Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
File:                     13DDCFA128DC141F076EB7B60F46359286489D55.mft (raw, json)
Hash identifier:          MGQCOCYZMeLZG6J7piHGeveAiQ98DvAhpp06kDsJ5Nc=
Subject key identifier:   96:1D:4D:0E:A1:39:A9:87:50:70:04:BC:AE:8D:91:7E:36:2A:9B:1B
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       0438652F841E9A59693A5252FEDBBF1D647B94FB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
Manifest number:          0200
Signing time:             Thu 21 Nov 2024 09:20:41 +0000
Manifest this update:     Thu 21 Nov 2024 09:15:41 +0000
Manifest next update:     Fri 22 Nov 2024 13:03:41 +0000
Files and hashes:         1: 326130613a363034303a613130373a3a2f34382d3438203d3e2038303735.roa (hash: siFflNuLBcUVT2ew55GY4asQcEPlp1UAXXEo+quCh4Y=)
                          2: 326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa (hash: Xh/FfrHNt61Ngv7mgOC5frZltA6yLiEyKUkiFJ52seY=)
                          3: 326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa (hash: bikmWHpjPmXFeu6RdysBAjYypuerlP+G4LoSWyPysCg=)
                          4: 326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa (hash: RmwCLPQD0FOxU230GA+d/4JJxiL3BJHnv8rUKeKCiSk=)
                          5: 326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa (hash: CTODbkYlpnVaHyONgQ5egtKNh9v6t29vIyot4VVbKKM=)
                          6: 13DDCFA128DC141F076EB7B60F46359286489D55.crl (hash: btaxh5TEhyocqAy89zKQ1V4j737pwiPm1yE5ZpOEizg=)
                          7: 326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa (hash: 8kE6bd3UIwVjGeLjsemhmEEHlGKhtuqOlLO98xqUvuU=)
                          8: 326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa (hash: PFv1w1/dhOLCzfwqwLHBj015XxebsCk8UvpgNeKoqdc=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:38:65:2f:84:1e:9a:59:69:3a:52:52:fe:db:bf:1d:64:7b:94:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: Nov 21 09:15:41 2024 GMT
            Not After : Nov 22 13:03:41 2024 GMT
        Subject: CN=961D4D0EA139A987507004BCAE8D917E362A9B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:be:2f:01:e7:fa:5e:5b:c0:a3:cf:a7:37:
                    49:6c:11:36:07:eb:b4:42:53:eb:6d:19:24:84:fa:
                    89:dd:cf:d2:6d:8d:62:40:3a:5b:13:46:dd:42:b5:
                    78:a3:6d:a2:40:89:a4:72:2f:a1:9a:2b:2d:ea:e9:
                    de:97:ae:f2:9d:56:da:eb:5d:d5:f7:72:ab:7f:64:
                    4f:72:f9:02:6b:8b:0d:5b:42:e9:67:47:e4:ea:b9:
                    cc:76:0c:a8:6b:7c:82:7e:82:1f:89:5b:48:c1:83:
                    ec:8b:88:c8:ea:17:04:11:65:43:20:e4:b9:75:8c:
                    fe:68:f4:7e:5a:6c:0e:54:2f:49:8f:2d:c6:94:f7:
                    d7:de:33:fb:49:62:84:3c:72:ec:91:50:ee:29:12:
                    f4:76:74:ec:4b:d7:b5:8d:84:2e:d0:5e:e3:fc:4e:
                    2f:09:d5:cb:ce:80:a6:32:90:e1:52:df:fb:62:b6:
                    3f:c3:3b:76:45:63:fc:6d:1d:57:a1:18:8d:85:f8:
                    26:8c:ec:21:8a:46:9f:d7:ec:29:da:61:fd:d5:41:
                    55:1a:6d:a4:9f:0f:fe:0d:32:91:4d:02:0b:9b:8b:
                    93:88:3b:b7:a4:e2:f3:6a:e8:76:76:93:79:8c:a5:
                    76:1f:25:4a:ae:73:d5:76:86:65:20:5b:9b:ab:97:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1D:4D:0E:A1:39:A9:87:50:70:04:BC:AE:8D:91:7E:36:2A:9B:1B
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:4c:0b:75:c1:a5:34:c9:de:e3:90:00:70:98:a8:5f:12:39:
         ae:1f:a7:e6:f9:d8:44:7c:90:97:f8:c9:53:c0:da:91:57:96:
         ae:6f:43:b0:af:1b:4e:5b:1a:7b:df:59:a2:4f:dd:7e:19:74:
         85:46:62:8e:4c:8d:ba:d1:18:7f:7d:fb:8b:78:52:35:a7:3c:
         16:ca:e7:fc:b7:86:08:4a:9d:1c:6c:73:88:e0:45:0e:46:e8:
         53:81:f9:cf:c1:34:f8:96:b1:2e:d9:61:3f:06:b7:75:25:ee:
         ea:88:c7:cd:57:7d:be:8d:42:4f:f3:b4:a9:d9:e6:a7:a0:d9:
         48:67:ba:8b:03:b4:4d:42:28:b0:59:73:3c:ea:84:15:16:03:
         92:67:d5:10:06:04:03:b5:6a:30:4e:20:20:5b:8d:4c:6c:53:
         84:4c:4a:56:98:32:3d:9a:15:3d:db:28:91:a4:04:32:09:1a:
         dc:33:5e:bc:9f:68:69:59:4a:65:13:00:d5:3c:29:0f:fc:e1:
         b9:7a:08:ad:4d:c8:b6:f1:b5:df:11:1f:f7:9a:40:49:0b:ba:
         68:5f:34:fb:60:ea:dd:c9:9d:7c:7f:6d:c6:4e:02:8f:49:4e:
         c8:e6:3f:00:41:c1:6d:67:68:2f:c5:1d:3d:eb:a7:2d:da:ad:
         ef:3e:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:08:34 2024 by rpki-client on console-fra.rpki-client.org