Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft
File:                     974E186C2E15C12700D0165ACC54D7A585EE383C.mft (raw, json)
Hash identifier:          uOzwyFXrPMLg8y2jrYbl+hihRAU10OwkUFana26EErs=
Subject key identifier:   81:1E:E1:80:69:72:FF:2C:1D:16:98:44:59:30:D5:FC:5F:BB:33:8E
Authority key identifier: 97:4E:18:6C:2E:15:C1:27:00:D0:16:5A:CC:54:D7:A5:85:EE:38:3C
Certificate issuer:       /CN=974E186C2E15C12700D0165ACC54D7A585EE383C
Certificate serial:       026B2BEFD9E06EF94A253C055B44ED8A4A53A21D
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/974E186C2E15C12700D0165ACC54D7A585EE383C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft
Manifest number:          64
Signing time:             Sun 24 Nov 2024 17:17:25 +0000
Manifest this update:     Sun 24 Nov 2024 17:12:25 +0000
Manifest next update:     Mon 25 Nov 2024 20:12:25 +0000
Files and hashes:         1: 974E186C2E15C12700D0165ACC54D7A585EE383C.crl (hash: 0MHMmO3BtsLi3kvLV70VbkuOQKLMvd62jBEK2Ez0P4c=)
                          2: 3139342e35382e36352e302f32342d3234203d3e20323134373638.roa (hash: y/fox/NDWEI298o75eeGijkFXnfs+27YTJMVLS6ZcwQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/974E186C2E15C12700D0165ACC54D7A585EE383C.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 05:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:6b:2b:ef:d9:e0:6e:f9:4a:25:3c:05:5b:44:ed:8a:4a:53:a2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974E186C2E15C12700D0165ACC54D7A585EE383C
        Validity
            Not Before: Nov 24 17:12:25 2024 GMT
            Not After : Nov 25 20:12:25 2024 GMT
        Subject: CN=811EE1806972FF2C1D1698445930D5FC5FBB338E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:09:ae:ae:ce:55:b7:c9:30:5e:3c:8c:b0:
                    24:e1:e5:87:65:ab:fd:8a:ce:51:4b:c1:4f:25:7d:
                    e3:a8:06:13:7c:cd:cf:d4:0e:30:c3:95:49:c8:a3:
                    b1:1b:67:c3:15:4d:32:86:79:e7:f3:b2:e3:4e:89:
                    d2:5a:28:40:4f:8d:a0:5f:5b:dc:26:4c:cd:a2:80:
                    28:0c:9f:ca:d0:08:11:f7:31:3b:0c:04:62:7c:fa:
                    55:b6:3f:18:e7:d9:9d:00:b7:7b:78:17:36:67:6e:
                    ac:37:9d:91:fa:ad:ba:9a:01:49:a0:17:dd:ce:21:
                    f0:9f:fa:fe:8a:05:af:27:94:91:8c:1d:2d:89:b3:
                    f2:66:09:63:ed:27:67:7c:9d:60:80:d3:c5:4e:8f:
                    fb:f7:5b:c3:cf:7b:42:20:3c:d3:72:82:9c:63:b5:
                    54:b0:ef:d0:62:f6:77:5c:eb:e9:d2:82:56:e0:43:
                    9b:5f:ce:3b:1a:c2:0d:b4:f9:30:4c:de:be:a7:13:
                    d7:48:93:7d:ef:cc:fb:6e:96:2f:ac:4f:20:52:be:
                    82:a8:c1:4a:98:84:7d:52:2a:90:f6:31:1e:c8:2d:
                    b8:be:10:0d:d0:3a:60:53:c0:d7:dc:4b:62:cf:d0:
                    55:7f:33:eb:63:93:ba:10:6f:f0:f3:51:d4:9e:b9:
                    42:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1E:E1:80:69:72:FF:2C:1D:16:98:44:59:30:D5:FC:5F:BB:33:8E
            X509v3 Authority Key Identifier:
                keyid:97:4E:18:6C:2E:15:C1:27:00:D0:16:5A:CC:54:D7:A5:85:EE:38:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/974E186C2E15C12700D0165ACC54D7A585EE383C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/2/974E186C2E15C12700D0165ACC54D7A585EE383C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1e:a6:94:bf:17:ba:10:09:f3:dd:2a:9a:e0:22:e4:e1:49:
         c0:c6:3f:4b:ef:52:0c:47:b0:9b:fd:bb:2f:7d:db:86:e3:85:
         8b:90:4b:8e:2a:d0:39:db:fe:84:fd:e0:81:83:e5:9d:f4:6d:
         c4:8f:a0:48:cc:f0:e7:da:f2:ea:34:ed:63:67:a4:13:6f:56:
         f4:5c:ed:20:3f:37:1a:9f:e7:a0:2c:db:d6:e2:ea:b8:d6:b8:
         b6:66:8c:b8:ad:e2:5f:75:7c:52:aa:f5:bf:77:b2:37:7b:97:
         84:b2:0e:7c:2a:26:05:af:8d:df:05:f0:ad:8d:5c:0f:d9:68:
         14:1c:ce:ef:c4:88:05:b4:94:6e:de:db:47:3a:23:2e:f5:eb:
         f5:a7:d1:3e:24:58:cf:08:a1:cd:d9:45:9d:d8:4e:5d:9d:cb:
         81:a7:72:ff:b9:2d:94:74:a9:b5:14:8a:4e:a8:7a:ff:55:71:
         47:f0:9e:79:b5:5a:2d:5a:b5:67:9c:47:88:f9:d1:b7:96:9a:
         c4:34:5a:57:23:7a:c3:14:cb:da:e7:84:36:41:8e:76:9b:8d:
         9b:f3:8a:07:c7:a8:ab:1c:cf:c5:52:dc:41:59:df:27:ad:e6:
         e9:43:d4:eb:a4:2a:9d:8d:e4:2f:05:eb:d2:f5:a7:15:37:15:
         1c:c6:d6:55
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIUAmsr79ngbvlKJTwFW0TtikpToh0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc0RTE4NkMyRTE1QzEyNzAwRDAxNjVBQ0M1NEQ3QTU4
NUVFMzgzQzAeFw0yNDExMjQxNzEyMjVaFw0yNDExMjUyMDEyMjVaMDMxMTAvBgNV
BAMTKDgxMUVFMTgwNjk3MkZGMkMxRDE2OTg0NDU5MzBENUZDNUZCQjMzOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa/Qmurs5Vt8kwXjyMsCTh5Ydl
q/2KzlFLwU8lfeOoBhN8zc/UDjDDlUnIo7EbZ8MVTTKGeefzsuNOidJaKEBPjaBf
W9wmTM2igCgMn8rQCBH3MTsMBGJ8+lW2Pxjn2Z0At3t4FzZnbqw3nZH6rbqaAUmg
F93OIfCf+v6KBa8nlJGMHS2Js/JmCWPtJ2d8nWCA08VOj/v3W8PPe0IgPNNygpxj
tVSw79Bi9ndc6+nSglbgQ5tfzjsawg20+TBM3r6nE9dIk33vzPtuli+sTyBSvoKo
wUqYhH1SKpD2MR7ILbi+EA3QOmBTwNfcS2LP0FV/M+tjk7oQb/DzUdSeuUJDAgMB
AAGjggJ3MIICczAdBgNVHQ4EFgQUgR7hgGly/ywdFphEWTDV/F+7M44wHwYDVR0j
BBgwFoAUl04YbC4VwScA0BZazFTXpYXuODwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdm
ZTc5LzIvOTc0RTE4NkMyRTE1QzEyNzAwRDAxNjVBQ0M1NEQ3QTU4NUVFMzgzQy5j
cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1
YzkxYmUzZjlkLzIvOTc0RTE4NkMyRTE1QzEyNzAwRDAxNjVBQ0M1NEQ3QTU4NUVF
MzgzQy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yM2NkZjljYS1k
ZDY0LTRmMzEtYWJmMy0wZjMyYjhlN2ZlNzkvMi85NzRFMTg2QzJFMTVDMTI3MDBE
MDE2NUFDQzU0RDdBNTg1RUUzODNDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKx6mlL8XuhAJ890qmuAi
5OFJwMY/S+9SDEewm/27L33bhuOFi5BLjirQOdv+hP3ggYPlnfRtxI+gSMzw59ry
6jTtY2ekE29W9FztID83Gp/noCzb1uLquNa4tmaMuK3iX3V8Uqr1v3eyN3uXhLIO
fComBa+N3wXwrY1cD9loFBzO78SIBbSUbt7bRzojLvXr9afRPiRYzwihzdlFndhO
XZ3Lgady/7ktlHSptRSKTqh6/1VxR/CeebVaLVq1Z5xHiPnRt5aaxDRaVyN6wxTL
2ueENkGOdpuNm/OKB8eoqxzPxVLcQVnfJ63m6UPU66QqnY3kLwXr0vWnFTcVHMbW
VQ==
-----END CERTIFICATE-----
Generated at Sun Nov 24 18:42:04 2024 by rpki-client on console-fra.rpki-client.org