Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
File:                     2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft (raw, json)
Hash identifier:          PY4hlZRguPN5+12Mqu9N+b/AY2Xa7VjGng9xtJvQ7ts=
Subject key identifier:   7E:0C:1A:C1:47:B6:0A:38:3A:0E:D1:C6:66:59:3B:D7:B3:D3:33:20
Authority key identifier: 2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0
Certificate issuer:       /CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
Certificate serial:       0F40064FA4B602FF47EFB9EE72E7A081E884F226
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
Manifest number:          01E5
Signing time:             Tue 22 Oct 2024 13:33:42 +0000
Manifest this update:     Tue 22 Oct 2024 13:28:42 +0000
Manifest next update:     Wed 23 Oct 2024 16:18:42 +0000
Files and hashes:         1: 323630323a663939323a66353a3a2f34382d3438203d3e20323134323538.roa (hash: fIYxXr7UvbVyg5ErbGlT+osMThoxVt1juRlayE+Ah94=)
                          2: 32332e3137302e3231362e302f32342d3234203d3e203538323032.roa (hash: GxalkmsKA3NBmKqpRbD10jaxIIxZkAYcIT4LC7UOrQU=)
                          3: 323630323a663939323a61353a3a2f34382d3438203d3e20323038303633.roa (hash: /wpry2cZumMTubbK3DJtMHlNPLEJ6twYQ8r2q5rnsLg=)
                          4: 323630323a663939323a66333a3a2f34382d3438203d3e203333333837.roa (hash: H4rlObELQ4x8lFTYx1O62Ru3wMsX/PzI3uR609UHR+0=)
                          5: 323630323a663939323a66363a3a2f34382d3438203d3e203533363637.roa (hash: sENJdG2CAk2ncOxoRbfpkGE6oUC5cWz8NGXE5l1PbdQ=)
                          6: 323630323a663939323a66663a3a2f34382d3438203d3e203633333930.roa (hash: Soj0jy7kE9LYD/JQGLcuZdgn7zlP6r+4PQS8VEXZL3E=)
                          7: 2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl (hash: Aee25QVGMk3NEHXeSG4p1OrkCOaUauPhq8+0Fz/xVdk=)
                          8: 323630323a663939323a66343a3a2f34382d3438203d3e20323038363939.roa (hash: mMm7sIXO5/HOrFuCVxMLtUjUW7H7tIPfaYADdGLvndY=)
                          9: 323630323a663939323a39303a3a2f34342d3438203d3e20313734.roa (hash: CuuYc8MUpVSK565EQNYdg0n6ncQQoU1CMGYQB2DaFns=)
                          10: 323630323a663939323a62303a3a2f34342d3438203d3e20343031313037.roa (hash: IZrxMk6OV/92rpAnPcsFE+Xu3xGUpjdqBdAs//cVWUA=)
                          11: 323630323a663939323a61303a3a2f34362d3438203d3e20373031.roa (hash: jpCL4m4b5cSnTNdPRoZCWkZcs8gb1dSXSE6j140G924=)
                          12: 323630323a663939323a61343a3a2f34382d3438203d3e203131333531.roa (hash: DdFqWMe8YjBRE58x7m8buJzeQzhGFoQV6Tdjk/UJm5A=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/b915810d-b97a-4696-955d-495d5d12c3b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Oct 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:40:06:4f:a4:b6:02:ff:47:ef:b9:ee:72:e7:a0:81:e8:84:f2:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355
        Validity
            Not Before: Oct 22 13:28:42 2024 GMT
            Not After : Oct 23 16:18:42 2024 GMT
        Subject: CN=7E0C1AC147B60A383A0ED1C666593BD7B3D33320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:26:47:bd:70:2f:22:a6:85:9b:11:8e:d7:eb:
                    45:8f:87:f7:55:cb:cb:12:04:5f:0e:5c:cc:fd:e8:
                    bf:0a:a9:99:36:b6:63:6e:8e:47:f9:63:53:c1:49:
                    73:4c:d4:0e:06:25:a4:a3:bf:dd:bd:d2:a3:3a:f2:
                    0b:d5:08:ab:6c:15:de:fc:0e:84:a3:9b:48:ab:40:
                    04:83:dc:94:10:e2:28:25:9c:44:70:c9:03:df:2f:
                    b8:1c:34:17:92:c0:06:b2:6d:a0:b7:75:f9:ea:65:
                    51:0d:67:99:33:f7:a0:fd:ed:6a:fa:b9:63:c1:80:
                    ef:80:9f:5c:ad:62:91:e0:91:4c:f8:92:ee:83:e6:
                    73:1b:47:fe:d5:c5:3e:b5:8b:f4:aa:a8:7b:2b:0a:
                    e4:fa:93:75:30:66:ed:af:34:19:a8:c2:6b:f9:d0:
                    33:0d:92:1b:0e:42:29:21:48:2b:a9:4f:40:c6:86:
                    75:3d:a3:c6:6b:f3:66:9b:38:71:91:32:b9:d2:03:
                    5d:32:95:ba:29:34:42:69:db:9c:84:dc:3b:26:1d:
                    8b:a7:c2:13:6c:bc:2b:98:bf:3d:5f:79:37:c9:35:
                    3d:9e:a4:54:ce:f3:cc:ad:8c:ad:74:da:c5:0e:1b:
                    5c:26:1f:47:3d:70:11:ae:96:e9:d3:01:1a:e1:f5:
                    5e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0C:1A:C1:47:B6:0A:38:3A:0E:D1:C6:66:59:3B:D7:B3:D3:33:20
            X509v3 Authority Key Identifier:
                keyid:2F:0F:1B:C6:7D:D2:B9:A7:E2:54:56:38:C1:73:D5:EC:06:0C:27:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b915810d-b97a-4696-955d-495d5d12c3b5/a1ba1093bbf34991bf59a35b2bcaf49ab828176fa4310b6355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/1/2F0F1BC67DD2B9A7E2545638C173D5EC060C27D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:94:5b:19:b7:3d:f0:31:13:ba:34:44:f5:d5:c4:86:3a:68:
         99:b1:9f:47:72:3a:f7:2b:73:79:35:8b:94:91:10:35:65:99:
         63:58:b2:2f:5f:ba:6b:8c:0a:8f:b2:42:80:e0:6a:c4:7c:de:
         c1:48:ba:b8:cb:ab:19:7d:1d:4c:59:50:d3:b2:d1:8c:e0:e6:
         82:2d:f5:bc:71:5d:72:20:5d:e1:05:6c:61:db:e4:69:a0:c1:
         1a:a3:64:00:c3:63:a5:49:94:59:17:a6:d9:06:86:66:51:f6:
         d9:23:4f:f2:ae:9d:ac:26:fa:c0:39:16:38:49:8a:e1:1e:c8:
         6b:f6:f5:69:14:d7:12:a8:15:e2:ce:ee:af:e5:41:aa:0f:8b:
         e3:35:24:15:ca:6e:81:b8:5a:2c:b9:76:b1:30:62:e4:8a:b4:
         c9:e5:7b:b4:14:12:cb:40:35:e0:88:3f:d4:b7:5a:ac:4e:15:
         5e:5b:9a:b1:c2:50:23:26:b1:3c:87:65:2e:96:84:4e:d3:b7:
         01:ee:0d:0e:11:57:24:70:eb:d7:08:32:2a:73:35:6b:f4:13:
         ab:52:5e:b0:51:94:4e:ab:bd:ec:7c:01:43:cb:eb:8c:62:11:
         2b:2b:5d:4e:69:46:69:85:5a:c8:80:bc:9f:4b:60:61:a7:4f:
         36:82:5f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 16:10:16 2024 by rpki-client on console-fra.rpki-client.org