Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
File:                     EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json)
Hash identifier:          4KXSFgtPLomZNe1Yook3LYJXNhcXU1q/IU+g8v/4lxc=
Subject key identifier:   7B:24:11:4C:8D:C1:72:9D:37:89:5F:24:5E:2E:35:04:3F:BC:DB:97
Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A
Certificate issuer:       /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
Certificate serial:       7B5478E504E88C1FC1F0F9B4463D27EFED9715B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
Manifest number:          0145
Signing time:             Mon 13 May 2024 00:27:03 +0000
Manifest this update:     Mon 13 May 2024 00:22:03 +0000
Manifest next update:     Tue 14 May 2024 03:44:03 +0000
Files and hashes:         1: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: 9BGLYyz24amEMPbBgM7uDSUxllm4T80MlEgjXCWMFHo=)
                          2: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (hash: iy/PuTZq2PlLpxAHU9NAZ+l2NTzGrJU7RR9j/EEkM8A=)
                          3: 3138352e33372e3231362e302f32332d3234203d3e20323132323338.roa (hash: yiBtmTjnRKXHJq5A9F2Nv4U2Oe6llhm24TC0e/6krKA=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 May 2024 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:54:78:e5:04:e8:8c:1f:c1:f0:f9:b4:46:3d:27:ef:ed:97:15:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a
        Validity
            Not Before: May 13 00:22:03 2024 GMT
            Not After : May 14 03:44:03 2024 GMT
        Subject: CN=7B24114C8DC1729D37895F245E2E35043FBCDB97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:48:20:61:ae:fc:08:ae:4f:35:62:f5:7a:
                    78:a4:0f:5f:d9:f7:38:18:ed:04:de:2e:04:1f:b0:
                    91:24:6e:b9:32:13:95:58:4c:91:7f:6c:81:48:cf:
                    94:78:0f:bf:75:5b:b3:e3:d1:c0:6f:45:2e:f0:e0:
                    4f:e7:f6:79:e4:23:f5:b9:cd:e2:d9:a7:65:cb:6b:
                    7b:17:25:61:b3:08:49:38:02:78:69:9b:6c:99:18:
                    ab:df:6a:0d:0a:08:8b:24:9d:2a:28:14:61:76:b2:
                    67:28:e6:fc:84:09:b0:50:65:20:a1:a8:51:1d:c5:
                    2b:fa:9e:57:92:14:75:76:bf:53:70:42:4e:1d:23:
                    71:91:07:bc:63:56:98:35:4b:8a:6b:eb:fe:27:b5:
                    b9:05:27:01:bd:ef:7d:db:c1:19:a3:26:8b:6c:8b:
                    f3:9e:cf:fc:69:0f:ff:30:e7:0f:bd:75:5e:81:e1:
                    1f:7c:99:13:aa:2e:a4:f2:6a:98:49:03:1f:ba:c4:
                    ed:64:75:85:e6:0f:97:5f:dc:16:54:ac:8a:d8:0d:
                    07:ea:a9:f4:c1:72:aa:64:ce:56:1e:02:94:cc:fc:
                    fe:55:f4:ee:13:1f:73:c1:dd:b7:bb:57:e4:f6:d9:
                    c9:52:17:3a:78:89:56:a6:3c:35:e0:f6:55:1d:3e:
                    53:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:24:11:4C:8D:C1:72:9D:37:89:5F:24:5E:2E:35:04:3F:BC:DB:97
            X509v3 Authority Key Identifier:
                keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:e2:48:cf:2c:86:9c:7d:b3:98:88:84:21:d2:e0:85:13:88:
         67:e7:9d:10:74:30:12:c7:e2:e1:8d:7f:99:ae:4f:42:17:d8:
         e0:33:a0:1c:10:af:68:9a:d8:66:b0:28:29:37:83:d8:3c:5e:
         3a:6e:a7:fe:5d:4f:60:c9:b8:da:b6:39:41:a2:35:ae:2e:59:
         13:22:31:be:be:93:be:a4:74:1b:08:9e:ab:c3:b4:8e:79:7e:
         be:f7:b8:53:2a:fa:ac:29:37:d0:d2:62:48:aa:41:c7:a7:7d:
         98:2d:e4:29:ed:68:85:ef:3d:63:43:de:df:08:83:d7:5b:c5:
         9c:62:72:b8:e1:87:f3:25:ea:c1:ea:bb:7c:d4:50:e0:48:e9:
         0a:f3:ab:8b:3b:20:7c:76:cb:b3:72:80:10:57:8a:ee:f6:ce:
         fd:65:9f:c2:ee:df:8e:0f:44:76:3e:d1:e7:c5:df:a1:fa:62:
         d2:76:2a:27:01:c2:89:9f:df:6c:bf:0a:08:cb:80:ea:cb:1b:
         52:85:43:be:6f:f2:a0:2f:ee:53:1c:b5:bf:10:47:09:2a:ab:
         a1:24:d6:9a:c9:77:3d:28:3a:be:9d:60:e9:a9:d5:15:48:5a:
         6c:c1:99:4e:55:23:e3:c6:a4:c9:56:4f:c3:f7:76:bd:e9:89:
         ac:05:8f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:09:02 2024 by rpki-client on console-fra.rpki-client.org