Manifest

$ rpki-client -vvf rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft
File:                     3F0AC25D352C83DA8307594B98ED061BE8489682.mft (raw, json)
Hash identifier:          lQwOUS+1Pv/0RAW61FU0Xq98/zTUK4gX0l8FPdntCRQ=
Subject key identifier:   A3:87:A9:13:43:E9:C0:3A:20:9A:7E:C6:90:89:C0:11:08:2E:2C:14
Authority key identifier: 3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82
Certificate issuer:       /CN=3F0AC25D352C83DA8307594B98ED061BE8489682
Certificate serial:       606BCAB50C46E6802CDBED5830C0A4098E29C459
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer
Subject info access:      rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft
Manifest number:          01C0
Signing time:             Wed 13 Nov 2024 06:53:29 +0000
Manifest this update:     Wed 13 Nov 2024 06:48:29 +0000
Manifest next update:     Thu 14 Nov 2024 07:47:29 +0000
Files and hashes:         1: 326130613a363034303a326430303a3a2f34302d3438203d3e20323030323536.roa (hash: PVpjAQXG3L5eu3AZCp5ocDZXrlgY6ZdPaXL/2jErtr4=)
                          2: 326130613a363034303a326430303a3a2f34302d3438203d3e20313436393530.roa (hash: 1r5cfZQM2ovYXIUQ/UHNIUj5FHjZv0uG72qrp9QcfRo=)
                          3: 3F0AC25D352C83DA8307594B98ED061BE8489682.crl (hash: iLJIYs/Aw3yVkAPnkq980SX8FUp+ROzlqBOAk7r/buw=)

Validation:               OK
Signature path:           rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl
                          rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Nov 2024 20:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6b:ca:b5:0c:46:e6:80:2c:db:ed:58:30:c0:a4:09:8e:29:c4:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F0AC25D352C83DA8307594B98ED061BE8489682
        Validity
            Not Before: Nov 13 06:48:29 2024 GMT
            Not After : Nov 14 07:47:29 2024 GMT
        Subject: CN=A387A91343E9C03A209A7EC69089C011082E2C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:74:5c:35:71:09:09:13:20:6e:5f:b3:34:c1:
                    13:48:59:59:df:a4:99:8b:45:7b:a9:d9:8d:69:e1:
                    55:ad:de:25:e9:fd:97:1d:ad:29:4e:30:c2:62:44:
                    34:c0:97:e6:3a:62:b4:bc:44:49:6d:7d:33:68:8b:
                    68:5d:06:2f:12:e1:32:d2:c0:8d:0b:1f:23:b1:90:
                    b4:e6:9c:69:d2:14:93:5a:45:4d:18:9b:a6:19:5c:
                    64:e2:45:ee:f0:58:11:b7:fe:07:74:b4:f8:48:8e:
                    29:df:ab:31:ae:ff:2f:a8:e3:af:38:08:2b:67:6c:
                    a1:09:e4:13:8e:5f:4f:fe:cb:01:f7:82:3c:eb:ef:
                    d2:de:e1:7f:27:fe:47:62:bc:e6:85:38:72:5c:d5:
                    b2:42:73:1a:17:b1:20:51:4e:13:77:e9:cb:00:6e:
                    e2:70:df:15:ca:a2:0a:5d:6b:1c:f7:0c:9f:c4:ad:
                    91:56:7c:b2:93:1a:4b:93:ea:36:d8:d6:52:a7:5e:
                    19:92:c4:51:f1:ef:56:19:e0:de:b1:44:2e:e7:cd:
                    c9:15:80:cc:83:10:55:69:02:3d:56:7e:9d:ba:1b:
                    65:00:ee:1a:61:0d:38:fc:69:9f:94:06:ec:2a:2b:
                    ae:7f:97:a1:48:d1:65:31:14:ac:7e:f9:8d:78:46:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:87:A9:13:43:E9:C0:3A:20:9A:7E:C6:90:89:C0:11:08:2E:2C:14
            X509v3 Authority Key Identifier:
                keyid:3F:0A:C2:5D:35:2C:83:DA:83:07:59:4B:98:ED:06:1B:E8:48:96:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3F0AC25D352C83DA8307594B98ED061BE8489682.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.haruue.net/repo/YC3254-RPKI/2/3F0AC25D352C83DA8307594B98ED061BE8489682.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:82:74:71:58:4c:94:4f:26:8e:6f:fc:a1:70:d5:95:1e:96:
         c7:1e:21:d4:94:d5:1e:b7:c8:75:e3:8c:78:5d:7a:11:a1:22:
         77:52:d3:97:7f:2b:84:03:de:bc:c1:3a:78:a3:05:71:3d:b0:
         ba:34:7b:8c:b1:2e:77:2b:b0:48:75:b2:4d:6c:06:4a:63:10:
         99:e5:e9:c3:5b:d8:05:3e:f2:5a:d6:36:68:27:c6:11:a8:68:
         1f:0f:0b:01:64:a8:3a:7f:cf:a3:df:19:7a:5e:0c:6c:80:e8:
         a8:a8:fd:c1:bb:da:35:fa:fc:cd:9b:00:dd:59:53:f2:57:38:
         cf:aa:33:1e:a5:f5:14:7a:57:50:03:c6:01:d3:6d:57:8e:88:
         c6:94:b8:bb:eb:ab:97:be:79:e4:67:2f:13:58:0a:63:13:4a:
         e4:76:7d:d4:06:be:18:10:33:7d:79:f3:5f:b4:7f:7f:e5:03:
         28:64:a8:6b:eb:2e:81:5a:7d:86:ee:9c:1d:6f:e4:18:c5:da:
         68:fb:fa:f5:c7:c1:32:5a:fc:34:fb:90:90:c7:89:22:7b:51:
         9b:06:3a:71:2b:b8:b8:99:87:a7:46:d8:1f:e8:3a:15:12:92:
         d0:f3:98:5c:29:f0:41:24:5a:20:31:36:94:b0:ae:08:01:fc:
         85:6e:2b:1c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIUYGvKtQxG5oAs2+1YMMCkCY4pxFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0YwQUMyNUQzNTJDODNEQTgzMDc1OTRCOThFRDA2MUJF
ODQ4OTY4MjAeFw0yNDExMTMwNjQ4MjlaFw0yNDExMTQwNzQ3MjlaMDMxMTAvBgNV
BAMTKEEzODdBOTEzNDNFOUMwM0EyMDlBN0VDNjkwODlDMDExMDgyRTJDMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDodFw1cQkJEyBuX7M0wRNIWVnf
pJmLRXup2Y1p4VWt3iXp/ZcdrSlOMMJiRDTAl+Y6YrS8REltfTNoi2hdBi8S4TLS
wI0LHyOxkLTmnGnSFJNaRU0Ym6YZXGTiRe7wWBG3/gd0tPhIjinfqzGu/y+o4684
CCtnbKEJ5BOOX0/+ywH3gjzr79Le4X8n/kdivOaFOHJc1bJCcxoXsSBRThN36csA
buJw3xXKogpdaxz3DJ/ErZFWfLKTGkuT6jbY1lKnXhmSxFHx71YZ4N6xRC7nzckV
gMyDEFVpAj1Wfp26G2UA7hphDTj8aZ+UBuwqK65/l6FI0WUxFKx++Y14Rv81AgMB
AAGjggIZMIICFTAdBgNVHQ4EFgQUo4epE0PpwDogmn7GkInAEQguLBQwHwYDVR0j
BBgwFoAUPwrCXTUsg9qDB1lLmO0GG+hIloIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5LmhhcnV1ZS5uZXQv
cmVwby9ZQzMyNTQtUlBLSS8yLzNGMEFDMjVEMzUyQzgzREE4MzA3NTk0Qjk4RUQw
NjFCRTg0ODk2ODIuY3JsMHoGCCsGAQUFBwEBBG4wbDBqBggrBgEFBQcwAoZecnN5
bmM6Ly9jbG91ZGllLXJlcG8ucnBraS5hcHAvcmVwby9DTE9VRElFLVJQS0kvMC8z
RjBBQzI1RDM1MkM4M0RBODMwNzU5NEI5OEVEMDYxQkU4NDg5NjgyLmNlcjB+Bggr
BgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
LmhhcnV1ZS5uZXQvcmVwby9ZQzMyNTQtUlBLSS8yLzNGMEFDMjVEMzUyQzgzREE4
MzA3NTk0Qjk4RUQwNjFCRTg0ODk2ODIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZgnRxWEyUTyaOb/yh
cNWVHpbHHiHUlNUet8h144x4XXoRoSJ3UtOXfyuEA968wTp4owVxPbC6NHuMsS53
K7BIdbJNbAZKYxCZ5enDW9gFPvJa1jZoJ8YRqGgfDwsBZKg6f8+j3xl6XgxsgOio
qP3Bu9o1+vzNmwDdWVPyVzjPqjMepfUUeldQA8YB021XjojGlLi766uXvnnkZy8T
WApjE0rkdn3UBr4YEDN9efNftH9/5QMoZKhr6y6BWn2G7pwdb+QYxdpo+/r1x8Ey
Wvw0+5CQx4kie1GbBjpxK7i4mYenRtgf6DoVEpLQ85hcKfBBJFogMTaUsK4IAfyF
bisc
-----END CERTIFICATE-----
Generated at Wed Nov 13 08:25:45 2024 by rpki-client on console-ams.rpki-client.org