Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft
File:                     97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft (raw, json)
Hash identifier:          d3GJ6V0MAQJtisj+brj0LMKLCfhWseLctnnDFuErrnU=
Subject key identifier:   6A:FA:C4:3F:73:45:7A:20:D6:F5:9E:72:58:BE:71:B0:F7:AE:E0:CF
Authority key identifier: 97:C1:75:00:5F:7A:B9:B6:9D:CD:B4:F3:A6:08:FC:78:FE:5A:A7:C7
Certificate issuer:       /CN=97c175005f7ab9b69dcdb4f3a608fc78fe5aa7c7
Certificate serial:       55703A3954CC4841C313D6D10B564310DD5A46C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8F1AF96ubadzbTzpgj8eP5ap8c.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft
Manifest number:          58
Signing time:             Fri 22 Nov 2024 17:08:23 +0000
Manifest this update:     Fri 22 Nov 2024 17:03:23 +0000
Manifest next update:     Sat 23 Nov 2024 17:49:23 +0000
Files and hashes:         1: AS44324.asa (hash: Mt15gFFAKzOa9gajb0A9QvvuuHjBsO7ZA4n8ooUzxxA=)
                          2: 97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.crl (hash: KIm6MXDnJhleug5UHKkCi3UjKqtDcgrkfJyHgFTVgbQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8F1AF96ubadzbTzpgj8eP5ap8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:70:3a:39:54:cc:48:41:c3:13:d6:d1:0b:56:43:10:dd:5a:46:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c175005f7ab9b69dcdb4f3a608fc78fe5aa7c7
        Validity
            Not Before: Nov 22 17:03:23 2024 GMT
            Not After : Nov 23 17:49:23 2024 GMT
        Subject: CN=6AFAC43F73457A20D6F59E7258BE71B0F7AEE0CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:22:d6:0e:7a:83:9e:d0:76:eb:6b:2f:26:09:
                    f6:1c:2a:54:2a:0d:95:48:c9:12:63:ac:ac:9e:d3:
                    67:a8:96:a7:71:90:e8:db:72:c0:1d:d6:25:b1:84:
                    d1:4d:f6:5c:3e:bc:45:27:85:85:6f:0d:29:b2:c2:
                    f8:81:ee:4b:d2:53:9a:67:e0:a3:78:e4:58:65:88:
                    1c:3b:65:24:cb:ef:96:21:a8:1d:9b:59:a2:43:5b:
                    20:94:ef:99:b5:71:5d:85:96:43:fe:63:12:f2:72:
                    ed:02:83:51:a4:a5:dc:1e:59:35:f0:24:29:b8:f0:
                    b8:cf:3e:e8:9a:a7:90:1c:2f:9f:37:79:a1:4d:96:
                    6e:d5:21:65:2f:8a:bf:1f:1f:26:5f:a5:06:39:d2:
                    5f:c3:6c:2a:e3:8f:5c:a6:e1:10:6c:e7:43:72:0b:
                    23:c2:ca:5f:59:60:e1:e1:f0:fb:b6:51:cc:61:51:
                    fd:d5:2e:cf:d5:94:73:d0:46:6d:7e:ec:8d:7c:1f:
                    9b:b9:df:65:94:b5:89:5e:7d:55:b8:32:c7:cd:04:
                    1e:7b:13:1d:90:84:60:e9:74:d0:31:1f:f1:29:eb:
                    24:f1:4d:08:40:01:74:3e:8f:e1:71:cf:86:31:54:
                    6a:b4:b1:b2:47:91:f8:66:e1:a0:62:7f:74:5b:34:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FA:C4:3F:73:45:7A:20:D6:F5:9E:72:58:BE:71:B0:F7:AE:E0:CF
            X509v3 Authority Key Identifier:
                keyid:97:C1:75:00:5F:7A:B9:B6:9D:CD:B4:F3:A6:08:FC:78:FE:5A:A7:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8F1AF96ubadzbTzpgj8eP5ap8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/47cfdd4f-7698-4317-be26-f1102186ef1b/0/97C175005F7AB9B69DCDB4F3A608FC78FE5AA7C7.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9f:64:68:8c:93:7c:bd:f3:88:b1:00:73:9f:6f:37:c3:8f:
         ec:9b:a8:02:79:4a:4e:7b:37:85:7f:a2:e1:31:4c:84:a0:b8:
         bb:1a:c9:c5:f8:7b:29:7c:28:dd:fb:6f:77:04:33:81:5b:33:
         06:f5:f8:26:8d:cc:17:a8:f8:a5:40:5f:ef:11:5c:fe:21:2e:
         f1:56:ae:7f:3d:a3:22:32:10:70:62:aa:60:2f:19:92:ac:0c:
         97:54:32:06:26:57:40:ff:3b:ee:26:93:52:d3:de:f0:43:f8:
         81:78:84:79:44:d5:72:28:db:fa:67:27:88:cb:59:18:87:5f:
         c7:6e:83:33:0a:44:2e:f7:4d:cc:d7:30:e7:fd:7d:5b:7a:19:
         7d:f2:c3:c7:e5:dc:3f:bd:4c:5f:82:d6:c0:56:f9:e8:da:25:
         d3:72:08:f9:c5:f5:f2:ee:3f:b6:0c:ff:c9:3e:5b:f2:4a:88:
         79:18:c3:ca:2b:2c:c7:d8:e3:69:57:b8:a8:7a:3f:98:8c:79:
         7d:54:9e:b8:0f:30:d0:92:db:34:4f:bb:46:bb:24:f1:18:3c:
         3d:ea:ae:2b:b3:1e:75:01:9e:9c:87:4a:4a:fc:ab:fc:19:74:
         84:a6:f8:aa:32:05:bf:f3:ec:6a:d0:e1:36:6f:35:4a:db:89:
         96:fd:f6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:33:35 2024 by rpki-client on console-fra.rpki-client.org