Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
File:                     8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft (raw, json)
Hash identifier:          7p/hpaB5LDWsuvdJOBvTpN0cQimQK4yHyx7iC/O7P5c=
Subject key identifier:   AD:7A:0C:0F:67:DC:74:08:EE:A1:F7:C2:A6:FF:DD:63:59:33:FD:E6
Authority key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Certificate issuer:       /CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Certificate serial:       6B7A687D0F85FA3C6186624860208ACEB329AF72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
Manifest number:          01EC
Signing time:             Sat 04 May 2024 08:46:42 +0000
Manifest this update:     Sat 04 May 2024 08:41:42 +0000
Manifest next update:     Sun 05 May 2024 11:21:42 +0000
Files and hashes:         1: 3138382e3136342e3135332e302f32342d3234203d3e203631333137.roa (hash: GFU0T/cDdJ1GewNNJwvJpOAx98P/z00ohY5Osytx4uM=)
                          2: 8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl (hash: eJDc7vWYCexZmlG92Pcjh00Ng8jbM1dWn6svlDjBL8M=)
                          3: 3138382e3136342e3135342e302f32342d3234203d3e2032393134.roa (hash: sik7T3z6CtJXASg4UB4hkyKLrLvhKn9C/3HZ4FJ9bfs=)
                          4: 3138382e3136342e3135322e302f32342d3234203d3e203631333137.roa (hash: l6Ks5CbuckJAbA8XEdwgqbq9r6Co9thXmi3nJyFvGdY=)
                          5: 3138382e3136342e3135352e302f32342d3234203d3e203631333137.roa (hash: syHLKUCrrSL202GrGJ3NuZac54E/qY4STX4RLb/6uOw=)
                          6: 3138382e3136342e3135362e302f32342d3234203d3e203136323736.roa (hash: N14aezwr6MeqRV7GkZbNhmWdbRWr2K/9fLZpUIaKZZI=)
                          7: 3138382e3136342e3135372e302f32342d3234203d3e203631333137.roa (hash: Ro18PefiTAGdw1SOvEDVaS9dKWyyeeYzC3U6uYOXFoQ=)
                          8: 3138382e3136342e3135382e302f32332d3233203d3e20323039323432.roa (hash: DlkV2RVwodNbix4N2R4/X2R7xLIh4hYtq/Zwph042co=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7a:68:7d:0f:85:fa:3c:61:86:62:48:60:20:8a:ce:b3:29:af:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
        Validity
            Not Before: May  4 08:41:42 2024 GMT
            Not After : May  5 11:21:42 2024 GMT
        Subject: CN=AD7A0C0F67DC7408EEA1F7C2A6FFDD635933FDE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:0e:a5:0d:0a:b4:e2:e8:cf:16:f2:30:7c:
                    3c:53:b2:44:fd:b0:ea:15:9d:ac:4d:fc:9d:5f:99:
                    54:3d:6e:5c:b2:67:03:55:87:47:0e:8b:31:bd:7e:
                    8d:4e:9d:3a:61:68:5a:cf:59:48:6a:21:33:f3:a3:
                    13:0c:0c:fc:30:d4:e4:8e:fb:6b:87:aa:a5:04:ef:
                    88:35:6d:04:b9:16:ac:19:1e:7e:02:48:53:5f:88:
                    11:c4:5c:97:86:ca:79:fe:dd:21:d7:50:6b:d5:ce:
                    75:fb:8d:f0:c8:fb:fd:e7:85:3e:80:60:75:67:ca:
                    53:d9:93:17:47:80:45:05:b9:e4:a4:e7:93:cb:f3:
                    cc:88:62:eb:ed:46:e4:1f:9a:f4:a1:53:b0:6a:32:
                    41:f4:d7:84:c0:f4:9a:2f:c7:5b:95:e4:e2:20:ca:
                    ab:b1:18:c6:40:0d:af:45:5b:e1:3a:23:97:67:ac:
                    5e:88:75:68:10:00:be:ff:12:7e:ef:c2:13:5a:5c:
                    dc:e5:b6:4f:aa:57:26:57:45:16:78:c2:81:69:b7:
                    67:9f:67:94:b0:06:54:7f:38:61:37:a4:d5:5a:53:
                    c4:34:74:d1:f4:37:df:6b:63:6c:55:e4:68:84:cc:
                    55:de:11:6d:e5:1f:d5:57:31:43:20:9e:3c:9b:1d:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7A:0C:0F:67:DC:74:08:EE:A1:F7:C2:A6:FF:DD:63:59:33:FD:E6
            X509v3 Authority Key Identifier:
                keyid:8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:af:11:e3:d6:6c:41:56:84:9b:1e:0a:29:3c:2c:b8:96:e6:
         bb:d2:95:31:29:ee:f7:ea:d2:d2:fc:f6:4a:6c:99:52:9f:50:
         45:04:9b:dc:ec:b7:6f:2a:d5:41:d5:04:04:d3:da:ff:17:0e:
         1c:e6:cb:a6:44:a7:b1:6a:15:d8:bf:08:ca:f0:3a:f7:ce:c3:
         d7:6f:3a:99:24:f5:0e:6c:14:8e:53:6f:60:2c:de:d2:ef:b6:
         c2:6c:06:ee:f2:3e:e0:13:db:09:e6:37:e5:e6:e4:ed:59:07:
         00:7d:9b:61:8d:96:94:94:75:36:d7:94:4f:33:67:c9:f5:ae:
         e2:c8:40:95:83:98:05:fb:af:ae:e6:3c:8b:76:b2:f7:3c:2e:
         67:a0:e0:19:11:b4:62:85:fb:59:2a:bd:76:72:8d:1b:bc:e6:
         f9:89:78:e2:02:87:a7:71:2a:02:3f:7f:ad:47:de:fe:4e:68:
         1a:18:cd:94:4c:dc:35:ba:e4:21:70:9e:30:ef:f2:2d:0b:f3:
         98:ff:2e:8c:e1:47:a2:89:dc:85:80:aa:34:02:fa:b9:6c:95:
         cb:65:ee:c3:e7:88:89:49:73:d9:3f:e1:80:0b:ca:ca:ef:16:
         fc:c1:23:a7:1f:bb:66:8b:98:49:31:d3:d6:3c:95:4c:56:46:
         b4:be:72:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:29:12 2024 by rpki-client on console-ams.rpki-client.org