Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
File:                     13DDCFA128DC141F076EB7B60F46359286489D55.mft (raw, json)
Hash identifier:          plco3jSkGxZDHMs1kVdHvgkBsaGXJfXU91cJe5uWRLk=
Subject key identifier:   5C:1F:5D:7E:F5:4A:67:F8:1E:B7:6C:02:D1:28:F3:5F:35:FB:D3:4E
Authority key identifier: 13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55
Certificate issuer:       /CN=13DDCFA128DC141F076EB7B60F46359286489D55
Certificate serial:       3C39D24818E47ED6966CC7891411951045587016
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
Manifest number:          0105
Signing time:             Thu 16 May 2024 23:25:10 +0000
Manifest this update:     Thu 16 May 2024 23:20:10 +0000
Manifest next update:     Sat 18 May 2024 00:54:10 +0000
Files and hashes:         1: 13DDCFA128DC141F076EB7B60F46359286489D55.crl (hash: cNxADqdttx1Z9TxivImPZ88+nZr6Hx1rVIx0Gjwd3JQ=)
                          2: 326130613a363034303a613130313a3a2f34382d3438203d3e20323033383433.roa (hash: HohUsqNZ7IE9IaaprapNt2q3pktanMjf3+9sz3wT9Lo=)
                          3: 326130613a363034303a613130333a3a2f34382d3438203d3e203331383938.roa (hash: k8C7ymfYC4WVD3I1IE8NAyiUqGzqXCMe73kY7IftkWw=)
                          4: 326130613a363034303a613130323a3a2f34382d3438203d3e20323033383433.roa (hash: fn9tN4vIR25U7hrcRtHpkH/TDIxElPoY7OxT7Mkb9hI=)
                          5: 326130613a363034303a613130343a3a2f34382d3438203d3e20323033383433.roa (hash: 2+mys6eWCFEG14zhjOL+66PUeUWZpM9AodO+AR9LzTw=)
                          6: 326130613a363034303a613130303a3a2f34302d3430203d3e20323033383433.roa (hash: +VtiHSWR5Ougk5ey+gyyKXZVuWXBb16H5XRNScgesKQ=)
                          7: 326130613a363034303a613130353a3a2f34382d3438203d3e2038303735.roa (hash: 6basabdeqipSwURMbL1KEb7nia7cx2uMF4aZn6R13SQ=)
                          8: 326130613a363034303a613130363a3a2f34382d3438203d3e20323033383433.roa (hash: Jm1VVV81mAzlve9Sh1FKMW8glIMXkZwiacXv7jZzlz8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 08:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:39:d2:48:18:e4:7e:d6:96:6c:c7:89:14:11:95:10:45:58:70:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13DDCFA128DC141F076EB7B60F46359286489D55
        Validity
            Not Before: May 16 23:20:10 2024 GMT
            Not After : May 18 00:54:10 2024 GMT
        Subject: CN=5C1F5D7EF54A67F81EB76C02D128F35F35FBD34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:64:12:14:1a:40:0f:71:d5:d0:30:b0:e6:a3:
                    c7:df:0a:9a:66:d3:ee:df:d0:8c:a9:70:d2:3f:52:
                    62:1e:02:e9:8c:e4:ae:e8:aa:83:9a:a7:c0:d7:7c:
                    34:ee:1f:dd:4a:f9:2f:82:7d:f4:f3:d0:d4:41:8d:
                    fc:85:20:c2:63:47:cf:a9:c1:69:57:d0:2a:d6:ae:
                    05:dd:82:ea:0b:a6:94:d7:78:af:76:3a:17:24:a5:
                    bc:03:94:22:1a:8c:e7:c3:b7:f3:be:58:a5:9e:4c:
                    c8:38:b8:7d:d2:4c:e0:7e:37:43:7b:70:6c:d1:36:
                    be:96:88:9e:90:2f:38:ec:78:c2:72:f0:a5:3f:b8:
                    df:57:ff:b1:4b:2b:10:e5:6a:9b:1b:8f:62:db:bf:
                    15:6a:55:58:6f:65:9d:cd:53:b6:3f:76:d1:0b:97:
                    d7:55:10:0c:3e:ef:5a:7a:b4:26:74:a9:72:94:2c:
                    a8:89:50:49:8c:0d:0b:8d:d9:47:41:01:3e:f5:28:
                    19:bb:57:77:74:af:0a:1d:8f:ec:03:0d:90:cd:a1:
                    fd:6b:bf:0d:92:10:dd:86:12:90:57:77:e6:c0:a2:
                    3c:55:f3:09:01:40:86:d1:96:00:8a:50:e3:c4:57:
                    76:0f:87:c0:08:b2:17:97:2c:89:f3:9c:cd:b5:4f:
                    8c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1F:5D:7E:F5:4A:67:F8:1E:B7:6C:02:D1:28:F3:5F:35:FB:D3:4E
            X509v3 Authority Key Identifier:
                keyid:13:DD:CF:A1:28:DC:14:1F:07:6E:B7:B6:0F:46:35:92:86:48:9D:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/13DDCFA128DC141F076EB7B60F46359286489D55.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13f68561-0a74-4cca-bf8f-12faaafc8eb8/2/13DDCFA128DC141F076EB7B60F46359286489D55.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f9:22:ee:c4:19:d0:76:9c:39:d3:9b:71:7a:0b:82:0d:7d:
         63:99:12:38:93:1f:fb:ea:9f:6b:27:54:2a:49:f3:29:e0:c6:
         ce:02:d0:fd:df:f7:b2:17:42:c5:36:7b:57:1f:2c:1b:16:35:
         03:a6:39:10:3a:0c:49:8f:b2:9a:f5:0b:18:e3:a7:77:63:c5:
         45:30:cd:38:02:62:71:d8:78:cf:e8:0b:4b:0f:f9:9a:58:42:
         c7:d2:d7:f6:15:4f:bb:76:95:7a:db:77:37:79:f5:8d:28:29:
         21:51:1d:2c:3e:84:44:23:c9:73:64:43:52:c5:b5:e3:db:66:
         e7:42:ca:70:97:fb:3f:1e:b7:92:55:59:e6:0e:04:51:5e:59:
         5d:e4:95:28:69:d0:a0:33:f3:32:12:98:58:6e:c7:bf:39:a9:
         62:ef:23:83:f4:b2:a8:80:39:d7:95:7e:33:08:fa:bc:7d:4a:
         19:41:2a:9b:41:db:da:d9:85:72:94:6a:39:53:15:b9:a5:a3:
         fb:9d:87:51:2e:7a:ad:c0:07:c3:e9:5b:94:51:a0:a9:a3:c3:
         9c:54:2a:bb:fa:92:c9:a5:75:02:11:46:c1:df:5e:bc:82:c4:
         a7:ab:29:75:e4:c4:d9:73:e0:88:ad:e0:b0:4a:68:7a:69:d9:
         6f:d5:6a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 00:20:26 2024 by rpki-client on console-ams.rpki-client.org