Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.mft
File:                     677F663CDAA5996868019B05D109BAAD3558BE3A.mft (raw, json)
Hash identifier:          JqpXqZQK+nfW7ZcL63xN7/2+rHFByrdzAX9mkwzdxFk=
Subject key identifier:   69:E3:6F:5B:63:0B:8B:BA:3B:C1:B4:FB:B5:32:C3:17:94:87:1F:54
Authority key identifier: 67:7F:66:3C:DA:A5:99:68:68:01:9B:05:D1:09:BA:AD:35:58:BE:3A
Certificate issuer:       /CN=677f663cdaa5996868019b05d109baad3558be3a
Certificate serial:       2D3C89B47486B17ACCF7F04073D785B7A3B889B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.mft
Manifest number:          018F
Signing time:             Wed 30 Oct 2024 00:09:17 +0000
Manifest this update:     Wed 30 Oct 2024 00:04:17 +0000
Manifest next update:     Thu 31 Oct 2024 01:37:17 +0000
Files and hashes:         1: AS200454.asa (hash: 4QF1h3i4lb03fFR7UUyIH+nFkp3Y4UB6Ej2ouPW2O6E=)
                          2: 677F663CDAA5996868019B05D109BAAD3558BE3A.crl (hash: ldmVZOy5OR0XFGOR0as/AXAiqkKh8JMHgnilCNLRVTc=)
                          3: AS203619.asa (hash: OkHneCEjcI+l0k8K7ep/hGiqXvdtOZD+HEEvRg4Q9KQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Oct 2024 17:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3c:89:b4:74:86:b1:7a:cc:f7:f0:40:73:d7:85:b7:a3:b8:89:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677f663cdaa5996868019b05d109baad3558be3a
        Validity
            Not Before: Oct 30 00:04:17 2024 GMT
            Not After : Oct 31 01:37:17 2024 GMT
        Subject: CN=69E36F5B630B8BBA3BC1B4FBB532C31794871F54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:f4:c8:4e:6e:04:29:d9:76:bf:dc:c8:e0:
                    2c:80:db:c8:fb:55:f6:4e:f5:12:0c:0c:ab:88:e4:
                    ed:50:2b:bf:8d:5f:ef:63:df:cc:6e:cd:39:98:cf:
                    8d:b2:a7:e6:4e:ec:94:2d:f2:4f:e6:25:e5:1f:30:
                    01:88:9f:bd:7c:aa:99:b1:42:a9:22:9f:d4:b8:ea:
                    e4:fd:29:a5:06:c4:71:f7:57:a6:a2:f5:eb:44:be:
                    7c:a9:66:82:61:7b:16:64:8c:c1:c7:c4:4c:84:26:
                    21:c9:b2:76:47:14:77:75:dc:d7:d6:05:bb:a9:0c:
                    c6:fa:df:1e:29:8e:a8:a4:a0:be:8e:37:32:91:35:
                    c2:5a:ef:cf:5c:b2:50:25:e6:a3:20:55:e8:2c:88:
                    9f:e7:5e:6f:0d:07:4b:f5:02:cb:64:3e:41:2d:74:
                    4d:af:fc:03:e6:5b:a7:26:09:a8:27:06:7d:09:36:
                    b6:b7:72:96:76:4e:4c:c0:f5:e7:50:e3:23:e5:29:
                    05:a0:c4:9d:c0:79:d1:72:83:dd:42:61:3e:84:e2:
                    b8:bf:3f:6d:6a:28:5d:47:61:77:35:65:c9:05:67:
                    5f:54:3f:e0:f6:af:11:c8:9a:9e:82:8f:75:34:0f:
                    74:c9:93:f6:66:a3:f4:71:34:8b:a9:52:ea:a9:1f:
                    53:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E3:6F:5B:63:0B:8B:BA:3B:C1:B4:FB:B5:32:C3:17:94:87:1F:54
            X509v3 Authority Key Identifier:
                keyid:67:7F:66:3C:DA:A5:99:68:68:01:9B:05:D1:09:BA:AD:35:58:BE:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z39mPNqlmWhoAZsF0Qm6rTVYvjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0229bc11-dc0c-4ee5-838d-077696223e74/0/677F663CDAA5996868019B05D109BAAD3558BE3A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:45:db:ef:2f:23:44:c9:9e:f6:1a:4f:b9:e8:4c:d9:f2:db:
         12:30:bc:2e:22:d9:aa:67:6c:04:a4:3b:b0:36:b7:c1:6a:15:
         98:93:27:be:7e:d0:79:9a:3c:19:e1:93:a3:44:01:1b:a6:12:
         78:fa:21:d4:3f:96:3b:f5:f4:11:07:d1:cb:b5:43:c5:02:b1:
         16:8b:72:33:1d:20:bf:47:a1:28:fa:ab:3e:59:1a:f4:09:22:
         ed:a5:e2:c7:eb:80:42:57:29:4f:3e:e9:94:04:ee:a2:f7:3f:
         ef:65:a3:44:a6:dd:9c:0b:23:ea:96:48:1f:ea:75:60:ac:04:
         e1:62:ac:22:3f:5e:06:67:7a:b3:d7:16:e9:af:8c:e7:90:65:
         a6:51:5b:1c:f9:c5:9f:88:ea:de:6c:24:ae:79:98:70:e1:00:
         4c:ef:ef:59:7d:3f:d6:f2:e0:71:82:27:68:04:6e:57:75:60:
         24:51:67:b8:64:01:9c:e7:06:10:42:59:b2:9e:6f:d1:8a:40:
         21:94:ea:4e:78:6c:fb:20:51:c5:d1:64:11:71:12:f5:39:be:
         be:79:61:cf:a6:6e:d6:4f:eb:f9:c7:8f:63:dd:75:a9:36:e9:
         b6:f3:b2:58:ca:ed:e7:e2:63:d3:de:3f:55:85:ee:30:fb:4d:
         a6:96:9f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 01:25:25 2024 by rpki-client on console-ams.rpki-client.org