Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
File:                     52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json)
Hash identifier:          VFUcpxfXF7Y1Q24Q8jug/4iDg5NoYXJCC1aG4V33iTI=
Subject key identifier:   8E:A6:18:C1:25:7F:3D:F9:DA:8A:9D:AD:BF:C8:82:E1:02:B6:FF:9D
Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C
Certificate issuer:       /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
Certificate serial:       3D61C10D80A300CCEE3E204AAF362D97F66CF3B4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
Manifest number:          1E
Signing time:             Tue 02 Jul 2024 22:21:57 +0000
Manifest this update:     Tue 02 Jul 2024 22:16:57 +0000
Manifest next update:     Thu 04 Jul 2024 00:05:57 +0000
Files and hashes:         1: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: WBkxaQ39wtWqddXGpHdlq5682wx3inKdGAjUWPqHRsM=)
                          2: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: 5jLn1tYtti5DJK9TqNkdMibH5mGLzDQe1BN0OVxqnag=)
                          3: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: pcBpSLX6wjD10TMOktRdBOucXd2A5gfG7C3Lecbh8gI=)
                          4: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: Bu8eu+s1xKEjCs05/XkV2x0FQLM16iFsGrYGYNvS9M8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 14:20:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:61:c1:0d:80:a3:00:cc:ee:3e:20:4a:af:36:2d:97:f6:6c:f3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C
        Validity
            Not Before: Jul  2 22:16:57 2024 GMT
            Not After : Jul  4 00:05:57 2024 GMT
        Subject: CN=8EA618C1257F3DF9DA8A9DADBFC882E102B6FF9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:02:6d:9d:45:61:7e:f1:4c:cf:ea:91:ed:
                    3e:58:4c:08:df:d7:a9:cf:49:c4:35:5e:90:18:09:
                    05:48:22:f9:5c:19:ba:97:87:17:c1:a3:8d:8e:00:
                    8e:88:68:6c:62:c4:4c:cd:ca:88:5a:cb:e8:59:b4:
                    77:f6:61:b4:bd:0c:92:61:85:1c:7d:87:2e:77:2f:
                    dc:bf:33:95:28:a3:4b:bf:41:0c:94:24:93:69:01:
                    95:c5:ef:3c:68:23:0b:7d:42:60:4e:01:17:73:3f:
                    5c:cd:4b:8c:cb:b9:f5:ca:2c:2a:3f:50:16:e7:59:
                    25:36:14:74:96:53:27:d7:6b:4a:07:b5:84:d4:4a:
                    8a:c0:30:75:21:d1:81:2c:29:45:64:3e:e2:e4:c5:
                    71:1b:b3:b2:86:87:35:b5:a7:fa:86:44:d7:ca:60:
                    02:df:af:03:86:6d:b1:95:86:a0:43:f6:23:b3:32:
                    89:50:bd:52:4c:76:6a:b8:63:37:26:61:48:8e:7f:
                    51:e0:cf:8a:0b:4f:ff:0f:bd:74:46:33:d8:d7:a8:
                    1f:26:4a:ac:f9:82:2f:12:6e:5c:67:ba:b2:e2:d8:
                    0e:d2:88:f0:0b:c5:8e:b6:83:56:07:81:b4:84:bf:
                    2c:fa:80:ce:f9:e3:02:2f:bb:cd:bd:c3:33:2e:2c:
                    b6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:A6:18:C1:25:7F:3D:F9:DA:8A:9D:AD:BF:C8:82:E1:02:B6:FF:9D
            X509v3 Authority Key Identifier:
                keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:93:2c:59:25:06:34:64:cb:0c:f9:6d:4d:45:05:6f:63:93:
         9f:82:ff:d2:ba:25:9d:1c:86:83:79:d6:88:f9:8a:ca:b5:41:
         2d:73:c6:1b:27:dc:b7:cc:b9:5d:ea:ee:a5:79:ca:2e:ed:e7:
         e4:16:91:d5:a3:77:1d:72:9b:08:bb:44:e2:2e:0c:4e:a8:7d:
         cf:05:ce:83:22:d8:23:be:01:f6:85:9c:6e:93:52:f5:df:d1:
         6f:c9:b3:f1:db:bf:df:63:a4:91:56:bc:13:db:46:15:4c:31:
         80:c3:34:1a:77:d9:0d:c5:65:4a:c1:54:b8:a2:a8:d8:10:85:
         57:dd:6c:54:dd:38:97:a2:2f:d7:38:fc:79:b6:b4:91:65:7f:
         4d:eb:8b:48:90:65:e1:76:15:f0:e0:41:27:45:fd:5e:cc:ce:
         91:68:24:10:da:4d:36:cb:e1:bf:dd:45:c2:bf:1c:90:a5:19:
         06:69:85:62:6a:7e:dc:de:4e:26:89:ab:93:51:c1:f0:71:66:
         31:ec:2a:00:1c:36:4c:e3:05:00:70:cb:91:c3:91:5e:3f:7b:
         4b:c6:2c:9f:81:26:e0:b5:ed:90:a5:dd:5f:17:e2:9b:a8:26:
         23:ba:ad:3a:f1:d8:8e:2a:83:5b:09:94:4e:82:c0:df:8d:32:
         2a:a2:96:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:17:29 2024 by rpki-client on console-fra.rpki-client.org