Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
File:                     AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft (raw, json)
Hash identifier:          iesLLIa+eVIpu0gbDDBSk8iJyEfmlqF73idvbqHUI1U=
Subject key identifier:   67:4B:79:94:FC:25:7A:1E:45:9A:A1:AC:FE:A8:40:42:B6:55:0D:82
Authority key identifier: AE:DC:29:8D:25:2D:56:47:DD:0D:0C:9E:33:35:51:7D:F6:F4:98:01
Certificate issuer:       /CN=aedc298d252d5647dd0d0c9e3335517df6f49801
Certificate serial:       6FE9E5A46CEB6A08A2AB9BBB473EFE5F2765A0D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
Manifest number:          08BD
Signing time:             Sun 16 Jun 2024 01:43:27 +0000
Manifest this update:     Sun 16 Jun 2024 01:38:27 +0000
Manifest next update:     Mon 17 Jun 2024 04:40:27 +0000
Files and hashes:         1: AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl (hash: 8oiAaNJAuYT+bqhvxwXEdqc7toAUwnMtIX+iHIo5T2o=)
                          2: 33312e32342e38352e302f32342d3234203d3e20323035363539.roa (hash: VMXyT3RWSUasYdwhisrKxteHuM6tNfJ75ub8wAAY4QI=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e9:e5:a4:6c:eb:6a:08:a2:ab:9b:bb:47:3e:fe:5f:27:65:a0:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc298d252d5647dd0d0c9e3335517df6f49801
        Validity
            Not Before: Jun 16 01:38:27 2024 GMT
            Not After : Jun 17 04:40:27 2024 GMT
        Subject: CN=674B7994FC257A1E459AA1ACFEA84042B6550D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:e4:e9:97:4d:25:40:d8:62:11:79:ef:df:
                    2a:1e:c0:dc:06:f4:62:b8:a3:7c:52:ac:0e:eb:c3:
                    5d:12:97:3d:19:a9:af:a5:0c:17:3d:bf:26:63:82:
                    ec:d7:fc:96:9d:15:c0:51:7d:fd:45:b5:c3:40:9c:
                    c2:03:76:32:08:6a:56:22:9c:5f:0f:eb:fc:bc:f5:
                    76:96:df:c0:7c:a7:33:d9:f6:90:5e:dd:28:29:f7:
                    c2:7a:42:5f:3b:fb:b7:d5:d4:ce:e8:81:cb:33:04:
                    2c:74:28:c9:35:0f:d7:39:f4:9d:49:e3:59:8d:3f:
                    5a:ca:c5:b1:19:60:0c:df:a2:00:18:8b:89:ae:29:
                    ce:45:46:bf:32:79:ad:e7:6d:a3:9a:f9:4f:72:33:
                    06:d7:16:da:69:cf:04:b0:39:14:6f:91:58:da:75:
                    8a:42:42:9e:c4:e7:e7:f1:54:3e:5c:4b:a2:2e:b6:
                    6f:0f:44:ea:39:03:aa:1d:35:b5:5f:4c:d0:6c:5a:
                    cf:91:0e:08:af:45:7f:f1:31:43:c6:1c:c6:7d:5c:
                    f7:65:d9:a6:75:35:8e:a4:5e:1d:a0:f4:44:a1:50:
                    e7:23:bc:92:7b:ac:8d:d6:87:09:11:d2:fd:05:63:
                    a5:4a:ba:04:ef:d5:3e:aa:0d:32:97:25:c8:e6:cd:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4B:79:94:FC:25:7A:1E:45:9A:A1:AC:FE:A8:40:42:B6:55:0D:82
            X509v3 Authority Key Identifier:
                keyid:AE:DC:29:8D:25:2D:56:47:DD:0D:0C:9E:33:35:51:7D:F6:F4:98:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:28:78:07:57:7e:5d:43:f2:0e:96:5e:f0:14:6a:52:e4:0a:
         8e:ea:fa:1d:26:74:0f:67:34:12:b3:57:5e:c1:cc:da:47:30:
         94:51:c7:e1:30:de:77:f7:57:de:e4:f8:3e:72:53:ff:3e:a8:
         8e:2c:e3:b5:25:60:58:b8:f3:2d:65:08:cb:af:dd:f1:13:e4:
         92:d4:ff:57:a9:47:01:9b:59:f5:27:5d:a0:7c:7c:3b:c8:db:
         68:a5:29:55:43:4f:0d:d1:7a:82:c3:af:7c:01:08:c9:6b:b1:
         30:dc:75:8a:d1:6e:c8:e7:24:c9:eb:49:ca:d1:9b:db:d0:19:
         c4:f6:bb:2e:3e:48:d7:3c:69:1a:5d:32:a7:a0:b7:89:69:cf:
         d0:03:fb:7c:af:51:33:5f:fc:b7:2b:41:3c:d9:cf:69:bb:54:
         63:80:d8:97:db:8a:53:12:64:28:fb:ae:23:0e:ca:fa:71:50:
         2c:30:04:df:7e:33:d9:2d:61:64:ea:92:b4:b2:65:b3:e0:a6:
         7a:ca:a0:2a:a0:26:b5:d0:b2:a4:33:ce:82:30:e2:32:75:1b:
         d8:13:40:5a:a5:98:96:94:90:4a:41:c7:58:5c:40:ae:4f:a2:
         84:70:e0:a4:c4:13:2d:4c:87:07:c8:5c:f0:a8:23:3e:e1:ab:
         7f:d4:a8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:06:33 2024 by rpki-client on console-fra.rpki-client.org