Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
File:                     22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft (raw, json)
Hash identifier:          KLfCzv0XsX768btfuj/0qdUhjKzdXok4iqsWtJtdwaY=
Subject key identifier:   E5:B3:EA:A1:F9:FD:AA:50:68:25:79:51:E0:FD:27:74:B0:14:0B:66
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Certificate issuer:       /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial:       1EF5E49F7888A36AF36C3590C7DB43ACD5767C0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
Manifest number:          11
Signing time:             Thu 19 Sep 2024 19:27:50 +0000
Manifest this update:     Thu 19 Sep 2024 19:22:50 +0000
Manifest next update:     Fri 20 Sep 2024 21:30:50 +0000
Files and hashes:         1: 323630323a663766663a37303a3a2f34342d3434203d3e20323135373531.roa (hash: FMLKXgJBfG1dAAJKXhFrC8iIerl7nyzyT/6MRRFKEt0=)
                          2: 22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl (hash: D7o38wFBKJIW72QHTahq3UZfAM8ItgkHR+yGPTdt2yw=)
                          3: 323630323a663766663a3a2f34372d3437203d3e203133383532.roa (hash: LDkqFvPL3o/efEjqIiW+FxteB100HkeM92v9RegGzqE=)
                          4: 32332e3139302e32342e302f32342d3234203d3e203133383532.roa (hash: N9miqn/XeWnI2x4q978KfgI3giSsB9quYTNg+REDQRU=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Sep 2024 21:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f5:e4:9f:78:88:a3:6a:f3:6c:35:90:c7:db:43:ac:d5:76:7c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
        Validity
            Not Before: Sep 19 19:22:50 2024 GMT
            Not After : Sep 20 21:30:50 2024 GMT
        Subject: CN=E5B3EAA1F9FDAA5068257951E0FD2774B0140B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7c:a4:05:20:18:0c:a3:0c:09:40:9a:be:aa:
                    fe:7b:c3:8a:a9:a4:8a:23:78:51:ec:f0:16:73:5d:
                    e2:37:0b:8b:a6:e9:50:12:f7:cb:f6:3e:89:1c:35:
                    bf:31:8e:68:b9:19:a9:48:e2:b3:b4:8f:06:49:b7:
                    71:9e:1f:21:42:5c:da:da:89:29:5c:1b:09:d9:ae:
                    52:a9:b0:a1:fa:25:c5:61:87:14:e6:de:58:3f:fb:
                    55:18:4e:e0:4f:0f:8b:60:65:7d:59:59:76:6d:19:
                    83:08:80:a4:6f:9f:89:d6:8f:8b:d6:e8:7b:03:63:
                    d8:02:f6:02:34:da:dc:0a:fd:56:6a:68:20:cc:9d:
                    78:e4:8f:82:74:56:c8:e7:9c:c4:bd:a6:14:c1:f4:
                    c1:8a:5d:91:6d:a7:79:07:1a:41:bc:45:6b:4a:fe:
                    e1:56:14:f3:79:fc:f8:38:43:24:f2:08:03:92:86:
                    2d:e8:c0:07:0b:13:79:4f:9b:33:31:ce:2c:05:9e:
                    aa:75:90:32:ae:2b:3d:e2:c1:7e:4d:4e:6a:2c:01:
                    f4:00:89:75:d0:b1:94:bd:a0:d4:b1:ec:66:ba:09:
                    3f:e6:69:e3:65:4b:1a:16:d3:97:62:42:d2:a3:6d:
                    49:78:55:2d:bc:41:38:e0:ee:82:f9:f6:57:3b:00:
                    8c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B3:EA:A1:F9:FD:AA:50:68:25:79:51:E0:FD:27:74:B0:14:0B:66
            X509v3 Authority Key Identifier:
                keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:97:9b:a0:0c:48:fe:e4:b5:05:4f:9f:f9:71:78:32:7e:7b:
         6d:0b:d9:77:94:c4:9a:33:01:b6:d2:1b:7f:5a:02:d1:77:b4:
         0a:4c:1d:a9:77:86:58:f2:19:99:8b:8f:f4:74:7c:5d:ea:d2:
         74:7f:30:34:71:70:38:06:30:1b:3b:18:09:fc:fe:b5:73:18:
         08:ad:6b:a7:4c:d7:c9:f9:9a:dc:0b:92:35:bb:bf:21:f9:b1:
         da:f3:44:7f:3e:de:44:d3:0c:c3:2c:d2:b8:3e:72:27:06:73:
         a6:24:2d:d8:2f:43:64:43:75:55:1c:4c:02:92:bb:5b:2d:51:
         f8:c4:56:ba:a6:af:89:6b:84:fa:20:af:b7:a7:d6:e8:74:68:
         03:b5:76:9e:d3:06:7a:8e:3d:7c:58:ab:59:4f:55:c0:1e:f6:
         87:39:04:28:c7:47:aa:a9:6b:c8:f9:89:90:96:c2:4d:0b:e3:
         57:80:15:6b:35:ff:7d:69:0f:a7:42:3b:ea:3d:d5:7a:7a:6c:
         9f:22:56:bb:4c:61:ee:3c:34:25:54:40:46:ef:71:97:39:fe:
         df:0a:68:69:b5:30:20:af:70:10:82:45:91:89:01:24:e1:82:
         f9:57:34:9a:76:75:6b:c4:fb:c3:39:2c:01:cb:f4:b0:f8:7f:
         85:5e:fb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 00:00:18 2024 by rpki-client on console-ams.rpki-client.org