Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
File:                     D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json)
Hash identifier:          n9Lr7LHM7ooxg4XLDELyY4hZC8iBvCcdQDi2om1FmXg=
Subject key identifier:   AE:8E:51:FD:F3:B8:54:47:AE:04:73:53:B4:4C:95:47:8B:9D:11:EF
Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C
Certificate issuer:       /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
Certificate serial:       F143163038A34C0A8C66D99587897EABDAFF7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
Manifest number:          7C
Signing time:             Sat 28 Sep 2024 07:14:40 +0000
Manifest this update:     Sat 28 Sep 2024 07:09:40 +0000
Manifest next update:     Sun 29 Sep 2024 10:46:40 +0000
Files and hashes:         1: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: JKneVfKFHtMVNlO+vt+PHF5CZpERHcvFl+4mUJkf1uc=)
                          2: 32332e3138332e3133362e302f32342d3234203d3e20323633363932.roa (hash: tl3GbOc1nEyNsKV3gLNEH9+sqIHGzcJ+QE3ljqyv/80=)
                          3: 32332e3138332e3133362e302f32342d3234203d3e203539393933.roa (hash: V6xYMAJmLNi9a7jp/UV/wrxTo2CdoGJPenlXloSwxmY=)
                          4: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: 7+OQpnNul6GvEz/TmHkQD01IKA9VIbWseT8LVp2j0nw=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Sep 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f1:43:16:30:38:a3:4c:0a:8c:66:d9:95:87:89:7e:ab:da:ff:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
        Validity
            Not Before: Sep 28 07:09:40 2024 GMT
            Not After : Sep 29 10:46:40 2024 GMT
        Subject: CN=AE8E51FDF3B85447AE047353B44C95478B9D11EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ca:8a:55:e2:90:3f:ad:37:ae:78:0b:e5:57:
                    6f:fd:06:10:8d:2e:a1:56:b0:ee:c6:40:9c:18:3f:
                    4b:e4:74:a2:bb:36:9e:56:95:da:33:41:dc:ba:87:
                    91:79:fa:b0:e1:2d:b0:cc:37:ef:cf:ae:6e:94:e4:
                    20:93:fc:79:5a:9d:8a:bf:f2:07:57:ab:91:df:2f:
                    dd:78:b2:f6:c0:59:16:9a:01:01:63:84:c5:3b:c2:
                    eb:40:49:fe:cf:81:63:9e:04:4e:90:c5:9c:03:53:
                    1f:16:67:d9:8b:4d:d5:fd:76:34:95:e5:7f:da:80:
                    e8:65:d0:9b:43:18:90:19:a4:68:d4:c7:b7:a7:ca:
                    12:cd:63:3d:dd:36:1f:49:99:66:f3:22:e3:ed:43:
                    bb:1a:f4:c3:c7:88:98:14:42:be:15:07:f4:de:36:
                    bc:24:04:95:06:8f:ef:de:ee:c1:0b:1f:84:b9:27:
                    29:0f:9f:29:5f:4f:2a:c2:1b:a9:8e:bb:ce:c7:e8:
                    f1:a7:bf:49:35:d9:da:40:29:ba:93:df:5f:e0:63:
                    4f:9d:53:e1:0d:c5:e7:7c:00:15:3f:96:26:e1:f4:
                    80:3d:8c:a6:95:8f:51:3b:8d:37:55:91:0e:27:3d:
                    af:77:57:20:e7:bc:a9:a5:5f:91:4c:a8:f5:6c:33:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8E:51:FD:F3:B8:54:47:AE:04:73:53:B4:4C:95:47:8B:9D:11:EF
            X509v3 Authority Key Identifier:
                keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:01:67:dc:fd:cc:bb:e5:c4:51:2a:38:22:79:c8:4f:b4:11:
         42:17:09:5c:a9:e1:a7:fb:ca:0e:6c:e8:73:dc:56:9b:06:2b:
         42:8a:3e:27:f2:6e:19:97:78:59:c1:df:f0:55:65:c2:5a:d7:
         23:30:10:1c:77:02:05:c0:c6:1b:fe:3f:af:46:b3:a9:38:5b:
         55:a4:ae:77:da:c4:0e:5b:64:ec:ec:f5:ed:a5:ce:2a:52:00:
         23:72:46:14:01:e9:07:8b:28:07:d2:7d:40:d9:f1:c4:26:8d:
         3c:09:a9:68:13:a7:d1:e2:90:e3:4d:a9:1b:ab:4f:a5:c7:51:
         8f:f7:07:08:35:03:48:a9:f0:f5:5a:c7:bb:4d:f8:8a:21:44:
         19:f9:d5:63:ba:a2:36:81:d4:ac:5b:e7:6b:b7:06:76:33:51:
         f5:89:46:0b:7c:53:42:6b:db:2a:8b:9c:46:96:7b:85:ff:fa:
         f0:83:26:79:8d:81:9f:67:5d:a1:3c:fc:17:62:27:fe:2e:19:
         99:b5:1b:ac:29:6a:65:fe:91:44:3e:4e:61:cc:33:1c:0d:55:
         ef:0b:b9:6c:ef:38:e2:d3:9b:f0:5d:ce:cc:be:14:3a:2d:a0:
         86:b5:20:59:56:2e:19:51:fe:82:53:fd:5a:aa:da:0f:dc:ae:
         4c:7a:75:4d
-----BEGIN CERTIFICATE-----
MIIF2zCCBMOgAwIBAgIUAPFDFjA4o0wKjGbZlYeJfqva/3owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmE1OWMxNWI5Nzc3YTRhNTI3MGM5YjdhNTg0ZTQ2OTc4
ZTA5YTdiZDJkMTU0YmZhOWQwHhcNMjQwOTI4MDcwOTQwWhcNMjQwOTI5MTA0NjQw
WjAzMTEwLwYDVQQDEyhBRThFNTFGREYzQjg1NDQ3QUUwNDczNTNCNDRDOTU0NzhC
OUQxMUVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cqKVeKQP603
rngL5Vdv/QYQjS6hVrDuxkCcGD9L5HSiuzaeVpXaM0HcuoeRefqw4S2wzDfvz65u
lOQgk/x5Wp2Kv/IHV6uR3y/deLL2wFkWmgEBY4TFO8LrQEn+z4FjngROkMWcA1Mf
FmfZi03V/XY0leV/2oDoZdCbQxiQGaRo1Me3p8oSzWM93TYfSZlm8yLj7UO7GvTD
x4iYFEK+FQf03ja8JASVBo/v3u7BCx+EuScpD58pX08qwhupjrvOx+jxp79JNdna
QCm6k99f4GNPnVPhDcXnfAAVP5Ym4fSAPYymlY9RO403VZEOJz2vd1cg57yppV+R
TKj1bDN6RQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFK6OUf3zuFRHrgRzU7RMlUeL
nRHvMB8GA1UdIwQYMBaAFNcKkdieNMeiAAmx4WD7bGJwY2MMMA4GA1UdDwEB/wQE
AwIHgDCBlwYDVR0fBIGPMIGMMIGJoIGGoIGDhoGAcnN5bmM6Ly9yc3luYy5wYWFz
LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0wOGJhLTRjZGUtODk3
OS00ZmFlYTRiMWJjMTIvMjAvRDcwQTkxRDg5RTM0QzdBMjAwMDlCMUUxNjBGQjZD
NjI3MDYzNjMwQy5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB
03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlm
MC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzMyNjE5ZmY5LTRhNDYtNGU5My1hOWI1
LWRkYTJhMzNhOWZmZC9iYTU5YzE1Yjk3NzdhNGE1MjcwYzliN2E1ODRlNDY5Nzhl
MDlhN2JkMmQxNTRiZmE5ZC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEF
BQcwC4aBgHJzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFiYzEyLzIwL0Q3MEE5
MUQ4OUUzNEM3QTIwMDA5QjFFMTYwRkI2QzYyNzA2MzYzMEMubWZ0MBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/
AWfc/cy75cRRKjgiechPtBFCFwlcqeGn+8oObOhz3FabBitCij4n8m4Zl3hZwd/w
VWXCWtcjMBAcdwIFwMYb/j+vRrOpOFtVpK532sQOW2Ts7PXtpc4qUgAjckYUAekH
iygH0n1A2fHEJo08CaloE6fR4pDjTakbq0+lx1GP9wcINQNIqfD1Wse7TfiKIUQZ
+dVjuqI2gdSsW+drtwZ2M1H1iUYLfFNCa9sqi5xGlnuF//rwgyZ5jYGfZ12hPPwX
Yif+LhmZtRusKWpl/pFEPk5hzDMcDVXvC7ls7zji05vwXc7MvhQ6LaCGtSBZVi4Z
Uf6CU/1aqtoP3K5MenVN
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:27:41 2024 by rpki-client on console-fra.rpki-client.org