Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.mft
File:                     4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.mft (raw, json)
Hash identifier:          1ELXzFn8WF//QeoDPdYpiSZ2U+oMXRi5B+dTuejhx3Q=
Subject key identifier:   20:57:99:12:8D:1F:B5:98:8E:C1:A9:DB:79:D8:F6:05:7A:5C:BF:3C
Authority key identifier: 44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF
Certificate issuer:       /CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
Certificate serial:       71584AE4FE737C7492A8B383668974D9E0668AB3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.mft
Manifest number:          3C
Signing time:             Sun 23 Jun 2024 01:00:47 +0000
Manifest this update:     Sun 23 Jun 2024 00:55:47 +0000
Manifest next update:     Mon 24 Jun 2024 03:24:47 +0000
Files and hashes:         1: 32332e3136342e3135332e302f32342d3234203d3e203630383538.roa (hash: 4tT2YebbH/RxmTZXtN1QKk6qJqUyzbfQ+jyAACIXKlo=)
                          2: 32332e3136342e3135332e302f32342d3234203d3e20323135303531.roa (hash: MvM5d5TO21mEEqIi89rrf+rLZ0dh8KEOdLxS6iWJq8k=)
                          3: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: bJHncf04r57gkEli3OQiXlk06GlA13JmXllNdKXQqkc=)
                          4: 32332e3136342e3135322e302f32332d3234203d3e203236353631.roa (hash: mgsWua6hsy72WPq0Cfhct3Se3gVzeZ2U47GKn4H/q+A=)
                          5: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 7lCQ+4D+Fvw0Vqlf1IJ8/62maKJB5dyc/yH3C22hdjQ=)
                          6: 32332e3136342e3135322e302f32342d3234203d3e203630383538.roa (hash: 6Mh/nXqKJwAYnT+R6dowS9B0zWh7o5tG/AVRYSG8LjY=)
                          7: 4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.crl (hash: 1ilOtTtl1Yzn9j018xulX/YcBqO/GFrjZ7QqUtj+xzs=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 03:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:58:4a:e4:fe:73:7c:74:92:a8:b3:83:66:89:74:d9:e0:66:8a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a75232dac0a4973b29677a14573561ef341199600
        Validity
            Not Before: Jun 23 00:55:47 2024 GMT
            Not After : Jun 24 03:24:47 2024 GMT
        Subject: CN=205799128D1FB5988EC1A9DB79D8F6057A5CBF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:2e:27:f2:08:25:ba:27:bb:f3:ce:00:01:
                    2f:9e:55:24:0c:7b:22:bf:6d:95:e1:a6:63:e3:b7:
                    98:c9:fb:a4:69:71:d7:04:4f:a7:2e:a7:6e:a4:a6:
                    92:80:15:f5:e9:3b:fb:36:39:af:3d:48:35:46:96:
                    c4:ba:06:a6:7a:11:9f:f5:9b:34:44:f2:e4:0f:d0:
                    a8:71:48:61:6b:a0:9a:48:6b:bf:cc:ef:06:76:4f:
                    d6:98:40:a7:d6:46:7c:fa:2c:ff:03:3d:f0:b4:bc:
                    3b:fa:75:b2:4f:dd:d6:81:7a:87:76:f7:bd:72:77:
                    cd:9a:09:fb:3c:47:82:25:02:59:6c:66:e5:15:73:
                    fd:3b:ed:87:ea:38:cd:1c:61:b4:42:97:1e:f5:2d:
                    f4:05:99:53:04:4a:c2:0e:62:54:00:8c:bd:79:d6:
                    5d:98:69:bc:07:07:28:8f:69:14:a8:31:6c:f3:32:
                    ed:74:6b:a1:39:25:92:7c:5c:c7:e4:41:a6:c0:3e:
                    3a:97:79:6d:5e:01:0a:7e:d5:d3:d3:97:61:13:37:
                    89:53:bb:0f:c4:5b:24:e2:9a:94:15:63:9c:45:bc:
                    4d:e3:9f:ca:58:cb:70:f8:88:33:d9:f9:fa:f8:91:
                    e4:66:81:ca:5a:d4:55:2a:2a:0e:1c:54:6a:23:d5:
                    ed:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:57:99:12:8D:1F:B5:98:8E:C1:A9:DB:79:D8:F6:05:7A:5C:BF:3C
            X509v3 Authority Key Identifier:
                keyid:44:17:C6:2B:C8:BB:64:8A:4A:97:DD:F6:50:5C:2E:44:3E:4B:35:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a75232dac0a4973b29677a14573561ef341199600.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2de2f64d-f6e5-47e3-a6fb-686d88e71ae9/2/4417C62BC8BB648A4A97DDF6505C2E443E4B35FF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e4:36:22:01:ae:ef:3e:6c:25:b9:f5:b6:dc:d1:9c:13:27:
         24:91:ec:c9:1d:35:c7:15:64:91:79:32:c4:17:2f:eb:db:3d:
         61:a4:ea:c2:89:b9:70:b6:5f:92:67:4c:df:d6:a7:b2:55:36:
         f4:4b:13:ce:5f:37:f4:f9:e8:1c:c9:28:87:21:74:b4:3d:ac:
         88:24:39:02:91:82:15:34:90:90:87:77:79:e7:64:9b:b0:18:
         8a:ad:5e:81:db:7c:c4:46:5e:22:e7:28:9c:25:13:25:d8:9c:
         e6:cf:de:71:9a:b2:82:3a:96:2a:e2:b1:d4:89:a7:be:cd:11:
         14:e1:54:f0:83:af:16:ce:e5:c4:cd:35:a2:e7:80:d7:35:09:
         72:f9:db:2b:45:1c:87:16:fc:22:a2:c5:53:49:7e:4a:b9:2c:
         ac:03:4d:36:6a:53:19:20:7e:25:7b:0f:34:47:df:96:c7:65:
         c3:fd:12:87:f0:61:5a:af:b9:98:cb:24:88:55:5b:74:11:48:
         21:06:b9:c3:ff:64:f3:17:76:dd:14:e4:c7:bc:54:05:67:ce:
         dd:23:21:12:bc:94:3b:6d:83:4d:92:75:f6:71:21:a6:27:fe:
         76:f1:1e:a8:f1:86:af:16:a7:0d:b2:d6:2b:23:56:ca:f5:35:
         cc:06:9c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:24:18 2024 by rpki-client on console-fra.rpki-client.org