ee:55:13:
                    9b:ea:1a:a4:8e:44:73:e0:8a:1d:ff:33:32:54:18:
                    0d:bf:9c:83:6e:01:ef:b2:25:c8:a9:58:f3:b0:8f:
                    ba:44:36:9c:4e:ab:05:2e:54:ce:e1:51:c7:73:af:
                    ae:9f:5c:3e:c6:98:46:fa:65:ea:d2:17:bd:41:5e:
                    d7:f5:ea:30:aa:fb:e7:41:29:eb:35:9f:e5:a2:12:
                    c2:65:ea:a2:40:11:b9:9f:56:41:38:e9:b2:40:07:
                    95:7d:54:3a:64:49:b6:09:54:12:15:e8:81:cd:cb:
                    b6:f3:c4:98:68:d2:0b:63:2c:76:e4:08:22:d3:b3:
                    a2:06:c6:8c:97:f4:e4:63:58:04:5c:88:cf:62:92:
                    28:e4:4d:eb:2d:c2:28:af:84:ac:1b:0b:94:59:a8:
                    99:82:b9:35:42:9b:a4:20:86:26:53:90:92:4e:03:
                    07:10:c7:51:10:d3:e8:f0:90:ca:eb:91:a2:51:df:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E6:8E:EE:BD:86:59:2F:92:17:D5:53:4A:5E:B2:39:A4:94:DD:37
            X509v3 Authority Key Identifier:
                keyid:B9:54:2C:F5:B0:92:3A:90:11:03:3E:2F:7C:A5:43:D6:A2:5A:48:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21e272e8-d70a-4793-8ac6-f3f4a72ae9ca/1/B9542CF5B0923A9011033E2F7CA543D6A25A48C1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:22:49:e6:7e:11:db:e5:38:b9:95:07:da:85:93:ba:e0:6a:
         f8:dc:f4:92:d7:ea:79:fd:66:09:af:70:e8:a1:1c:ce:28:5e:
         d3:5e:fd:de:43:a7:7d:e5:30:11:fc:19:0d:41:a3:ce:db:b7:
         a8:4a:02:8b:6c:b5:33:9a:09:ce:11:5d:75:4f:21:24:20:28:
         47:e7:be:74:c3:61:77:e2:e6:3f:e8:33:11:f9:6c:85:7f:11:
         db:57:b9:94:7d:56:b0:57:5b:66:07:23:fe:df:a7:8b:e7:2e:
         ce:9a:26:f8:41:e2:cb:70:ef:4a:15:16:70:36:61:35:6f:ed:
         23:0e:4c:d5:48:6c:62:07:6e:5e:93:de:d1:a8:f4:4e:3d:3d:
         e7:35:0d:61:e3:35:e1:6d:28:13:1f:86:e7:4a:d4:4e:78:7f:
         01:06:41:42:22:df:5a:43:db:9d:ff:4b:b1:78:90:84:a6:87:
         48:8b:54:5c:3c:13:e4:6b:dc:04:da:22:0c:a2:d4:e1:f3:6e:
         ea:e2:f4:e9:dd:e1:02:25:f2:52:a8:f5:a0:88:09:e1:5c:8d:
         fe:d1:73:b9:a1:97:aa:fb:f5:6c:3e:dc:d0:18:d3:bc:8b:e1:
         c1:aa:1b:35:f6:f8:84:f4:8b:5d:8d:7a:68:54:5c:87:af:d0:
         e4:51:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 21:59:50 2024 by rpki-client on console-ams.rpki-client.org