Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.mft
File:                     119CE8E9E7C4D85EEC64153B32AD2938118CF280.mft (raw, json)
Hash identifier:          Svq9MMeoyPjSjSKmGH99lhMmQfSGcz2GDsI7P/GzL0U=
Subject key identifier:   2A:BF:FC:FF:D6:00:51:91:4F:4F:61:60:6B:39:70:26:06:77:89:92
Authority key identifier: 11:9C:E8:E9:E7:C4:D8:5E:EC:64:15:3B:32:AD:29:38:11:8C:F2:80
Certificate issuer:       /CN=119ce8e9e7c4d85eec64153b32ad2938118cf280
Certificate serial:       53F053B5E8EF565F9AFE187524650E25CED8C56B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EZzo6efE2F7sZBU7Mq0pOBGM8oA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.mft
Manifest number:          02E0
Signing time:             Mon 06 May 2024 05:24:58 +0000
Manifest this update:     Mon 06 May 2024 05:19:58 +0000
Manifest next update:     Tue 07 May 2024 07:45:58 +0000
Files and hashes:         1: AS205789.asa (hash: fNyr4+ZO4lx/cmc26iGkkuevzba5LYLhJw1/6UROwOc=)
                          2: 119CE8E9E7C4D85EEC64153B32AD2938118CF280.crl (hash: ytddsqLj6zO3oK9IP+VzsZ5WNLeCYpKXevw3lSjHjtM=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EZzo6efE2F7sZBU7Mq0pOBGM8oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f0:53:b5:e8:ef:56:5f:9a:fe:18:75:24:65:0e:25:ce:d8:c5:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=119ce8e9e7c4d85eec64153b32ad2938118cf280
        Validity
            Not Before: May  6 05:19:58 2024 GMT
            Not After : May  7 07:45:58 2024 GMT
        Subject: CN=2ABFFCFFD60051914F4F61606B39702606778992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:c1:54:c3:c3:08:c6:2e:c6:87:7c:50:cc:
                    fb:32:0e:f1:d9:ac:2a:f1:4b:ec:d2:a7:11:0f:26:
                    6f:c1:d1:16:61:4f:8e:33:89:62:cc:3c:19:48:6c:
                    54:b6:32:fd:81:ec:96:74:1d:b0:01:9d:e8:be:97:
                    39:00:8f:f6:37:ca:48:f8:44:73:7d:95:37:35:e0:
                    49:9a:93:05:c9:8c:6e:0d:96:36:20:51:02:8c:28:
                    9a:22:2a:25:1d:29:c3:d2:cb:21:97:0e:9e:73:5a:
                    ff:95:66:65:96:8c:d8:04:4d:4b:1d:13:70:0d:8c:
                    2e:f7:18:e9:9b:62:ad:6f:58:7e:85:f7:7c:e4:0b:
                    81:5a:ee:7e:9d:3a:0c:d2:56:12:aa:86:f1:af:b2:
                    95:dd:ef:2b:18:d3:2b:e0:70:f5:e9:78:d5:25:89:
                    16:bf:bf:f7:f6:fe:9d:b4:94:de:1e:2c:40:aa:57:
                    59:39:41:35:b5:c4:3c:31:6f:07:de:00:cd:88:39:
                    8f:14:64:56:46:bd:9b:14:42:f2:b5:d0:0a:4e:92:
                    a2:ac:64:f4:b8:93:1b:a2:c6:1b:0d:98:46:1c:40:
                    c1:32:73:fa:59:99:c8:3f:b9:00:1f:62:be:e2:a3:
                    f4:c2:73:66:2e:2b:f0:10:2b:64:2c:df:3f:4b:67:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BF:FC:FF:D6:00:51:91:4F:4F:61:60:6B:39:70:26:06:77:89:92
            X509v3 Authority Key Identifier:
                keyid:11:9C:E8:E9:E7:C4:D8:5E:EC:64:15:3B:32:AD:29:38:11:8C:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EZzo6efE2F7sZBU7Mq0pOBGM8oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/11/119CE8E9E7C4D85EEC64153B32AD2938118CF280.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:a4:47:59:6e:a6:05:e7:d5:36:ab:e2:7c:a4:d6:a8:58:48:
         0c:ee:33:da:f8:3b:3f:6b:79:9c:c5:f4:80:9a:51:12:cf:6d:
         bc:88:2f:eb:20:11:8e:f8:91:15:bc:99:43:fc:80:d4:dc:09:
         1e:91:77:65:d7:c2:47:70:5a:8d:0c:80:44:02:fc:f7:3e:b1:
         8c:6b:ea:de:52:59:91:36:99:03:eb:c2:e6:b6:e8:b7:49:73:
         cc:64:0d:7f:dd:32:26:d7:18:89:22:d9:dc:26:0a:64:60:4d:
         12:b4:1c:a8:2a:19:4d:59:90:85:53:35:8d:80:f6:a6:a1:01:
         d4:99:f2:1a:5b:d6:40:f2:4f:b4:87:7e:79:c8:99:fa:75:07:
         21:52:46:b2:3d:1c:ba:96:3d:2e:a1:6f:8f:37:e0:33:ed:e3:
         ca:f4:4d:f1:e6:09:b5:cb:43:f0:d0:4b:4f:49:42:6e:82:00:
         34:d4:77:0a:70:49:c7:73:d0:2c:72:92:42:8e:7c:01:96:63:
         2a:d4:f6:93:1f:42:4e:e5:49:e3:4e:0c:8d:2f:8a:76:7f:5d:
         26:cb:25:fe:49:cd:69:8c:69:10:b9:00:01:d3:cd:0c:81:a1:
         1b:a8:ea:ce:04:a8:28:8d:f7:5a:b2:18:b4:c0:d1:4d:ef:4d:
         2b:37:88:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 07:17:56 2024 by rpki-client on console-ams.rpki-client.org