Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
File:                     B172548FA3C460E26CB519EE524361BCA6C7132E.mft (raw, json)
Hash identifier:          u7RoLHjpV8gHxTCeNzxs1JCpfECU6cM3gdNoIMYiUd0=
Subject key identifier:   50:E1:8A:D8:9C:97:FB:86:3D:B1:9A:17:59:3A:13:FB:EE:B0:B1:41
Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E
Certificate issuer:       /CN=b172548fa3c460e26cb519ee524361bca6c7132e
Certificate serial:       168C1C27B5D670BDED685E155D1A1A0E0A15DA8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
Manifest number:          0144
Signing time:             Sun 23 Jun 2024 00:36:14 +0000
Manifest this update:     Sun 23 Jun 2024 00:31:14 +0000
Manifest next update:     Mon 24 Jun 2024 01:58:14 +0000
Files and hashes:         1: 39332e39352e3131352e302f32342d3234203d3e20313335333932.roa (hash: dZz+Pu0AfYMa3fgfd+XvJQ7wuBgLY4+kFJeH5ywENAw=)
                          2: 39332e39352e3131342e302f32342d3234203d3e2035303635.roa (hash: 1SASXyExgQ4b5WPRHANM/0yVmAfZqeVHh1az/LQOJxE=)
                          3: 39332e39352e3131352e302f32342d3234203d3e20313938353834.roa (hash: y54tpTyh0qp2oCavdaiKGuYHehY4iQ8k8IzXh+B5EXY=)
                          4: 39332e39352e3131362e302f32342d3234203d3e203630373831.roa (hash: RemJBJ6qV5Azy9X+rQ6w+aIEaM9WgYev/YWHahVSpmQ=)
                          5: B172548FA3C460E26CB519EE524361BCA6C7132E.crl (hash: uA/VeOOBwzKLLCRGYHBu/X7UBrVPTr+oq47Ih37BPCc=)
                          6: 39332e39352e3131332e302f32342d3234203d3e20313335393833.roa (hash: frQ4y2txd/x3BBbAjFEioUBqBE01+6y28k5i+bMGCbU=)
                          7: 39332e39352e3131382e302f32342d3234203d3e203631313132.roa (hash: hkeLXPavFD7WfStThhYLTFHTYlms8I7H60Fz+4Z95to=)
                          8: 39332e39352e3131322e302f32342d3234203d3e203531383437.roa (hash: UFvambNtXO6Urpp1/AsAsKt1tqnfELc2YM+OADP3uKM=)
                          9: 39332e39352e3131392e302f32342d3234203d3e20323135343337.roa (hash: scJ1J16rI6zPTC9NmNaA0DK+habeczlo+nbSVqoqzmA=)
                          10: 39332e39352e3131372e302f32342d3234203d3e20323032363733.roa (hash: V1fel5/vnSYlissUs0JT6cnBIH0GkZvGHsUhQ4IEdyg=)
                          11: 39332e39352e3131322e302f32342d3234203d3e20313336303131.roa (hash: uoAP2MPsw6BFBAfJPf5eeovVwAKmeWFYw7/1r1K1k14=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8c:1c:27:b5:d6:70:bd:ed:68:5e:15:5d:1a:1a:0e:0a:15:da:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e
        Validity
            Not Before: Jun 23 00:31:14 2024 GMT
            Not After : Jun 24 01:58:14 2024 GMT
        Subject: CN=50E18AD89C97FB863DB19A17593A13FBEEB0B141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9a:7e:af:13:b3:1d:42:3c:d3:66:e1:9e:c4:
                    90:c5:71:26:f6:29:fd:71:82:9d:55:5d:68:cc:5a:
                    be:ce:d5:88:27:fd:0a:a5:46:8f:69:13:13:dd:49:
                    98:81:0f:d3:f5:d6:b1:68:02:70:30:3e:45:01:57:
                    3f:16:00:89:13:ba:95:ec:46:dc:18:6c:30:3a:12:
                    97:70:6f:f9:91:5c:bc:75:2f:6f:a9:8d:b8:e2:34:
                    58:cc:50:88:51:c5:d9:13:7d:17:4d:91:49:06:bb:
                    56:7d:e3:25:51:78:0b:85:c4:3b:22:29:44:d5:9a:
                    35:54:90:fa:24:75:bd:a4:c5:ee:d2:82:71:0c:9e:
                    dd:34:3b:2b:a9:bb:14:61:f9:95:fb:86:79:60:97:
                    6f:a4:51:03:2c:36:05:83:36:22:2a:bf:cd:46:5f:
                    01:b4:c8:49:a6:d2:01:13:79:79:f7:ff:4a:1d:e4:
                    c2:b2:21:bd:ba:7b:6e:c4:37:d5:75:a3:d1:b0:94:
                    49:e7:77:b1:50:e8:f6:bb:e1:47:66:5d:34:0c:c7:
                    3d:5c:22:f3:d0:08:8c:d7:e3:99:ec:1e:ba:65:58:
                    d4:f2:e8:01:d9:44:79:8b:7e:af:57:b0:06:a0:c3:
                    5e:d8:92:1b:bd:09:c5:5d:c5:21:ce:23:5b:9a:46:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:E1:8A:D8:9C:97:FB:86:3D:B1:9A:17:59:3A:13:FB:EE:B0:B1:41
            X509v3 Authority Key Identifier:
                keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:c9:2d:e0:d9:19:df:10:b4:39:fb:6d:70:d1:1d:fa:21:4d:
         96:7b:dd:3c:92:c2:fd:d9:03:7c:09:14:14:3d:8d:87:52:7d:
         ee:f2:a9:23:a6:57:a0:12:da:24:2f:85:98:b2:06:bd:39:d8:
         56:8d:16:47:78:bb:85:58:50:13:b9:02:7c:df:b0:d6:d4:b0:
         13:d6:72:c6:d3:96:f1:e0:5a:a8:95:0d:5d:f8:2e:23:a8:27:
         81:96:f0:bb:82:95:56:a3:35:5e:1a:87:22:15:32:4e:5a:e4:
         18:6b:b8:20:6d:61:c9:dd:40:9d:d7:00:7e:bd:86:e0:c1:b2:
         94:0d:df:e0:63:dd:b0:ed:53:40:1f:3c:a2:30:6a:8a:e0:a0:
         69:79:ef:17:4e:b3:0f:3a:1a:0d:05:bd:60:30:8a:02:47:e8:
         1b:6e:93:44:42:d9:57:85:b6:ae:f9:9c:8b:45:4b:fa:cf:3f:
         1a:29:05:4c:07:66:b5:6a:f0:4d:fb:55:57:92:1d:f0:76:d7:
         f4:2f:3c:62:b0:90:8a:b1:f1:a6:f4:c2:b9:94:af:b7:6a:51:
         c0:fa:e0:5a:2b:15:35:77:68:d5:fc:72:db:bd:5f:de:5f:1b:
         ab:cc:c8:85:0c:fb:73:83:4a:22:50:4d:2e:7c:4c:f1:33:8e:
         da:3a:c4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 04:48:16 2024 by rpki-client on console-ams.rpki-client.org