Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
File:                     5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft (raw, json)
Hash identifier:          X3tiqfO5CbpZ5PuFGoxRPiBkJvjNcuLWIM+EE9NkJKA=
Subject key identifier:   BE:E0:86:5C:69:F6:6D:D9:84:84:8F:07:00:45:5B:2E:FF:5D:01:E1
Authority key identifier: 5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74
Certificate issuer:       /CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
Certificate serial:       3E25ED7CBD5C6C8027FFA3AD8CFA1ED189112F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
Manifest number:          01FA
Signing time:             Sat 15 Jun 2024 19:41:11 +0000
Manifest this update:     Sat 15 Jun 2024 19:36:11 +0000
Manifest next update:     Sun 16 Jun 2024 23:32:11 +0000
Files and hashes:         1: 39312e3232392e3138302e302f32342d3234203d3e2036303739.roa (hash: bCYrFGO5+3HokoUx2GJHt6aSIxx1pD6sGnDFjj+OxlU=)
                          2: 5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl (hash: MpB6u1fDzJAUKungOHCC16FXKg5wcXlzZ/a+/a56kY0=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:25:ed:7c:bd:5c:6c:80:27:ff:a3:ad:8c:fa:1e:d1:89:11:2f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aff13d5a71cfb0da38d8d3d81e13eaf40416a74
        Validity
            Not Before: Jun 15 19:36:11 2024 GMT
            Not After : Jun 16 23:32:11 2024 GMT
        Subject: CN=BEE0865C69F66DD984848F0700455B2EFF5D01E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:01:84:8c:ae:75:03:31:74:80:45:e8:27:
                    c9:76:77:f4:b5:ed:a2:63:cc:c8:8e:e3:63:c9:90:
                    7c:d3:71:75:f7:86:7a:a7:b5:82:2f:c4:3e:d3:a4:
                    00:ec:bf:37:c8:b2:7f:ae:57:48:1c:48:a4:49:53:
                    ce:d3:b9:8a:55:ef:86:04:15:c3:e5:ed:9e:6d:e6:
                    89:6b:c3:78:a9:94:5f:0e:7d:3f:5c:4d:b0:bb:54:
                    34:bd:a6:94:c9:d2:18:3a:fe:c1:f5:76:5c:3b:08:
                    e5:5d:a3:c0:a8:f6:ea:ab:84:f7:48:75:8a:35:59:
                    bf:16:9b:bb:b8:e6:cc:ef:b9:1e:82:5f:62:97:c2:
                    a4:37:8d:22:6d:d9:d4:c9:2f:d9:16:45:74:95:23:
                    5b:29:d1:4d:00:d3:9f:f9:f8:0c:b7:36:ec:57:73:
                    e8:c7:cb:8a:b9:de:c7:07:d4:ff:30:7f:e2:2e:5e:
                    2a:ec:85:ec:68:b3:11:e0:aa:bd:a8:72:d0:9b:91:
                    c7:5f:12:9d:e7:0f:5c:9d:4f:03:ea:b4:a3:c8:56:
                    01:4a:d7:86:f9:d1:c0:2b:d9:77:5b:8d:d3:70:e1:
                    82:f2:40:45:ee:c2:8d:f9:ba:7b:9a:b9:76:5c:7d:
                    e6:bf:0f:14:f2:6c:a7:d7:a8:5c:cb:50:ea:a1:1f:
                    0e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E0:86:5C:69:F6:6D:D9:84:84:8F:07:00:45:5B:2E:FF:5D:01:E1
            X509v3 Authority Key Identifier:
                keyid:5A:FF:13:D5:A7:1C:FB:0D:A3:8D:8D:3D:81:E1:3E:AF:40:41:6A:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv8T1acc-w2jjY09geE-r0BBanQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6073c95a-aac7-43ec-818b-1f42f62275f5/0/5AFF13D5A71CFB0DA38D8D3D81E13EAF40416A74.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:03:1f:fc:2a:86:b0:56:b1:d7:10:ab:c9:51:f1:a3:3b:54:
         ce:b7:c4:13:93:1b:4d:ee:53:f1:f7:a4:0f:19:29:e0:17:28:
         8f:75:74:e4:09:e8:14:88:36:34:d3:59:75:47:42:6b:ee:cf:
         ba:9c:4d:c4:3c:99:41:da:59:85:ac:1d:65:98:b1:a3:ed:87:
         a2:f6:43:af:a4:3c:7d:36:de:06:43:80:54:9f:2e:3f:5f:ae:
         f6:d8:dc:71:8c:e0:4a:78:f8:fb:90:e8:42:d9:53:3d:b8:86:
         e0:b6:71:e4:cc:ea:29:ed:4d:27:30:f1:0d:ee:70:f0:d2:2d:
         a3:64:f7:6b:15:63:4b:b7:1d:51:91:06:8a:7e:9b:bf:f0:3f:
         3d:ba:77:60:ea:0d:7a:f6:3c:f5:1a:a7:7f:80:a9:ba:69:b2:
         6a:52:b0:3b:e6:d3:4e:b7:0a:d9:b8:e0:9a:50:59:b0:13:73:
         45:e9:9f:62:5f:9d:a8:82:70:e9:d9:56:24:00:b9:66:7e:5d:
         61:82:5d:19:3d:1c:f6:5d:f9:53:7f:8b:e0:db:ec:21:b4:60:
         01:87:d5:e2:11:f1:f0:ea:5b:6e:39:71:9c:ce:77:73:58:bf:
         a7:91:8d:99:12:33:41:55:37:2c:25:f6:7a:93:3a:d9:82:2a:
         30:55:79:a6
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUPiXtfL1cbIAn/6OtjPoe0YkRLwkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWFmZjEzZDVhNzFjZmIwZGEzOGQ4ZDNkODFlMTNlYWY0
MDQxNmE3NDAeFw0yNDA2MTUxOTM2MTFaFw0yNDA2MTYyMzMyMTFaMDMxMTAvBgNV
BAMTKEJFRTA4NjVDNjlGNjZERDk4NDg0OEYwNzAwNDU1QjJFRkY1RDAxRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQEQGEjK51AzF0gEXoJ8l2d/S1
7aJjzMiO42PJkHzTcXX3hnqntYIvxD7TpADsvzfIsn+uV0gcSKRJU87TuYpV74YE
FcPl7Z5t5olrw3iplF8OfT9cTbC7VDS9ppTJ0hg6/sH1dlw7COVdo8Co9uqrhPdI
dYo1Wb8Wm7u45szvuR6CX2KXwqQ3jSJt2dTJL9kWRXSVI1sp0U0A05/5+Ay3NuxX
c+jHy4q53scH1P8wf+IuXirshexosxHgqr2octCbkcdfEp3nD1ydTwPqtKPIVgFK
14b50cAr2XdbjdNw4YLyQEXuwo35unuauXZcfea/DxTybKfXqFzLUOqhHw5zAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUvuCGXGn2bdmEhI8HAEVbLv9dAeEwHwYDVR0j
BBgwFoAUWv8T1acc+w2jjY09geE+r0BBanQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNjA3M2M5NWEtYWFjNy00M2VjLTgxOGItMWY0MmY2MjI3
NWY1LzAvNUFGRjEzRDVBNzFDRkIwREEzOEQ4RDNEODFFMTNFQUY0MDQxNkE3NC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1d2OFQxYWNjLXcyampZMDlnZUUtcjBC
QmFuUS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82MDczYzk1YS1h
YWM3LTQzZWMtODE4Yi0xZjQyZjYyMjc1ZjUvMC81QUZGMTNENUE3MUNGQjBEQTM4
RDhEM0Q4MUUxM0VBRjQwNDE2QTc0Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQMf/CqGsFax1xCryVHx
oztUzrfEE5MbTe5T8fekDxkp4Bcoj3V05AnoFIg2NNNZdUdCa+7PupxNxDyZQdpZ
hawdZZixo+2HovZDr6Q8fTbeBkOAVJ8uP1+u9tjccYzgSnj4+5DoQtlTPbiG4LZx
5MzqKe1NJzDxDe5w8NIto2T3axVjS7cdUZEGin6bv/A/Pbp3YOoNevY89Rqnf4Cp
ummyalKwO+bTTrcK2bjgmlBZsBNzRemfYl+dqIJw6dlWJAC5Zn5dYYJdGT0c9l35
U3+L4NvsIbRgAYfV4hHx8OpbbjlxnM53c1i/p5GNmRIzQVU3LCX2epM62YIqMFV5
pg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 22:37:37 2024 by rpki-client on console-ams.rpki-client.org