Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
File:                     AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft (raw, json)
Hash identifier:          mR2dyCuLZ0nkgSs7vBSa8AwrpPvMmIRCNo7DiW4Vkig=
Subject key identifier:   4A:B3:97:DB:CA:16:0C:20:F2:9C:8A:96:FA:64:29:63:33:83:1D:BD
Authority key identifier: AE:DC:29:8D:25:2D:56:47:DD:0D:0C:9E:33:35:51:7D:F6:F4:98:01
Certificate issuer:       /CN=aedc298d252d5647dd0d0c9e3335517df6f49801
Certificate serial:       0944578748632A1F995F96F2554BCEBE7839F4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
Manifest number:          08E9
Signing time:             Mon 24 Jun 2024 05:58:35 +0000
Manifest this update:     Mon 24 Jun 2024 05:53:35 +0000
Manifest next update:     Tue 25 Jun 2024 06:51:35 +0000
Files and hashes:         1: 33312e32342e38352e302f32342d3234203d3e20323035363539.roa (hash: VMXyT3RWSUasYdwhisrKxteHuM6tNfJ75ub8wAAY4QI=)
                          2: AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl (hash: Ybs0rxfFtl6xExq7UmGHLO1GgRxpmw4LmjFVLOxqDOw=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Jun 2024 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:44:57:87:48:63:2a:1f:99:5f:96:f2:55:4b:ce:be:78:39:f4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc298d252d5647dd0d0c9e3335517df6f49801
        Validity
            Not Before: Jun 24 05:53:35 2024 GMT
            Not After : Jun 25 06:51:35 2024 GMT
        Subject: CN=4AB397DBCA160C20F29C8A96FA64296333831DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dd:11:d2:2e:55:f7:c1:fb:69:a7:f4:d1:f5:
                    1e:48:0e:e7:fd:67:31:3a:a6:82:e3:74:7e:24:8d:
                    f0:d2:81:b5:a6:e8:db:2b:42:80:0b:20:7d:78:ac:
                    e6:b4:0f:ca:e2:dc:06:73:39:29:37:c6:6a:85:57:
                    21:51:cf:99:9c:3a:6e:2b:9c:73:6c:f4:9e:9c:7b:
                    6c:7f:e5:6e:c9:dd:e4:18:df:a6:15:f6:9f:f7:ce:
                    e7:dc:c9:07:8e:be:cd:4a:2f:38:8e:f7:33:42:df:
                    37:d4:af:0b:61:50:e9:bf:e3:ee:b9:bb:00:e3:98:
                    22:53:c8:15:a8:5b:41:54:c5:8f:43:7a:ea:8f:86:
                    11:c4:ec:56:85:2b:1e:ed:99:3b:59:6c:68:b6:0c:
                    75:ee:3a:e2:38:7c:70:ad:ce:5f:d3:44:03:6b:df:
                    bc:bd:33:78:d3:a2:a1:34:b6:0e:9e:6b:ef:ab:10:
                    22:62:95:32:4b:6c:df:d5:7f:77:59:ef:65:dc:a5:
                    fc:b7:87:8e:7b:35:ee:9c:46:98:7e:ca:69:67:00:
                    ac:f1:5b:80:26:74:8d:19:5f:60:7b:72:78:51:9f:
                    3b:b4:e6:a9:28:2a:db:c7:fa:49:c2:cf:12:1d:b0:
                    92:b2:55:73:0b:d8:98:c4:81:fd:00:c6:64:68:fd:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B3:97:DB:CA:16:0C:20:F2:9C:8A:96:FA:64:29:63:33:83:1D:BD
            X509v3 Authority Key Identifier:
                keyid:AE:DC:29:8D:25:2D:56:47:DD:0D:0C:9E:33:35:51:7D:F6:F4:98:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ac:c8:31:6c:d3:b5:cb:16:10:29:ef:8e:df:61:da:0e:53:
         a0:af:0e:52:a3:c8:e2:2b:88:e1:64:88:2b:87:3a:76:9a:16:
         0d:45:d5:92:37:3a:09:e6:22:77:a9:6a:45:f5:94:99:a9:52:
         e5:6c:9c:ec:e7:af:7c:70:42:8d:5e:5c:39:ef:45:45:2f:40:
         36:f4:d0:ad:39:5c:26:c6:7a:c3:e4:52:1d:ee:1b:d3:94:ee:
         f3:e0:d4:9d:8b:6b:fd:d4:95:4e:9a:47:6a:c4:51:37:5d:80:
         44:e4:80:d4:7f:70:79:16:52:a4:c2:1f:2f:e8:f6:71:a8:19:
         5b:39:d0:60:e6:e0:42:a7:5a:f0:16:96:42:29:70:f8:1f:4f:
         df:ec:5f:32:40:c3:d6:63:f6:df:62:e5:c6:f8:d5:2c:47:c3:
         42:4e:6c:78:e7:eb:58:af:6a:3b:15:f6:18:57:a8:b7:91:9f:
         c1:a1:6f:5e:79:bb:f1:19:40:95:9a:50:c3:b4:77:02:fa:9e:
         98:63:b9:9a:97:2e:68:33:91:af:e0:05:6e:79:5f:c3:d0:44:
         a0:34:38:bb:43:0a:91:0b:81:d1:cb:45:1a:ac:87:70:96:ad:
         3a:f8:82:b3:db:dc:c8:65:ef:9f:df:11:1d:a8:53:22:b0:c3:
         93:8a:a8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 09:43:13 2024 by rpki-client on console-ams.rpki-client.org