Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.mft
File:                     7C4BB19365741B7885E0A322377B13B581D82E0E.mft (raw, json)
Hash identifier:          ecQMHiX/MUs6sFTFEoFazULZQcphQsLB6fa9rF+WrgA=
Subject key identifier:   B0:92:F2:2D:5A:1D:26:51:59:DE:E7:1C:A9:21:49:D2:2A:26:BF:89
Authority key identifier: 7C:4B:B1:93:65:74:1B:78:85:E0:A3:22:37:7B:13:B5:81:D8:2E:0E
Certificate issuer:       /CN=7c4bb19365741b7885e0a322377b13b581d82e0e
Certificate serial:       3CB82884A8091D6EEAD58830E1C592651863B0B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuxk2V0G3iF4KMiN3sTtYHYLg4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.mft
Manifest number:          014C
Signing time:             Tue 21 May 2024 13:29:42 +0000
Manifest this update:     Tue 21 May 2024 13:24:42 +0000
Manifest next update:     Wed 22 May 2024 14:22:42 +0000
Files and hashes:         1: 323030313a3766383a3135373a3a2f34382d3438203d3e2030.roa (hash: PSUbGINMXDXcZ2iqGImWYJzUtI6J2N2niY8PAy2nylU=)
                          2: 3139332e33342e3139392e3132382f32362d3236203d3e2030.roa (hash: eOQTwh7vkdtPeD9Z6S+azJ35o/wr1ntXvlf6L5dFg3E=)
                          3: 7C4BB19365741B7885E0A322377B13B581D82E0E.crl (hash: zYVWqWA0mj92BkwpwdzWkZ7hi/LXzzX0D2wCrpuvV/E=)
                          4: AS48700.asa (hash: ri9g1beBEKCwTKS+hXe60L0dvt/8ox9Ag+UpztXn0js=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuxk2V0G3iF4KMiN3sTtYHYLg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 May 2024 13:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:b8:28:84:a8:09:1d:6e:ea:d5:88:30:e1:c5:92:65:18:63:b0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4bb19365741b7885e0a322377b13b581d82e0e
        Validity
            Not Before: May 21 13:24:42 2024 GMT
            Not After : May 22 14:22:42 2024 GMT
        Subject: CN=B092F22D5A1D265159DEE71CA92149D22A26BF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e1:62:e9:db:6c:31:8f:a6:10:86:9b:29:b4:
                    4a:df:2b:8a:12:cd:e5:74:5f:a2:6c:35:cb:86:0d:
                    de:34:a1:44:d4:c9:90:c2:f4:81:91:be:2b:8b:36:
                    6c:b3:d2:07:91:ba:13:86:e9:f3:2b:86:75:7f:3b:
                    0b:a5:a6:c0:05:c8:db:80:c6:ca:76:ce:2f:f7:82:
                    77:ba:e8:d0:be:45:a9:65:49:24:f1:de:5c:a3:b4:
                    df:73:0c:d3:3e:44:80:aa:2d:2a:b7:70:c5:3a:3f:
                    28:44:6c:39:40:d6:f4:a3:40:ad:ce:09:69:68:f1:
                    6c:22:c9:8e:3f:ea:81:03:10:9f:52:6b:2d:a4:16:
                    39:6c:ba:6d:a4:d6:29:69:81:aa:81:35:b0:a6:19:
                    fe:8b:bb:e2:d3:db:65:27:b4:4c:9c:89:9a:3c:40:
                    7a:f7:bd:c5:57:83:eb:5c:b3:b4:ec:e0:f8:79:c0:
                    b1:71:15:b6:d4:f6:f7:7b:eb:dd:66:cb:ff:5e:67:
                    01:5d:bd:56:fd:8a:6c:ab:0e:bb:1c:af:8b:2a:5f:
                    cb:a6:47:11:51:d7:64:ea:a7:cc:a4:d2:9c:30:6a:
                    cb:e8:8b:b9:a8:bb:94:74:26:17:ab:76:50:c9:60:
                    97:e0:c1:23:7e:d8:6f:d0:d0:e3:45:d0:e5:62:0b:
                    54:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:92:F2:2D:5A:1D:26:51:59:DE:E7:1C:A9:21:49:D2:2A:26:BF:89
            X509v3 Authority Key Identifier:
                keyid:7C:4B:B1:93:65:74:1B:78:85:E0:A3:22:37:7B:13:B5:81:D8:2E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuxk2V0G3iF4KMiN3sTtYHYLg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:8b:f8:31:01:4b:20:2c:5d:b2:9f:c7:e0:bd:9d:e1:ce:e8:
         29:24:02:ba:d9:36:51:c5:c1:63:b1:79:87:05:f7:53:c5:0f:
         d9:ae:7b:c4:2f:99:86:72:42:14:03:70:f2:fc:06:45:65:1d:
         f8:7a:6c:60:6c:8e:f6:9a:91:55:91:9c:0d:8f:bb:88:60:77:
         4e:24:08:8d:33:05:02:e5:34:48:2e:2a:98:cb:79:12:02:48:
         57:28:cc:a3:76:ac:e7:09:bf:ab:b8:61:4a:1f:23:5c:db:b0:
         5f:91:02:77:cb:26:e0:1a:7b:1e:55:ff:68:75:49:aa:41:bd:
         33:c4:25:11:95:f7:8f:37:26:f6:24:60:f4:7d:80:d4:9d:df:
         a8:8f:23:5b:a2:a9:eb:bc:e2:14:9b:8c:c1:7c:06:67:53:3c:
         9a:28:08:88:34:1c:6d:38:bf:f6:90:5f:85:23:6b:e0:22:a6:
         32:c7:a7:f0:57:87:a9:75:da:48:3f:e1:c5:3a:00:e3:4c:5a:
         59:99:38:cd:26:16:31:b2:77:3e:5c:ca:c3:ba:05:ae:5d:c4:
         a6:b3:3a:f9:de:0c:d5:58:36:72:25:c0:4d:9e:9f:b5:c4:c9:
         3f:49:24:7c:96:f4:d4:db:9a:71:b6:68:c6:f5:5e:c3:d6:67:
         3b:53:78:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 16:11:15 2024 by rpki-client on console-fra.rpki-client.org