Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft
File:                     77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft (raw, json)
Hash identifier:          DIdBRoWONCgNfIWlO7RaYXouui3kP9PA451XvVxpOFc=
Subject key identifier:   32:E2:25:87:15:A5:B6:36:3C:7E:6E:52:6F:A7:CF:53:6F:97:30:ED
Authority key identifier: 77:02:2B:F1:87:A9:2A:6A:E4:18:38:10:8B:8A:F7:B3:BA:F1:B2:B2
Certificate issuer:       /CN=d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72
Certificate serial:       46A46C3BB0DB8EBF1B9C50713DA0B65E06E0E54F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft
Manifest number:          DD
Signing time:             Sun 16 Feb 2025 14:06:48 +0000
Manifest this update:     Sun 16 Feb 2025 14:01:48 +0000
Manifest next update:     Mon 17 Feb 2025 15:17:48 +0000
Files and hashes:         1: 77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.crl (hash: Fcx2zRXtVoJc13iPIsFtJPMuV5oAP+HMf1hdig/oxlk=)
                          2: 323630323a663966613a3a2f33362d3438203d3e203132383339.roa (hash: oP/+2n5Cjna0fXd3Uue3NmDpz4g1Sc9gKwpKaACd5fA=)
                          3: 32332e3136342e3135322e302f32342d3234203d3e203236353631.roa (hash: Pz8YuajHR3RKHabgAdN5D6D4yfaEKoRCNMV/secsEfc=)
                          4: 323630323a663966613a3a2f33362d3438203d3e203630383538.roa (hash: 97vZ9tjE/B2cFID5TaKGht939nhzUnF3N3C8Tt+dRqI=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 15:17:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a4:6c:3b:b0:db:8e:bf:1b:9c:50:71:3d:a0:b6:5e:06:e0:e5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72
        Validity
            Not Before: Feb 16 14:01:48 2025 GMT
            Not After : Feb 17 15:17:48 2025 GMT
        Subject: CN=32E2258715A5B6363C7E6E526FA7CF536F9730ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:14:67:c0:65:16:d6:95:fa:ad:41:ee:07:21:
                    b5:f4:7a:1e:7c:91:0d:e3:64:65:cf:7e:39:ba:df:
                    b0:5f:52:e1:f6:24:9b:b7:5b:6d:cf:fe:ee:42:3d:
                    b7:46:d3:ab:fd:4e:b0:c0:db:f2:a5:f7:85:a0:e7:
                    a7:6f:09:f9:54:48:f6:dd:df:47:d8:c9:2a:94:13:
                    86:47:ef:24:4f:dd:2a:64:88:a4:48:7d:e6:84:e9:
                    07:b2:67:0e:fc:fc:f2:80:0d:66:9e:b2:b3:ce:2a:
                    9d:e9:f9:d2:6a:53:62:58:a5:42:cc:d6:e6:4d:d7:
                    77:36:5e:4d:73:11:15:74:91:09:80:1c:32:37:6c:
                    ed:46:f6:c1:80:d1:83:0e:54:41:e5:a0:0a:43:8e:
                    aa:e2:be:31:8d:2e:dd:4c:f5:60:c6:b3:4f:d5:01:
                    42:6c:01:ac:46:f6:f9:65:1a:a7:a2:c8:23:c4:de:
                    6b:5a:00:01:ec:c8:5c:d4:82:61:49:3e:3f:bb:d3:
                    51:3b:6f:3d:78:13:72:ea:47:19:ef:4f:fa:ee:a1:
                    2f:80:dc:8c:b6:33:19:cd:7c:8c:61:c9:3d:ae:f5:
                    00:df:29:18:0c:3b:3a:fc:a1:a1:f8:b5:86:55:51:
                    a0:ac:2f:e5:43:3c:36:85:e4:80:63:b9:8d:13:e5:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E2:25:87:15:A5:B6:36:3C:7E:6E:52:6F:A7:CF:53:6F:97:30:ED
            X509v3 Authority Key Identifier:
                keyid:77:02:2B:F1:87:A9:2A:6A:E4:18:38:10:8B:8A:F7:B3:BA:F1:B2:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a0138213973cac0c2b7200290d46207f47451cf72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3b86cb77-69ac-43d9-9f6c-fc53066beb88/2/77022BF187A92A6AE41838108B8AF7B3BAF1B2B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:1c:e3:2f:98:c4:d8:32:5e:3c:d6:05:4d:2a:4e:86:f5:75:
         6f:00:2e:fd:3e:28:57:e0:36:67:d8:e9:21:f4:af:33:89:0f:
         e0:4b:58:74:6e:86:ae:e1:d9:9b:a4:68:3a:42:f8:71:8c:4d:
         d8:c7:8d:08:c2:7a:1e:60:79:3f:9c:79:1d:1c:8a:15:66:5a:
         28:3e:52:69:31:9c:bf:15:f8:4e:15:10:f8:66:c2:ce:24:ab:
         12:77:f8:3f:e9:63:c1:11:51:10:a8:40:5c:0a:66:96:34:a4:
         ec:65:d6:b5:93:bc:1c:f4:79:bc:d7:3b:db:7b:c5:f8:3a:cc:
         9c:ab:62:4e:b0:5f:7b:ca:16:c6:14:e6:70:96:be:74:90:32:
         8d:f4:18:f7:35:91:ca:1a:e2:ac:ef:73:94:ec:37:75:f7:d8:
         13:aa:40:1e:fe:f6:3a:01:e4:ac:ee:be:b1:bf:40:0a:13:da:
         20:2d:a2:53:6e:d4:0c:e3:78:5e:f8:6d:ad:76:12:8c:ad:6c:
         85:a3:31:74:c8:b4:26:36:eb:e9:4e:97:93:eb:6b:f6:81:9d:
         a5:da:57:e1:27:1f:2d:7c:2b:6c:32:3b:56:5b:ed:ce:45:0e:
         f9:35:cc:9d:83:a7:bc:a6:65:d1:c9:70:24:44:0a:71:a5:4a:
         33:29:47:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:19 2025 by rpki-client