Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.mft
File:                     635199CDC46CB6919367127D69C22339E990FFDA.mft (raw, json)
Hash identifier:          iy3Bt38Fy1hnaJfgwf5f5Ks+MVQhqpv0gK7qFqgw81Y=
Subject key identifier:   FA:13:E2:1C:C2:74:E6:5A:92:8F:F5:F1:6B:9B:25:F3:E0:59:0F:E3
Authority key identifier: 63:51:99:CD:C4:6C:B6:91:93:67:12:7D:69:C2:23:39:E9:90:FF:DA
Certificate issuer:       /CN=635199cdc46cb6919367127d69c22339e990ffda
Certificate serial:       560AB923F730726A5334C85468394CD05D7FBCB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y1GZzcRstpGTZxJ9acIjOemQ_9o.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.mft
Manifest number:          02E6
Signing time:             Fri 17 May 2024 11:11:39 +0000
Manifest this update:     Fri 17 May 2024 11:06:39 +0000
Manifest next update:     Sat 18 May 2024 13:21:39 +0000
Files and hashes:         1: 635199CDC46CB6919367127D69C22339E990FFDA.crl (hash: JEAaai+54yF2b9YwN/Kr9mMOFKH+yAkgS+AC4SlnAJ8=)
                          2: 323030313a3766383a3133373a3a2f34382d3438203d3e20323032303736.roa (hash: gr2scuw8215fcjf4E+kuQNGy0DfafVxKb2y46vdAZKc=)
                          3: 3138352e302e322e302f32342d3234203d3e20323032303736.roa (hash: L50rf6xo5gvfQ5YmgAqRN+Dyy0oJvjmP5yfRq/ds1Ok=)
                          4: AS202076.asa (hash: Jlztg0528nmCbYVda1dVfuqysePPK1bc5kEbKCFdTCA=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y1GZzcRstpGTZxJ9acIjOemQ_9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0a:b9:23:f7:30:72:6a:53:34:c8:54:68:39:4c:d0:5d:7f:bc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635199cdc46cb6919367127d69c22339e990ffda
        Validity
            Not Before: May 17 11:06:39 2024 GMT
            Not After : May 18 13:21:39 2024 GMT
        Subject: CN=FA13E21CC274E65A928FF5F16B9B25F3E0590FE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2a:38:ee:90:ac:3b:91:1a:7f:d4:ef:2a:a9:
                    8c:e0:bd:8e:a0:1d:4e:d7:4b:9e:76:75:5d:08:fa:
                    5f:2c:97:07:43:9d:a1:2e:21:76:80:a5:69:b8:2d:
                    81:22:b1:96:16:21:35:5a:d3:01:0b:72:f6:9c:c1:
                    d3:69:94:ac:83:67:52:5c:4c:b1:ce:c5:b9:bd:fd:
                    b5:aa:4c:ef:14:70:1c:58:c0:4e:19:6a:d9:00:59:
                    a1:ff:27:ba:86:b8:24:f0:9c:a4:2d:85:59:86:02:
                    ed:24:6d:e8:8e:63:65:d4:0e:2e:95:e9:23:9b:28:
                    5b:1a:ec:0a:27:0f:68:9f:a2:15:f7:3b:d5:43:d9:
                    bb:0c:d6:ff:81:8e:94:e5:d9:dc:71:a3:e1:fa:ef:
                    d4:89:51:e4:46:ce:ef:fd:c5:2e:94:4d:d2:48:b2:
                    ea:4c:15:7c:84:06:c0:57:f0:a7:83:8b:43:49:69:
                    d3:01:3d:d0:d7:7e:04:da:3d:1c:58:16:4a:5a:84:
                    6b:37:0b:e7:f3:09:e9:53:86:4c:93:b3:be:8c:9b:
                    46:b1:85:b7:50:f1:2c:2d:7e:3d:d8:4b:2b:cd:59:
                    f3:3b:ee:b2:45:7f:29:ae:7a:25:d0:c7:ca:9b:28:
                    e4:41:bd:04:b7:2a:55:8d:10:e0:6a:12:f8:13:3f:
                    99:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:13:E2:1C:C2:74:E6:5A:92:8F:F5:F1:6B:9B:25:F3:E0:59:0F:E3
            X509v3 Authority Key Identifier:
                keyid:63:51:99:CD:C4:6C:B6:91:93:67:12:7D:69:C2:23:39:E9:90:FF:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1GZzcRstpGTZxJ9acIjOemQ_9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/17/635199CDC46CB6919367127D69C22339E990FFDA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:fa:73:73:45:d7:fa:b9:60:06:44:ef:a8:92:3e:68:64:
         f4:c2:44:a8:9a:c2:b6:20:3b:73:cd:95:06:b4:22:57:d0:15:
         49:99:a4:a8:3c:96:84:b0:0c:b4:c0:0a:c1:25:ab:3f:4e:c3:
         dd:1b:2f:21:9b:2a:75:9f:22:fe:0e:4b:e0:49:cb:42:85:d9:
         6e:e0:62:3c:36:9b:6e:ef:2b:c6:40:5a:32:63:f2:20:6b:63:
         c4:ac:72:4e:7f:f6:f6:dd:9c:24:3b:b2:b5:a4:3e:bd:2f:df:
         ac:05:72:f3:5c:c5:ce:01:f7:33:b6:1d:cb:30:87:8f:d2:d5:
         f4:36:8e:8a:8e:e9:3d:45:db:f9:c2:b8:d1:c3:8f:1e:96:f1:
         6c:85:85:be:95:01:9e:49:e2:d2:d5:d9:7d:58:d9:0d:8e:6f:
         47:b6:aa:ef:72:78:de:f8:a2:f3:ba:9a:0f:84:42:43:98:d2:
         25:0f:57:ce:86:d2:86:ae:60:1a:d2:f9:db:16:3c:1f:f5:a7:
         fe:b2:57:99:d3:3b:fd:59:fb:91:cc:77:03:0f:c9:d9:e8:f5:
         36:e8:13:83:f1:75:e4:e9:91:15:79:34:48:63:0f:7b:a1:cf:
         c6:14:db:09:ab:9f:83:55:08:4e:3e:35:f3:43:b6:eb:bb:b2:
         10:74:99:e0
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUVgq5I/cwcmpTNMhUaDlM0F1/vLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM1MTk5Y2RjNDZjYjY5MTkzNjcxMjdkNjljMjIzMzll
OTkwZmZkYTAeFw0yNDA1MTcxMTA2MzlaFw0yNDA1MTgxMzIxMzlaMDMxMTAvBgNV
BAMTKEZBMTNFMjFDQzI3NEU2NUE5MjhGRjVGMTZCOUIyNUYzRTA1OTBGRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGKjjukKw7kRp/1O8qqYzgvY6g
HU7XS552dV0I+l8slwdDnaEuIXaApWm4LYEisZYWITVa0wELcvacwdNplKyDZ1Jc
TLHOxbm9/bWqTO8UcBxYwE4ZatkAWaH/J7qGuCTwnKQthVmGAu0kbeiOY2XUDi6V
6SObKFsa7AonD2ifohX3O9VD2bsM1v+BjpTl2dxxo+H679SJUeRGzu/9xS6UTdJI
supMFXyEBsBX8KeDi0NJadMBPdDXfgTaPRxYFkpahGs3C+fzCelThkyTs76Mm0ax
hbdQ8Swtfj3YSyvNWfM77rJFfymueiXQx8qbKORBvQS3KlWNEOBqEvgTP5nlAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU+hPiHMJ05lqSj/Xxa5sl8+BZD+MwHwYDVR0j
BBgwFoAUY1GZzcRstpGTZxJ9acIjOemQ/9owDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzdiNTc1ZWE3LTc4NmYtNGIyZC1hNDU1LTc5ZDdmYzQz
ZWNlZS8xNy82MzUxOTlDREM0NkNCNjkxOTM2NzEyN0Q2OUMyMjMzOUU5OTBGRkRB
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvWTFHWnpjUnN0cEdUWnhKOWFjSWpP
ZW1RXzlvLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YjU3NWVh
Ny03ODZmLTRiMmQtYTQ1NS03OWQ3ZmM0M2VjZWUvMTcvNjM1MTk5Q0RDNDZDQjY5
MTkzNjcxMjdENjlDMjIzMzlFOTkwRkZEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHb0+nNzRdf6uWAG
RO+okj5oZPTCRKiawrYgO3PNlQa0IlfQFUmZpKg8loSwDLTACsElqz9Ow90bLyGb
KnWfIv4OS+BJy0KF2W7gYjw2m27vK8ZAWjJj8iBrY8Ssck5/9vbdnCQ7srWkPr0v
36wFcvNcxc4B9zO2Hcswh4/S1fQ2joqO6T1F2/nCuNHDjx6W8WyFhb6VAZ5J4tLV
2X1Y2Q2Ob0e2qu9yeN74ovO6mg+EQkOY0iUPV86G0oauYBrS+dsWPB/1p/6yV5nT
O/1Z+5HMdwMPydno9TboE4PxdeTpkRV5NEhjD3uhz8YU2wmrn4NVCE4+NfNDtuu7
shB0meA=
-----END CERTIFICATE-----
Generated at Fri May 17 13:32:23 2024 by rpki-client on console-fra.rpki-client.org