Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
File:                     A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft (raw, json)
Hash identifier:          LtnXz+xYrTFeIgNQk1T0cB8Y2OuQNU4J9ww9yELGbQs=
Subject key identifier:   55:48:C7:BD:D3:17:8D:14:E2:D6:E8:05:06:0B:5F:D1:FD:E3:F8:A3
Authority key identifier: A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD
Certificate issuer:       /CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
Certificate serial:       3ABDE884B326D237A0B1B95F9B11A9F15BCD7110
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
Manifest number:          0108
Signing time:             Thu 21 Nov 2024 00:16:46 +0000
Manifest this update:     Thu 21 Nov 2024 00:11:46 +0000
Manifest next update:     Fri 22 Nov 2024 00:45:46 +0000
Files and hashes:         1: 326130353a646663313a6362303a3a2f34382d3438203d3e20323136313037.roa (hash: GvQX7Hq7Lk5dV/2LRULKKfFGAvYvS66+a11SezP2Gv0=)
                          2: 326130353a646663313a6330303a3a2f34302d3430203d3e20323136313037.roa (hash: 2wwjOv8GrtbbRR9vstu58/KZGnDrdVaG4knETIYc/AY=)
                          3: 326130353a646663313a6366663a3a2f34382d3438203d3e20323136313037.roa (hash: xZP1TdoBBOXgaTQoQE3M5ucBwQKGU4zzOq7+G2QnQI8=)
                          4: 326130353a646663313a6364303a3a2f34382d3438203d3e20323136313037.roa (hash: Mh81Bt1D/0NWzP7XokM8MvVPTE3WS32gTiIFUz4Wq7Y=)
                          5: 326130353a646663313a393330303a3a2f34302d3430203d3e20323136313037.roa (hash: RcpSeMF5tmjCceI6lprmaNclkAcIin6urOruFeoBsH0=)
                          6: 326130353a646663313a6364323a3a2f34382d3438203d3e20323136313037.roa (hash: okjmfMUPtNtmB+YgoKbmrSqd6CYYzeYzA5IuvR4FqE4=)
                          7: A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl (hash: c51oVCuzROsrW0KFuIREkuj7MWGk8fWZiVJdPUGzkY8=)
                          8: 326130353a646663313a6362313a3a2f34382d3438203d3e20323136313037.roa (hash: ru6kvyJKe6romnii17TdLHOOCsCT3++0rWsH1ZDBlM4=)
                          9: 326130353a646663313a6364343a3a2f34382d3438203d3e20323136313037.roa (hash: q5j+c2qIHvhRW7ND0sRZcHrUp69Bd559PsPCXYWPg7Q=)
                          10: 326130353a646663313a6335333a3a2f34382d3438203d3e20323136313037.roa (hash: CnAZ047tmrpRp78Hj9O+EaIJNOL4YEi+nEB/HQghDBU=)
                          11: 326130353a646663313a6330303a3a2f34382d3438203d3e20323136313037.roa (hash: /uJAJJK7DM1WByo6S1UIlKz2091Zbv2ss486sPwfiEY=)
                          12: 326130353a646663313a6365633a3a2f34382d3438203d3e20323136313037.roa (hash: Te8NDOHqLdV9h/krQNl2dlY/ze4tKXk4Bq9QTA0uUAA=)
                          13: 326130353a646663313a6364313a3a2f34382d3438203d3e20323136313037.roa (hash: tss3iIr0s+RFnIHyplXQ4q+OBp0HEyxQ6VxVRzHZdNU=)
                          14: 326130353a646663313a6362323a3a2f34382d3438203d3e20323136313037.roa (hash: S6jgMc6rG0ZsUATxPWt7SrTUxQY234zCLU7DInT6Xy8=)
                          15: 326130353a646663313a6364333a3a2f34382d3438203d3e20323136313037.roa (hash: kouAYYDPp7u5DWXmWbdg5czloBE5q1b/LH37S7gdkyM=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 18:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:bd:e8:84:b3:26:d2:37:a0:b1:b9:5f:9b:11:a9:f1:5b:cd:71:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0BDCD4CEF02B9AA3CBD0A837666716397198BFD
        Validity
            Not Before: Nov 21 00:11:46 2024 GMT
            Not After : Nov 22 00:45:46 2024 GMT
        Subject: CN=5548C7BDD3178D14E2D6E805060B5FD1FDE3F8A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:d0:59:b6:a7:8b:80:f7:78:75:43:3f:6f:
                    9e:65:30:f9:e4:22:19:57:94:27:99:20:a4:42:73:
                    aa:36:58:21:20:bf:7e:d8:9a:dd:b3:c2:ef:f9:6d:
                    94:95:96:29:8f:2c:01:51:1d:11:e9:6d:0f:41:11:
                    f7:d5:0f:f1:20:b8:75:52:d4:b1:ae:66:57:81:89:
                    ea:23:01:00:2f:d5:69:21:dc:14:c0:f5:ba:4a:5f:
                    fb:4d:c5:a4:76:a6:d3:07:19:4c:8b:4e:57:e2:8e:
                    61:52:8a:72:eb:c6:d6:29:4e:70:cd:7d:c3:0b:2b:
                    e7:07:9f:82:33:25:22:1a:ed:4d:4c:3f:0c:e4:4f:
                    4b:aa:90:82:de:2f:4d:ef:28:91:38:6c:ac:93:43:
                    df:11:00:e8:68:78:9a:09:5c:70:93:37:f2:3b:d4:
                    49:fc:63:0c:63:d6:34:7f:d8:38:91:9b:6e:2a:3d:
                    c5:00:3c:ef:57:6a:20:d6:d8:ff:50:d9:1d:4d:26:
                    98:0d:66:17:7f:2d:16:6b:27:b7:09:e5:96:05:d8:
                    5b:e7:c1:5b:b4:a7:2c:3a:1e:1b:1d:36:6c:7c:3e:
                    0d:0c:f7:59:41:78:e4:37:66:71:dc:b6:ba:a4:9f:
                    58:81:17:b3:f9:c3:b1:af:e3:6b:74:8e:9d:2f:83:
                    41:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:48:C7:BD:D3:17:8D:14:E2:D6:E8:05:06:0B:5F:D1:FD:E3:F8:A3
            X509v3 Authority Key Identifier:
                keyid:A0:BD:CD:4C:EF:02:B9:AA:3C:BD:0A:83:76:66:71:63:97:19:8B:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/28cd6224-a3b0-468e-aa37-82ca6a3e9243/1/A0BDCD4CEF02B9AA3CBD0A837666716397198BFD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:03:92:a7:a3:1d:22:11:1c:50:60:d7:22:0c:cf:f8:95:85:
         1d:f7:0a:6e:4b:a6:3f:a8:6a:b0:3b:6b:3c:e0:a4:55:68:82:
         b9:ac:46:f3:28:67:0c:f6:28:74:34:fd:71:2d:33:49:f5:60:
         96:34:b0:94:55:3c:e4:ea:36:d2:06:74:d2:8e:51:45:c2:65:
         ae:2b:05:4b:be:49:f3:e6:fc:a0:1c:a5:19:ad:5a:ea:70:33:
         c8:f8:86:b6:fa:94:fe:6c:74:17:5b:8c:5f:ab:48:15:fb:81:
         bb:1f:a8:3c:5a:4c:11:89:96:21:01:25:10:93:5c:b4:27:3b:
         7b:28:e0:e1:e5:d0:b5:c6:b8:53:f6:16:50:a7:a9:3f:cb:83:
         3d:d5:51:bd:74:87:80:97:4b:ad:59:7e:2d:8d:75:e5:8b:68:
         d6:d7:f8:2b:38:5f:eb:bd:25:93:49:b2:c5:94:df:93:b4:6b:
         11:5a:f6:ba:04:9f:5b:9e:24:af:bc:bc:60:1e:82:a0:bf:71:
         ca:73:53:57:28:01:3b:10:c9:00:5b:26:0e:a3:ff:28:40:22:
         aa:9f:da:ae:e2:d4:70:b8:8d:40:62:b0:e4:df:fb:59:c1:9b:
         f4:4f:0a:b8:15:43:94:9e:e9:d2:2d:4c:28:8d:4b:01:4b:67:
         ee:e4:65:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 02:01:29 2024 by rpki-client on console-fra.rpki-client.org