Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.mft
File:                     3986DB54152486D65338415899DEAD95A067B25E.mft (raw, json)
Hash identifier:          EbGQtoW5Ilxd5HofgHyGakdZE0CDS8jEN9ax3/pmkCs=
Subject key identifier:   66:6C:EB:6C:EF:01:9F:0B:CE:F8:EA:FC:CC:38:8C:C4:37:3E:EE:0E
Authority key identifier: 39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E
Certificate issuer:       /CN=3986DB54152486D65338415899DEAD95A067B25E
Certificate serial:       375AC8AB1FBC466CC8F97368F037DD5D9E7ECC4A
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.mft
Manifest number:          012D
Signing time:             Sun 28 Apr 2024 20:45:01 +0000
Manifest this update:     Sun 28 Apr 2024 20:40:01 +0000
Manifest next update:     Mon 29 Apr 2024 21:16:01 +0000
Files and hashes:         1: 3986DB54152486D65338415899DEAD95A067B25E.crl (hash: 1BzYf1gsJPfXHXEcYhRX6x44/8DFr3HoXtu+CZKKL4c=)
                          2: D3A0F880745420FB2B86A2D1C198849D8B7C676C.cer (hash: +2rbyWk1MYflPpmBVIc2zsO3EFQqyPg9kjeStLK9Sc4=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5a:c8:ab:1f:bc:46:6c:c8:f9:73:68:f0:37:dd:5d:9e:7e:cc:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3986DB54152486D65338415899DEAD95A067B25E
        Validity
            Not Before: Apr 28 20:40:01 2024 GMT
            Not After : Apr 29 21:16:01 2024 GMT
        Subject: CN=666CEB6CEF019F0BCEF8EAFCCC388CC4373EEE0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:8b:96:da:66:79:9b:55:c9:9a:63:4d:b1:
                    6a:45:25:ce:87:13:7b:c4:44:50:da:89:09:ec:ba:
                    26:c8:10:c6:fc:58:65:9c:37:64:06:77:e2:4e:f4:
                    4f:9d:2c:a8:ec:09:58:f8:62:7e:b5:5c:61:ca:a9:
                    71:a2:c6:fd:0c:e7:81:19:10:84:d4:ec:72:c6:0f:
                    c0:19:45:b4:90:b1:15:84:1c:ff:91:ec:1b:04:da:
                    b4:5b:78:62:25:fb:ab:5d:bb:2d:bc:21:37:45:c3:
                    7e:3c:45:9b:1c:64:2f:50:f0:44:c7:27:61:9e:36:
                    65:37:5c:05:86:c2:6b:d6:50:24:c4:4d:81:bc:c1:
                    9f:71:30:9b:e1:86:bb:e6:74:d5:1a:12:8b:4d:b4:
                    c6:b0:85:4d:10:af:f9:7b:b8:39:0d:41:02:9a:e2:
                    21:53:1a:90:3c:1b:0f:e5:ca:7d:32:53:7d:25:55:
                    95:4d:55:a9:8e:f7:e9:2d:84:34:54:63:1b:29:a1:
                    05:c5:20:21:ec:9b:e9:76:8c:95:aa:ef:e0:c4:bd:
                    c4:f9:d8:72:90:37:fd:35:6b:f5:6a:8c:17:1a:a3:
                    b5:d3:48:ac:a5:70:36:72:44:41:91:15:06:b9:81:
                    c3:fd:c8:dd:36:b6:c7:91:eb:16:2b:3b:d2:0c:20:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6C:EB:6C:EF:01:9F:0B:CE:F8:EA:FC:CC:38:8C:C4:37:3E:EE:0E
            X509v3 Authority Key Identifier:
                keyid:39:86:DB:54:15:24:86:D6:53:38:41:58:99:DE:AD:95:A0:67:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3986DB54152486D65338415899DEAD95A067B25E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/2/3986DB54152486D65338415899DEAD95A067B25E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:29:33:42:ef:bc:b5:73:de:10:71:a9:fc:72:38:ca:e9:1e:
         95:54:b1:f1:7b:e2:b1:a2:14:62:7f:5a:60:1b:5c:da:55:25:
         c6:4f:44:c8:50:a9:d6:02:46:8b:bc:10:9c:91:5c:c3:58:40:
         5d:76:c5:c5:79:40:3e:dd:37:27:60:31:d7:41:63:61:e7:9c:
         f1:90:03:eb:7a:0d:a1:76:67:6c:d5:62:53:85:bc:54:32:b1:
         2e:74:3d:10:4c:81:27:dc:fd:cc:0c:6c:e6:b7:85:66:79:6a:
         17:aa:04:f9:a0:8a:20:7c:eb:4f:2b:66:dd:94:82:04:d5:8e:
         43:68:66:71:89:6a:02:26:09:01:5b:21:b9:b4:39:bc:e2:e3:
         ab:6c:75:ba:d8:c3:88:bd:4d:3f:09:a9:d4:10:40:da:6a:45:
         b2:22:f9:e8:b9:e1:21:53:62:06:a1:83:14:97:17:56:9b:eb:
         e5:66:32:ff:48:36:89:11:be:32:9f:b7:bb:53:10:ca:36:80:
         5d:fd:69:b7:e5:68:6b:a9:c9:33:c0:c6:29:58:b4:87:2d:da:
         9f:65:92:ef:2a:1c:e5:5c:7e:19:d7:bb:8c:0c:59:79:19:94:
         b9:44:6f:9b:70:74:2d:51:e8:1b:b1:af:61:bd:49:c4:39:0c:
         ca:96:7e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 22:52:42 2024 by rpki-client on console-ams.rpki-client.org