Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft
File:                     F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft (raw, json)
Hash identifier:          sstThal7jl7xITDOegDnP5CP+uzrqTm+mABdwcv6ifE=
Subject key identifier:   A4:1D:99:43:A9:18:99:80:1C:D4:33:21:6D:3E:84:4C:7A:A1:16:46
Authority key identifier: F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22
Certificate issuer:       /CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
Certificate serial:       64B20E90320672F0CD703A54E859BAF1777A9A21
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft
Manifest number:          03CE
Signing time:             Tue 22 Oct 2024 10:59:15 +0000
Manifest this update:     Tue 22 Oct 2024 10:54:15 +0000
Manifest next update:     Wed 23 Oct 2024 14:34:15 +0000
Files and hashes:         1: F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl (hash: aZUwY4rFbirFicYPvhSO4RuKoSFhGIv32vVOuHtQDFY=)
                          2: 326130613a363034303a313165303a3a2f34332d3438203d3e203134363138.roa (hash: BDvnLpOERWIDq8JIXH11OjnaFN1OB1EXqxx5QPZseLQ=)
                          3: 326130613a363034303a336630303a3a2f34302d3438203d3e20323033303639.roa (hash: V0mvV0hNihc/jKb8hU2/V8roZXN+5IVqU0BoJ9bcQys=)
                          4: 326130613a363034303a313165303a3a2f34332d3438203d3e203136353039.roa (hash: 7KM8pV+bRFQ+nSRC7wE98lIHJ6EuNDV7Y4EsUdbo+nk=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b2:0e:90:32:06:72:f0:cd:70:3a:54:e8:59:ba:f1:77:7a:9a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F900BC65E2B646EBAC472A5DEA12BDB0011AC122
        Validity
            Not Before: Oct 22 10:54:15 2024 GMT
            Not After : Oct 23 14:34:15 2024 GMT
        Subject: CN=A41D9943A91899801CD433216D3E844C7AA11646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:0c:eb:c4:4c:31:df:cb:ab:31:8e:a1:e1:
                    94:05:84:f1:b6:15:99:29:9b:df:af:29:8f:38:ab:
                    87:56:fd:62:b6:09:cc:bb:3f:9e:a0:b0:18:3c:0a:
                    85:8c:bc:3a:02:ca:87:85:eb:a3:5d:21:86:1a:50:
                    86:eb:42:64:49:9e:fe:8e:4b:af:57:28:52:dc:87:
                    96:47:a4:23:7e:55:a4:b9:36:f2:80:17:50:07:a8:
                    f1:4b:ba:8d:71:18:c0:b0:6b:44:24:69:79:90:74:
                    fd:d4:44:cc:06:57:82:fb:7b:1c:77:6e:29:91:1e:
                    de:99:2e:a9:3d:aa:7a:c8:95:cd:05:ca:46:78:8f:
                    38:89:45:0b:da:7f:a9:35:b2:9a:b6:22:5a:e6:0a:
                    7a:cd:6e:f3:6c:d2:6a:e7:f8:ef:aa:03:d0:e4:4f:
                    2d:91:88:df:7a:52:a5:00:4f:de:be:3a:93:56:fa:
                    1b:38:92:f8:77:78:ca:0a:6c:38:96:b8:db:42:ce:
                    98:43:ab:2a:6d:df:48:83:e9:01:37:99:2f:b1:bd:
                    e4:cb:f2:11:7d:b0:bd:c0:10:c6:8a:c2:a3:93:e5:
                    c4:ef:ae:94:6a:af:be:a0:fb:34:2c:26:fd:48:c2:
                    17:24:e5:a6:71:8d:19:ef:a7:27:87:e1:7c:8a:dd:
                    df:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1D:99:43:A9:18:99:80:1C:D4:33:21:6D:3E:84:4C:7A:A1:16:46
            X509v3 Authority Key Identifier:
                keyid:F9:00:BC:65:E2:B6:46:EB:AC:47:2A:5D:EA:12:BD:B0:01:1A:C1:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/3/F900BC65E2B646EBAC472A5DEA12BDB0011AC122.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6c:31:d8:ff:47:71:d3:dc:33:9d:0d:ee:26:69:f2:5f:2a:
         fa:46:c4:fc:8c:55:81:f9:17:b8:b7:db:4f:12:38:31:92:8d:
         6c:38:26:7f:fe:56:86:fc:29:b6:cf:19:52:e7:06:da:0c:d7:
         7b:31:75:e8:ce:4e:f2:1a:55:69:95:0c:46:24:a6:41:24:99:
         db:f4:7e:1b:20:f8:aa:ca:97:01:73:45:6d:7d:69:d3:69:9b:
         31:8c:a7:b7:b3:4f:24:4f:fb:a9:76:4a:2b:10:51:93:f5:bd:
         a3:29:e4:ba:df:cf:04:ad:7d:79:03:29:30:aa:a4:1b:3d:52:
         ba:58:66:3a:e6:ab:64:57:5f:37:35:60:36:ab:3e:e6:bf:70:
         37:82:a6:ea:ab:00:5d:0c:18:14:3e:8e:03:c9:cd:fc:2f:dd:
         d7:ed:a3:cc:c4:e5:d9:d8:69:0f:69:2e:de:fb:8d:64:ec:65:
         ff:5d:26:f6:4e:f3:66:db:0a:ec:59:3e:1f:ac:d2:14:53:cb:
         01:1f:fc:ef:fd:0e:c6:50:c3:b3:81:7b:4a:ae:08:89:c4:6a:
         32:c7:9b:4b:3a:53:cd:6f:0b:b6:0a:9b:4a:6c:79:84:4c:09:
         6e:9e:5d:ad:5c:1f:7d:bc:cb:4f:76:04:02:32:7d:fa:d5:92:
         ba:ab:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 13:52:03 2024 by rpki-client on console-fra.rpki-client.org