Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft
File:                     8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft (raw, json)
Hash identifier:          rlqfzu7PunVN3EI9Z0X5kPbjRWASfuHcn2P/o0SQqQE=
Subject key identifier:   BE:2E:21:C7:85:1D:06:3E:C5:43:EB:6E:C5:11:70:CB:E1:3E:06:98
Authority key identifier: 8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0
Certificate issuer:       /CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
Certificate serial:       49559803C7062E1C2215CDBE54900816522A7675
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft
Manifest number:          C8
Signing time:             Mon 03 Jun 2024 06:14:33 +0000
Manifest this update:     Mon 03 Jun 2024 06:09:33 +0000
Manifest next update:     Tue 04 Jun 2024 07:29:33 +0000
Files and hashes:         1: 326130353a646663313a633432333a3a2f34382d3438203d3e203437343936.roa (hash: porfq6B1Ft1HhHPKTYk32qHSKsRN6FR98QnIiPiDxeY=)
                          2: 326130353a646663313a633432313a3a2f34382d3438203d3e203437343936.roa (hash: wFHjDppU21KpYB0MQC+P4HaWY+nixTppfOIHRKlrDCg=)
                          3: 326130353a646663313a633433303a3a2f34382d3438203d3e203437343936.roa (hash: SOtjosbyzJvnJEbai8k+flHVtWLBScZMEmsxJ58Fjng=)
                          4: 8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl (hash: 6dr5FqwWMGhXMAVq8zpYHise3lrxjMWPOlSccDMePBw=)
                          5: 326130353a646663313a633432303a3a2f34382d3438203d3e203437343936.roa (hash: oBNwZ9N0Etq/480Xs2Qj3MAk8/bHRU2OUtG/zB9fUdQ=)
                          6: 326130353a646663313a633432653a3a2f34382d3438203d3e203437343936.roa (hash: 1cHE9g6peotLQGJPVbNnn14exMLqf7mblBEiwMXZvdY=)
                          7: 326130353a646663313a633432643a3a2f34382d3438203d3e203437343936.roa (hash: Gupe1YIgB0KerBN5sp3jzwt/Vc6fQjkz29qB4d+YN6E=)
                          8: 326130353a646663313a633432633a3a2f34382d3438203d3e203437343936.roa (hash: ScI94prSUtL9dbqcn5sgcF8bli8rK8rkjNyGdJkX4wE=)
                          9: 326130353a646663313a633431303a3a2f34342d3434203d3e203437343936.roa (hash: Das7Btn5B8Y/j5fok+HEk7b1cz48CG+zBJ43A6XttKs=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 16:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:55:98:03:c7:06:2e:1c:22:15:cd:be:54:90:08:16:52:2a:76:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A89E0DB89531F723E42C7509282CC5496FEA4F0
        Validity
            Not Before: Jun  3 06:09:33 2024 GMT
            Not After : Jun  4 07:29:33 2024 GMT
        Subject: CN=BE2E21C7851D063EC543EB6EC51170CBE13E0698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:fb:e5:f5:82:95:3c:aa:5f:9d:9d:49:f3:
                    3c:9f:35:65:e9:2e:9b:19:53:2f:99:f1:63:8f:aa:
                    21:a5:ff:36:85:7e:b5:7f:1c:c4:f0:56:fa:04:a1:
                    90:8b:a4:20:7c:e8:16:b2:91:6a:60:f9:45:0b:3f:
                    ad:39:be:59:04:06:0d:e1:bb:9c:6b:b5:8c:13:01:
                    39:31:39:b1:dd:da:a4:3a:c6:8e:ba:2f:61:49:a7:
                    a7:73:e8:0e:3d:3d:ff:6b:db:b6:91:dd:f5:ad:b4:
                    27:35:12:d8:58:6e:d6:c5:ae:7d:89:18:d9:5f:05:
                    c0:6d:4d:92:cf:ee:44:3d:2a:70:e2:72:77:5f:08:
                    80:24:16:5b:c7:38:d8:e4:cb:64:c4:c7:21:c1:ac:
                    32:46:e7:26:7e:fc:3b:49:9f:ec:8c:65:6d:c2:a7:
                    57:7b:6e:aa:b7:7a:0b:46:94:c9:e2:34:e8:8a:4a:
                    d3:22:3d:d9:7e:c4:52:d6:c0:7b:61:9f:6c:56:d3:
                    02:21:18:fc:92:1c:ce:6e:3b:c9:ea:30:2c:79:0f:
                    ec:52:5b:7a:58:a5:06:4a:d9:f9:5d:00:94:aa:23:
                    60:40:15:d2:74:8a:6f:91:f2:30:19:87:21:1b:98:
                    77:bf:c2:ff:6e:6b:46:ee:09:a6:bd:ba:70:aa:eb:
                    86:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2E:21:C7:85:1D:06:3E:C5:43:EB:6E:C5:11:70:CB:E1:3E:06:98
            X509v3 Authority Key Identifier:
                keyid:8A:89:E0:DB:89:53:1F:72:3E:42:C7:50:92:82:CC:54:96:FE:A4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/8A89E0DB89531F723E42C7509282CC5496FEA4F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/2/8A89E0DB89531F723E42C7509282CC5496FEA4F0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:c5:15:13:40:1f:56:75:ec:dd:b5:9a:4d:0d:da:1e:f2:ce:
         4f:74:af:a5:11:8f:db:78:a3:e4:c9:a4:b2:26:d6:ab:a6:d5:
         d8:4e:11:51:5e:73:12:1a:14:7e:69:f7:95:3d:0a:01:42:0e:
         c0:42:b2:ef:c4:34:38:b2:f2:3c:a7:b9:f0:b9:4e:52:09:e7:
         4d:98:6c:53:f1:c5:32:ff:bd:98:60:77:2c:7e:4f:42:7f:96:
         1c:6a:fb:ff:cf:1f:7a:fa:8f:1f:b2:9a:11:b8:d9:f1:1b:ba:
         6e:7b:6f:cb:90:7e:72:5b:7f:e2:f4:c0:f0:d5:0f:dc:fb:70:
         20:22:1d:59:3e:6e:15:b5:39:18:1f:c4:32:06:b1:c2:31:f3:
         d1:94:b4:76:eb:99:5a:3b:33:64:5a:fc:de:5f:d0:b0:0f:44:
         8e:19:a0:ce:1f:9c:46:5f:d7:88:c1:a3:c2:ad:29:19:ed:92:
         74:cb:2c:0a:21:09:39:d9:d0:35:f1:7c:28:b8:71:5c:50:13:
         8b:3d:b4:e4:c7:77:ff:58:b8:11:c9:d6:b4:0f:9c:1d:dc:d7:
         f4:26:13:c4:75:0c:c4:6b:7f:2e:b0:77:55:3f:f3:02:88:06:
         a8:7c:7a:04:c4:2a:c3:95:f4:20:ca:31:bb:32:8d:4a:c5:5b:
         98:72:bd:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 08:07:54 2024 by rpki-client on console-fra.rpki-client.org