Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
File:                     B3D0280F500695A43204251C9830454CA8A2E7AC.mft (raw, json)
Hash identifier:          oBjQPdF4w+uS45zATExWlGGzYumjaaddmryNb3TumGQ=
Subject key identifier:   D6:D1:35:E9:08:A4:6C:1D:B5:23:D1:C8:61:D0:75:54:F7:4A:00:1C
Authority key identifier: B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC
Certificate issuer:       /CN=b3d0280f500695a43204251c9830454ca8a2e7ac
Certificate serial:       17EBB9F0D46A0B6844C60C23CA601FE6BF00328E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
Manifest number:          AB
Signing time:             Mon 16 Sep 2024 12:11:43 +0000
Manifest this update:     Mon 16 Sep 2024 12:06:43 +0000
Manifest next update:     Tue 17 Sep 2024 12:13:43 +0000
Files and hashes:         1: 3138352e3138362e32362e302f32342d3234203d3e20323135313434.roa (hash: FGw0uQkf/MUJnZ7pOVEyfqDiaQUqk5EZIWLuflhMios=)
                          2: 3138352e3138362e32372e302f32342d3234203d3e203631333137.roa (hash: 2F3f2M3iftyv7EiTkHvKpwsHqihrOdk50XbB4vq7cXc=)
                          3: 3138352e3138362e32352e302f32342d3234203d3e203135343430.roa (hash: ILHMVutQqrUF6iiv8nR1xxWWhUx08z770HSNuw90qv4=)
                          4: 326130623a366338313a3a2f33322d3332203d3e20323135383338.roa (hash: ZrlItvK4GUW9v/tEHAeY+MLQvIad9obNlZyUUNFrjsU=)
                          5: 326130623a366338303a3a2f33322d3332203d3e20323135383338.roa (hash: hwipkGSwtCKNEaVeYs/lVeZpckysHvyHuEt4Oz/IH2U=)
                          6: B3D0280F500695A43204251C9830454CA8A2E7AC.crl (hash: YkJenycqCLqpBpUgLhcWIdLzK0s3eLg8pnZbi5BkaE0=)
                          7: 3138352e3138362e32342e302f32342d3234203d3e20323135383338.roa (hash: sYBJGQEADZAQ/LhDv39fbswhI7nUsQH8ZMB5xh3hosI=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 12:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:eb:b9:f0:d4:6a:0b:68:44:c6:0c:23:ca:60:1f:e6:bf:00:32:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d0280f500695a43204251c9830454ca8a2e7ac
        Validity
            Not Before: Sep 16 12:06:43 2024 GMT
            Not After : Sep 17 12:13:43 2024 GMT
        Subject: CN=D6D135E908A46C1DB523D1C861D07554F74A001C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:64:c3:a9:ef:e8:1b:46:42:f9:4c:e6:10:73:
                    79:f9:04:93:db:f7:0b:46:f9:ac:98:60:49:55:88:
                    81:b5:28:38:61:06:d6:0e:7d:84:6b:75:45:77:f1:
                    8f:f1:33:91:8b:f1:c0:52:91:d6:1a:8c:71:f0:07:
                    d7:57:3c:41:a4:17:76:2d:c2:a9:bf:ba:7c:62:14:
                    49:fe:85:e3:78:d6:af:f9:f9:13:68:80:cd:d6:b5:
                    9e:05:07:37:03:30:7e:8f:b8:9c:67:f2:27:0d:9f:
                    13:b7:ba:f3:65:c1:42:5e:f6:7f:cb:c1:ad:07:56:
                    e8:4d:7d:cd:8b:7a:0a:2b:2d:f0:2d:8f:d6:b7:6a:
                    f9:5e:63:37:26:85:9e:e9:cb:48:97:50:f8:70:67:
                    2f:c0:7b:16:9f:7a:29:6f:4e:42:8a:cf:63:94:78:
                    7a:81:5a:a0:6e:73:13:7d:8c:ad:86:78:07:f4:de:
                    ec:49:53:da:78:6e:1f:a6:c1:0c:e8:7c:bc:e1:77:
                    8d:a0:8d:15:37:30:9b:84:21:0d:83:2c:8e:b8:8b:
                    91:4c:93:0a:b9:9f:08:6c:86:a0:3d:90:ec:87:c3:
                    95:a3:39:cd:ba:06:23:31:ce:c3:16:a3:9b:0d:9f:
                    1e:da:86:7c:16:a6:a9:86:f9:8a:09:ea:2f:dd:8e:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D1:35:E9:08:A4:6C:1D:B5:23:D1:C8:61:D0:75:54:F7:4A:00:1C
            X509v3 Authority Key Identifier:
                keyid:B3:D0:28:0F:50:06:95:A4:32:04:25:1C:98:30:45:4C:A8:A2:E7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9AoD1AGlaQyBCUcmDBFTKii56w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/87ae25f3-706b-47ed-bb74-46684ae0ef2b/0/B3D0280F500695A43204251C9830454CA8A2E7AC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ac:5f:8d:66:6f:f3:26:f1:2a:85:ea:74:56:aa:e0:00:ad:
         b9:da:34:ad:51:02:21:cb:44:43:f1:02:f4:d3:53:04:f8:ea:
         fe:3c:e8:96:b2:6e:7e:15:a3:7a:6c:b4:c1:fb:41:8c:74:d5:
         d0:73:dc:e5:1f:29:94:60:c5:be:9c:7e:32:81:91:6e:f4:b5:
         8e:38:e5:37:74:6b:38:54:52:11:6d:6c:c9:26:f8:9e:7a:de:
         ac:98:92:a0:86:02:74:6b:15:62:bc:09:2c:ae:49:50:25:43:
         94:77:e4:1e:62:b8:81:ce:dc:b0:c2:35:79:b3:d9:cd:df:74:
         c6:0b:59:33:ea:6b:0a:b3:f9:05:a0:4a:e4:7c:26:c1:89:3f:
         b2:58:9a:15:f9:4e:bf:39:fe:6d:37:71:d3:f5:cc:70:41:e4:
         82:51:62:2f:75:d4:49:d4:83:8f:d9:cb:4e:55:2c:31:88:80:
         ab:45:76:96:46:97:ca:a4:52:50:8e:c4:ff:82:ef:eb:96:20:
         48:6d:39:03:73:73:aa:d3:82:6c:09:3c:14:57:f0:76:9f:d6:
         37:a7:36:76:c4:36:e8:31:d1:ae:10:46:c9:e5:b2:51:d4:af:
         d3:ce:01:99:b6:9e:cf:0e:52:64:de:d7:d2:66:66:e0:aa:72:
         2a:fe:35:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:40:42 2024 by rpki-client on console-ams.rpki-client.org