Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.mft
File:                     A9362D4E85AC589FD5EAF1AFB38B36251868267D.mft (raw, json)
Hash identifier:          5BWgzGRHoZVspVBf6tyqVL4Fb/0mXJXygV1vt9sFC7g=
Subject key identifier:   14:CE:B3:20:3F:28:DB:E3:07:23:33:31:F8:F0:B0:2F:42:D3:0B:64
Authority key identifier: A9:36:2D:4E:85:AC:58:9F:D5:EA:F1:AF:B3:8B:36:25:18:68:26:7D
Certificate issuer:       /CN=A9362D4E85AC589FD5EAF1AFB38B36251868267D
Certificate serial:       5782EF12642157E15E637789DB1EE3332733AC2B
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/A9362D4E85AC589FD5EAF1AFB38B36251868267D.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.mft
Manifest number:          016F
Signing time:             Wed 20 Nov 2024 21:18:48 +0000
Manifest this update:     Wed 20 Nov 2024 21:13:48 +0000
Manifest next update:     Fri 22 Nov 2024 00:45:48 +0000
Files and hashes:         1: A9362D4E85AC589FD5EAF1AFB38B36251868267D.crl (hash: 0hrjGCwOSKhMhK1dBmtLadYscX7OFicZREqZ71kPFik=)
                          2: 3139322e36372e33352e3132382f32352d3332203d3e20323135383230.roa (hash: jIfQRkACWyTiR5Mbmv0I29M0Ux0EBQynCrVg5YmGNIs=)
                          3: 3139322e36372e33352e302f32342d3332203d3e203437323732.roa (hash: bXJfPCwpbnlLpcmE8lmUOlAlCpmh1jaVIU7iW2EZink=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/A9362D4E85AC589FD5EAF1AFB38B36251868267D.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Nov 2024 11:28:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:82:ef:12:64:21:57:e1:5e:63:77:89:db:1e:e3:33:27:33:ac:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9362D4E85AC589FD5EAF1AFB38B36251868267D
        Validity
            Not Before: Nov 20 21:13:48 2024 GMT
            Not After : Nov 22 00:45:48 2024 GMT
        Subject: CN=14CEB3203F28DBE307233331F8F0B02F42D30B64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:7d:66:36:54:c0:9a:55:cf:19:cf:90:ba:
                    50:f8:2c:3d:94:9a:16:a2:c9:37:87:3d:41:1e:49:
                    52:37:7c:d7:21:66:92:eb:bb:6a:ba:d7:74:8d:47:
                    0c:6b:b8:3e:9f:ce:49:96:20:12:77:ff:19:e3:b5:
                    1b:7c:c1:6e:08:f5:af:5c:45:f8:e7:a6:2c:6a:d8:
                    a2:89:da:2e:dd:c0:9f:f3:2f:93:44:bc:a5:09:df:
                    0c:bb:e1:80:9a:ce:86:e0:0f:b4:f7:f7:dd:de:a7:
                    3f:ed:b0:e0:32:a8:0e:d4:4a:0a:09:18:69:47:19:
                    c5:e9:a5:9d:a0:16:91:44:34:c7:d7:00:70:5d:ce:
                    32:39:f8:7e:aa:fd:8e:88:9c:c6:90:05:1b:b4:cb:
                    8b:9c:28:d0:00:f8:22:d8:b1:1d:e6:8e:72:9d:e5:
                    c0:82:75:7e:14:cb:93:a4:84:08:5e:c2:39:79:bb:
                    76:dc:38:c5:6e:90:49:56:3f:71:c4:d3:73:a1:3e:
                    a8:2f:c7:65:d4:18:45:2a:36:60:21:a3:18:ac:dc:
                    ae:44:4f:6b:18:1d:17:85:fd:e2:50:c6:ac:41:e2:
                    82:98:c9:63:d2:16:13:e7:9f:1e:5c:b3:31:d0:f4:
                    50:3d:fa:96:2d:37:0f:59:c6:09:b7:48:43:4d:a0:
                    3f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:B3:20:3F:28:DB:E3:07:23:33:31:F8:F0:B0:2F:42:D3:0B:64
            X509v3 Authority Key Identifier:
                keyid:A9:36:2D:4E:85:AC:58:9F:D5:EA:F1:AF:B3:8B:36:25:18:68:26:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/A9362D4E85AC589FD5EAF1AFB38B36251868267D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/5/A9362D4E85AC589FD5EAF1AFB38B36251868267D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:51:e0:d2:9b:b4:4f:28:ab:4a:47:55:80:c7:2c:97:1c:11:
         75:48:af:19:db:83:93:97:e9:91:25:a3:f0:09:19:6a:6f:b4:
         ba:91:e8:91:7a:d4:d4:c1:06:ee:b2:c8:92:21:cd:0f:e5:56:
         14:c4:7b:98:4c:e3:a5:1a:d6:70:fe:f0:e0:bc:47:df:56:d5:
         b4:6c:e1:cf:a3:f8:ef:26:21:4c:50:f9:72:e3:27:a3:53:b2:
         6e:7d:b0:c6:5c:62:c8:67:d5:b5:6f:f5:62:78:2f:fd:69:c0:
         cb:cd:5f:e9:72:28:ac:b9:9a:29:79:bb:4d:61:4d:e0:b9:25:
         47:89:ef:22:8e:3b:74:e9:4c:fd:75:7c:48:ff:17:4b:ee:6e:
         9c:4a:0f:6f:2f:d0:f7:79:de:ae:fc:14:6e:33:ed:25:aa:fe:
         23:2c:30:56:8b:a3:00:23:59:d1:46:67:2f:41:89:58:0c:45:
         12:d5:03:a0:6a:6c:62:34:06:20:21:11:3a:55:7c:4d:3a:23:
         7f:5c:b3:54:f1:d5:20:e2:38:55:a7:bf:eb:07:58:fe:83:e1:
         61:5f:22:b7:85:15:79:04:6f:6f:9d:d3:3b:75:77:0f:3c:94:
         6e:8b:7e:ab:88:59:19:6c:19:29:34:2a:6c:bf:18:91:91:7b:
         56:3b:eb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:15:04 2024 by rpki-client on console-fra.rpki-client.org