Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
File:                     974F44DCD416495219413C1B0D69A1F87F507288.mft (raw, json)
Hash identifier:          Klm0x3osmOgunYUTI7fna5rcqiTFGoEX1/vcbL6e4jE=
Subject key identifier:   5B:1C:44:F4:21:88:BF:43:86:9F:04:64:D3:38:F6:E1:19:13:C4:95
Authority key identifier: 97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88
Certificate issuer:       /CN=974f44dcd416495219413c1b0d69a1f87f507288
Certificate serial:       07040D069028BF0504C02B3F4E655F5A5CFCA6A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
Manifest number:          0262
Signing time:             Fri 17 May 2024 09:56:39 +0000
Manifest this update:     Fri 17 May 2024 09:51:39 +0000
Manifest next update:     Sat 18 May 2024 11:20:39 +0000
Files and hashes:         1: AS212245.asa (hash: P4UVyE/FyLaBRJS5pK4w3QTRcW/z78Rk3l4g5Tmt+qY=)
                          2: 974F44DCD416495219413C1B0D69A1F87F507288.crl (hash: IT92/wgVtokFS61ibY3X0Xg53G1CEZfdTDE/zdo9thQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:04:0d:06:90:28:bf:05:04:c0:2b:3f:4e:65:5f:5a:5c:fc:a6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974f44dcd416495219413c1b0d69a1f87f507288
        Validity
            Not Before: May 17 09:51:39 2024 GMT
            Not After : May 18 11:20:39 2024 GMT
        Subject: CN=5B1C44F42188BF43869F0464D338F6E11913C495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b1:23:1c:9f:76:19:d8:cd:68:2a:d4:cd:03:
                    4e:a6:9e:0a:24:a0:2f:63:80:48:78:15:d9:8d:1c:
                    76:78:9e:1e:7e:4d:eb:a8:d5:de:74:d4:67:96:db:
                    78:d1:58:01:cf:bf:ea:38:b7:ab:a3:0c:dc:24:d8:
                    ce:a0:e2:5b:29:15:03:ac:36:2f:d9:6e:13:80:93:
                    ee:0d:34:0e:c8:26:6f:5e:f0:de:df:69:11:e8:58:
                    42:af:9e:ef:88:8d:a9:02:de:bb:ac:9a:43:28:22:
                    ea:27:49:b9:54:d8:50:e1:a2:84:70:a2:27:4e:b5:
                    e4:31:ac:f5:5c:44:21:e0:fd:2f:27:f4:a0:24:40:
                    cb:d4:93:df:69:d5:d0:a2:7d:ed:46:35:be:72:11:
                    29:e8:68:7d:32:e2:8f:aa:22:d3:54:ca:76:c4:ad:
                    c3:3c:a1:68:72:bb:b2:b2:3c:f6:e3:f6:49:72:50:
                    58:0a:7f:53:56:2d:65:68:6f:10:87:89:5b:7a:c6:
                    c6:6d:f7:da:87:1e:89:97:b3:b9:5d:cf:8d:d2:74:
                    71:49:23:00:77:36:56:07:03:ad:87:dd:b5:cd:c9:
                    99:be:94:fb:07:18:7c:bc:ad:b6:ef:f6:85:83:b4:
                    f5:56:c7:7a:a7:55:21:b5:91:43:2c:b7:19:e1:bf:
                    97:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1C:44:F4:21:88:BF:43:86:9F:04:64:D3:38:F6:E1:19:13:C4:95
            X509v3 Authority Key Identifier:
                keyid:97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:f2:67:e3:4e:19:5f:ac:c6:65:f2:7f:b1:2a:5f:19:5d:5c:
         2d:ca:60:5a:0b:d0:6e:83:31:22:0a:9a:93:1b:1c:72:b4:87:
         56:75:74:95:f4:55:f9:f3:f9:67:ab:38:9a:16:c7:af:d8:96:
         fa:22:ae:7a:dd:b3:94:3f:9b:d3:81:e7:a6:4c:c5:db:bf:31:
         42:c5:63:bd:44:8c:15:d1:40:32:2b:81:c4:94:76:3b:03:f2:
         d4:cf:19:91:0c:42:14:94:ef:17:0b:ec:23:b3:7c:17:63:13:
         e4:6a:f9:59:99:74:0a:fa:3b:fe:84:ee:00:5a:c9:95:ea:6d:
         00:27:6e:a6:ba:f8:d8:49:25:df:a8:1f:72:1f:03:1c:79:8b:
         38:bd:cc:a9:d3:bd:d3:48:5d:a7:02:0a:f3:0f:16:ad:e7:d2:
         41:30:22:0b:5e:39:09:6d:90:b1:f8:1c:de:fe:5f:89:4b:4f:
         b0:ba:8f:28:9c:f2:f5:9c:f4:42:62:09:58:e0:1b:65:ea:c1:
         99:99:e9:c1:90:3a:93:81:88:0f:08:ed:15:5b:3f:5e:35:7e:
         b4:0e:f7:12:c1:7e:9a:4a:66:9a:b7:62:89:8f:f4:31:08:5f:
         81:cd:de:bb:71:42:79:fe:21:d9:63:52:88:0a:15:47:5f:0f:
         9a:22:fb:0d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUBwQNBpAovwUEwCs/TmVfWlz8pqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc0ZjQ0ZGNkNDE2NDk1MjE5NDEzYzFiMGQ2OWExZjg3
ZjUwNzI4ODAeFw0yNDA1MTcwOTUxMzlaFw0yNDA1MTgxMTIwMzlaMDMxMTAvBgNV
BAMTKDVCMUM0NEY0MjE4OEJGNDM4NjlGMDQ2NEQzMzhGNkUxMTkxM0M0OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsSMcn3YZ2M1oKtTNA06mngok
oC9jgEh4FdmNHHZ4nh5+Teuo1d501GeW23jRWAHPv+o4t6ujDNwk2M6g4lspFQOs
Ni/ZbhOAk+4NNA7IJm9e8N7faRHoWEKvnu+IjakC3rusmkMoIuonSblU2FDhooRw
oidOteQxrPVcRCHg/S8n9KAkQMvUk99p1dCife1GNb5yESnoaH0y4o+qItNUynbE
rcM8oWhyu7KyPPbj9klyUFgKf1NWLWVobxCHiVt6xsZt99qHHomXs7ldz43SdHFJ
IwB3NlYHA62H3bXNyZm+lPsHGHy8rbbv9oWDtPVWx3qnVSG1kUMstxnhv5eXAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUWxxE9CGIv0OGnwRk0zj24RkTxJUwHwYDVR0j
BBgwFoAUl09E3NQWSVIZQTwbDWmh+H9QcogwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzdiNTc1ZWE3LTc4NmYtNGIyZC1hNDU1LTc5ZDdmYzQz
ZWNlZS8xOC85NzRGNDREQ0Q0MTY0OTUyMTk0MTNDMUIwRDY5QTFGODdGNTA3Mjg4
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvbDA5RTNOUVdTVklaUVR3YkRXbWgt
SDlRY29nLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YjU3NWVh
Ny03ODZmLTRiMmQtYTQ1NS03OWQ3ZmM0M2VjZWUvMTgvOTc0RjQ0RENENDE2NDk1
MjE5NDEzQzFCMEQ2OUExRjg3RjUwNzI4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADDyZ+NOGV+sxmXy
f7EqXxldXC3KYFoL0G6DMSIKmpMbHHK0h1Z1dJX0Vfnz+WerOJoWx6/Ylvoirnrd
s5Q/m9OB56ZMxdu/MULFY71EjBXRQDIrgcSUdjsD8tTPGZEMQhSU7xcL7COzfBdj
E+Rq+VmZdAr6O/6E7gBayZXqbQAnbqa6+NhJJd+oH3IfAxx5izi9zKnTvdNIXacC
CvMPFq3n0kEwIgteOQltkLH4HN7+X4lLT7C6jyic8vWc9EJiCVjgG2XqwZmZ6cGQ
OpOBiA8I7RVbP141frQO9xLBfppKZpq3YomP9DEIX4HN3rtxQnn+IdljUogKFUdf
D5oi+w0=
-----END CERTIFICATE-----
Generated at Fri May 17 13:32:23 2024 by rpki-client on console-fra.rpki-client.org