Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
File:                     D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft (raw, json)
Hash identifier:          9g/ohl4Em7jc7HlGwdZzCSRzHP3qE6I6ngoBydt534E=
Subject key identifier:   12:1F:B7:41:5A:71:82:15:79:D0:2F:3C:85:95:3E:E7:CC:C4:EC:E9
Authority key identifier: D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44
Certificate issuer:       /CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
Certificate serial:       02721B28471A8E269F0339EFFBDA3BCE28F74661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
Manifest number:          0210
Signing time:             Wed 01 May 2024 16:30:47 +0000
Manifest this update:     Wed 01 May 2024 16:25:47 +0000
Manifest next update:     Thu 02 May 2024 17:34:47 +0000
Files and hashes:         1: D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl (hash: fk/dJpKn8U59TkZXXRn/OszlaicUS8Uo6NlenmMDQ/A=)
                          2: 37382e32342e3132332e302f32342d3234203d3e2037303138.roa (hash: ZsJGAAYEYqLUIow7dg0/imQDjPe3T5XhlieP0sVxzm4=)
                          3: 39332e39322e31382e302f32342d3234203d3e203534333339.roa (hash: 0oE5Xz8hSZVVCK191bZ+YhoVSBj4Q8M0iZuBlgrVyfo=)
                          4: 39332e39322e31392e302f32342d3234203d3e203631333137.roa (hash: V6Z86uxrACipTWOrp3TXH6UNEJgsUWNL4dYbXMpslac=)
                          5: 37382e32342e3132342e302f32332d3234203d3e20383334.roa (hash: vZOAtz3IRBLhZ2Tf333wCxyx4PpIHXx//TgcLbjfhcI=)
                          6: 37382e32342e3132312e302f32342d3234203d3e203631333137.roa (hash: RwfaSxxteSNcESziyQtnuZWAyXx/wSPpPO3hFCuLzuQ=)
                          7: 37382e32342e3132362e302f32332d3234203d3e2037303138.roa (hash: Ewgl0Q5XKiwc3+RtnMTYpJnZfZzrujAGTUlH9m1GeCQ=)
                          8: 34352e38362e39322e302f32342d3234203d3e20323039313831.roa (hash: DCKpF3JINbgiAv97896vm066RnUP6QrNVn+tVh6X8tM=)
                          9: 34352e38362e39352e302f32342d3234203d3e2031323939.roa (hash: sHNUjx1C5zDVVNYZO6LMRJJnO0yFg6+u79okyr4JNqE=)
                          10: 39332e39322e32312e302f32342d3234203d3e203631333137.roa (hash: AyhTLJhQIvRykhLJ0WDBmN+nDinIPxiWxR2A63QTjMo=)
                          11: 34352e38362e39332e302f32342d3234203d3e203631333137.roa (hash: F7r2zHxoMB3WUrCAP4In4YqzyOjtZGc+2V2Sm86c1V8=)
                          12: 39332e39322e32322e302f32332d3234203d3e203534333339.roa (hash: UmTKWU8Rjfv1oqZAY+cQX/Xz6npt/6m3VOBsULJ1aQE=)
                          13: 37382e32342e3132352e302f32342d3234203d3e203534333339.roa (hash: tTS+9WB6aAj3UkraYdy6dDyOFX6va3IxmxhXvq1u9m8=)
                          14: 34352e38362e39342e302f32342d3234203d3e2039303039.roa (hash: rKfZougU8FJmyo76eGgyF3kpeC1vK03Kb0a4e2CX1MU=)
                          15: 39332e39322e31372e302f32342d3234203d3e20383334.roa (hash: zYO7rH3wgw4PJa0ndeiSVUjotjSFZqWFpe0dvDG59e4=)
                          16: 37382e32342e3132342e302f32342d3234203d3e203534333339.roa (hash: oW38565ILIlqFNoVZFzMb6Kfzz1ggNiqsrLP9yBoxEc=)
                          17: 39332e39322e32302e302f32342d3234203d3e203536393133.roa (hash: fIX5zJSySlHx0b0BWzgddsVi98YzEM6JXt48wh14/i8=)
                          18: 37382e32342e3132322e302f32342d3234203d3e2037303138.roa (hash: VqVKoF7iu6oZpBibUU7dIXHyYCOWDkKvo2nEluE8pdI=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 14:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:72:1b:28:47:1a:8e:26:9f:03:39:ef:fb:da:3b:ce:28:f7:46:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d01ba013bc1e6d86f0d6d58eafa54e27fada3444
        Validity
            Not Before: May  1 16:25:47 2024 GMT
            Not After : May  2 17:34:47 2024 GMT
        Subject: CN=121FB7415A71821579D02F3C85953EE7CCC4ECE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a5:20:f6:18:8c:6e:f9:1c:b0:ea:31:f7:de:
                    4a:65:0c:e6:6f:03:ae:bd:ee:37:90:2f:4d:db:0f:
                    55:47:9c:bd:f3:aa:b5:9b:67:94:9e:cc:ff:bb:1b:
                    85:71:20:29:4f:b0:f6:ae:a6:cc:a2:e2:b2:5e:22:
                    27:3e:ba:4b:bd:f5:22:06:10:f3:f6:cb:fa:61:72:
                    a7:4b:2b:4b:d9:01:0a:71:56:2a:1a:1e:e0:d7:af:
                    4a:86:48:42:69:8d:9a:7f:c9:14:75:c4:d7:5a:9a:
                    00:6e:54:46:37:6e:0d:5f:31:b9:b6:a6:0e:df:3b:
                    65:11:b9:86:47:5c:46:40:ae:10:f9:4d:97:06:0b:
                    72:69:31:fb:e0:19:44:47:61:dc:30:61:cb:96:5d:
                    18:01:8b:c6:a8:58:f5:10:d7:d9:fc:47:35:e5:7d:
                    ed:03:50:33:dc:35:7c:c0:ce:58:93:1a:e3:6e:b0:
                    df:cb:4a:fa:aa:a9:b7:2a:40:69:77:fa:8f:90:b7:
                    2f:44:fe:06:af:36:e9:dc:0d:83:5f:9f:60:d8:19:
                    08:68:c0:cd:cf:42:17:d3:ce:a3:a6:fa:4a:cd:ea:
                    68:3c:ab:67:9f:28:bf:09:99:45:43:1b:ce:47:9b:
                    ba:c7:d9:29:85:ad:46:19:bf:a6:ea:11:c3:d2:07:
                    19:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1F:B7:41:5A:71:82:15:79:D0:2F:3C:85:95:3E:E7:CC:C4:EC:E9
            X509v3 Authority Key Identifier:
                keyid:D0:1B:A0:13:BC:1E:6D:86:F0:D6:D5:8E:AF:A5:4E:27:FA:DA:34:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BugE7webYbw1tWOr6VOJ_raNEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a522a52f-6534-4165-a6a7-ef9f74ef9431/1/D01BA013BC1E6D86F0D6D58EAFA54E27FADA3444.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:07:6a:ef:27:d2:04:04:2f:b8:96:20:2f:f1:d6:46:a5:07:
         12:2a:c5:1f:2c:2f:74:6b:e2:ad:ae:fb:25:ff:d5:57:ff:f4:
         ca:85:9c:da:3d:37:2b:8b:16:e6:1a:ad:53:22:a8:29:a7:fd:
         4b:1f:6d:84:96:ed:50:5f:d7:7e:f4:f7:7a:27:b4:05:c4:fb:
         18:3e:05:07:2e:2a:59:d0:09:f0:e3:a7:9d:e5:1a:32:44:df:
         df:22:39:49:04:76:db:0e:e7:31:d9:4c:e3:95:d5:bd:0c:12:
         fc:b5:f0:ef:b5:fd:a5:45:95:af:90:b4:76:60:6e:9c:18:15:
         d0:fb:1e:01:56:66:7e:a6:54:df:46:0e:ed:48:89:5c:1d:d8:
         7f:39:87:d9:fa:f7:9d:99:c7:f4:9f:43:2a:e5:a5:6e:47:df:
         7d:98:70:1e:6c:08:73:05:dd:d1:aa:81:61:9e:31:5c:9b:86:
         47:a8:a6:4b:bc:a0:5d:43:56:d7:0c:81:85:b8:b6:e4:86:e6:
         93:84:8e:d8:c3:58:84:a2:c4:c7:52:05:23:49:8e:70:36:aa:
         27:f7:9b:be:06:16:9e:62:a2:dc:31:d0:a5:34:87:0a:c9:f2:
         55:7c:5f:ee:1b:56:e1:f8:f1:bb:e3:04:67:4c:a6:da:2d:59:
         51:91:33:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 21:27:18 2024 by rpki-client on console-fra.rpki-client.org