Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
File:                     E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft (raw, json)
Hash identifier:          sZ/msWirv3biQSAPsGd+Hu+m+Eh517iV3sEI6F9nNes=
Subject key identifier:   3F:30:97:AD:C1:0B:94:5B:F5:53:EC:20:98:76:8C:03:73:7D:83:80
Authority key identifier: E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26
Certificate issuer:       /CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
Certificate serial:       3ACA0DA42EB6F10B71EA4B0769C5B139CA0A11BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
Manifest number:          51
Signing time:             Sun 02 Feb 2025 01:28:54 +0000
Manifest this update:     Sun 02 Feb 2025 01:23:54 +0000
Manifest next update:     Tue 04 Feb 2025 04:56:54 +0000
Files and hashes:         1: AS215368.asa (hash: woWmAWlAdfUVglZTxtjngU+yb37i/M9A1MFxFAQHj+s=)
                          2: E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl (hash: i/qirfYvuKuf1Bt5/rHzHeIbRwr3KkDJZRRiQpavSPM=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Feb 2025 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:ca:0d:a4:2e:b6:f1:0b:71:ea:4b:07:69:c5:b1:39:ca:0a:11:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c9295cc1c31876c8554e8b60dc573cfea7cb26
        Validity
            Not Before: Feb  2 01:23:54 2025 GMT
            Not After : Feb  4 04:56:54 2025 GMT
        Subject: CN=3F3097ADC10B945BF553EC2098768C03737D8380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:29:c0:68:e4:3b:89:6b:54:dc:6f:3c:20:19:
                    5d:59:f6:a4:d8:b5:65:f1:9f:46:bb:53:10:99:80:
                    da:62:66:f2:9d:1a:67:78:45:bb:f4:8c:d7:f7:db:
                    a3:e3:86:81:bc:a9:5c:7f:8c:2f:36:26:58:e7:24:
                    02:88:02:48:45:8e:36:ad:c7:ba:ec:ac:a8:34:35:
                    21:6f:68:22:8d:74:00:ba:e2:b0:cd:8c:2e:57:8c:
                    ac:4d:6d:74:14:24:0a:58:ff:af:ce:87:d2:97:40:
                    23:59:18:38:7c:fd:50:cf:bd:9c:f7:6a:fa:11:b3:
                    54:cc:a5:c0:60:49:6b:b2:4d:a0:d3:d0:95:a2:09:
                    e2:5c:5e:c7:93:50:ee:6a:9c:a3:6e:63:d8:65:e6:
                    f6:44:b2:db:a4:67:b1:a4:6b:31:f2:0e:a8:dc:9c:
                    94:5a:77:94:68:5d:37:84:74:c8:0d:fa:70:f0:28:
                    c1:c2:ae:c6:c1:16:77:c5:18:a9:b0:9d:91:34:5f:
                    5d:b6:e7:31:76:65:ea:3b:79:97:ee:76:18:24:8b:
                    8e:1a:d4:70:32:bf:8f:b4:87:8a:45:b2:cb:dd:8f:
                    75:a7:1a:70:d3:2d:ab:c8:ff:7d:a8:78:f8:f2:cd:
                    1b:3c:29:b0:7f:b8:55:50:94:72:f0:b1:58:11:fd:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:30:97:AD:C1:0B:94:5B:F5:53:EC:20:98:76:8C:03:73:7D:83:80
            X509v3 Authority Key Identifier:
                keyid:E2:C9:29:5C:C1:C3:18:76:C8:55:4E:8B:60:DC:57:3C:FE:A7:CB:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4skpXMHDGHbIVU6LYNxXPP6nyyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/3/E2C9295CC1C31876C8554E8B60DC573CFEA7CB26.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:a6:21:e6:c7:af:ff:0d:d3:2c:2d:4a:6c:cd:50:6e:12:bd:
         68:0f:c6:9b:8b:a6:04:29:21:0c:5b:02:ef:44:c8:b2:ef:2e:
         9d:56:5f:7b:da:8c:80:3b:17:0f:81:e3:9d:b6:29:e1:1e:48:
         a4:f5:e6:63:46:9f:b6:98:b1:7d:06:9d:19:b5:2e:a9:d2:67:
         d1:29:94:01:88:57:ba:5f:7e:da:e3:3d:ae:e2:26:a5:12:38:
         77:66:79:68:d6:f0:06:0f:46:91:1d:be:d4:c1:24:23:51:64:
         72:6f:53:14:b1:f5:e7:53:f4:96:8c:04:07:ca:cc:60:67:3d:
         92:db:96:6c:d6:b9:51:7f:b1:e9:d9:f6:89:d8:d5:ec:4f:93:
         d9:91:19:0e:62:24:08:30:36:2e:f5:c4:1a:20:47:93:8a:16:
         79:0d:63:d7:df:08:2d:d9:62:15:4f:a5:9c:80:a5:ae:37:b0:
         c5:a7:e6:7b:1b:5b:65:46:6e:bf:dd:5b:e4:a6:00:f3:de:10:
         bf:8e:49:4b:07:f1:e8:6b:8d:06:1b:16:75:ee:19:f0:3e:97:
         8c:0f:ca:8e:9d:85:64:1c:16:b9:43:ed:0f:9f:7f:b6:e2:dd:
         3d:bc:f9:8e:dd:48:43:ff:0e:6f:b1:fb:7c:c1:95:e4:46:b9:
         9c:f2:64:3a
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUOsoNpC628Qtx6ksHacWxOcoKEb0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTJjOTI5NWNjMWMzMTg3NmM4NTU0ZThiNjBkYzU3M2Nm
ZWE3Y2IyNjAeFw0yNTAyMDIwMTIzNTRaFw0yNTAyMDQwNDU2NTRaMDMxMTAvBgNV
BAMTKDNGMzA5N0FEQzEwQjk0NUJGNTUzRUMyMDk4NzY4QzAzNzM3RDgzODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKcBo5DuJa1TcbzwgGV1Z9qTY
tWXxn0a7UxCZgNpiZvKdGmd4Rbv0jNf326PjhoG8qVx/jC82JljnJAKIAkhFjjat
x7rsrKg0NSFvaCKNdAC64rDNjC5XjKxNbXQUJApY/6/Oh9KXQCNZGDh8/VDPvZz3
avoRs1TMpcBgSWuyTaDT0JWiCeJcXseTUO5qnKNuY9hl5vZEstukZ7GkazHyDqjc
nJRad5RoXTeEdMgN+nDwKMHCrsbBFnfFGKmwnZE0X1225zF2Zeo7eZfudhgki44a
1HAyv4+0h4pFssvdj3WnGnDTLavI/32oePjyzRs8KbB/uFVQlHLwsVgR/So7AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUPzCXrcELlFv1U+wgmHaMA3N9g4AwHwYDVR0j
BBgwFoAU4skpXMHDGHbIVU6LYNxXPP6nyyYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzMvRTJDOTI5NUNDMUMzMTg3NkM4NTU0RThCNjBEQzU3M0NGRUE3Q0IyNi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRza3BYTUhER0hiSVZVNkxZTnhYUFA2
bnl5WS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0x
OTg3LTQ3MDEtOGYxZi04NDI1MTExOTY0ZjQvMy9FMkM5Mjk1Q0MxQzMxODc2Qzg1
NTRFOEI2MERDNTczQ0ZFQTdDQjI2Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2qYh5sev/w3TLC1KbM1Q
bhK9aA/Gm4umBCkhDFsC70TIsu8unVZfe9qMgDsXD4HjnbYp4R5IpPXmY0aftpix
fQadGbUuqdJn0SmUAYhXul9+2uM9ruImpRI4d2Z5aNbwBg9GkR2+1MEkI1Fkcm9T
FLH151P0lowEB8rMYGc9ktuWbNa5UX+x6dn2idjV7E+T2ZEZDmIkCDA2LvXEGiBH
k4oWeQ1j198ILdliFU+lnIClrjewxafmextbZUZuv91b5KYA894Qv45JSwfx6GuN
BhsWde4Z8D6XjA/Kjp2FZBwWuUPtD59/tuLdPbz5jt1IQ/8Ob7H7fMGV5Ea5nPJk
Og==
-----END CERTIFICATE-----
Generated at Sun Feb 2 05:54:34 2025 by rpki-client