Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
File:                     926CB33722A3493216283DC80CAE0EE9D58874F2.mft (raw, json)
Hash identifier:          +vsw/zZKZLfag5vCFP3/tGba63jKMzaQseH6mwb6fZM=
Subject key identifier:   29:87:D1:98:0F:DC:5B:54:DD:AF:8E:4F:A9:58:57:7A:03:1C:15:46
Authority key identifier: 92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2
Certificate issuer:       /CN=926cb33722a3493216283dc80cae0ee9d58874f2
Certificate serial:       1B2BE33FD90C82E838B15DC53152E11727F84500
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
Manifest number:          02DB
Signing time:             Sat 15 Jun 2024 22:34:37 +0000
Manifest this update:     Sat 15 Jun 2024 22:29:37 +0000
Manifest next update:     Sun 16 Jun 2024 23:41:37 +0000
Files and hashes:         1: 926CB33722A3493216283DC80CAE0EE9D58874F2.crl (hash: k+8+YCDjs7ugl9CXUmhDqPNJImK1o1DbtNBtZN1JzOc=)
                          2: 323030313a3637633a313139303a626162653a3a2f36342d3634203d3e203537373832.roa (hash: RCmAOCWp56fUz3XqW5oTa3hF40AXItoUIhybXM0iF44=)
                          3: FF0595CB477C33B6B94C7E477213C842A6067D6B.cer (hash: Dh1mwlUTMlGkbPsv2oKAQuUKQelXQm9TWTzWrXvc/xw=)
                          4: 323030313a3637633a313139303a3a2f34382d3438203d3e20323130303839.roa (hash: Lh5KMLm7mwgZk2ZmxkMLZtICIwnXtCbc0DARbxpnKmg=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 19:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2b:e3:3f:d9:0c:82:e8:38:b1:5d:c5:31:52:e1:17:27:f8:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926cb33722a3493216283dc80cae0ee9d58874f2
        Validity
            Not Before: Jun 15 22:29:37 2024 GMT
            Not After : Jun 16 23:41:37 2024 GMT
        Subject: CN=2987D1980FDC5B54DDAF8E4FA958577A031C1546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ad:4d:04:3e:25:ba:38:97:9e:f1:b3:25:99:
                    7f:36:77:a9:1c:9b:71:68:13:8e:57:2d:ec:45:71:
                    29:6e:74:3f:c9:0b:10:61:f0:d4:7a:95:90:fc:22:
                    7a:11:a1:6a:d2:38:92:a2:88:38:e8:c0:c1:8a:75:
                    37:d1:96:12:b8:22:a0:90:29:34:79:2d:9a:cb:ba:
                    04:51:d2:43:c8:ac:1c:f2:f4:c2:c5:b0:ef:2f:2a:
                    ab:6e:ee:83:92:34:f7:4a:93:af:39:60:62:a6:f2:
                    78:2d:5d:29:f6:9d:78:57:1c:3d:9f:25:f7:64:33:
                    6e:f8:12:ea:fb:b9:36:5e:5e:b7:cb:71:30:48:64:
                    a6:6f:fb:c2:06:7d:ba:25:8b:3c:4f:2f:73:3a:60:
                    c4:c2:d7:43:79:b9:be:b6:96:8d:19:29:02:42:47:
                    19:c3:55:cc:08:8e:3c:79:65:6f:05:34:1f:09:72:
                    5c:83:22:c3:8b:fe:e4:09:b2:58:21:6b:84:a8:13:
                    be:5e:51:a2:67:90:b1:2d:63:56:82:c9:50:d8:3b:
                    8e:f4:27:32:a0:4f:a2:e6:53:dd:b1:c9:14:cd:c8:
                    d8:d0:1d:38:81:ac:a3:5d:69:04:ee:12:63:d4:c1:
                    b3:a5:80:4a:b8:b5:1d:1a:f8:31:e0:51:e9:32:55:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:87:D1:98:0F:DC:5B:54:DD:AF:8E:4F:A9:58:57:7A:03:1C:15:46
            X509v3 Authority Key Identifier:
                keyid:92:6C:B3:37:22:A3:49:32:16:28:3D:C8:0C:AE:0E:E9:D5:88:74:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyzNyKjSTIWKD3IDK4O6dWIdPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cce00cf9-04a5-43d1-8b89-edfa60cd8d4a/2/926CB33722A3493216283DC80CAE0EE9D58874F2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:74:da:26:26:dd:63:0a:f6:5e:9d:93:fa:01:e2:7c:5e:35:
         e1:fb:0f:32:bf:0f:75:11:28:f7:96:00:a5:6e:ca:f9:8e:71:
         7f:cb:9a:31:5f:a0:2b:17:6a:af:c8:4a:3f:ce:7b:e9:54:6c:
         66:1b:ba:52:f7:3e:97:f4:cf:01:65:2e:68:61:22:b8:d0:0e:
         d3:d5:99:f4:4f:8f:72:02:59:07:14:3c:a8:2d:11:21:09:b7:
         da:db:3e:74:7f:83:02:97:1d:cc:db:19:1e:ec:02:1d:c0:35:
         22:62:96:14:3a:63:bc:b8:37:c8:3f:a4:11:5e:c7:46:c7:20:
         25:92:e8:bd:3e:10:4a:27:5e:e3:97:c0:aa:83:d4:da:ca:05:
         82:70:63:18:f2:51:b5:00:94:da:8b:5d:78:e3:13:48:5d:db:
         24:0f:72:4a:c5:28:df:76:20:89:bd:1b:98:f7:7f:89:4c:8d:
         07:a7:78:b5:25:b6:88:fe:d1:14:03:78:8e:2c:34:fb:2b:d0:
         a2:fe:b8:d3:64:c6:fd:02:6c:d4:d5:76:3d:56:22:eb:51:bc:
         43:b2:a7:cd:41:7c:91:eb:6a:a3:bf:94:8d:90:62:98:5d:cf:
         cc:86:91:37:85:61:a8:a0:19:21:d0:4d:cf:6b:18:32:cd:30:
         45:04:49:ae
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUGyvjP9kMgug4sV3FMVLhFyf4RQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI2Y2IzMzcyMmEzNDkzMjE2MjgzZGM4MGNhZTBlZTlk
NTg4NzRmMjAeFw0yNDA2MTUyMjI5MzdaFw0yNDA2MTYyMzQxMzdaMDMxMTAvBgNV
BAMTKDI5ODdEMTk4MEZEQzVCNTREREFGOEU0RkE5NTg1NzdBMDMxQzE1NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrU0EPiW6OJee8bMlmX82d6kc
m3FoE45XLexFcSludD/JCxBh8NR6lZD8InoRoWrSOJKiiDjowMGKdTfRlhK4IqCQ
KTR5LZrLugRR0kPIrBzy9MLFsO8vKqtu7oOSNPdKk685YGKm8ngtXSn2nXhXHD2f
JfdkM274Eur7uTZeXrfLcTBIZKZv+8IGfbolizxPL3M6YMTC10N5ub62lo0ZKQJC
RxnDVcwIjjx5ZW8FNB8JclyDIsOL/uQJslgha4SoE75eUaJnkLEtY1aCyVDYO470
JzKgT6LmU92xyRTNyNjQHTiBrKNdaQTuEmPUwbOlgEq4tR0a+DHgUekyVUcVAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKYfRmA/cW1Tdr45PqVhXegMcFUYwHwYDVR0j
BBgwFoAUkmyzNyKjSTIWKD3IDK4O6dWIdPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NlMDBjZjktMDRhNS00M2QxLThiODktZWRmYTYwY2Q4
ZDRhLzIvOTI2Q0IzMzcyMkEzNDkzMjE2MjgzREM4MENBRTBFRTlENTg4NzRGMi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2tteXpOeUtqU1RJV0tEM0lESzRPNmRX
SWRQSS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jY2UwMGNmOS0w
NGE1LTQzZDEtOGI4OS1lZGZhNjBjZDhkNGEvMi85MjZDQjMzNzIyQTM0OTMyMTYy
ODNEQzgwQ0FFMEVFOUQ1ODg3NEYyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXTaJibdYwr2Xp2T+gHi
fF414fsPMr8PdREo95YApW7K+Y5xf8uaMV+gKxdqr8hKP8576VRsZhu6Uvc+l/TP
AWUuaGEiuNAO09WZ9E+PcgJZBxQ8qC0RIQm32ts+dH+DApcdzNsZHuwCHcA1ImKW
FDpjvLg3yD+kEV7HRscgJZLovT4QSide45fAqoPU2soFgnBjGPJRtQCU2otdeOMT
SF3bJA9ySsUo33Ygib0bmPd/iUyNB6d4tSW2iP7RFAN4jiw0+yvQov6402TG/QJs
1NV2PVYi61G8Q7KnzUF8ketqo7+UjZBimF3PzIaRN4VhqKAZIdBNz2sYMs0wRQRJ
rg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:41:27 2024 by rpki-client on console-fra.rpki-client.org