Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
File:                     D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft (raw, json)
Hash identifier:          oRSjFPZ0u9uc2HxqafMNv2Aih6UYJJbcZr7bZFacBV8=
Subject key identifier:   07:6B:31:7C:10:29:AA:FF:3B:84:19:3C:19:86:C0:4E:5C:CF:D8:CA
Authority key identifier: D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD
Certificate issuer:       /CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
Certificate serial:       2439B833F8F0BF48D08D2F9EA4E45F0258738571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
Manifest number:          018F
Signing time:             Fri 17 May 2024 16:26:53 +0000
Manifest this update:     Fri 17 May 2024 16:21:53 +0000
Manifest next update:     Sat 18 May 2024 17:52:53 +0000
Files and hashes:         1: 323030313a3637633a6264633a3a2f34382d3438203d3e203531303139.roa (hash: VouUUFB6MS4keKXGltHm72ixPZaAsmc/lv39TWkZ+Ro=)
                          2: AS51019.asa (hash: ZSXQuSi3MFo++Kd4TadI9xEAa47WWsPirhlpPyhTWkI=)
                          3: D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl (hash: PwaDrBdYTWsrk5/pNmKzrh9tmDqS/lZTdfkD7HXvtZc=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:39:b8:33:f8:f0:bf:48:d0:8d:2f:9e:a4:e4:5f:02:58:73:85:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ff07932c3f4c1b3465ff4f0d96484733e02ead
        Validity
            Not Before: May 17 16:21:53 2024 GMT
            Not After : May 18 17:52:53 2024 GMT
        Subject: CN=076B317C1029AAFF3B84193C1986C04E5CCFD8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:e4:44:e6:78:d7:ce:df:85:de:d9:e0:24:
                    e6:aa:da:9e:bf:7a:35:f1:cb:17:67:96:42:b4:8c:
                    34:fa:d7:93:e0:73:b9:fb:31:50:68:83:b9:b1:0c:
                    fe:d2:55:f5:34:29:e8:23:02:bc:9f:67:9e:e6:bd:
                    98:bd:07:8f:52:9e:06:ae:8d:78:53:ca:21:65:aa:
                    f4:38:03:31:91:4b:3f:4d:71:24:7e:4b:a0:c1:82:
                    31:2f:53:ca:57:1e:98:be:57:cf:21:5d:93:ab:00:
                    ed:e5:b5:ca:94:04:07:fc:56:7e:f3:af:5b:a7:b6:
                    df:0b:2f:6e:63:b5:5d:c0:51:ef:56:77:c5:35:c2:
                    b2:f5:b4:d1:d1:f9:f5:6d:c4:0f:9a:84:2c:12:55:
                    2f:15:3b:0c:8d:30:f9:37:43:5e:fd:7b:7c:2a:f3:
                    d9:1e:00:f8:46:53:97:2a:20:ce:54:b5:c8:7b:90:
                    cf:39:a0:01:4f:51:b6:55:d6:0d:7d:af:92:04:fd:
                    9a:37:6e:d3:b5:87:51:f3:35:da:ac:39:85:71:fe:
                    72:40:98:9f:38:d5:cd:07:e1:29:d8:c4:a2:d4:e2:
                    13:5f:2b:0d:df:1a:fc:42:0b:40:50:3e:6a:7f:68:
                    27:48:af:61:83:24:61:08:aa:6b:50:aa:4a:62:4c:
                    52:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6B:31:7C:10:29:AA:FF:3B:84:19:3C:19:86:C0:4E:5C:CF:D8:CA
            X509v3 Authority Key Identifier:
                keyid:D2:FF:07:93:2C:3F:4C:1B:34:65:FF:4F:0D:96:48:47:33:E0:2E:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0v8Hkyw_TBs0Zf9PDZZIRzPgLq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/2/D2FF07932C3F4C1B3465FF4F0D96484733E02EAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b6:04:47:89:46:f3:d4:8f:87:6e:2f:b6:84:5c:8f:a0:93:
         ac:20:18:e3:55:20:c8:53:87:cc:22:35:90:75:d3:77:e3:78:
         96:cd:89:c3:c6:de:cb:c2:da:c7:50:cb:a8:31:83:46:b4:c5:
         12:c3:bf:67:e1:5a:e3:f5:92:52:17:94:d4:de:99:dd:0d:28:
         94:4e:a4:c3:67:ec:6a:06:37:03:11:29:ec:10:31:d0:fa:8b:
         c3:53:e6:61:88:6a:de:50:d2:c6:a3:68:76:59:07:b0:42:b3:
         8f:eb:e8:ed:d0:57:95:7e:ae:14:53:b2:56:6c:9c:ef:a3:46:
         79:fd:dd:a6:4e:2e:f9:fa:29:ed:ea:be:96:d9:5b:f9:a5:7d:
         75:c2:f8:9b:5b:c5:f4:39:91:39:25:4c:4a:f0:e6:c9:ba:59:
         c4:30:93:46:7b:29:40:53:56:98:5e:2e:5a:04:bc:c3:83:ec:
         d2:1c:13:23:1f:b2:8b:6a:ce:a0:ad:15:f5:43:c8:22:3b:69:
         9d:85:80:a2:fa:34:bd:50:ef:88:5e:14:96:42:f6:19:e1:07:
         e6:cc:fc:4e:cf:ba:45:67:cd:4a:01:a4:4e:a2:7f:38:c4:48:
         92:1f:38:15:fa:75:d6:da:71:9b:cb:f0:07:17:b7:56:89:72:
         c3:08:fc:5f
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUJDm4M/jwv0jQjS+epORfAlhzhXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDJmZjA3OTMyYzNmNGMxYjM0NjVmZjRmMGQ5NjQ4NDcz
M2UwMmVhZDAeFw0yNDA1MTcxNjIxNTNaFw0yNDA1MTgxNzUyNTNaMDMxMTAvBgNV
BAMTKDA3NkIzMTdDMTAyOUFBRkYzQjg0MTkzQzE5ODZDMDRFNUNDRkQ4Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ReRE5njXzt+F3tngJOaq2p6/
ejXxyxdnlkK0jDT615Pgc7n7MVBog7mxDP7SVfU0KegjAryfZ57mvZi9B49Sngau
jXhTyiFlqvQ4AzGRSz9NcSR+S6DBgjEvU8pXHpi+V88hXZOrAO3ltcqUBAf8Vn7z
r1untt8LL25jtV3AUe9Wd8U1wrL1tNHR+fVtxA+ahCwSVS8VOwyNMPk3Q179e3wq
89keAPhGU5cqIM5Utch7kM85oAFPUbZV1g19r5IE/Zo3btO1h1HzNdqsOYVx/nJA
mJ841c0H4SnYxKLU4hNfKw3fGvxCC0BQPmp/aCdIr2GDJGEIqmtQqkpiTFLnAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUB2sxfBApqv87hBk8GYbATlzP2MowHwYDVR0j
BBgwFoAU0v8Hkyw/TBs0Zf9PDZZIRzPgLq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh
ZTNmLzIvRDJGRjA3OTMyQzNGNEMxQjM0NjVGRjRGMEQ5NjQ4NDczM0UwMkVBRC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzB2OEhreXdfVEJzMFpmOVBEWlpJUnpQ
Z0xxMC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00
MTliLTRkYjUtYmJkMy01Y2NhNjMzY2FlM2YvMi9EMkZGMDc5MzJDM0Y0QzFCMzQ2
NUZGNEYwRDk2NDg0NzMzRTAyRUFELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrYER4lG89SPh24vtoRc
j6CTrCAY41UgyFOHzCI1kHXTd+N4ls2Jw8bey8Lax1DLqDGDRrTFEsO/Z+Fa4/WS
UheU1N6Z3Q0olE6kw2fsagY3AxEp7BAx0PqLw1PmYYhq3lDSxqNodlkHsEKzj+vo
7dBXlX6uFFOyVmyc76NGef3dpk4u+fop7eq+ltlb+aV9dcL4m1vF9DmROSVMSvDm
ybpZxDCTRnspQFNWmF4uWgS8w4Ps0hwTIx+yi2rOoK0V9UPIIjtpnYWAovo0vVDv
iF4UlkL2GeEH5sz8Ts+6RWfNSgGkTqJ/OMRIkh84Ffp11tpxm8vwBxe3Volywwj8
Xw==
-----END CERTIFICATE-----
Generated at Fri May 17 19:34:31 2024 by rpki-client on console-fra.rpki-client.org