Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.mft
File:                     06DA19F4285EB04D0310733F4AC00107B73337AD.mft (raw, json)
Hash identifier:          UARWRuPMqsmYIJmXe7bY9aFzoxqjXlwjvNr7m6KX84s=
Subject key identifier:   95:FB:EC:C8:24:64:AF:65:61:0D:69:C6:3D:2A:B4:D6:A8:57:67:19
Authority key identifier: 06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD
Certificate issuer:       /CN=06da19f4285eb04d0310733f4ac00107b73337ad
Certificate serial:       70FB049C88D2CC8F841B12D3CA4B4259286958E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.mft
Manifest number:          023C
Signing time:             Sun 05 May 2024 02:11:42 +0000
Manifest this update:     Sun 05 May 2024 02:06:42 +0000
Manifest next update:     Mon 06 May 2024 02:24:42 +0000
Files and hashes:         1: 39312e3232382e3136382e302f32342d3234203d3e203230343733.roa (hash: YLf+Gqeh3snt1luhkgp+G0PRSfkwxshzMVkZDp22DcY=)
                          2: 34352e3135362e3131392e302f32342d3234203d3e20323638353831.roa (hash: 8zPTpgTnkE5DT7g6utLjRTV9nq4lv8UtP0kkO2XSRwM=)
                          3: 34352e3135362e3131372e302f32342d3234203d3e203631333137.roa (hash: 6bjHTFJthfggO28C7rjed1qCoqda68SiW/jTgijiswA=)
                          4: 34352e3135362e3131362e302f32342d3234203d3e203539343332.roa (hash: flG5Gi4HAtlY0tuyfV000d8OV0ZMBunvQsMJ5ma+UM4=)
                          5: 34352e3135362e3131382e302f32342d3234203d3e203631333137.roa (hash: dNmX5eqsfmWRplepUad1r4G843O/iCLDhpeQD1FJkPE=)
                          6: 34352e3135362e3131392e302f32342d3234203d3e20323639303730.roa (hash: UQ+TUAlAHY2PDMxpcSrAKY/wcieS39R+uD2f3HNyXIo=)
                          7: 06DA19F4285EB04D0310733F4AC00107B73337AD.crl (hash: Yj72vSBethuqMXjQkapQ6sPaV6PCbVUxmlf7Lwd38O4=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 20:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fb:04:9c:88:d2:cc:8f:84:1b:12:d3:ca:4b:42:59:28:69:58:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06da19f4285eb04d0310733f4ac00107b73337ad
        Validity
            Not Before: May  5 02:06:42 2024 GMT
            Not After : May  6 02:24:42 2024 GMT
        Subject: CN=95FBECC82464AF65610D69C63D2AB4D6A8576719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:68:ab:51:9c:f1:39:b7:ac:c6:07:03:8b:
                    b7:78:e5:a3:f2:06:36:a2:20:94:73:60:82:24:09:
                    3c:cf:ee:48:cd:25:9b:78:bb:8f:82:76:82:9f:42:
                    29:f5:e3:89:30:ad:a9:01:b6:c2:6f:63:2e:61:de:
                    05:d8:99:cc:52:86:88:f6:d8:24:9c:d7:81:9c:0c:
                    91:30:94:91:82:9c:0c:00:2a:38:70:99:24:52:38:
                    0a:a2:2f:66:14:4a:8f:82:1d:58:2f:e3:53:a8:fb:
                    0d:0c:9a:a2:67:d0:28:80:2f:d8:cc:d4:6a:7f:a5:
                    ef:fc:bd:d6:a8:9e:a4:c6:c8:0c:ca:b1:45:ea:0b:
                    62:e5:9c:8f:5e:3f:2e:47:03:f8:3c:04:9b:5a:4e:
                    a2:ae:9f:bf:5f:8a:dc:ae:29:e4:db:3b:f9:67:e5:
                    f7:09:c5:18:49:53:84:30:6c:c4:77:51:55:7f:3c:
                    2a:7d:7a:aa:c0:8a:b5:cb:0c:55:84:6c:1e:f0:a6:
                    5c:07:be:5d:30:03:84:5f:d0:91:f6:9b:cc:5b:4d:
                    eb:b3:02:09:4f:f1:d4:4a:4e:18:a6:0f:06:e6:c3:
                    a6:26:53:9c:ec:eb:f2:88:e9:26:bd:b5:07:1c:1e:
                    16:e4:1c:25:88:50:f2:3c:f4:20:48:b8:f2:c1:12:
                    31:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FB:EC:C8:24:64:AF:65:61:0D:69:C6:3D:2A:B4:D6:A8:57:67:19
            X509v3 Authority Key Identifier:
                keyid:06:DA:19:F4:28:5E:B0:4D:03:10:73:3F:4A:C0:01:07:B7:33:37:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtoZ9ChesE0DEHM_SsABB7czN60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/370be6cd-25d2-4f8b-88a4-b5109f49462d/1/06DA19F4285EB04D0310733F4AC00107B73337AD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f4:2b:32:98:8c:32:76:1c:0c:28:48:86:9a:10:44:13:6f:
         82:14:3d:1d:8f:86:c9:d8:39:d5:07:46:9b:1a:f6:47:e3:13:
         28:2a:6e:ff:80:cc:be:1e:ba:ad:5b:f6:f1:6a:25:f1:72:80:
         b3:5b:fe:82:8d:42:71:95:0b:c5:0d:f2:e9:d1:44:49:0f:a9:
         ad:dd:fd:22:60:83:42:f2:55:cf:f4:d0:57:73:5a:a4:5b:1d:
         c6:76:5b:31:5b:26:37:98:bf:60:95:cd:00:f1:f6:e5:e4:df:
         56:bd:0c:ee:bb:e3:11:7d:39:e2:22:27:e1:93:78:22:9a:17:
         45:18:bb:12:cc:54:3d:80:b5:f1:00:5a:cd:d4:6d:04:c3:be:
         b0:13:b4:89:86:25:72:4b:6a:83:09:bf:38:b8:94:e0:3e:66:
         f5:8c:e4:e9:93:b4:80:f6:fa:8e:6c:43:85:20:34:49:42:fc:
         6b:60:ae:15:64:40:06:b8:b8:33:56:ff:7d:b1:a2:34:8c:49:
         d0:0c:5e:74:9a:4c:8f:53:a3:c6:b5:a9:45:5c:3b:79:56:24:
         47:f4:a9:b0:6e:6d:4c:5d:00:4c:eb:65:46:bf:25:bf:dd:83:
         d9:76:93:a4:d9:80:78:07:b6:86:e5:4f:5e:d4:86:f2:b6:07:
         ec:f3:7f:60
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUcPsEnIjSzI+EGxLTyktCWShpWOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZkYTE5ZjQyODVlYjA0ZDAzMTA3MzNmNGFjMDAxMDdi
NzMzMzdhZDAeFw0yNDA1MDUwMjA2NDJaFw0yNDA1MDYwMjI0NDJaMDMxMTAvBgNV
BAMTKDk1RkJFQ0M4MjQ2NEFGNjU2MTBENjlDNjNEMkFCNEQ2QTg1NzY3MTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmWirUZzxObesxgcDi7d45aPy
BjaiIJRzYIIkCTzP7kjNJZt4u4+CdoKfQin144kwrakBtsJvYy5h3gXYmcxShoj2
2CSc14GcDJEwlJGCnAwAKjhwmSRSOAqiL2YUSo+CHVgv41Oo+w0MmqJn0CiAL9jM
1Gp/pe/8vdaonqTGyAzKsUXqC2LlnI9ePy5HA/g8BJtaTqKun79fityuKeTbO/ln
5fcJxRhJU4QwbMR3UVV/PCp9eqrAirXLDFWEbB7wplwHvl0wA4Rf0JH2m8xbTeuz
AglP8dRKThimDwbmw6YmU5zs6/KI6Sa9tQccHhbkHCWIUPI89CBIuPLBEjF9AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUlfvsyCRkr2VhDWnGPSq01qhXZxkwHwYDVR0j
BBgwFoAUBtoZ9ChesE0DEHM/SsABB7czN60wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMzcwYmU2Y2QtMjVkMi00ZjhiLTg4YTQtYjUxMDlmNDk0
NjJkLzEvMDZEQTE5RjQyODVFQjA0RDAzMTA3MzNGNEFDMDAxMDdCNzMzMzdBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0J0b1o5Q2hlc0UwREVITV9Tc0FCQjdj
ek42MC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zNzBiZTZjZC0y
NWQyLTRmOGItODhhNC1iNTEwOWY0OTQ2MmQvMS8wNkRBMTlGNDI4NUVCMDREMDMx
MDczM0Y0QUMwMDEwN0I3MzMzN0FELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPQrMpiMMnYcDChIhpoQ
RBNvghQ9HY+Gydg51QdGmxr2R+MTKCpu/4DMvh66rVv28Wol8XKAs1v+go1CcZUL
xQ3y6dFESQ+prd39ImCDQvJVz/TQV3NapFsdxnZbMVsmN5i/YJXNAPH25eTfVr0M
7rvjEX054iIn4ZN4IpoXRRi7EsxUPYC18QBazdRtBMO+sBO0iYYlcktqgwm/OLiU
4D5m9Yzk6ZO0gPb6jmxDhSA0SUL8a2CuFWRABri4M1b/fbGiNIxJ0AxedJpMj1Oj
xrWpRVw7eVYkR/SpsG5tTF0ATOtlRr8lv92D2XaTpNmAeAe2huVPXtSG8rYH7PN/
YA==
-----END CERTIFICATE-----
Generated at Sun May 5 03:14:33 2024 by rpki-client on console-ams.rpki-client.org