Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File:                     EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier:          XmXP24KRceszPM28Np+lgqeqVVHjLS3IahLBdY9Nq+k=
Subject key identifier:   7E:65:A6:C4:38:FC:85:EB:00:24:7E:03:01:80:A2:82:0A:4C:F1:6A
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer:       /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial:       58428D164AE3B25871B0C77F051FB5426BB62C9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number:          014E
Signing time:             Sun 19 May 2024 18:47:08 +0000
Manifest this update:     Sun 19 May 2024 18:42:08 +0000
Manifest next update:     Mon 20 May 2024 21:43:08 +0000
Files and hashes:         1: 3138352e33372e3231362e302f32332d3234203d3e20323132323338.roa (hash: yiBtmTjnRKXHJq5A9F2Nv4U2Oe6llhm24TC0e/6krKA=)
                          2: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: j2TU9kUq0156D4IaTzRou4ad4KF/KN03huRbQxbueF8=)
                          3: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (hash: iy/PuTZq2PlLpxAHU9NAZ+l2NTzGrJU7RR9j/EEkM8A=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 13:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:42:8d:16:4a:e3:b2:58:71:b0:c7:7f:05:1f:b5:42:6b:b6:2c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
        Validity
            Not Before: May 19 18:42:08 2024 GMT
            Not After : May 20 21:43:08 2024 GMT
        Subject: CN=7E65A6C438FC85EB00247E030180A2820A4CF16A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:3c:9c:ba:26:5f:75:96:09:50:c9:1f:37:
                    5c:11:bf:ca:50:b0:3c:27:a1:e5:18:81:d4:e5:c3:
                    8b:f7:f7:b0:49:45:d9:86:8a:8d:92:91:f0:34:8a:
                    51:29:30:83:7a:b1:be:a4:74:65:bf:a5:13:fa:4f:
                    60:e0:61:4c:84:9b:f7:da:b2:44:c8:14:fd:ff:60:
                    73:06:9e:65:96:b2:26:78:c2:29:5f:65:e7:29:a0:
                    76:96:6d:48:10:84:da:27:4b:b6:a4:a9:39:7f:5e:
                    a1:04:59:9e:dd:90:04:43:06:cc:8c:ea:fa:0e:d5:
                    d1:ea:24:62:a4:f9:04:46:f9:55:19:44:69:79:b1:
                    3b:05:6a:1a:17:38:f0:17:ae:03:69:a3:2b:36:6c:
                    b0:f3:79:45:d4:f6:d4:b3:69:a3:41:4c:ef:cb:af:
                    34:7a:db:8d:4e:78:5d:fc:2f:52:ad:30:e9:dc:fb:
                    cc:ee:80:c8:c7:db:dc:44:ef:ad:33:be:30:53:74:
                    76:47:c8:19:f5:05:13:f6:7f:ef:5a:28:2c:ff:fd:
                    48:ba:48:c6:1e:ac:1e:c5:a5:12:78:51:3a:e8:11:
                    3c:51:83:a4:b9:e7:f8:57:ee:8f:0d:bf:7d:2f:7e:
                    a4:d7:40:05:7c:68:81:d8:c8:77:bf:70:cb:9c:3e:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:65:A6:C4:38:FC:85:EB:00:24:7E:03:01:80:A2:82:0A:4C:F1:6A
            X509v3 Authority Key Identifier:
                keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:34:8b:84:fd:8d:28:0e:55:9c:3a:05:92:7c:a8:1e:31:c1:
         fb:42:fa:ee:7b:32:ab:19:4a:a2:8a:b2:89:69:83:72:ab:d0:
         39:3e:45:71:c0:7a:e9:2d:ba:da:75:ef:f2:13:4e:11:a9:d2:
         40:4b:69:ed:15:52:da:26:d9:f9:ac:b3:52:09:d3:7b:af:98:
         b0:de:82:d4:38:53:ac:fc:66:d2:ec:4e:86:82:19:59:89:c0:
         1f:c9:fd:5c:1a:e4:bc:c3:da:c8:d3:82:e8:b1:9c:64:ca:03:
         67:21:97:17:4c:9c:82:b7:aa:3c:4b:61:67:c3:11:0c:b6:cf:
         07:b6:d2:f2:18:2f:9d:c3:7f:9d:c1:10:b2:fb:1e:84:64:3f:
         4d:b3:c6:ff:5e:18:2b:48:95:c2:88:8c:78:ef:68:43:df:8e:
         96:aa:87:4f:4f:cc:2d:d1:39:57:71:c4:0d:e8:0d:38:d0:4e:
         2b:d3:ef:9e:74:ab:a1:26:a5:9e:d6:5c:8f:4e:35:80:81:18:
         6b:d6:dd:f0:92:b8:ce:ec:43:47:fa:8a:1e:a4:98:35:b5:11:
         76:e2:cb:81:9f:3f:26:e0:30:74:78:40:58:dc:bb:28:17:b2:
         0b:61:7f:5b:a9:bd:cd:3d:8c:05:9e:6c:d1:17:ce:3a:e9:a8:
         e7:08:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 19:08:35 2024 by rpki-client on console-fra.rpki-client.org