Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
File:                     B3C078E149D9741434FD8877AB4CED46DC2720DA.mft (raw, json)
Hash identifier:          PBFLI2MhosMvG/RKAuQkarWidi40Lyp9Di1fw34s7ZM=
Subject key identifier:   34:18:FE:29:EA:41:47:50:82:59:5B:89:E6:0D:DF:7E:BE:B2:2A:DC
Authority key identifier: B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA
Certificate issuer:       /CN=b3c078e149d9741434fd8877ab4ced46dc2720da
Certificate serial:       2F1033235AB567D590447CC62BE42E16F5E8BFE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
Manifest number:          DF
Signing time:             Thu 21 Nov 2024 04:22:35 +0000
Manifest this update:     Thu 21 Nov 2024 04:17:35 +0000
Manifest next update:     Fri 22 Nov 2024 07:32:35 +0000
Files and hashes:         1: AS215147.asa (hash: NOXWGQFW/ldLfUBuOYQFRAYg+0MBX2snBXZXel0OmU4=)
                          2: B3C078E149D9741434FD8877AB4CED46DC2720DA.crl (hash: p+UWy4fp625t4UQDW7Wo+VKWq0/vUMxtwXKmW0/SXz4=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:10:33:23:5a:b5:67:d5:90:44:7c:c6:2b:e4:2e:16:f5:e8:bf:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c078e149d9741434fd8877ab4ced46dc2720da
        Validity
            Not Before: Nov 21 04:17:35 2024 GMT
            Not After : Nov 22 07:32:35 2024 GMT
        Subject: CN=3418FE29EA41475082595B89E60DDF7EBEB22ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:d9:ef:75:9d:e1:44:61:b0:a4:cd:00:36:
                    7a:eb:9e:37:7e:10:cd:35:30:9f:49:f2:0b:f8:2f:
                    4d:11:bc:d5:60:ce:d0:09:a4:6b:19:78:77:45:69:
                    71:ec:09:45:67:e7:e5:6d:8d:6f:c6:c8:3c:f9:87:
                    70:ea:95:79:72:68:4c:ba:7a:b8:84:7c:0f:08:0b:
                    a9:74:d3:d1:85:67:ff:13:20:d2:e0:c2:48:8e:e5:
                    b5:f6:8a:43:f0:46:94:a1:00:88:9b:18:19:06:19:
                    8e:56:79:5b:48:f2:70:0e:90:d9:6d:2f:e3:3f:0c:
                    41:db:6b:40:a2:5c:bd:1a:df:60:a4:ce:36:a8:34:
                    dd:92:c4:42:33:14:9d:1c:6d:ed:90:a5:7a:43:a9:
                    c3:0e:17:cf:54:71:16:07:b0:99:11:c0:ef:22:d5:
                    36:a9:61:28:48:d8:30:7c:47:5d:1c:6f:e8:b4:07:
                    a0:64:5a:5c:98:42:b5:94:3f:ba:f5:36:e1:b9:f9:
                    b0:af:7f:d5:f5:71:e0:02:a2:1e:7c:77:43:a8:05:
                    d7:53:25:33:f4:be:db:14:de:e0:d4:13:81:48:c1:
                    ca:17:c9:ff:3d:ef:ec:a3:24:30:86:30:dc:69:f5:
                    dd:7d:0d:a4:2e:f1:cf:23:42:40:db:71:f4:5e:45:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:18:FE:29:EA:41:47:50:82:59:5B:89:E6:0D:DF:7E:BE:B2:2A:DC
            X509v3 Authority Key Identifier:
                keyid:B3:C0:78:E1:49:D9:74:14:34:FD:88:77:AB:4C:ED:46:DC:27:20:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8B44UnZdBQ0_Yh3q0ztRtwnINo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/0/B3C078E149D9741434FD8877AB4CED46DC2720DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:41:a4:c9:2d:60:53:fa:da:89:8d:86:c1:f0:7a:2f:60:e6:
         20:0c:13:db:f7:bd:40:f3:43:c6:3e:5c:e4:5f:5b:ae:7c:af:
         af:5b:df:46:02:ca:6f:bb:e1:4e:01:f6:f5:06:ee:60:e4:25:
         be:3d:93:da:21:d1:5e:1b:1d:57:7d:cf:d8:5f:6f:8a:01:ac:
         ce:5b:88:5e:a8:33:c5:9c:ad:e1:81:c1:78:44:37:ed:0b:65:
         56:60:b9:09:4a:3f:69:46:20:fb:db:cf:ab:0d:33:e7:5f:38:
         e9:03:7a:a7:ca:0a:49:7a:a7:5d:14:41:a3:58:7a:6c:72:36:
         82:7b:ea:93:bd:89:49:4a:e9:8d:d8:ce:e8:42:5d:91:d1:17:
         be:22:89:6d:1d:13:25:53:2e:d3:36:6c:ee:bc:0f:33:41:c2:
         7d:25:e3:f3:dc:70:71:30:a6:f6:0d:4b:f5:52:2c:3b:aa:70:
         d4:f6:df:79:b7:6a:d9:f8:cf:4a:8b:81:58:dc:e0:59:98:0e:
         e6:01:0d:12:06:28:35:3a:3d:4e:2d:7a:10:2a:37:c3:d6:67:
         55:cd:fa:bd:aa:d0:ef:b4:b1:66:ef:e3:df:31:53:f5:35:4b:
         d0:d6:b6:db:2e:81:23:37:2f:5a:81:03:26:da:13:6f:c9:b9:
         da:50:83:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:13:28 2024 by rpki-client on console-ams.rpki-client.org