Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
File:                     AC428C8EED241857F73D0F3D483ABECB240519D0.mft (raw, json)
Hash identifier:          nNPkPRXtfMKaBoX6yb7D66ZAcKV3dRqdw/5/MbAQuN0=
Subject key identifier:   6C:74:34:B2:B0:B7:7C:E3:9B:6F:41:80:58:8E:29:AC:37:3D:4C:C0
Authority key identifier: AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0
Certificate issuer:       /CN=ac428c8eed241857f73d0f3d483abecb240519d0
Certificate serial:       07A32992B4AF0D3AA23683A0ACF308B09535A57C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
Manifest number:          FF
Signing time:             Thu 16 May 2024 21:02:04 +0000
Manifest this update:     Thu 16 May 2024 20:57:04 +0000
Manifest next update:     Sat 18 May 2024 00:05:04 +0000
Files and hashes:         1: AC428C8EED241857F73D0F3D483ABECB240519D0.crl (hash: 9rhAJ5TMCkPHneKEokBDUNBqsNZOOhqzzVPsgi3vRQU=)
                          2: 3139352e3139312e34392e302f32342d3234203d3e20383334.roa (hash: 0bvKjkKRqwfCik5JsxeWrE4eu0d+1AWkqsAc5FjxYsA=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 14:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a3:29:92:b4:af:0d:3a:a2:36:83:a0:ac:f3:08:b0:95:35:a5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac428c8eed241857f73d0f3d483abecb240519d0
        Validity
            Not Before: May 16 20:57:04 2024 GMT
            Not After : May 18 00:05:04 2024 GMT
        Subject: CN=6C7434B2B0B77CE39B6F4180588E29AC373D4CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:31:fc:44:18:ce:af:96:20:d0:2f:85:2e:20:
                    45:8d:4a:7d:ca:1c:1c:02:a2:85:09:3d:87:46:34:
                    3b:d3:19:1b:39:42:40:cd:85:48:c9:a6:13:6e:41:
                    16:a5:ff:ba:89:9e:e4:5a:94:36:7b:1e:a9:7f:99:
                    f7:69:1e:38:17:9c:4a:63:8e:c0:bb:b3:d9:31:29:
                    58:e4:a8:84:da:0b:97:b6:af:cc:5a:d9:55:79:8e:
                    29:ed:c0:44:91:66:1f:7e:43:36:0a:55:56:6d:54:
                    69:be:9e:8b:a1:b1:0b:3f:90:27:ea:a2:43:2d:bf:
                    1d:99:31:75:58:83:b2:3f:43:c0:23:4e:9a:8f:87:
                    bd:64:74:42:e3:5f:4b:e8:9e:2a:8d:fa:d3:d8:11:
                    6c:75:8d:c4:b1:66:8c:74:94:20:05:54:6e:1b:c2:
                    39:90:41:58:eb:a0:1d:03:41:05:a9:cf:f7:c6:d8:
                    91:5a:1e:28:b4:ec:2a:22:5f:d8:a1:08:5a:62:b7:
                    0f:83:51:2f:99:1d:54:78:9f:e3:b3:20:45:1d:d9:
                    50:83:07:9c:3a:d0:88:d6:74:d4:42:22:46:dd:26:
                    bd:83:14:36:d0:11:ce:90:b1:52:77:52:b9:4f:b8:
                    2b:bb:a2:08:8a:58:92:f7:89:c8:68:e8:fb:6b:43:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:74:34:B2:B0:B7:7C:E3:9B:6F:41:80:58:8E:29:AC:37:3D:4C:C0
            X509v3 Authority Key Identifier:
                keyid:AC:42:8C:8E:ED:24:18:57:F7:3D:0F:3D:48:3A:BE:CB:24:05:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEKMju0kGFf3PQ89SDq-yyQFGdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1309bdce-70e3-46ae-8f05-0c3ada8f8a42/0/AC428C8EED241857F73D0F3D483ABECB240519D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:df:bb:cb:37:ce:ce:86:f9:88:6d:e4:33:b9:00:53:e4:9b:
         f7:11:f1:1f:ef:c8:5d:33:ad:40:1b:14:88:30:39:98:76:b9:
         fe:bf:d3:1b:ee:d5:27:01:bf:3f:e2:6d:eb:60:c5:2d:e3:ba:
         23:d9:6a:90:1b:45:6c:c3:70:76:90:41:99:e5:2e:bb:c9:a0:
         e1:8c:4b:10:35:9a:f3:f8:6a:18:00:43:0b:17:fd:89:01:14:
         3e:ad:5a:bf:dd:a5:b3:27:2b:52:1f:cf:c6:14:12:45:37:d3:
         86:a6:4c:be:40:84:ab:4d:0f:40:e2:9c:3f:cc:78:ca:69:5a:
         70:70:22:61:93:37:4e:85:94:ca:ab:ba:de:6f:17:a7:15:47:
         c3:a3:01:e3:6e:73:7f:a7:33:d1:b0:ac:18:34:3c:65:2c:fe:
         a4:ee:06:51:a0:f4:d8:ea:6c:e1:79:b2:5f:a4:e3:fe:5b:6d:
         5f:68:6c:99:71:ea:9e:f6:b4:34:37:a8:27:1d:80:90:5a:75:
         1a:83:0b:ba:f1:39:d6:03:42:a3:a1:53:3a:11:92:17:af:aa:
         f6:20:e5:89:63:52:d8:4a:15:fc:3a:70:27:e4:9d:f8:9e:b0:
         6d:38:b1:41:c9:80:6b:c9:92:86:7e:f5:a5:8d:a9:88:80:fe:
         4b:57:c1:34
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUB6MpkrSvDTqiNoOgrPMIsJU1pXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWM0MjhjOGVlZDI0MTg1N2Y3M2QwZjNkNDgzYWJlY2Iy
NDA1MTlkMDAeFw0yNDA1MTYyMDU3MDRaFw0yNDA1MTgwMDA1MDRaMDMxMTAvBgNV
BAMTKDZDNzQzNEIyQjBCNzdDRTM5QjZGNDE4MDU4OEUyOUFDMzczRDRDQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwMfxEGM6vliDQL4UuIEWNSn3K
HBwCooUJPYdGNDvTGRs5QkDNhUjJphNuQRal/7qJnuRalDZ7Hql/mfdpHjgXnEpj
jsC7s9kxKVjkqITaC5e2r8xa2VV5jintwESRZh9+QzYKVVZtVGm+nouhsQs/kCfq
okMtvx2ZMXVYg7I/Q8AjTpqPh71kdELjX0voniqN+tPYEWx1jcSxZox0lCAFVG4b
wjmQQVjroB0DQQWpz/fG2JFaHii07CoiX9ihCFpitw+DUS+ZHVR4n+OzIEUd2VCD
B5w60IjWdNRCIkbdJr2DFDbQEc6QsVJ3UrlPuCu7ogiKWJL3icho6PtrQ1ZXAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUbHQ0srC3fOObb0GAWI4prDc9TMAwHwYDVR0j
BBgwFoAUrEKMju0kGFf3PQ89SDq+yyQFGdAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMTMwOWJkY2UtNzBlMy00NmFlLThmMDUtMGMzYWRhOGY4
YTQyLzAvQUM0MjhDOEVFRDI0MTg1N0Y3M0QwRjNENDgzQUJFQ0IyNDA1MTlEMC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JFS01qdTBrR0ZmM1BRODlTRHEteXlR
RkdkQS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xMzA5YmRjZS03
MGUzLTQ2YWUtOGYwNS0wYzNhZGE4ZjhhNDIvMC9BQzQyOEM4RUVEMjQxODU3Rjcz
RDBGM0Q0ODNBQkVDQjI0MDUxOUQwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI9+7yzfOzob5iG3kM7kA
U+Sb9xHxH+/IXTOtQBsUiDA5mHa5/r/TG+7VJwG/P+Jt62DFLeO6I9lqkBtFbMNw
dpBBmeUuu8mg4YxLEDWa8/hqGABDCxf9iQEUPq1av92lsycrUh/PxhQSRTfThqZM
vkCEq00PQOKcP8x4ymlacHAiYZM3ToWUyqu63m8XpxVHw6MB425zf6cz0bCsGDQ8
ZSz+pO4GUaD02Ops4XmyX6Tj/lttX2hsmXHqnva0NDeoJx2AkFp1GoMLuvE51gNC
o6FTOhGSF6+q9iDliWNS2EoV/DpwJ+Sd+J6wbTixQcmAa8mShn71pY2piID+S1fB
NA==
-----END CERTIFICATE-----
Generated at Thu May 16 21:49:26 2024 by rpki-client on console-fra.rpki-client.org