Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/87D48146623246673056151F64ABB8D1EE6B7727.mft
File:                     87D48146623246673056151F64ABB8D1EE6B7727.mft (raw, json)
Hash identifier:          7eyJfnQr3y4ViSxYlKuLjtk4b4WdMSKGdea2ou0hRi8=
Subject key identifier:   1C:58:19:9A:22:F8:94:BA:7D:13:5A:A8:24:2E:12:8D:EC:EE:1F:71
Authority key identifier: 87:D4:81:46:62:32:46:67:30:56:15:1F:64:AB:B8:D1:EE:6B:77:27
Certificate issuer:       /CN=87d48146623246673056151f64abb8d1ee6b7727
Certificate serial:       1FED8AF30B32B519576AE4F35643E9E7E3808025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9SBRmIyRmcwVhUfZKu40e5rdyc.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/87D48146623246673056151F64ABB8D1EE6B7727.mft
Manifest number:          D8
Signing time:             Wed 26 Jun 2024 07:51:53 +0000
Manifest this update:     Wed 26 Jun 2024 07:46:53 +0000
Manifest next update:     Thu 27 Jun 2024 10:22:53 +0000
Files and hashes:         1: 3139332e33362e3130372e302f32342d3234203d3e20323130363137.roa (hash: jkriskThxG1KyYqfjGrvtwXMn5mCuY+uIvlSK0E2Dfs=)
                          2: 326130643a643734323a3a2f34352d3435203d3e20323130303336.roa (hash: aqI3iId8xDivuUW2DyGTBLcnPzstt996Di4KdwwOrC0=)
                          3: 3139332e33362e3130362e302f32342d3234203d3e20323130303336.roa (hash: vJ2TPwkWtWC9on+HuIpQJAsK37BeXe2LiPhFGiuERFQ=)
                          4: 326130643a643734323a34303a3a2f34342d3434203d3e20323130343030.roa (hash: 5wlWDOI+hegdinJUw7EOjr5btG7SYdI8EPjEVY7fLjQ=)
                          5: 3139332e33362e3130342e302f32342d3234203d3e20323130303336.roa (hash: OCeKg1l3bm5CMGbt0uvhw1k2KKswNc/9cuB6HC8XAQk=)
                          6: 326130643a643734303a3a2f34382d3438203d3e20323130303336.roa (hash: NVsaZ9iPKYZVXCBCRypoKEHoUemUiOWP8NUQFTgIeBk=)
                          7: 87D48146623246673056151F64ABB8D1EE6B7727.crl (hash: +QhdfgSLzOq8TOrjMPAG/cEfPErDY4JJwmPBi7XlPTY=)
                          8: 3139332e33362e3130352e302f32342d3234203d3e20323130303336.roa (hash: UgwBQxrg9IZR0tU2A8AY1Wenj1y0FXluIB4cA2fTaP0=)
                          9: 326130643a643734303a3130353a3a2f34382d3438203d3e20323130303336.roa (hash: UONAL4jxVfz8GT8TFAybQ/ZjE1N51ihskBMOpLCGFnQ=)
                          10: 326130643a643734303a3130373a3a2f34382d3438203d3e20323130363137.roa (hash: LJ4TxqwylUP4O6xsTnx4l7XsNo+DoQtxF6Vm43wdwUY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/87D48146623246673056151F64ABB8D1EE6B7727.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/87D48146623246673056151F64ABB8D1EE6B7727.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h9SBRmIyRmcwVhUfZKu40e5rdyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Jun 2024 07:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ed:8a:f3:0b:32:b5:19:57:6a:e4:f3:56:43:e9:e7:e3:80:80:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d48146623246673056151f64abb8d1ee6b7727
        Validity
            Not Before: Jun 26 07:46:53 2024 GMT
            Not After : Jun 27 10:22:53 2024 GMT
        Subject: CN=1C58199A22F894BA7D135AA8242E128DECEE1F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:42:4a:64:17:79:91:30:3c:f1:ac:30:13:
                    87:03:76:df:c2:87:7e:9d:75:c1:c3:5e:a9:28:4e:
                    28:db:0d:02:00:9c:76:d5:69:5e:1a:84:60:e1:9e:
                    10:4c:b7:a5:01:db:8c:ab:d4:99:5c:d5:02:5c:49:
                    9f:29:b4:19:4e:81:1a:da:08:1c:f7:58:a4:81:e9:
                    d0:f0:af:30:49:ef:0a:4d:3e:4b:c2:e2:1b:c2:4f:
                    a1:5b:40:0e:c6:8a:b2:06:ee:12:2a:46:ac:c7:9a:
                    90:81:0d:d6:63:c7:20:a2:08:5e:d0:9e:3c:ea:d0:
                    f9:ec:21:08:eb:9a:13:e2:1a:60:d6:ca:c2:65:55:
                    8b:bc:83:15:02:f4:45:1b:97:0d:ec:78:fe:92:4d:
                    b1:92:c1:89:da:31:b6:35:43:19:00:54:d0:fb:c2:
                    78:fb:89:83:83:76:5e:96:ad:75:6e:17:9d:73:d8:
                    d8:ea:07:c9:6c:1a:0c:18:6e:95:24:dc:53:e9:1f:
                    11:16:2e:86:d5:11:0c:f7:9e:30:b9:96:f1:7d:52:
                    b0:dd:e0:18:98:8c:76:05:b7:31:e5:83:42:11:64:
                    f0:4c:16:37:19:33:eb:56:fc:6e:84:17:57:91:03:
                    47:64:27:84:d6:82:3c:c4:e6:3f:e0:f5:ad:4f:b7:
                    f4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:58:19:9A:22:F8:94:BA:7D:13:5A:A8:24:2E:12:8D:EC:EE:1F:71
            X509v3 Authority Key Identifier:
                keyid:87:D4:81:46:62:32:46:67:30:56:15:1F:64:AB:B8:D1:EE:6B:77:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/87D48146623246673056151F64ABB8D1EE6B7727.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9SBRmIyRmcwVhUfZKu40e5rdyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a84b548c-275a-476e-bfbe-540e73e62383/0/87D48146623246673056151F64ABB8D1EE6B7727.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c9:de:53:71:cd:e2:db:0d:33:18:ed:ab:8a:cb:42:53:d6:
         d8:fe:bd:a7:68:69:9c:48:de:d4:1e:ec:7d:e2:54:cd:15:2c:
         36:85:0c:a9:60:5d:a6:17:67:db:42:f2:d0:8a:19:96:e5:91:
         bd:e9:ab:11:a3:21:07:d9:0d:be:a7:0d:97:af:dd:3b:9a:aa:
         44:b1:2a:e5:4e:8d:18:41:38:3a:a9:1a:cf:4f:da:92:e3:d8:
         dc:d3:c9:4a:36:ea:e2:fa:8a:b6:a0:1d:8a:7a:6c:56:29:f6:
         01:a9:7f:85:fd:ae:6c:63:bb:71:f3:d4:8a:cc:8a:dc:8c:ea:
         15:d7:8d:b8:ad:a7:bd:ae:96:54:8d:00:44:e9:59:a4:eb:c9:
         75:ba:ee:dc:c5:99:47:a5:a4:5f:bd:ac:de:e1:19:20:21:27:
         07:30:f6:bb:b8:26:0a:5a:7e:78:dc:06:ef:10:97:00:bc:d9:
         64:bb:f5:a6:36:62:a2:ec:c5:df:c0:91:44:c7:2f:03:35:bb:
         18:fb:67:7c:df:90:7b:24:93:c6:67:0f:d8:01:4e:d4:16:26:
         a6:34:99:5f:38:4f:36:14:9e:48:f7:3f:8e:84:56:c9:8d:c5:
         c2:cf:a7:b7:bc:58:cd:f7:fc:01:af:2d:13:6b:f0:8b:00:4f:
         0d:81:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:54:43 2024 by rpki-client on console-fra.rpki-client.org