Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
File:                     A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft (raw, json)
Hash identifier:          IMpXZFQLRR9UDCYNXRLxdgm1VsDIy+B2F42uIZIRkvk=
Subject key identifier:   D0:DE:B8:89:8B:A0:AF:60:83:E4:EE:0A:0C:9C:DD:49:5D:A6:00:46
Authority key identifier: A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB
Certificate issuer:       /CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
Certificate serial:       4F902D58A8FCD1FD275B4D40342AE2FDACE7240A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
Manifest number:          0284
Signing time:             Fri 17 May 2024 14:17:04 +0000
Manifest this update:     Fri 17 May 2024 14:12:04 +0000
Manifest next update:     Sat 18 May 2024 14:46:04 +0000
Files and hashes:         1: 3134362e3234372e35302e302f32342d3234203d3e203234383531.roa (hash: Xu9Ulls8bpq0hHPLUzQTCDFdZuHdkeW+6NyQx4cB/cM=)
                          2: 3134362e3234372e36322e302f32342d3234203d3e203234383531.roa (hash: +PLAO2XIwguBRxzLFbPvt9N4SUTwvCxYRNjOC/9N7/Y=)
                          3: 3134362e3234372e34382e302f32302d3230203d3e203234383531.roa (hash: AtkJtoUoox26oxAHfh2tdwiB6b5wZkwjk748vQvHZ0Y=)
                          4: 326130323a326262383a3a2f33322d3332203d3e203234383531.roa (hash: bWui68UTbRhcPhlwEAxty4T3/DDJWgLbqMK6lGY8QTg=)
                          5: 3134362e3234372e34382e302f32332d3233203d3e203234383531.roa (hash: IWYt8AKAcW7AE40ptYfrfOYzrzsDvIsMxkpQ2qH53R4=)
                          6: 3134362e3234372e35312e302f32342d3234203d3e203234383531.roa (hash: rDaGUw0Popa9qa2o5QlR9ngDX48Qz9ALnW+Nclcvn6o=)
                          7: 38312e32372e39362e302f32342d3234203d3e203234383531.roa (hash: AxjB2UplZG/ICjMvplH+2BPAurHWXKTfYIpW/z8Q05Y=)
                          8: 3134362e3234372e35382e302f32342d3234203d3e20323036353035.roa (hash: 0tLtxBZIh3JPv4ntMCHEQwo1L1G+TJlCryihDcvMeKQ=)
                          9: 3134362e3234372e35392e302f32342d3234203d3e203234383531.roa (hash: wE1ZRZZm1RLxT9JyNh52iLvc8Uyqc1Cu7FhfeoxE1U8=)
                          10: A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl (hash: Jaw/eMFZEPxZYa6cz1auPOoor6BcWLE7JiY64Gizdlg=)
                          11: 38312e32372e39362e302f32302d3230203d3e203234383531.roa (hash: SZH3jMeIkhMicVTHR8DTiaVXKtl6on4Bjt8aT/3rGBY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:90:2d:58:a8:fc:d1:fd:27:5b:4d:40:34:2a:e2:fd:ac:e7:24:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c509ba48e5b50494572e05c45c58e7e16d87fb
        Validity
            Not Before: May 17 14:12:04 2024 GMT
            Not After : May 18 14:46:04 2024 GMT
        Subject: CN=D0DEB8898BA0AF6083E4EE0A0C9CDD495DA60046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3f:3b:9b:08:a1:ba:3b:85:cb:e0:e4:5f:59:
                    20:7b:46:b2:7d:c7:67:0b:f4:5e:d8:af:f9:5f:87:
                    8e:8c:c2:cb:f4:e4:e7:ca:41:50:05:73:d5:ca:a1:
                    49:53:86:9e:99:9a:54:a6:db:2d:74:95:1b:6f:c2:
                    cb:16:a1:cb:23:c6:45:a3:92:fa:19:e4:63:a4:ac:
                    93:23:fa:60:ee:57:b7:bf:ac:f0:9d:cf:db:75:da:
                    47:c9:d5:77:d0:5b:53:e0:26:47:db:4a:eb:ab:96:
                    ec:e5:9e:e9:0d:b9:e4:18:e3:e4:05:32:69:74:b0:
                    3e:98:dd:6e:0c:91:d0:09:d0:99:bc:2c:32:27:fe:
                    5c:c3:9d:b2:10:3c:66:25:96:1b:a4:05:71:dd:02:
                    4d:94:fb:e6:9d:24:b0:21:bf:1b:ea:ef:2c:46:cf:
                    1d:4b:00:11:48:a2:dd:22:b3:2b:e8:00:3f:56:ca:
                    bf:ae:34:4f:87:80:0c:cf:54:99:c3:1c:ba:5b:0e:
                    53:87:d3:29:3f:ec:8a:59:e6:d9:b5:33:4b:26:ce:
                    81:9b:ef:db:51:57:96:38:ee:18:6b:1b:36:55:1a:
                    da:97:3e:44:19:16:9e:fe:b8:87:b5:83:11:dd:56:
                    ff:e0:b8:5d:64:28:e1:aa:0a:6f:e7:06:29:0b:72:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DE:B8:89:8B:A0:AF:60:83:E4:EE:0A:0C:9C:DD:49:5D:A6:00:46
            X509v3 Authority Key Identifier:
                keyid:A6:C5:09:BA:48:E5:B5:04:94:57:2E:05:C4:5C:58:E7:E1:6D:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psUJukjltQSUVy4FxFxY5-Fth_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c8bb446-91c0-4138-a33a-b47865de55c5/1/A6C509BA48E5B50494572E05C45C58E7E16D87FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:c5:f1:2d:e5:5d:ea:6d:57:0a:51:7b:fb:1e:c1:8d:34:df:
         7b:20:d5:f5:2d:1d:26:f6:94:25:95:8d:18:ff:35:03:f0:e6:
         46:50:85:3a:31:27:42:ce:7b:25:44:90:b2:4f:49:59:58:0e:
         ce:c8:b8:36:7b:06:00:d5:7f:f2:62:d0:6d:35:a7:89:96:9c:
         e6:c0:f4:e1:6d:3b:8a:f0:fd:f1:88:c2:41:b9:f7:b3:2d:83:
         e7:f7:35:6f:59:d2:da:1f:50:e5:d5:18:fe:95:d9:75:e7:6a:
         1d:e3:5c:d3:1b:30:84:21:60:7f:81:97:eb:74:e7:ca:4d:3c:
         79:45:90:8b:11:da:eb:ca:8d:a1:b7:17:3e:aa:5f:60:c2:2c:
         4e:dd:2d:42:25:03:06:81:6a:62:3b:a4:70:f7:53:6a:30:5b:
         32:06:57:1b:8a:5f:9d:0e:0d:4c:54:52:d0:3f:43:3d:7c:9b:
         58:eb:db:74:56:fe:e8:bc:8e:8f:0c:86:fa:45:38:94:de:31:
         c4:c8:88:8b:b6:f5:04:88:a4:16:e4:db:a4:31:40:72:6e:15:
         cd:29:3b:a8:3c:86:4f:84:fd:4b:d8:2d:68:d5:0a:01:cc:67:
         5b:b2:fc:bd:82:75:a6:e1:e4:dd:e4:23:ee:4e:fd:54:14:d7:
         3a:8b:a4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:36:34 2024 by rpki-client on console-fra.rpki-client.org