Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
File:                     3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft (raw, json)
Hash identifier:          LIymzFiE8E5ejZmeWvjP8LZD/d46/PwlNR8dyF71Qz4=
Subject key identifier:   5E:96:1A:43:21:DA:FE:5C:63:02:66:33:C1:5F:76:12:82:73:36:A4
Authority key identifier: 3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A
Certificate issuer:       /CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
Certificate serial:       3EEBF3F42775913F746F84B95AEF39742B40D203
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
Manifest number:          26
Signing time:             Thu 21 Nov 2024 15:11:05 +0000
Manifest this update:     Thu 21 Nov 2024 15:06:05 +0000
Manifest next update:     Fri 22 Nov 2024 17:28:05 +0000
Files and hashes:         1: 3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl (hash: aRfIIVW1ZwHH75VJdBw35J9mEDWJOamdMwd//iCXfJk=)
                          2: 32332e3139312e34302e302f32342d3234203d3e203236393534.roa (hash: lO4v+9qZpYNTU13Fx5YYbE7NTGKX+3JJpxrHn0W/uvQ=)
                          3: 323630323a663764653a3a2f34302d3438203d3e203236393534.roa (hash: dVW6ZUsxUgXCaz0kq7P1NzZswddC3cxPIFG0EovOzUk=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:eb:f3:f4:27:75:91:3f:74:6f:84:b9:5a:ef:39:74:2b:40:d2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b
        Validity
            Not Before: Nov 21 15:06:05 2024 GMT
            Not After : Nov 22 17:28:05 2024 GMT
        Subject: CN=5E961A4321DAFE5C63026633C15F7612827336A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:69:2f:8b:77:81:4c:0b:9d:75:f3:70:cc:66:
                    95:ea:77:c3:95:d2:eb:08:2c:98:03:68:97:65:8a:
                    fa:f5:ab:91:02:96:c6:26:9c:10:b5:00:1c:2a:2b:
                    6f:3a:ef:fb:4f:42:8e:41:ba:cd:8a:e6:ce:7c:60:
                    c1:1c:11:e8:54:ab:07:13:4f:59:8c:e0:3e:3a:43:
                    dc:db:2f:3b:c8:1f:67:fe:fe:78:a8:d7:af:70:a4:
                    23:5c:70:35:b6:0d:85:70:c7:7f:c2:06:8f:a4:7f:
                    02:4c:7a:6b:45:77:35:90:4a:9d:34:8c:e2:19:11:
                    7c:aa:ed:7c:9a:6a:77:2f:1c:1c:52:c2:b1:11:58:
                    0f:0e:63:3c:99:dc:0b:61:a3:12:46:d3:26:e4:34:
                    db:ef:30:17:11:f2:b6:ca:51:f0:6c:b3:14:5d:5e:
                    27:03:16:8b:c9:6c:62:9c:7a:4e:b7:da:75:32:e4:
                    28:1a:e9:aa:3c:a6:fb:85:f8:fa:ae:12:d9:df:dd:
                    32:fe:33:e1:c4:6e:d5:75:42:38:f5:3e:7e:c1:df:
                    fa:e2:fc:48:a2:b1:eb:90:db:e8:a7:ed:02:d9:7e:
                    e1:21:a2:dd:f1:10:fb:cf:8d:df:b2:fb:df:6d:9c:
                    1c:68:7e:4d:a8:18:28:18:80:de:07:e1:73:0b:ea:
                    a2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:96:1A:43:21:DA:FE:5C:63:02:66:33:C1:5F:76:12:82:73:36:A4
            X509v3 Authority Key Identifier:
                keyid:3F:CD:3A:83:9E:A1:41:7F:D9:88:F3:DD:FD:04:54:19:7F:AA:F4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/51cd99f7-2f42-4dec-b2c6-09bafaa3780e/324ffe39a98a0146b503d8a015ca2c2e767cf3d0b9fde6231b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/1/3FCD3A839EA1417FD988F3DDFD0454197FAAF47A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:09:87:51:46:ca:a1:40:e4:22:fc:32:58:94:a4:38:2f:1b:
         2e:2e:af:4d:44:f8:7b:9e:b4:41:52:e9:3e:73:3d:89:92:45:
         c2:cf:11:a2:b4:49:51:02:81:29:4d:8a:1b:a6:01:88:96:cd:
         78:a1:ac:22:a7:df:bb:8e:fb:e5:1e:05:62:08:09:82:94:fc:
         4e:b3:a1:73:cb:fa:9d:92:4e:57:40:ee:b3:60:7c:4c:dd:3d:
         47:bb:1d:40:17:f9:e6:6a:38:78:fa:31:77:d4:ea:cc:a8:c0:
         c7:60:38:57:78:06:4a:c8:a6:7a:b8:50:bc:bf:92:c9:25:5d:
         18:70:3b:7d:fb:fb:3c:dc:c8:a9:ef:71:e4:3e:c6:21:2d:f4:
         a4:44:1d:3a:a4:bc:0a:ae:1b:53:94:f8:01:61:51:52:b7:64:
         93:84:40:60:5a:67:85:22:b2:f4:5a:57:00:8c:22:4f:d8:a4:
         40:32:15:b2:1e:cc:f7:be:b4:ca:f6:34:5e:a9:a2:fe:d7:38:
         02:3f:bc:16:be:98:c5:20:a8:b9:31:83:59:1e:2c:c1:76:2a:
         a3:51:3f:43:e0:ac:1e:5b:e0:a7:f5:d4:7c:28:50:e6:8f:96:
         15:73:ff:8f:3e:c1:3c:88:48:48:ff:7d:bb:6b:63:95:ff:c8:
         3d:c9:fb:55
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUPuvz9Cd1kT90b4S5Wu85dCtA0gMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3
NjdjZjNkMGI5ZmRlNjIzMWIwHhcNMjQxMTIxMTUwNjA1WhcNMjQxMTIyMTcyODA1
WjAzMTEwLwYDVQQDEyg1RTk2MUE0MzIxREFGRTVDNjMwMjY2MzNDMTVGNzYxMjgy
NzMzNkE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGkvi3eBTAud
dfNwzGaV6nfDldLrCCyYA2iXZYr69auRApbGJpwQtQAcKitvOu/7T0KOQbrNiubO
fGDBHBHoVKsHE09ZjOA+OkPc2y87yB9n/v54qNevcKQjXHA1tg2FcMd/wgaPpH8C
THprRXc1kEqdNIziGRF8qu18mmp3LxwcUsKxEVgPDmM8mdwLYaMSRtMm5DTb7zAX
EfK2ylHwbLMUXV4nAxaLyWxinHpOt9p1MuQoGumqPKb7hfj6rhLZ390y/jPhxG7V
dUI49T5+wd/64vxIorHrkNvop+0C2X7hIaLd8RD7z43fsvvfbZwcaH5NqBgoGIDe
B+FzC+qiUwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFF6WGkMh2v5cYwJmM8FfdhKC
czakMB8GA1UdIwQYMBaAFD/NOoOeoUF/2Yjz3f0EVBl/qvR6MA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzczYjhlYzAxLThiYTUtNDc5Zi1hMjI5
LTBhYjcwZTQ4MTViYi8xLzNGQ0QzQTgzOUVBMTQxN0ZEOTg4RjNEREZEMDQ1NDE5
N0ZBQUY0N0EuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt
NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81MWNkOTlmNy0yZjQyLTRkZWMtYjJjNi0w
OWJhZmFhMzc4MGUvMzI0ZmZlMzlhOThhMDE0NmI1MDNkOGEwMTVjYTJjMmU3Njdj
ZjNkMGI5ZmRlNjIzMWIuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
NzNiOGVjMDEtOGJhNS00NzlmLWEyMjktMGFiNzBlNDgxNWJiLzEvM0ZDRDNBODM5
RUExNDE3RkQ5ODhGM0RERkQwNDU0MTk3RkFBRjQ3QS5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAQJh1FG
yqFA5CL8MliUpDgvGy4ur01E+HuetEFS6T5zPYmSRcLPEaK0SVECgSlNihumAYiW
zXihrCKn37uO++UeBWIICYKU/E6zoXPL+p2STldA7rNgfEzdPUe7HUAX+eZqOHj6
MXfU6syowMdgOFd4BkrIpnq4ULy/ksklXRhwO337+zzcyKnvceQ+xiEt9KREHTqk
vAquG1OU+AFhUVK3ZJOEQGBaZ4UisvRaVwCMIk/YpEAyFbIezPe+tMr2NF6pov7X
OAI/vBa+mMUgqLkxg1keLMF2KqNRP0PgrB5b4Kf11HwoUOaPlhVz/48+wTyISEj/
fbtrY5X/yD3J+1U=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org