Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.mft
File:                     7C4BB19365741B7885E0A322377B13B581D82E0E.mft (raw, json)
Hash identifier:          XCOkoi94XGZYmeHu3vC7Qt15l++erRoAt/maKSW3Tyw=
Subject key identifier:   34:0C:79:B6:F2:BC:D2:55:48:53:45:02:DB:64:F7:0E:3F:77:5F:1B
Authority key identifier: 7C:4B:B1:93:65:74:1B:78:85:E0:A3:22:37:7B:13:B5:81:D8:2E:0E
Certificate issuer:       /CN=7c4bb19365741b7885e0a322377b13b581d82e0e
Certificate serial:       633ECE653F9664076257B2B7BA32CCB95B0A29C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuxk2V0G3iF4KMiN3sTtYHYLg4.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.mft
Manifest number:          0147
Signing time:             Fri 17 May 2024 14:01:46 +0000
Manifest this update:     Fri 17 May 2024 13:56:46 +0000
Manifest next update:     Sat 18 May 2024 15:50:46 +0000
Files and hashes:         1: 7C4BB19365741B7885E0A322377B13B581D82E0E.crl (hash: 4QI4R9vw+wx4jeI/2xJtQxK0713L8z8ixaUcw/dNdQc=)
                          2: AS48700.asa (hash: ri9g1beBEKCwTKS+hXe60L0dvt/8ox9Ag+UpztXn0js=)
                          3: 323030313a3766383a3135373a3a2f34382d3438203d3e2030.roa (hash: PSUbGINMXDXcZ2iqGImWYJzUtI6J2N2niY8PAy2nylU=)
                          4: 3139332e33342e3139392e3132382f32362d3236203d3e2030.roa (hash: eOQTwh7vkdtPeD9Z6S+azJ35o/wr1ntXvlf6L5dFg3E=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuxk2V0G3iF4KMiN3sTtYHYLg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3e:ce:65:3f:96:64:07:62:57:b2:b7:ba:32:cc:b9:5b:0a:29:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4bb19365741b7885e0a322377b13b581d82e0e
        Validity
            Not Before: May 17 13:56:46 2024 GMT
            Not After : May 18 15:50:46 2024 GMT
        Subject: CN=340C79B6F2BCD25548534502DB64F70E3F775F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:63:7c:2b:56:d4:7f:85:b6:8d:dd:a0:df:03:
                    07:f5:ab:90:fd:b8:1a:29:a8:25:43:be:ea:25:91:
                    50:16:4c:2e:2a:3e:a9:bd:a9:d0:05:10:6a:cb:b0:
                    b0:3d:60:b1:e7:4c:f6:6e:db:45:b6:d1:28:40:c7:
                    e6:46:16:66:96:fd:96:e1:d2:6f:65:3d:e9:1a:80:
                    b3:c4:57:e5:73:49:2b:18:d3:18:79:9b:cf:be:de:
                    d3:cd:73:2a:c9:46:09:3e:2b:7a:65:88:a0:5f:fe:
                    f7:60:e4:41:c4:aa:95:8d:79:30:cb:72:9c:52:13:
                    ab:8d:7d:ba:0d:c7:4a:2a:e3:95:9e:89:de:2a:fd:
                    7d:16:2e:66:79:c0:75:a7:87:6f:d8:a7:ef:76:98:
                    32:fa:fd:33:54:96:1b:97:af:b9:ac:3c:29:53:e5:
                    29:a1:fc:38:ce:2f:2e:14:9a:30:29:f6:5a:c0:3e:
                    59:f2:f1:f9:ba:46:74:1e:95:5e:e8:f4:1d:1e:7e:
                    d7:09:31:04:c1:64:34:6a:8a:6f:fe:b3:2a:fa:24:
                    5f:bb:70:b0:dc:a9:a8:c9:57:90:b0:2d:d2:ae:25:
                    a6:45:14:9e:3e:87:8e:f1:a1:61:93:c0:8c:9b:37:
                    48:38:8a:4a:55:60:f5:92:b0:44:22:93:55:ff:79:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0C:79:B6:F2:BC:D2:55:48:53:45:02:DB:64:F7:0E:3F:77:5F:1B
            X509v3 Authority Key Identifier:
                keyid:7C:4B:B1:93:65:74:1B:78:85:E0:A3:22:37:7B:13:B5:81:D8:2E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuxk2V0G3iF4KMiN3sTtYHYLg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/0/7C4BB19365741B7885E0A322377B13B581D82E0E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8a:af:54:7e:be:ca:6e:10:0c:de:54:3f:e7:7e:80:f2:d8:
         b1:46:b9:86:7a:f0:05:6a:91:9c:6f:5c:21:56:fa:17:90:8b:
         06:7d:8a:16:35:bc:2b:26:d9:db:ca:64:ca:55:b8:e2:a0:65:
         c1:37:e9:73:c7:11:87:64:61:4a:58:17:a0:d4:3a:e7:ca:2c:
         47:6e:6f:84:62:7f:d3:d9:f7:c0:ff:71:65:bd:90:84:a9:8f:
         cb:31:02:0a:40:73:01:e6:f4:5f:db:41:56:96:59:fd:d5:3a:
         eb:37:c3:25:b1:7a:63:4f:66:19:2d:cb:6a:43:7f:61:7d:94:
         53:37:f3:fe:52:d6:8f:e8:08:35:60:51:f5:a0:9c:f3:c1:70:
         ed:7e:d2:a4:55:e6:88:8a:fc:5e:aa:4c:84:58:2a:18:f8:f2:
         5d:92:c1:1d:ba:1c:81:2e:85:90:3d:cb:f7:93:98:3d:11:b3:
         cc:eb:f0:92:09:ce:1e:4e:91:de:09:8e:78:d9:02:1a:c5:18:
         a5:3a:88:8b:04:4c:51:20:6e:ef:0f:e3:47:90:e7:2b:56:90:
         1f:65:ce:81:52:88:7e:21:54:7a:18:df:97:f7:8d:44:ae:99:
         ca:0e:88:b0:ab:e3:ed:54:28:2e:96:d7:6b:c8:65:c2:e4:93:
         fe:9a:4b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:58:13 2024 by rpki-client on console-ams.rpki-client.org