Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
File:                     20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft (raw, json)
Hash identifier:          WZrcVY4EmlqU12vEnuBwfmHlv/qjVQ3oMjFCihkstz8=
Subject key identifier:   B3:A2:0E:0C:82:34:55:DE:7B:BF:F7:BA:2D:D6:9C:57:B5:41:C3:0C
Authority key identifier: 20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6
Certificate issuer:       /CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
Certificate serial:       462C0569994D0731B9B732DF449193FCB210D9C0
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
Manifest number:          73
Signing time:             Fri 22 Nov 2024 07:51:33 +0000
Manifest this update:     Fri 22 Nov 2024 07:46:33 +0000
Manifest next update:     Sat 23 Nov 2024 10:18:33 +0000
Files and hashes:         1: 326131343a316563313a3a2f33322d3438203d3e203438373030.roa (hash: xL09RaMvNnk3zcTxJYCpyR11r2WfajekNMt0OPCzbqM=)
                          2: 20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl (hash: m+tUsFx/8JNDyLJv2m23txcQD/EU3tMAMv5A/W+TywE=)
                          3: 326131343a316563373a633030303a3a2f33362d3438203d3e203438373030.roa (hash: R+o6n+RjWkxiRu/ckQJHanWEp0DumqtvHG3oGP82QQ8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2c:05:69:99:4d:07:31:b9:b7:32:df:44:91:93:fc:b2:10:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F69C4C146138CB0121C4C4CBB39876F4ABDEC6
        Validity
            Not Before: Nov 22 07:46:33 2024 GMT
            Not After : Nov 23 10:18:33 2024 GMT
        Subject: CN=B3A20E0C823455DE7BBFF7BA2DD69C57B541C30C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:08:ed:9d:9b:c6:3c:9b:24:f1:84:de:4f:93:
                    34:c8:fd:da:55:a8:89:a0:7b:62:7c:6c:2c:6b:fd:
                    0a:7d:94:18:5e:63:c3:8d:c0:a8:e4:a5:f5:bc:d5:
                    c9:15:19:59:a1:11:65:e0:3c:c1:77:cc:bf:6d:25:
                    75:aa:8f:5f:be:de:12:65:72:44:30:dd:7f:94:33:
                    a0:16:69:1f:00:73:ea:dd:3d:d7:87:ba:54:b3:b7:
                    76:55:8c:95:d1:17:4f:18:e7:81:76:de:a1:cf:11:
                    20:2e:dd:9c:10:52:c0:fa:cc:ef:28:55:26:df:ca:
                    a8:1a:e7:97:c5:26:fb:2b:12:36:ba:d4:72:df:f5:
                    2d:82:ae:0c:be:ac:90:48:6c:8f:84:cd:98:f1:6f:
                    ef:64:0d:04:ba:70:31:58:64:b6:da:4a:01:ff:95:
                    37:ec:71:f1:25:8a:e2:47:09:16:88:7a:51:18:9f:
                    f3:59:03:47:48:76:66:06:fd:ba:2f:19:ac:13:bb:
                    82:99:d7:1d:03:fb:31:8a:64:e8:f4:40:a8:c4:f3:
                    ef:4d:46:45:69:88:2d:b4:03:4f:cd:83:fa:04:2d:
                    48:e1:69:75:75:81:bb:06:de:02:b6:c1:e7:bb:44:
                    14:72:37:91:23:be:10:3e:29:f6:d9:1a:86:af:13:
                    b5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A2:0E:0C:82:34:55:DE:7B:BF:F7:BA:2D:D6:9C:57:B5:41:C3:0C
            X509v3 Authority Key Identifier:
                keyid:20:F6:9C:4C:14:61:38:CB:01:21:C4:C4:CB:B3:98:76:F4:AB:DE:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/0/20F69C4C146138CB0121C4C4CBB39876F4ABDEC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:fc:89:0b:c3:be:17:ec:01:5f:04:42:4c:37:83:36:8f:20:
         20:27:53:c8:e3:6c:b9:00:c3:cc:7c:1f:5e:3c:42:82:ea:26:
         9d:3f:f7:3b:d7:96:a2:02:84:ee:a3:0d:d9:7d:84:17:0e:df:
         94:56:10:24:82:8d:b4:87:c6:c3:2d:32:20:0d:16:fe:f8:10:
         38:ad:a7:ae:bf:2d:86:d8:87:6a:4a:3c:76:f6:bb:8a:d1:55:
         34:c9:a7:4f:22:78:43:88:c6:6c:eb:42:74:ac:b7:8a:83:11:
         b1:c6:d9:71:d0:b6:96:9d:13:26:55:df:93:93:d9:b5:eb:59:
         2a:c5:31:2b:ec:7e:91:0e:0a:03:52:ad:52:c5:91:3a:d5:f2:
         69:2d:54:a6:b3:c5:f0:96:52:33:81:be:cf:8d:c3:b6:44:e4:
         8e:1f:97:5f:18:cc:c5:55:a3:a5:e2:95:be:8b:26:54:f0:80:
         3b:aa:88:3a:5b:cd:25:35:3c:d6:eb:cb:bc:b4:bb:16:d9:86:
         60:9f:6c:42:76:5d:28:29:0e:9e:e2:27:9d:c9:56:13:14:46:
         e3:2d:d8:f3:b7:4e:b0:b7:4f:e1:e4:e2:7e:36:53:ec:11:6f:
         7b:0b:44:10:c5:b9:46:e4:75:18:04:1a:04:28:fb:68:8c:86:
         5a:0e:fd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org