Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
File:                     98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json)
Hash identifier:          rwyg7wAweY7IjdqnogRRpBScNA48UKW34rPoBnw3e9I=
Subject key identifier:   EB:A0:D8:C9:15:33:98:CF:B3:42:62:9C:F4:FA:93:8C:69:94:82:0D
Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8
Certificate issuer:       /CN=98a87cad5b710890a9528f166f4202393824e6b8
Certificate serial:       44BC7BEABA8E2827EA2B99EB4C3BBA0563C04585
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
Manifest number:          01CB
Signing time:             Sat 15 Jun 2024 05:50:23 +0000
Manifest this update:     Sat 15 Jun 2024 05:45:23 +0000
Manifest next update:     Sun 16 Jun 2024 08:20:23 +0000
Files and hashes:         1: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 0WTZwkI1gTbE4KRb+6mGDktnUT17/TMnkP8qgV8AKK0=)
                          2: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: g6c4KgstvUlegppZUO6REhKz/gSTpIqu21IqhG4nk14=)
                          3: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 4WtJT3MtoGRH3HZ14DWC3EHHaqDDqUxB5LPh1LcF1p0=)
                          4: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: e6fKLtzqKV4vVVMK/UiNChu+j/WHpA2fqogQ5G2TDRo=)
                          5: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: VLMJSk6s8ziUS7xBD0MyCyzg2oAx6dFdHdJt1/iLud0=)
                          6: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: auoRgq24c1W8o7y2jlFHjlevIw8l909HAwcxPZiugeM=)
                          7: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: l8eIo2FlZo6EznHW8IuYhJrABmMBLcvWRcSIOHvjUNE=)
                          8: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: Oy8Npsr2RbcsLCbyckJDZUc/eH4+r4t+adSFl0lBjsA=)
                          9: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: pWYUWmEx6PLQORZVX3DVVTrO19XN7suVwsKHpOjuEr4=)
                          10: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: QNqENLhAeajRbs7LEheGJMzSzLUfcu/+6QiEwMJWm9U=)
                          11: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: Mjv6PPEtIBIWfZkl9zHwBSCSpmV3MNYts3m8K5dL10o=)
                          12: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: OmnLcyJ1Co2j9O9f3mPqPZ1zZrGr0TvCyFr4B0+4gco=)
                          13: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: e6KdxMFQXXYYTjok2EyXtZMqVW8K+wJ5hoG/taFsXvw=)
                          14: AS48070.asa (hash: U7c8ZCx8U9BSDJIU+vDZcbf7Z0p/WbWB58jQYmSEAa8=)
                          15: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: csIYkNp2hytcvt0mNyllKlOkf/V5AwPD07MZNt/f7Ao=)
                          16: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: TuSxpbzi25dKvaDwAUU7eKC/BJS4fC4bGUnoO1g1d/E=)
                          17: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: 4fvREtx1+BQITt7UngAFGbNBD2zl2RCfoRpc2R9oqUA=)
                          18: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 6JcGQzE9OhBV3zfCjLBdHlMzKU5GclTIrsWZpPbpIfo=)
                          19: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: v7p6apy1EGQeXgeQMOZ/mTgl2MqVAgWKVI4MG5KZOT4=)
                          20: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: ukDSET8NWG0LCsh6IY9YH2HoV+ylNoDU9G7zgJMefjQ=)
                          21: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: F4tALzc2U4SfhUnTrNJjY9pHpMEKrxNyX/275/9IoQI=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:bc:7b:ea:ba:8e:28:27:ea:2b:99:eb:4c:3b:ba:05:63:c0:45:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8
        Validity
            Not Before: Jun 15 05:45:23 2024 GMT
            Not After : Jun 16 08:20:23 2024 GMT
        Subject: CN=EBA0D8C9153398CFB342629CF4FA938C6994820D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8c:a3:18:6b:af:5d:f6:52:e1:8e:3a:f2:a2:
                    d9:f9:e0:fe:35:84:f9:46:9d:86:3d:81:b1:81:23:
                    9e:ba:c1:f8:c1:75:90:ef:cd:bf:b9:11:ad:f8:ac:
                    a2:ae:9a:ba:5e:bf:b9:0f:9f:08:29:27:b1:0c:04:
                    3b:fb:e2:8a:6e:26:07:74:e3:c0:3a:ef:8a:ca:74:
                    fe:5d:a1:7b:99:c6:72:f5:19:1b:a1:1e:50:10:12:
                    c1:56:72:5b:ce:68:e7:0d:45:fb:79:9d:1a:bd:0d:
                    be:01:43:38:7f:09:c6:10:62:83:a1:ee:11:88:f8:
                    1e:25:55:d6:d5:85:17:1d:0f:9e:f8:3c:a1:d0:2b:
                    4f:4a:30:d7:39:55:95:77:70:ba:6c:b2:23:18:0b:
                    cf:14:ae:30:e9:8e:5c:2e:65:4f:9b:e0:45:0f:7a:
                    fe:8c:39:5a:ad:9d:7f:f2:87:c8:9e:23:45:32:4a:
                    62:2e:51:f3:ca:b5:a2:fa:06:c1:b6:88:ec:72:18:
                    96:8d:c6:d6:99:d5:58:dc:71:63:e1:bc:36:64:a2:
                    74:fe:fb:2e:b5:75:78:d0:61:cb:e8:e4:15:e5:10:
                    a5:88:4c:6e:a9:89:f3:f1:6a:d8:40:b2:43:a2:32:
                    16:2c:d1:f2:61:b9:e4:b5:24:e5:fd:8e:2b:81:6c:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A0:D8:C9:15:33:98:CF:B3:42:62:9C:F4:FA:93:8C:69:94:82:0D
            X509v3 Authority Key Identifier:
                keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:e6:0a:05:8b:99:f9:58:92:dd:e8:3a:e4:b4:3b:dc:2e:00:
         7f:a5:a1:91:6c:d0:38:79:34:a8:e7:27:ba:65:ed:c4:3b:8e:
         a7:4c:21:d7:a7:7c:b3:7a:6c:5b:a4:42:fd:fa:04:87:ef:c8:
         98:66:e5:f7:e6:05:aa:28:ae:20:84:6d:a6:8a:12:6b:f3:b6:
         61:6d:fb:d8:64:34:1a:b8:ba:bd:d0:58:b5:8a:f1:d9:cc:7b:
         78:4b:3d:78:d1:9a:f7:c5:83:b5:53:e5:de:36:53:bf:14:a7:
         77:a7:39:f3:cd:03:bd:c8:5e:42:1c:74:1f:2b:90:2c:33:29:
         f0:7a:42:20:1f:dc:72:76:a3:d9:1b:d8:ad:2e:2b:bb:db:d2:
         3f:d3:21:ae:89:a4:93:35:25:44:0d:0d:e5:15:24:32:d6:47:
         da:b1:11:da:bd:1f:ec:ab:37:2a:0d:78:06:9f:e1:1e:56:b0:
         9b:e5:b7:ac:3e:36:63:23:d3:42:53:ed:57:12:87:55:87:eb:
         4a:61:25:5a:64:91:a4:5a:a3:ee:28:56:1c:37:b2:16:bc:55:
         ba:ae:14:5d:ec:54:97:e1:0f:1c:1d:05:ef:ae:e8:9c:2a:d9:
         c9:27:4e:5e:1d:b1:bc:68:e7:89:d0:43:1e:41:fd:5e:e0:fe:
         4a:c9:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 06:47:40 2024 by rpki-client on console-ams.rpki-client.org