Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
File:                     8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json)
Hash identifier:          F3BKGJSm4A+DG5ZP7+SESmFENVaB9QsI7hdmxLR6lOU=
Subject key identifier:   66:D4:AE:80:E6:48:2D:12:F5:27:9F:E3:AA:C4:6F:1D:A3:EC:34:1E
Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C
Certificate issuer:       /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
Certificate serial:       3054A1FC58B0AFC857AA6D7F0D55CED986320429
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
Manifest number:          011F
Signing time:             Thu 21 Nov 2024 19:06:27 +0000
Manifest this update:     Thu 21 Nov 2024 19:01:27 +0000
Manifest next update:     Fri 22 Nov 2024 22:20:27 +0000
Files and hashes:         1: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: IFxu47mX+KW2yr5BPkyWwe9T/nmoVdlGCmb5Yjhy+6o=)
                          2: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 2OjyaJbbNxiK1KbQufJXFdY8QVhoqDcSSIjvfQsPK/M=)
                          3: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: zxhwJ8BRHSfhv2IzHdjrBBfqb2fcq5amMTROJBgH6K8=)
                          4: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: hVA/d2YR4xdsAHy1uTxjAUm6BOK9lZFHu6XowWZ2ALI=)
                          5: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: 5kwf5snTkmK7LtAATO7gOLvfpi+re7REaK8WEI28poM=)
                          6: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: Fb9U5onYhJ0bwRtEjYGUTxLrzqugr5G6uA9CKAt2Qds=)
                          7: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: uw3KMHJgZ6Bs1XgZHu5jmQaEivCBCHNoA88XalRkJlM=)
                          8: 326131343a373538313a343835663a3a2f34382d3438203d3e20313530323439.roa (hash: 5xKTuxtl6gU1soXvS6gNX1GeC3WIfuH+Q7hlbZVvBVo=)
                          9: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: 2KFsAHpLftCLwZtbIHo+pYTrjbgMoXhuDq6pQ1osTQE=)
                          10: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: KfVtaM6pSil5IlE25aJ6GsX8ukKL88HTbLxoecGenMs=)
                          11: 326131343a373538313a343934303a3a2f34342d3438203d3e20323135313731.roa (hash: xBUUDC7moivahh8wpHqIH+vMJn4fPyDzPmTcv5Fy8T0=)
                          12: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: j3Yxep+MI4lCkRyN6TayldqjXbBq5gnnYN1fkBIgW/k=)
                          13: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: dkDlXn7ZTKwdhEvN1AyaOINvq0aj0JnSzR14swqFK7s=)
                          14: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: balCDraqmFeCDcT6AARLgPE7wx/XlJCm9PVdBomS9WU=)
                          15: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: 4Z6rPdv4tqbK+G6jKoA/oUoSEfLFLbBQ/sAEud6D9JY=)
                          16: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: Bo15fqP9Ac/cIgSIHZ4Z4OZP/kjLDe1d5T3u0s2HgVw=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:54:a1:fc:58:b0:af:c8:57:aa:6d:7f:0d:55:ce:d9:86:32:04:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C
        Validity
            Not Before: Nov 21 19:01:27 2024 GMT
            Not After : Nov 22 22:20:27 2024 GMT
        Subject: CN=66D4AE80E6482D12F5279FE3AAC46F1DA3EC341E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:96:a3:67:56:74:8b:76:60:46:f2:d0:d4:
                    9b:15:ce:b4:61:94:52:a2:38:77:80:2a:4d:37:36:
                    c8:9d:0d:16:3b:c5:f4:25:02:d9:09:be:21:fc:23:
                    91:50:65:58:18:8f:a9:e3:87:cd:0d:6c:93:26:85:
                    37:8e:56:50:05:b2:a1:46:9b:1b:12:14:52:31:10:
                    e9:23:9d:8d:66:ea:54:02:8f:6d:e4:27:ed:9b:d5:
                    d0:e6:90:3c:1b:73:38:a4:51:d0:71:48:56:33:5a:
                    61:8b:b2:84:ec:3f:6f:38:46:43:2f:70:e6:c2:d2:
                    0a:d9:dd:55:3f:03:0b:f0:aa:5e:f0:b3:97:16:44:
                    26:56:5c:b1:bc:d8:4f:e5:ee:1b:19:0b:e8:4f:1c:
                    e7:c0:94:c1:61:16:b9:f3:7f:fc:a4:04:84:7f:41:
                    0f:e8:30:c2:12:b9:9d:8c:47:af:bf:4e:20:d4:1d:
                    3e:88:60:4d:ea:4c:2c:3a:c4:05:42:9f:45:ac:4e:
                    f0:e4:e9:a2:3b:af:5e:02:63:c2:f2:1e:78:17:b8:
                    86:1c:8c:e7:4d:99:0b:6e:06:f1:52:b0:ff:38:e9:
                    fc:ec:08:3d:d5:7a:41:e8:eb:6c:20:75:48:1a:e0:
                    6f:ea:e3:7b:d2:56:24:14:d0:42:28:83:da:a5:7d:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D4:AE:80:E6:48:2D:12:F5:27:9F:E3:AA:C4:6F:1D:A3:EC:34:1E
            X509v3 Authority Key Identifier:
                keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:c2:2f:e7:e4:7c:60:93:c3:4f:ff:bc:0c:d0:b0:a1:73:2b:
         71:82:f0:21:90:3c:d1:3e:94:04:63:7b:2d:af:62:c7:15:b7:
         25:0e:65:00:67:96:7a:ca:aa:b8:9b:48:15:f1:99:27:cb:81:
         14:9b:22:4c:ed:55:60:79:37:7a:72:4f:49:5a:7f:91:aa:70:
         a4:b7:25:1c:62:bf:df:bb:aa:9a:b7:3a:98:67:4a:2b:2e:3f:
         17:43:0b:06:1e:e7:d8:47:b1:f4:6b:b7:20:a2:0a:74:21:6b:
         7d:2b:7a:3e:f7:76:3a:88:7a:5d:d9:ed:f6:b1:7c:e5:3e:78:
         f3:50:9c:31:78:08:34:7d:c2:2b:0b:56:88:d8:c5:26:3f:07:
         a4:79:53:10:8c:eb:aa:c9:f5:c1:9c:51:b2:89:71:48:64:d0:
         ba:d9:4d:6e:e0:37:b7:8e:4e:a1:ab:aa:07:dd:bb:c9:8e:7b:
         b0:70:d3:5e:e1:ae:2f:05:3f:ca:a6:4c:61:57:b0:70:78:48:
         e9:62:3e:89:0a:b3:fb:83:c2:be:76:96:6a:f5:f8:bb:3a:f2:
         dc:dd:58:8d:79:1a:57:ca:4b:a1:80:19:4d:59:a8:a7:89:2c:
         e5:19:4e:78:20:2c:17:02:82:71:a9:b0:c4:43:74:b7:cd:de:
         18:29:f5:8e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIUMFSh/Fiwr8hXqm1/DVXO2YYyBCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF
MEFGQjM4QzAeFw0yNDExMjExOTAxMjdaFw0yNDExMjIyMjIwMjdaMDMxMTAvBgNV
BAMTKDY2RDRBRTgwRTY0ODJEMTJGNTI3OUZFM0FBQzQ2RjFEQTNFQzM0MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstpajZ1Z0i3ZgRvLQ1JsVzrRh
lFKiOHeAKk03NsidDRY7xfQlAtkJviH8I5FQZVgYj6njh80NbJMmhTeOVlAFsqFG
mxsSFFIxEOkjnY1m6lQCj23kJ+2b1dDmkDwbczikUdBxSFYzWmGLsoTsP284RkMv
cObC0grZ3VU/Awvwql7ws5cWRCZWXLG82E/l7hsZC+hPHOfAlMFhFrnzf/ykBIR/
QQ/oMMISuZ2MR6+/TiDUHT6IYE3qTCw6xAVCn0WsTvDk6aI7r14CY8LyHngXuIYc
jOdNmQtuBvFSsP846fzsCD3VekHo62wgdUga4G/q43vSViQU0EIog9qlfd+JAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUZtSugOZILRL1J5/jqsRvHaPsNB4wHwYDVR0j
BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4
NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy
OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE
QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD
NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAswi/n
5Hxgk8NP/7wM0LChcytxgvAhkDzRPpQEY3str2LHFbclDmUAZ5Z6yqq4m0gV8Zkn
y4EUmyJM7VVgeTd6ck9JWn+RqnCktyUcYr/fu6qatzqYZ0orLj8XQwsGHufYR7H0
a7cgogp0IWt9K3o+93Y6iHpd2e32sXzlPnjzUJwxeAg0fcIrC1aI2MUmPwekeVMQ
jOuqyfXBnFGyiXFIZNC62U1u4De3jk6hq6oH3bvJjnuwcNNe4a4vBT/KpkxhV7Bw
eEjpYj6JCrP7g8K+dpZq9fi7OvLc3ViNeRpXykuhgBlNWainiSzlGU54ICwXAoJx
qbDEQ3S3zd4YKfWO
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:14:51 2024 by rpki-client on console-fra.rpki-client.org