Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.mft
File:                     49BFF87337858F783807140B411F622360B146C2.mft (raw, json)
Hash identifier:          qEbfoDqo+F+ogR3R/L0SEewvbz2GYwp2iPKRYP2s934=
Subject key identifier:   5B:75:18:E4:AB:0E:55:64:6B:D8:BD:15:6A:1B:61:DE:E4:72:9F:A7
Authority key identifier: 49:BF:F8:73:37:85:8F:78:38:07:14:0B:41:1F:62:23:60:B1:46:C2
Certificate issuer:       /CN=49bff87337858f783807140b411f622360b146c2
Certificate serial:       2F710473F1F871091682444B0FD968D220E78A3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sb_4czeFj3g4BxQLQR9iI2CxRsI.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.mft
Manifest number:          8C
Signing time:             Tue 11 Jun 2024 03:14:19 +0000
Manifest this update:     Tue 11 Jun 2024 03:09:19 +0000
Manifest next update:     Wed 12 Jun 2024 06:29:19 +0000
Files and hashes:         1: AS48752.asa (hash: BAZpoilyvFKjzZr1itAgsEiE/+AlJOJ+hLuL3JktJl4=)
                          2: AS202197.asa (hash: Sq9izfmRcWaoTgeRyrc7rldozgdnpeb784owJd4Qt7s=)
                          3: 49BFF87337858F783807140B411F622360B146C2.crl (hash: HcsF74ekBsNj8VSR8cbxOuxpD7p2UCT9ARCtLdWa3jU=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sb_4czeFj3g4BxQLQR9iI2CxRsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:71:04:73:f1:f8:71:09:16:82:44:4b:0f:d9:68:d2:20:e7:8a:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bff87337858f783807140b411f622360b146c2
        Validity
            Not Before: Jun 11 03:09:19 2024 GMT
            Not After : Jun 12 06:29:19 2024 GMT
        Subject: CN=5B7518E4AB0E55646BD8BD156A1B61DEE4729FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a8:09:d6:b5:09:8d:01:33:e2:d1:04:86:32:
                    0e:f8:31:65:10:c8:0c:14:a6:eb:18:1b:78:71:9c:
                    45:8f:e9:20:03:1c:20:69:2c:c9:fe:42:f4:50:9c:
                    14:ff:84:a0:3d:b9:57:38:c6:a3:f2:df:0f:20:72:
                    bf:a5:be:b1:96:5d:37:61:6e:2a:1d:2f:58:10:fe:
                    c2:aa:2b:cb:d7:c5:77:7f:10:42:e4:19:8e:68:8a:
                    cc:8a:9b:85:95:57:f0:4f:18:f8:01:02:a3:03:8f:
                    64:e0:42:ae:22:0c:cd:2e:02:12:43:95:a7:b6:11:
                    4e:b5:55:bd:a4:5b:13:10:0a:a0:66:c7:a8:08:dd:
                    97:17:e3:21:2a:a0:17:cf:50:f7:46:50:06:5a:62:
                    75:18:d9:fd:89:20:04:fe:53:04:98:46:44:c1:9a:
                    f8:cb:f6:2d:8a:fe:70:df:82:76:92:8f:1b:38:cf:
                    69:94:87:b9:af:15:7b:a7:78:c4:12:39:33:4e:ac:
                    2b:f0:c1:75:3c:57:64:3c:28:0a:95:6c:8a:a4:ad:
                    8c:25:a0:5a:05:ab:f4:77:ce:e5:27:aa:c7:ca:9d:
                    64:8b:5c:4a:c7:e4:68:fb:51:62:e8:fe:82:eb:a3:
                    62:fc:b1:ae:39:f1:d6:cd:3f:83:08:a2:d4:00:16:
                    65:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:75:18:E4:AB:0E:55:64:6B:D8:BD:15:6A:1B:61:DE:E4:72:9F:A7
            X509v3 Authority Key Identifier:
                keyid:49:BF:F8:73:37:85:8F:78:38:07:14:0B:41:1F:62:23:60:B1:46:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sb_4czeFj3g4BxQLQR9iI2CxRsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/0/49BFF87337858F783807140B411F622360B146C2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:35:19:c0:28:17:80:ea:8d:ea:2e:3d:cc:12:c7:da:22:01:
         d5:12:5f:50:a6:55:7f:61:cf:71:34:6d:ff:84:9e:c0:90:8f:
         c8:f2:53:f3:99:07:98:61:d9:58:33:47:aa:57:de:cc:00:38:
         e3:0f:97:8a:9e:d3:4e:fd:eb:14:8e:45:5b:e5:d6:d2:85:98:
         76:a2:26:37:a9:1c:3e:5e:d1:43:d4:3f:39:7e:39:b6:80:0d:
         87:9f:c5:27:70:a8:06:ee:d9:19:59:6e:43:12:86:44:aa:ab:
         93:10:ae:21:dc:67:0e:7f:bd:bc:ac:e7:2c:1a:77:d9:30:8e:
         09:b0:07:be:d7:63:af:0a:fe:5e:28:a8:d4:b9:82:a8:8a:db:
         99:e4:b3:88:31:f5:23:29:35:3f:6e:0f:a9:29:68:2b:eb:93:
         6f:6f:1c:43:f5:c7:3a:61:bd:55:c5:59:24:33:df:58:b4:eb:
         77:27:e7:d9:3d:74:f3:48:b7:15:14:1c:28:42:fa:d0:02:08:
         d4:be:70:e1:6e:c1:ae:b6:91:9a:7a:26:51:b3:b5:b1:25:ee:
         b4:3a:06:d6:38:a4:b7:7c:03:50:7c:79:d0:72:fe:e0:ec:52:
         f4:1a:28:77:d7:fd:25:e7:7f:0c:ff:c3:5e:8a:82:8f:d7:6f:
         cd:6c:84:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 06:21:07 2024 by rpki-client on console-ams.rpki-client.org