Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
File:                     4C189E42F35C944D463D9EA6501F093EB62BA785.mft (raw, json)
Hash identifier:          k2ZY84tRJ2V1yXpypV9uoGX9fndEG1sI9KRK/nUoVNw=
Subject key identifier:   C5:0F:98:D1:09:50:14:E1:DD:AE:3A:8E:53:A2:02:0A:D2:97:35:22
Authority key identifier: 4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85
Certificate issuer:       /CN=4c189e42f35c944d463d9ea6501f093eb62ba785
Certificate serial:       FE5C00C7C18E87E512D855822D40B35A6B2E83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
Manifest number:          AA
Signing time:             Thu 16 May 2024 22:47:04 +0000
Manifest this update:     Thu 16 May 2024 22:42:04 +0000
Manifest next update:     Fri 17 May 2024 22:47:04 +0000
Files and hashes:         1: 3138352e31332e3232372e302f32342d3234203d3e20323130353432.roa (hash: F9aTk9bgOzcFh6NPGG7l7OjOmRqEky0/zHiWtw+XU+g=)
                          2: 3135392e3235332e362e302f32342d3234203d3e20383334.roa (hash: ONgSPtXabXTcBR0c/6UCxjtQB7RWKUGQeeSVTOmpqd0=)
                          3: 3135392e3235332e312e302f32342d3234203d3e20323130353432.roa (hash: wbBS2s0IS68xoLr+xJKhqI0g6Z0PpWqspzEcRrUPPHk=)
                          4: 3135392e3235332e322e302f32342d3234203d3e20383334.roa (hash: ArNZnMXmK73jEmnf66XCu8Od2sXO9yHCA//Rw+/sNEE=)
                          5: 3135392e3235332e352e302f32342d3234203d3e20383334.roa (hash: lafLru48CeWCEZMOImM0brEGYY9kQdLjb3UEGF6esNE=)
                          6: 4C189E42F35C944D463D9EA6501F093EB62BA785.crl (hash: /4fkm1LlrzLejD0onYt38AmBXY3KzUVoAaUSdyhPWPw=)
                          7: 3138352e31332e3232342e302f32342d3234203d3e203632303638.roa (hash: NZPmFqYSJUp/hM0N3ny79OYjjw7aEORHhJ9DwnhBLkQ=)
                          8: 3135392e3235332e302e302f32342d3234203d3e20323036323831.roa (hash: O9DkXZ3QfwXJxA/fDSeWMv1TDtqw/shezqgDfWDIcPU=)
                          9: 3135392e3235332e342e302f32342d3234203d3e203630373831.roa (hash: Z84ATRNA+4WT0M1WquYZrB9axuky4/4I5P/GgDAi00o=)
                          10: 3135392e3235332e372e302f32342d3234203d3e20383334.roa (hash: y/1qkVRRmxrQB8tF/6HVu1wXPN9Fx+NbA8oFFXYHeOw=)
                          11: 3138352e31332e3232362e302f32342d3234203d3e20383334.roa (hash: oM2gN+oDIGnnLuDyQXgbmWF62EcyZqYhYpVzTwP+UlI=)
                          12: 3231372e32382e3133382e302f32342d3234203d3e20323039393736.roa (hash: tVUvIrXWXtAXUhoND4zxAbjUSLIKfmnAMtjbKc/53Lo=)
                          13: 3135392e3235332e332e302f32342d3234203d3e20383334.roa (hash: TkrR3ex5rYeOHrjZKFXhBjWC6wi4JJsHqll8TezEu8g=)
                          14: 3138352e31332e3232352e302f32342d3234203d3e203631333137.roa (hash: AmLj9ehcBc0k5awtVc6jG/A57LgG96edpBJjom+IPSs=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            fe:5c:00:c7:c1:8e:87:e5:12:d8:55:82:2d:40:b3:5a:6b:2e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c189e42f35c944d463d9ea6501f093eb62ba785
        Validity
            Not Before: May 16 22:42:04 2024 GMT
            Not After : May 17 22:47:04 2024 GMT
        Subject: CN=C50F98D1095014E1DDAE3A8E53A2020AD2973522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b6:b0:3d:0a:66:42:0d:24:53:69:19:bd:12:
                    52:74:5f:86:bc:11:34:0c:1d:30:14:de:66:f6:c2:
                    9f:3a:17:da:87:0f:b1:17:23:f1:43:70:f2:96:61:
                    96:d2:89:55:66:5c:c5:8c:61:96:03:af:35:74:42:
                    e6:f7:f2:d2:e5:41:74:be:60:6a:43:3b:c2:70:a3:
                    45:75:ef:3f:fd:d1:fe:d3:bc:f8:f5:05:ab:61:e2:
                    c4:41:f4:c6:94:3b:35:5e:a5:92:a4:aa:df:37:c5:
                    8e:7d:1b:be:5b:ed:75:b7:2f:33:a0:fd:70:d7:d8:
                    53:c2:4e:71:ae:1e:1e:dd:e8:06:61:20:50:d2:d9:
                    64:96:86:36:68:1f:73:02:63:22:f0:6e:19:f1:2b:
                    77:66:11:ef:b0:d7:74:7a:5a:a7:6c:71:0a:1f:86:
                    50:b2:2a:2e:db:24:a5:95:a6:0a:f8:ce:03:1c:3c:
                    71:4c:14:ff:54:65:34:93:25:c4:de:fb:2e:37:59:
                    3c:b7:41:01:5c:7e:8c:cb:ef:1f:98:96:f0:07:3d:
                    b9:68:29:ed:07:73:7f:98:59:a8:63:5a:da:91:5f:
                    b8:0c:ee:f2:de:40:e2:50:13:e7:29:5e:4b:aa:1f:
                    89:a4:ef:fe:d0:f7:b8:8e:56:f8:08:0e:59:1a:c5:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:0F:98:D1:09:50:14:E1:DD:AE:3A:8E:53:A2:02:0A:D2:97:35:22
            X509v3 Authority Key Identifier:
                keyid:4C:18:9E:42:F3:5C:94:4D:46:3D:9E:A6:50:1F:09:3E:B6:2B:A7:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBieQvNclE1GPZ6mUB8JPrYrp4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ce510e17-31fa-414b-989e-026dbb6fdf51/0/4C189E42F35C944D463D9EA6501F093EB62BA785.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4e:c4:60:79:ad:73:0a:43:c0:ed:ba:76:ff:8c:8d:ad:bf:
         08:4e:0c:b0:53:42:c5:bf:08:91:7a:82:f4:97:64:8e:df:64:
         9f:4a:b3:4c:c6:29:d6:71:6c:c9:0a:1c:f3:1f:3f:2c:c1:c3:
         b6:46:44:e4:b6:23:f8:fc:5a:2c:8c:a8:2e:da:f3:de:fd:9a:
         d6:4d:19:4a:05:d2:23:a4:72:bb:71:fa:80:4f:61:b7:b1:c7:
         4a:f8:ca:20:37:d5:47:58:dc:2b:ee:c2:6d:01:45:f3:51:e4:
         1d:a9:57:a9:3c:5f:32:89:13:a8:65:66:12:5c:c0:04:56:e7:
         f2:e6:3b:21:6e:bc:3b:b9:a7:f1:f2:f6:48:f7:9d:0b:5c:b5:
         bb:7f:74:44:0a:24:36:a8:a6:03:67:7f:24:fd:3a:5e:86:bd:
         ac:54:ed:6f:68:1b:8e:7a:ad:9d:16:21:e9:cc:50:6e:9e:12:
         90:98:71:17:b7:d0:8f:b0:cb:b9:fb:58:fe:4b:87:66:2f:c9:
         e3:d8:a2:1e:23:48:e8:83:51:f6:04:b8:90:2a:9c:8b:06:19:
         10:d7:da:ec:49:a4:43:c9:29:45:5a:6b:b4:11:93:0c:31:5e:
         5f:bc:3a:b3:34:b6:bc:0e:6f:f3:d3:48:cf:ab:e1:ea:be:3b:
         6f:a7:f5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:49:59 2024 by rpki-client on console-fra.rpki-client.org