Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.mft
File:                     AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.mft (raw, json)
Hash identifier:          CnDz09AYK5CQtHBExLrEpW8JOsPPNEh9+brXFlYV7HE=
Subject key identifier:   FD:CE:91:C3:D5:31:91:FE:3D:BF:A8:D0:88:19:A5:B0:97:C5:3A:59
Authority key identifier: AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD
Certificate issuer:       /CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
Certificate serial:       4BB968477AEBF6F37FA2EBF374A3BC856826B008
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.mft
Manifest number:          41
Signing time:             Fri 22 Nov 2024 02:32:52 +0000
Manifest this update:     Fri 22 Nov 2024 02:27:52 +0000
Manifest next update:     Sat 23 Nov 2024 05:27:52 +0000
Files and hashes:         1: 326131343a373538313a326630313a3a2f34382d3438203d3e20343031333836.roa (hash: 2T6/wGpI7a+2C8eOZHCpHiTBZ9NcKjM+64tR++LvjJE=)
                          2: 326131343a373538313a323230303a3a2f34302d3438203d3e20343031333836.roa (hash: c/qZXsWdlg+ZE0JHy4NCaqmVmDrAWgLnRDl1pGQHvnw=)
                          3: 326131343a373538313a323030303a3a2f33362d3430203d3e20343031333836.roa (hash: 8IFGRtk5v0qcYwFFJo4MFsTNImvT7YJWplXVNkvagAI=)
                          4: 326131343a373538313a326630303a3a2f34382d3438203d3e20343031333836.roa (hash: 7sk2Ui8iUGiNtQSw6OQmWTzStQX343fbQaxKHt8024Y=)
                          5: 326131343a373538313a323130303a3a2f34302d3430203d3e20343031333836.roa (hash: edoB1hWqHuxmFEHkxCRYn0isHm/fDv/2a4OmQUGaBa8=)
                          6: 326131343a373538313a323030303a3a2f34302d3438203d3e20343031333836.roa (hash: rBikDsD9k6d5EvVf1KWvks2PGm3K9/DfAfkZtKu9GXc=)
                          7: 326131343a373538313a323330303a3a2f34302d3438203d3e20343031333836.roa (hash: onBa8ZiCWb4eekbZmQytVfWJEs00Qm7PkwuehyBq+70=)
                          8: AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl (hash: KuPhzsp7xoriO4LJ54PUkgqgVXQ+/+q5/Ehou+sNDAg=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:b9:68:47:7a:eb:f6:f3:7f:a2:eb:f3:74:a3:bc:85:68:26:b0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDED3DECB1DA8A4E6AAE6726E80553046089AFD
        Validity
            Not Before: Nov 22 02:27:52 2024 GMT
            Not After : Nov 23 05:27:52 2024 GMT
        Subject: CN=FDCE91C3D53191FE3DBFA8D08819A5B097C53A59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:6e:16:ac:4d:03:e2:ea:68:09:27:6c:63:
                    b5:47:d8:91:d6:8a:69:9c:f2:26:73:c4:e3:83:26:
                    d1:01:1c:54:38:3c:00:09:70:8f:38:b6:33:9f:d0:
                    55:f4:ee:cb:64:2b:96:c8:ae:4b:5b:b2:0b:84:98:
                    fa:25:c6:e5:8e:1f:46:a5:a0:b6:f2:48:25:94:5c:
                    54:f8:45:8c:8d:ff:f4:39:f8:2c:8a:55:03:9d:5c:
                    ca:c4:db:7a:49:63:d0:5a:8d:35:1e:9c:bc:2e:46:
                    41:c0:94:1e:01:04:12:6c:c0:66:12:10:97:4d:56:
                    ad:2a:18:3f:71:ba:95:fe:e7:72:5c:b0:69:77:bb:
                    1a:1c:6e:63:ab:58:5f:ee:16:cb:42:67:04:b0:bb:
                    a3:67:53:fa:53:5c:f0:11:2c:94:83:12:c7:1c:e9:
                    d1:7a:bf:02:52:6c:21:c5:37:c7:66:ae:db:b8:f7:
                    7c:b7:22:17:89:77:a9:e2:b8:37:41:3d:ac:cd:23:
                    af:28:55:91:a7:b1:c8:b0:bd:fd:8c:d3:d8:89:1b:
                    db:95:ce:9e:ca:b1:75:cd:16:52:ab:a7:c9:30:ee:
                    66:47:35:dd:d0:a7:04:4f:9e:81:f6:a6:4d:28:f5:
                    30:c1:43:5b:0d:ab:2c:e8:d3:9f:e1:8f:89:52:4f:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CE:91:C3:D5:31:91:FE:3D:BF:A8:D0:88:19:A5:B0:97:C5:3A:59
            X509v3 Authority Key Identifier:
                keyid:AE:DE:D3:DE:CB:1D:A8:A4:E6:AA:E6:72:6E:80:55:30:46:08:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/12549943-6457-45e0-a54f-c1930815b6f7/0/AEDED3DECB1DA8A4E6AAE6726E80553046089AFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:02:43:07:67:14:7d:e0:54:bd:18:16:7f:42:64:6f:29:61:
         da:06:29:eb:da:00:69:23:80:3a:f7:39:8f:3b:c3:06:c0:dd:
         f0:97:19:87:c2:77:10:03:20:b2:e0:9b:49:af:5e:02:ce:ec:
         80:cc:4e:14:77:8f:a6:82:e3:5e:f2:ac:97:27:35:cc:6a:4d:
         28:e0:11:36:5b:fe:0c:1b:cd:cc:3b:58:53:f3:7b:94:f0:80:
         40:58:0d:85:3b:ac:1d:ff:97:cc:a0:7a:28:bc:02:66:02:ca:
         94:68:4c:ac:79:49:87:0a:ff:5f:ff:59:cf:cf:41:f2:58:4d:
         8b:19:a2:cb:18:90:f6:15:27:d9:99:78:70:98:7b:df:41:da:
         a8:16:29:65:12:df:9c:70:b8:a4:1b:2e:df:65:00:26:72:25:
         3a:68:93:73:81:6e:a7:61:80:a5:63:52:c1:99:8e:6a:7b:f7:
         b7:07:80:2d:4a:19:e3:41:50:d0:02:b8:fc:5c:0b:44:95:cf:
         7c:db:90:89:fc:77:66:27:62:23:12:0f:bd:02:fb:b5:b8:3e:
         6d:11:15:ac:95:39:86:61:96:48:33:4b:be:f4:5d:e0:a9:20:
         65:7a:d3:12:dc:6a:49:ef:35:c1:e4:8b:c9:39:1f:8a:43:44:
         9e:29:38:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:20 2024 by rpki-client on console-fra.rpki-client.org