Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft
File:                     F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft (raw, json)
Hash identifier:          e0iL3Vj2mJudT9dYf2R85ZyZf0RMHIBzuZ6kw6TbPKE=
Subject key identifier:   B4:87:E1:02:33:E6:86:14:37:27:3D:14:28:0B:A5:19:2E:DD:B7:D9
Authority key identifier: F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0
Certificate issuer:       /CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
Certificate serial:       178D7143FE833BDEFB9786F73D74009ED6078927
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft
Manifest number:          AF
Signing time:             Thu 19 Sep 2024 13:37:55 +0000
Manifest this update:     Thu 19 Sep 2024 13:32:55 +0000
Manifest next update:     Fri 20 Sep 2024 17:33:55 +0000
Files and hashes:         1: F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl (hash: V5GjSmRnbf9yWu/L114bXG4ojeu9b+HpGa2C3Ng0SvM=)
                          2: 326130363a313238313a393030303a3a2f33362d3438203d3e20313938303136.roa (hash: k3np5n3Q94jk1AEUCgIpsYJ425S2HhruwkTMaUrfj9I=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 07:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8d:71:43:fe:83:3b:de:fb:97:86:f7:3d:74:00:9e:d6:07:89:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0
        Validity
            Not Before: Sep 19 13:32:55 2024 GMT
            Not After : Sep 20 17:33:55 2024 GMT
        Subject: CN=B487E10233E6861437273D14280BA5192EDDB7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:90:51:df:ef:43:60:59:18:ff:cf:95:22:9c:
                    5b:cf:45:e3:e6:01:9e:44:cd:e6:0c:a9:99:a1:a4:
                    a1:6f:b5:1f:93:14:db:cc:d7:78:b4:33:77:4d:75:
                    a6:3d:94:8e:a6:01:74:73:1d:5d:5f:cd:f4:59:38:
                    c7:b9:d4:a0:76:b2:0b:0b:62:72:94:82:5f:64:a2:
                    95:92:5e:3f:8d:aa:f9:de:61:5a:7a:61:b3:1c:8c:
                    45:e8:96:5e:79:75:50:b6:c7:da:7d:39:06:c5:08:
                    b9:04:c6:16:1c:99:6c:2f:ba:6d:62:c6:59:a2:41:
                    12:f8:65:e3:14:c2:3d:c5:af:3f:57:39:0f:c8:74:
                    36:5d:ce:ad:4e:ac:58:d9:61:7b:82:75:08:44:46:
                    d4:d5:f9:39:82:45:43:71:09:9f:61:b4:ce:27:62:
                    1d:d1:eb:6f:83:60:fc:69:dc:60:b3:4b:36:4c:14:
                    e9:71:08:3a:bc:b8:55:12:49:91:cf:5a:7f:b4:7d:
                    50:4a:5d:d3:45:00:c2:53:52:79:65:76:96:b4:44:
                    3f:d1:6e:e9:02:d9:f6:b2:5d:1f:41:6a:0f:cc:9f:
                    99:53:65:a1:00:cd:e9:a7:c9:31:95:46:29:2f:60:
                    65:d5:e3:71:53:3d:a7:35:cc:21:a7:9d:63:3b:64:
                    83:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:87:E1:02:33:E6:86:14:37:27:3D:14:28:0B:A5:19:2E:DD:B7:D9
            X509v3 Authority Key Identifier:
                keyid:F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e9:65:e7:fe:80:db:e5:ae:ca:b8:83:0c:d7:02:b2:a9:59:
         57:a8:d6:5d:a9:4e:6c:94:7b:2c:67:28:fe:7a:69:b2:6e:a4:
         c5:01:0a:c4:6c:8d:f9:1d:fd:1a:0c:f1:34:f2:0b:1b:ab:00:
         4d:ec:44:74:5d:e2:e3:4a:57:b5:a9:ea:b2:c2:93:de:6c:09:
         2a:01:82:8e:0a:ee:87:54:65:16:b0:96:c6:a3:9f:f8:9f:de:
         72:9f:a0:28:bd:2d:04:1c:d0:50:6b:af:6f:c2:42:6e:97:d7:
         b5:67:ff:5b:52:a2:29:da:fe:a1:19:f4:e7:36:cb:0f:42:53:
         bd:62:31:fc:49:5b:7c:64:26:67:a3:6e:54:55:32:ec:9b:85:
         c6:1a:cb:5d:86:be:49:3a:0b:6c:9f:1c:39:df:17:3f:0c:48:
         6a:53:5a:52:30:7c:b4:0f:6b:71:73:3c:b2:f8:1e:20:a1:ff:
         e5:f5:bd:8e:4e:3d:8a:d3:93:d3:02:16:33:ff:f8:f1:9a:48:
         ef:9d:19:24:b3:aa:84:a3:96:e0:4e:89:67:f1:5c:6c:08:01:
         e0:07:6e:18:dc:ec:6f:c7:cd:4f:9f:00:bc:86:5b:41:e9:c0:
         49:1e:de:0c:58:7d:d7:78:d8:9e:77:2b:58:b9:fe:19:02:53:
         7e:05:6e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 17:01:31 2024 by rpki-client on console-ams.rpki-client.org