Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft
File:                     0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft (raw, json)
Hash identifier:          85gPySHu3Kj017fC6Ix0tRSo2k57V+zkqvt+u95M6i8=
Subject key identifier:   92:B8:19:F4:62:5C:C6:8B:9C:7C:73:20:1B:EE:71:F5:35:D4:D3:98
Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B
Certificate issuer:       /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
Certificate serial:       711D7EBE582B0615359F940F898EA36687C601BC
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft
Manifest number:          59
Signing time:             Mon 17 Jun 2024 20:40:57 +0000
Manifest this update:     Mon 17 Jun 2024 20:35:57 +0000
Manifest next update:     Tue 18 Jun 2024 20:54:57 +0000
Files and hashes:         1: 326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa (hash: YXXvvIU6sxf9qW6atwDWro7los6iax4CaojFLxxUHU0=)
                          2: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl (hash: rswPbYH4rU5c8ltqtZfMi9QzwDpW6fvkJRLic3YvRdE=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 14:33:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:1d:7e:be:58:2b:06:15:35:9f:94:0f:89:8e:a3:66:87:c6:01:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B
        Validity
            Not Before: Jun 17 20:35:57 2024 GMT
            Not After : Jun 18 20:54:57 2024 GMT
        Subject: CN=92B819F4625CC68B9C7C73201BEE71F535D4D398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9f:d3:c9:3e:f7:0f:a2:5b:29:3b:f8:b4:05:
                    f9:9e:22:2f:72:d6:8b:e8:35:48:37:41:47:c6:e7:
                    52:8f:aa:2d:e0:63:60:35:cc:62:0f:23:5d:f9:7f:
                    fd:bf:be:72:ec:d5:2e:85:a5:c8:fd:2c:a5:af:d3:
                    a3:77:5f:51:39:72:f4:40:17:c5:0b:cd:82:b6:46:
                    0c:49:56:2d:46:39:f8:0a:af:f6:4c:0f:b7:c6:9c:
                    62:7d:6a:b4:82:e6:11:d8:c5:02:84:93:6c:44:58:
                    7d:2e:9f:9d:60:c6:21:bb:8b:bb:cc:bc:45:0f:9f:
                    00:c1:59:26:25:c7:bf:cc:76:06:00:59:35:c0:1d:
                    b3:ed:0d:b9:d4:1f:13:74:00:56:b8:cf:69:d5:b4:
                    39:9b:47:d7:ba:c4:4a:3c:7e:54:b4:47:ff:55:44:
                    09:4a:67:c1:34:9f:94:d1:be:de:53:52:94:23:40:
                    17:57:8f:9c:d5:fd:15:94:d9:07:ec:ad:a2:2f:67:
                    36:e4:6f:94:99:74:68:71:24:01:1d:77:d1:22:96:
                    48:a2:46:f4:0d:b0:62:b6:13:94:39:ab:67:ff:f3:
                    5b:e0:9d:a1:d1:82:33:e3:f1:fe:86:a0:d3:68:20:
                    06:d5:67:dd:d2:fd:9b:14:8c:76:a7:44:6d:5a:ef:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B8:19:F4:62:5C:C6:8B:9C:7C:73:20:1B:EE:71:F5:35:D4:D3:98
            X509v3 Authority Key Identifier:
                keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:35:9f:3c:27:f6:ab:3e:df:ad:2e:9c:5b:d9:72:a4:dc:
         d0:49:9e:50:f8:e4:fc:6a:2f:a8:ae:c9:0e:c2:6d:fc:05:b5:
         1f:1c:a8:f7:a2:ca:39:eb:c9:a4:94:24:4c:98:14:a4:1d:af:
         fc:f2:4c:13:5a:4a:9f:70:3a:b2:b5:0b:41:98:9c:a1:ef:a6:
         92:ad:bd:8d:ab:2f:ac:9a:a4:bb:dd:e9:15:5e:f1:eb:37:15:
         1c:f2:70:70:20:e5:4d:00:e9:ea:fb:69:d1:9f:a6:1a:0d:f9:
         63:22:30:8b:95:56:5a:0b:87:41:a6:af:3f:1e:28:c9:37:60:
         27:b4:ce:7f:b9:7e:1e:37:81:b0:02:96:a1:35:f6:54:26:96:
         cc:9a:5f:ba:26:12:c6:b4:70:82:9d:ac:19:22:89:a6:b8:42:
         50:ba:07:1b:8f:65:6e:d2:f0:4a:80:3c:7d:e6:d0:2d:2f:8f:
         72:13:b5:8f:31:51:68:2f:ca:64:3a:3e:36:d9:51:07:3f:56:
         89:df:68:bc:b2:d7:27:40:72:85:ea:dd:37:a2:f5:ce:ea:bf:
         79:eb:db:82:14:bd:33:32:18:87:5f:c4:e3:f9:2e:a1:43:50:
         83:77:31:f9:91:41:1c:4e:38:b1:78:e9:db:d3:e1:9e:dd:aa:
         28:28:b8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 00:15:14 2024 by rpki-client on console-fra.rpki-client.org