Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
File:                     309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft (raw, json)
Hash identifier:          BgGPcgvlRgjrUqTdJVk+9U5tCQZwXd+raU9oJ5YV/QE=
Subject key identifier:   D0:1A:A6:38:47:8F:51:FE:80:72:21:C3:AC:95:70:DB:E9:8A:2A:31
Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76
Certificate issuer:       /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
Certificate serial:       3F9232A44332342AB947E857A79523D13B6DA4BB
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
Manifest number:          3B
Signing time:             Tue 22 Oct 2024 18:07:45 +0000
Manifest this update:     Tue 22 Oct 2024 18:02:45 +0000
Manifest next update:     Wed 23 Oct 2024 18:53:45 +0000
Files and hashes:         1: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl (hash: AmHycHsfahsB7w2wbc7ChPl3dwqzTyDMW6h270MZvJs=)
                          2: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: cKtVijhwYzD8lUknL4bLGAreJBVYSaklclbPuDAhlM4=)
                          3: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: LBWSPbWdHS2qLW48sBVvajPcn95MUvX0AUIFyg2pSwE=)
                          4: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: Nnbe/4zszjgo0YB55Fou4Wds93r5DpKEFbS0MZw1LSo=)
                          5: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: cwd5LxUfGqT7a9/Pajk8lfNPUrL3p3IC+JEphw9tMJU=)
                          6: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: Iz/fbYS1/cy8A5fLPahpzYYMJ+9YAFFxOvqGD55PuMM=)
                          7: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: vmCZ6eOm5tS7bNiPnlTdd4xzZjSjYpY8TXILOA0OmSc=)
                          8: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: WZAT+2UnkuTeDpADo9xuR0pPXroOCLJbbHfxikcVv24=)
                          9: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: dOsy+R+Pu+oAZfnInfj1QRHz0MdLjsjFwXGn7V3VRV4=)
                          10: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: w5dnEiDx5goNVTXWdKgSFg9sD6RUplNurP3xamwPNaQ=)
                          11: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: FI47MURWTFWikQVohyPC3i+m6GkNNvGpYuxpgU2LP/Q=)
                          12: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: 92+lsmyfA1dbS5hvoEPYQjapfeES/k8FUYGANJUnv7Q=)
                          13: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: MYzoD8wbCOxI3VM/BdbUpxOg1cHoSa/pKdV7AMYn73k=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Oct 2024 08:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:92:32:a4:43:32:34:2a:b9:47:e8:57:a7:95:23:d1:3b:6d:a4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76
        Validity
            Not Before: Oct 22 18:02:45 2024 GMT
            Not After : Oct 23 18:53:45 2024 GMT
        Subject: CN=D01AA638478F51FE807221C3AC9570DBE98A2A31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:27:6b:b7:09:1c:79:96:44:d8:27:89:26:7a:
                    b3:98:ae:84:48:c1:d8:e6:78:ef:9e:8e:6d:72:21:
                    01:46:fb:82:92:60:10:01:17:90:3c:3e:a9:6d:30:
                    e8:52:81:75:0e:d1:e3:2e:b5:62:99:ed:18:34:87:
                    d2:a6:9a:b2:17:ca:79:0d:76:91:38:a2:1f:35:cf:
                    fc:0a:8e:ae:1e:d7:85:0c:40:5c:2c:d8:f9:06:46:
                    fa:28:a1:8b:69:12:a0:f5:6b:3b:dc:c1:e2:02:c4:
                    1b:6f:06:8b:da:1a:43:eb:23:66:47:55:90:31:12:
                    17:85:db:83:89:a3:29:25:79:d0:9b:09:7a:21:98:
                    4b:5f:4c:2b:ed:a1:f8:78:03:e8:8f:e9:a9:8e:02:
                    92:f9:ea:da:3c:a2:1f:cc:5e:3e:1d:cd:21:8a:61:
                    f7:92:39:89:a8:a0:e3:b0:3c:1e:ed:bb:c2:d4:f4:
                    ad:23:d2:81:0c:52:97:5b:1e:08:9f:a4:dc:89:d0:
                    18:92:a4:d0:bd:cc:e3:38:ab:3a:82:a0:ac:29:31:
                    1f:fc:3c:4b:4a:48:b4:b0:27:84:ea:04:93:05:8a:
                    13:03:27:03:0f:a9:00:dd:60:40:0a:de:27:29:c4:
                    72:8d:63:01:f6:35:48:b9:8e:b0:22:36:13:55:2e:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1A:A6:38:47:8F:51:FE:80:72:21:C3:AC:95:70:DB:E9:8A:2A:31
            X509v3 Authority Key Identifier:
                keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e6:5a:af:7d:ac:88:ac:bb:2c:aa:36:cf:18:9c:c3:83:14:
         1d:f9:e4:24:1e:40:23:38:71:ad:b1:89:99:67:31:f5:05:ca:
         f6:c6:85:1e:79:50:15:bf:f5:ed:bb:72:2f:5a:43:e0:87:3f:
         13:2c:d1:0e:9e:75:ca:0b:91:57:bf:a4:33:b6:6c:00:06:a3:
         68:4d:3e:61:e3:bf:95:fa:1e:48:06:31:76:3b:a5:56:aa:d2:
         8a:df:06:21:a5:b4:12:76:41:5a:ac:6a:cf:b8:1f:86:b6:44:
         98:da:e3:b2:2d:40:cf:33:38:dd:1d:c7:e1:15:69:7a:18:a3:
         81:0d:75:f3:19:ea:e2:53:93:c3:c0:3b:ca:27:e0:94:94:e0:
         ff:0d:a9:1a:6c:63:c2:df:c4:1a:af:30:3d:b4:ee:03:99:4e:
         cc:a7:23:1f:1c:09:08:ec:60:bd:6e:62:a6:6e:c3:e6:20:ac:
         1d:44:0e:10:a6:60:9a:75:2b:e1:df:5f:9d:51:8b:89:a0:9e:
         e7:3c:a6:78:51:82:5a:5b:6f:79:94:0d:bf:79:62:93:73:1f:
         6e:fd:5c:22:b4:d6:84:83:18:90:9c:94:fe:63:df:b0:4d:bd:
         73:97:5c:b6:8f:32:a7:e2:28:ee:4c:f7:a2:6d:62:9a:94:a3:
         ff:e9:91:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:27:44 2024 by rpki-client on console-ams.rpki-client.org