Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/5D86A1FAB8C19115720081D417D39278074047FB.mft
File:                     5D86A1FAB8C19115720081D417D39278074047FB.mft (raw, json)
Hash identifier:          XUZa+9OnwmVHQLHfuXzMIndHNjK5th0Ch5GK8FfvULk=
Subject key identifier:   59:30:D0:71:C9:72:A9:FD:C1:36:5D:7F:E1:2C:55:E9:ED:BF:01:F8
Authority key identifier: 5D:86:A1:FA:B8:C1:91:15:72:00:81:D4:17:D3:92:78:07:40:47:FB
Certificate issuer:       /CN=5D86A1FAB8C19115720081D417D39278074047FB
Certificate serial:       662D4877F92C73B8B58875AD4E7349A82C5B48F8
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5D86A1FAB8C19115720081D417D39278074047FB.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/5D86A1FAB8C19115720081D417D39278074047FB.mft
Manifest number:          7C
Signing time:             Thu 21 Nov 2024 00:17:19 +0000
Manifest this update:     Thu 21 Nov 2024 00:12:19 +0000
Manifest next update:     Fri 22 Nov 2024 01:53:19 +0000
Files and hashes:         1: 5D86A1FAB8C19115720081D417D39278074047FB.crl (hash: 8tB0c4fta0mmQttH/uW14skpPKO8WUcNVJCtvPWYejY=)
                          2: 326131343a373538303a343030303a3a2f33362d3336203d3e20323135363634.roa (hash: EroBiARMiR9Tr+DNWHTks5VLbZZVtL2qY5ZcSwNbJUw=)
                          3: 326131343a373538303a346630303a3a2f34302d3430203d3e20323132353136.roa (hash: VUV3m8Zhofw333vuETnt4DSTD9lAxosAm4DU0tglNzc=)
                          4: 326131343a373538303a346630373a3a2f34382d3438203d3e20323136343138.roa (hash: s68j0tD54A19iO5VaV70/QP6qmgRqrfnBgtJ+gA+FoY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/5D86A1FAB8C19115720081D417D39278074047FB.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/5D86A1FAB8C19115720081D417D39278074047FB.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5D86A1FAB8C19115720081D417D39278074047FB.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 17:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2d:48:77:f9:2c:73:b8:b5:88:75:ad:4e:73:49:a8:2c:5b:48:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D86A1FAB8C19115720081D417D39278074047FB
        Validity
            Not Before: Nov 21 00:12:19 2024 GMT
            Not After : Nov 22 01:53:19 2024 GMT
        Subject: CN=5930D071C972A9FDC1365D7FE12C55E9EDBF01F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f9:a7:58:84:f7:02:7b:a2:97:22:a2:e8:fa:
                    e2:30:7c:09:fc:71:bc:38:31:d5:c4:e8:d1:18:32:
                    dd:f1:89:3a:72:be:41:bc:9e:aa:d7:cb:d5:2b:85:
                    4a:00:33:02:34:29:ab:1a:8a:80:71:62:21:17:fd:
                    bc:43:40:5c:90:cf:a2:46:71:a3:de:56:5a:51:08:
                    b4:5c:bf:2d:fe:14:f6:37:c0:ea:22:b9:db:2f:dd:
                    a4:ca:ea:15:fb:5d:83:34:f3:ab:78:55:e3:52:03:
                    57:cd:b5:1f:d8:c1:75:49:5b:56:e4:9e:2c:88:21:
                    2b:ec:23:48:bd:ed:c5:e9:5b:fa:65:52:44:b9:ee:
                    4a:bf:74:21:76:d9:dc:a0:cf:f3:84:6c:bb:5e:b6:
                    97:cd:be:1f:36:54:d8:63:86:37:27:88:49:df:c8:
                    2f:e9:b1:af:93:3d:7d:fd:d5:2e:dc:2e:d7:cf:2e:
                    9d:31:34:67:ce:29:4f:20:87:50:92:c0:b3:20:e9:
                    6a:15:35:fa:23:eb:7b:28:78:9c:03:b8:07:0a:2f:
                    5f:a3:53:93:ef:2d:13:c1:db:f0:18:3a:b2:44:54:
                    c2:4b:b7:21:e2:03:17:6b:81:61:19:1e:0e:c5:53:
                    56:49:6d:d1:9a:e8:4d:7a:26:16:9d:0a:9a:9d:40:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:30:D0:71:C9:72:A9:FD:C1:36:5D:7F:E1:2C:55:E9:ED:BF:01:F8
            X509v3 Authority Key Identifier:
                keyid:5D:86:A1:FA:B8:C1:91:15:72:00:81:D4:17:D3:92:78:07:40:47:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/5D86A1FAB8C19115720081D417D39278074047FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/5D86A1FAB8C19115720081D417D39278074047FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/98826bce-854a-48c6-86af-93cf28393576/1/5D86A1FAB8C19115720081D417D39278074047FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ab:e2:01:97:eb:06:ab:e3:27:6f:71:70:d6:27:12:39:e0:
         40:4e:f9:25:33:a9:b0:b5:39:c1:ab:e0:d4:da:d7:be:d3:72:
         da:6b:0e:44:cb:a2:7c:54:27:f6:42:a2:f4:5e:17:aa:80:4d:
         26:8d:67:b7:75:f0:d7:f3:a0:a5:41:a7:eb:09:5d:b0:fd:0c:
         ec:4e:e8:3f:aa:9a:00:a6:8a:80:8c:f4:26:38:a7:94:08:e9:
         1d:e2:2b:b5:ff:ff:1c:70:74:95:fc:51:5f:e4:5f:dc:20:85:
         89:0f:7b:af:dd:c1:bd:f7:95:06:6a:c1:fe:fc:e8:d9:42:f8:
         34:85:73:95:73:d2:da:98:a2:46:16:31:0f:fb:35:92:54:99:
         c1:45:0e:ae:53:70:a8:c9:a2:a3:0f:53:6b:0c:5a:ff:ec:e7:
         05:5b:6c:a6:a7:6c:27:8f:03:9e:62:9d:1c:50:62:21:83:4f:
         88:a8:2d:0f:44:48:d3:3d:3f:2e:da:59:90:83:7b:a4:23:d7:
         71:34:40:18:cd:44:9f:e0:f6:9d:2f:29:b4:a9:7c:f4:1b:cd:
         99:75:d0:c9:28:bd:dd:95:6a:ac:10:65:17:ff:2e:58:3c:f3:
         0f:14:11:1c:1e:c8:bc:b8:ed:65:77:10:c9:05:73:b6:b3:10:
         81:2a:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:58:32 2024 by rpki-client on console-ams.rpki-client.org