Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
File:                     600579021287EA6495D7F934A6DED30EE2A5BB38.mft (raw, json)
Hash identifier:          E6tSfDTM4NXMzFd1ZFQzuZI2iOQmgiIILwF2o5orOmw=
Subject key identifier:   F0:C6:43:B7:31:BA:E4:EE:4C:78:4A:14:80:E9:4E:43:7A:D1:7E:1A
Authority key identifier: 60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38
Certificate issuer:       /CN=600579021287ea6495d7f934a6ded30ee2a5bb38
Certificate serial:       7BF1326E1F2F3A0D999C4371FCBE7CC0B2DE7F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
Manifest number:          0123
Signing time:             Sat 23 Nov 2024 06:54:22 +0000
Manifest this update:     Sat 23 Nov 2024 06:49:22 +0000
Manifest next update:     Sun 24 Nov 2024 09:49:22 +0000
Files and hashes:         1: 3138352e302e33322e302f32342d3234203d3e2030.roa (hash: GEEkFnLLD5YdT7e3gZhcbzhghm9btIME32fG3fAo/to=)
                          2: AS198136.asa (hash: GvtwHp5NKK1rwVMt+11LwLToct1B8reEg37G2+dbOpo=)
                          3: 600579021287EA6495D7F934A6DED30EE2A5BB38.crl (hash: dvssz4tamkIU89JDpy9eJk9ZB0AXDCrS2l8E1hw0YM8=)
                          4: AS212068.asa (hash: B3ZUqxz38OM0d1AJg+LgnB7cw80/HkHXOni8GeSXIhs=)
                          5: 323030313a3766383a3134623a3a2f34382d3438203d3e2030.roa (hash: X9hDIakZxMyYW09+8o3DY1NSDUaTkUm2cM6/XfJPWAU=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 00:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f1:32:6e:1f:2f:3a:0d:99:9c:43:71:fc:be:7c:c0:b2:de:7f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600579021287ea6495d7f934a6ded30ee2a5bb38
        Validity
            Not Before: Nov 23 06:49:22 2024 GMT
            Not After : Nov 24 09:49:22 2024 GMT
        Subject: CN=F0C643B731BAE4EE4C784A1480E94E437AD17E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0f:3b:0e:58:31:aa:3a:63:cf:ee:8b:30:4d:
                    ed:79:00:14:69:07:41:bb:e5:dc:c8:26:cf:60:f4:
                    0d:b1:7c:9f:14:08:1b:db:a6:30:93:02:dc:b3:88:
                    9f:29:5e:01:15:6b:ef:68:83:67:36:cc:4b:74:a8:
                    bf:05:71:1c:1a:95:a5:b3:d8:22:ce:36:71:70:0b:
                    ae:d7:31:bf:fa:ef:4d:d0:9e:7d:27:1f:ba:1e:b9:
                    af:15:cd:ee:1a:46:00:81:56:85:63:b0:5f:26:75:
                    d6:ec:9a:77:ef:ee:31:af:ec:c0:b0:68:43:bb:66:
                    8e:e3:83:ff:01:15:1c:43:78:da:b7:e0:f0:ca:ee:
                    b8:71:ae:6c:98:08:45:b9:eb:32:82:f7:79:e1:2e:
                    95:6b:a0:40:48:f8:7c:2b:0c:bf:55:1b:2e:d7:dd:
                    cb:0d:7c:8b:e9:c6:03:3e:84:64:e1:3b:cb:12:75:
                    a0:5d:ce:3e:4f:09:5c:bb:65:54:03:71:9f:dc:ae:
                    bf:73:83:04:76:53:fa:5c:25:8d:2d:4d:2b:d1:e2:
                    19:8f:6e:e0:b7:d0:f4:c4:d0:bf:68:98:68:6d:7c:
                    0b:d4:01:c3:03:c0:28:5c:33:44:1c:2e:58:34:60:
                    69:56:a4:f3:9a:86:65:8a:01:8f:c3:54:ac:46:21:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C6:43:B7:31:BA:E4:EE:4C:78:4A:14:80:E9:4E:43:7A:D1:7E:1A
            X509v3 Authority Key Identifier:
                keyid:60:05:79:02:12:87:EA:64:95:D7:F9:34:A6:DE:D3:0E:E2:A5:BB:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAV5AhKH6mSV1_k0pt7TDuKluzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1979f015-2d69-48f1-bb52-3581c4df48fa/0/600579021287EA6495D7F934A6DED30EE2A5BB38.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ee:4b:4a:e6:12:b3:23:ea:85:82:16:28:dc:fb:62:40:a0:
         b0:56:2a:78:ea:2e:94:87:e5:32:78:9c:49:1e:44:04:a8:28:
         5c:d0:1c:ef:10:4c:ec:a2:83:3c:06:f5:32:ad:d3:68:a6:f1:
         b6:34:9f:42:f7:8e:55:4c:e2:de:4a:18:9b:09:45:07:44:61:
         88:c2:d8:4d:d3:09:37:0a:b7:6c:f4:92:f1:c7:a5:40:df:77:
         eb:ef:bb:57:3b:1e:cc:b8:07:b3:36:87:65:9e:77:c8:5f:e7:
         8a:72:80:a6:0d:10:12:e6:4f:e1:29:3d:b3:02:1d:9c:ca:8b:
         2a:a5:f0:ac:d8:39:19:76:21:98:25:d6:77:82:05:28:21:82:
         bc:eb:f6:0b:f9:73:38:a3:e7:e8:24:1e:d8:5d:25:c0:1d:7f:
         e7:49:c6:f8:39:66:05:ad:f6:e4:13:39:08:86:33:5e:34:a6:
         d7:5c:12:72:07:4c:d5:62:c4:26:96:b0:8b:b1:ea:6e:4b:05:
         0a:54:91:1c:03:43:29:6f:78:84:ef:27:66:97:33:65:59:cf:
         67:8a:c8:d8:78:01:11:c3:4e:8c:90:0c:ab:fd:8a:ec:9e:bf:
         ae:e9:af:56:dc:fb:25:4f:9e:00:42:3c:89:72:56:9c:53:2b:
         ec:7a:12:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:50:42 2024 by rpki-client on console-ams.rpki-client.org