Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
File:                     6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft (raw, json)
Hash identifier:          cah3LeE4fhaPNlNIQCQwXFxC+dY19tEcJM6QsU1MnAg=
Subject key identifier:   3D:DB:3B:39:D3:10:77:6F:C6:24:B7:0D:FF:34:1A:F7:2C:F7:41:18
Authority key identifier: 60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA
Certificate issuer:       /CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
Certificate serial:       65A94A234D0075B6C0F18E674184FD724AD8F30C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
Manifest number:          14
Signing time:             Sat 28 Sep 2024 12:40:38 +0000
Manifest this update:     Sat 28 Sep 2024 12:35:38 +0000
Manifest next update:     Sun 29 Sep 2024 16:17:38 +0000
Files and hashes:         1: 3139332e33342e3139392e3132382f32362d3236203d3e2030.roa (hash: cdfMKTJdIDROnWRX3ePB7aEvma9a4XSp/cOBrzuz6w0=)
                          2: 6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl (hash: FVodVG87ZHqX1K6GsEBD3VzLUB+hiUep1ovw26zBygo=)
                          3: 323030313a3766383a3135373a3a2f34382d3438203d3e2030.roa (hash: cAb30fVqTd8++M4lv8QD26BvmJIcWc1fy7zzqGZ9Hbs=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a9:4a:23:4d:00:75:b6:c0:f1:8e:67:41:84:fd:72:4a:d8:f3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6019c116c8ae318afd4b822e9f4eeea0c34baaca
        Validity
            Not Before: Sep 28 12:35:38 2024 GMT
            Not After : Sep 29 16:17:38 2024 GMT
        Subject: CN=3DDB3B39D310776FC624B70DFF341AF72CF74118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:2f:87:6d:1a:d0:83:23:5e:ea:8c:e6:b1:
                    62:fb:62:7c:61:e7:52:82:21:d5:d4:24:04:54:37:
                    ec:94:50:fb:1f:88:f7:65:fb:62:07:c8:bb:64:d2:
                    96:b9:c7:30:99:0c:e4:54:09:3f:fd:3c:e9:61:42:
                    a4:e2:d4:ed:38:f8:97:4f:87:40:45:48:20:1a:0f:
                    52:71:97:e4:13:13:8a:45:db:9e:b6:c5:7e:27:ba:
                    3b:84:4f:f6:5f:07:0b:c4:50:0c:c2:67:ef:1d:96:
                    85:f6:bc:50:20:78:d1:54:d8:ac:14:d8:ea:0a:81:
                    80:a4:1c:e6:77:b3:80:ee:65:b3:cb:88:fb:98:e0:
                    92:eb:25:46:c1:79:47:34:8d:fa:3c:24:3e:77:b6:
                    16:fc:b7:08:6f:fd:c2:8e:56:93:8f:b9:64:6e:6a:
                    58:e1:6b:7e:c7:33:1a:86:bd:6a:74:83:74:ad:cc:
                    a2:b1:ab:f4:fc:67:b5:76:db:bd:ac:05:e9:98:dc:
                    af:f5:23:34:bf:35:c0:3f:e8:dd:69:42:71:34:eb:
                    74:90:cf:d5:63:f7:81:c6:85:50:34:5f:4f:93:8c:
                    c1:56:06:a3:ef:25:ca:34:a9:39:d8:f4:f1:97:61:
                    a0:8f:2f:1b:c8:6c:13:f7:24:c8:ac:18:ad:9f:a5:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DB:3B:39:D3:10:77:6F:C6:24:B7:0D:FF:34:1A:F7:2C:F7:41:18
            X509v3 Authority Key Identifier:
                keyid:60:19:C1:16:C8:AE:31:8A:FD:4B:82:2E:9F:4E:EE:A0:C3:4B:AA:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBnBFsiuMYr9S4Iun07uoMNLqso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/3/6019C116C8AE318AFD4B822E9F4EEEA0C34BAACA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:05:d9:6a:fd:57:7c:67:a1:e0:70:ce:83:42:c0:89:c4:2c:
         47:03:35:f3:5b:bb:f8:31:ca:7e:7f:54:f5:99:68:22:ee:0f:
         63:52:6d:b5:aa:bb:6c:e2:e8:d7:bd:56:ae:39:5f:5c:8d:6f:
         cd:8f:e6:eb:de:fe:20:19:e0:c4:d2:3e:58:10:46:bb:77:30:
         27:1f:25:02:18:b5:c7:e2:d5:37:0d:b2:b1:08:a4:52:60:0f:
         82:c5:f4:10:79:59:ac:0f:3c:70:8b:25:5e:95:d4:a3:48:74:
         70:73:70:c2:3b:31:58:93:62:36:27:4e:39:14:cb:4d:8a:f7:
         3a:4e:92:ce:bf:f6:91:43:e2:3c:fe:ab:07:c3:21:aa:8a:61:
         df:dd:a3:2d:c2:64:f5:46:69:89:22:b3:6f:29:8b:aa:95:0c:
         3e:59:e9:2b:e2:a2:e1:a0:82:3b:a4:eb:7c:c0:e5:f7:90:6f:
         d9:03:76:f5:a7:bb:62:e7:d5:07:c8:2b:e2:3d:d1:64:9a:05:
         49:3d:e9:2d:29:63:80:6b:ab:32:32:e0:5e:98:65:ec:63:a4:
         e2:1d:d8:2d:24:93:f9:88:46:6c:a2:64:9c:bc:b5:cb:6f:cf:
         51:60:d3:8f:9e:1f:bb:fc:a1:7f:19:27:17:6a:1e:41:1d:69:
         b4:91:0f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:15:42 2024 by rpki-client on console-fra.rpki-client.org