Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
File:                     4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft (raw, json)
Hash identifier:          QxCHsbAW76n+lCoR1490sy1RwmRHdPKB1LQShTT6lUc=
Subject key identifier:   B8:3D:3E:C0:11:72:BE:1F:25:C4:29:3A:86:0B:6D:5F:BD:EC:23:56
Authority key identifier: 48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C
Certificate issuer:       /CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
Certificate serial:       458E005D59049258F1C3B66D9E45B3B22AD5CD98
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
Manifest number:          EB
Signing time:             Sun 24 Nov 2024 21:10:26 +0000
Manifest this update:     Sun 24 Nov 2024 21:05:26 +0000
Manifest next update:     Mon 25 Nov 2024 21:54:26 +0000
Files and hashes:         1: 326130353a646663313a386562303a3a2f34342d3434203d3e203538333339.roa (hash: ImfUsE5hI+pSa2EYUbg2JqMCSp0EtU6UeuKe1AEdLu4=)
                          2: 326130353a646663313a386531303a3a2f34342d3434203d3e203538333339.roa (hash: g9XSa+hkGR+O8hAd/ooNghahZ8wNAt5ZKRdKoKrGQPg=)
                          3: 326130353a646663313a386533303a3a2f34342d3434203d3e203538333339.roa (hash: vfdl9n8P5v7Mc9ur+wyRaR08tksVFPmC0cYStpvJaig=)
                          4: 326130353a646663313a356632303a3a2f34382d3438203d3e203538333339.roa (hash: aLMhsfYdjf21J9aU3Uo3Hp0yvn1JOeVPFhZq5je9lJk=)
                          5: 326130353a646663313a386539303a3a2f34342d3434203d3e203538333339.roa (hash: Tgfrgar40d8idzFtgsgIHn77m2VnvSI9U8cDXGONvPU=)
                          6: 326130353a646663313a356633353a3a2f34382d3438203d3e203538333339.roa (hash: X8FhjwX0/UDo3xonQsBS/tYWsiU5s7aHp7GNSuRbrxc=)
                          7: 326130353a646663313a386532303a3a2f34342d3434203d3e203538333339.roa (hash: Cy9GyosMFjfQy/vod1txAY20bDIBcoY1BrR6/Kpwb/w=)
                          8: 326130353a646663313a356630303a3a2f34382d3438203d3e203538333339.roa (hash: XPk2k9dsgjsxpPiSvqwJ4CNqJpsAAMLtunEw6Hp2t78=)
                          9: 326130353a646663313a386566303a3a2f34342d3434203d3e203538333339.roa (hash: h8n4c/yMut+DwIceP5DlxAkZ1ZyaB0hDcKPZIDgCNzI=)
                          10: 4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl (hash: R1Qd/9ilvrf3MBYlgiASPkh+ptjGe4iNqdARw9uyQWE=)
                          11: 326130353a646663313a386563303a3a2f34342d3434203d3e203538333339.roa (hash: WoYYXy0WXkt2pwt4m8D9I2LfOvIhGaGz1pYsH4GwK3U=)
                          12: 326130353a646663313a386530303a3a2f34342d3434203d3e203538333339.roa (hash: 1Z3KnSHAtzj/eRxYKUB1Ez4GM/okPJ8NL2ugJD6hNl8=)
                          13: 326130353a646663313a386565303a3a2f34342d3434203d3e203538333339.roa (hash: HHUg4WvLDwqjf5HszZkAEAWzJrv3p0S9EmICIOmBqTg=)
                          14: 326130353a646663313a356631303a3a2f34382d3438203d3e203538333339.roa (hash: CI2trAO5tY7xWETG/nEdmZBLg2xb/bS4UECfuMJO6Gg=)
                          15: 326130353a646663313a386538303a3a2f34342d3434203d3e203538333339.roa (hash: CHp/jTqTMOUjCGUpN4KSV4rsvvBtNkPd7BPzuM6nN+4=)
                          16: 326130353a646663313a356637303a3a2f34382d3438203d3e203538333339.roa (hash: UOKbBIiyEWlauUpIniKm9AIr9odgq6vWH5bxOmL8Z2k=)
                          17: 326130353a646663313a356633303a3a2f34382d3438203d3e203538333339.roa (hash: 3wYYmRTJXmIU3AyHzpI78JR3BNL4Rog9KhzaLzdhWig=)
                          18: 326130353a646663313a356632353a3a2f34382d3438203d3e203538333339.roa (hash: Ynwjfj/qdHRIDVGR9tQC0e9OU+RdKrZq0/rZlWxmaLk=)
                          19: 326130353a646663313a356631353a3a2f34382d3438203d3e203538333339.roa (hash: PkkPy4ZC1uvLgq5pe5bwSoV2078t31rlgRftDtaSF70=)
                          20: 326130353a646663313a386561303a3a2f34342d3434203d3e203538333339.roa (hash: jPd2PIWqEhpbHqPzvZRYzMFR6G9zFHayHqczImBo3XI=)
                          21: 326130353a646663313a386564303a3a2f34342d3434203d3e203538333339.roa (hash: ObqGWvqg9GJxfKt+XEFUjK5qAKH2uuG4nf/6ArxJHW8=)
                          22: 326130353a646663313a356635303a3a2f34342d3434203d3e203538333339.roa (hash: VUaWN5Hr9XE1FQcLJMnDoaZDScPCT+Tqxj2PjSvWgM8=)
                          23: 326130353a646663313a356638353a3a2f34382d3438203d3e20313338313930.roa (hash: PbjGQaJ4uX6rd1DPG4Fa9NofqNgG0jB8DooLSt80wXs=)
                          24: 326130353a646663313a356637303a3a2f34342d3434203d3e203538333339.roa (hash: LbM/lhio8ehz4cSj7c3ND0vM0UKyF5aisyHwjS99PZE=)
                          25: 326130353a646663313a356632353a3a2f34382d3438203d3e20313338313930.roa (hash: V8IPc7CzahzQBSBJjZF7w9U2AHLx+q5KGbCiSPf222I=)
                          26: 326130353a646663313a356636303a3a2f34342d3434203d3e203538333339.roa (hash: Z7UmNc3Gv5gVjdr5GEZSa1WMeyYlH2/3EFP7QkcQfYs=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 25 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8e:00:5d:59:04:92:58:f1:c3:b6:6d:9e:45:b3:b2:2a:d5:cd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4824CF994FD8A36F35B03D1AC69C7B4F5756B19C
        Validity
            Not Before: Nov 24 21:05:26 2024 GMT
            Not After : Nov 25 21:54:26 2024 GMT
        Subject: CN=B83D3EC01172BE1F25C4293A860B6D5FBDEC2356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:da:d2:80:a2:b1:b9:c5:2f:2b:36:c0:9a:
                    4d:33:04:71:ff:7a:93:65:20:6e:e3:d0:43:ff:56:
                    cc:3f:be:0c:2c:99:4f:17:ae:79:75:ae:8e:1e:c3:
                    11:8e:5b:ff:98:9c:f0:b7:12:39:bc:71:7c:60:ea:
                    ff:f4:7f:60:10:13:7d:df:ac:cc:cd:3c:16:69:03:
                    7f:cc:30:58:96:6b:74:93:03:2b:de:7c:45:d9:87:
                    57:76:36:03:83:6d:0e:d3:34:20:0b:03:d4:93:22:
                    64:d6:a9:53:84:3d:c8:29:78:f8:4f:6a:fb:0c:cc:
                    4b:2d:40:2d:b1:10:58:c8:a1:9e:a2:71:4d:5b:7d:
                    05:01:35:c2:96:78:e5:d0:bb:8e:67:8e:d5:8d:42:
                    ea:0d:f4:b5:46:07:2d:66:c4:63:aa:a5:6c:6d:2f:
                    2a:7e:e6:bd:7d:9d:f8:0f:9c:46:b1:42:3e:54:6e:
                    ab:68:72:6a:41:07:7e:d6:50:65:43:71:08:4b:ac:
                    3b:09:91:34:ed:61:a0:c9:29:3f:26:ae:87:89:e3:
                    fa:8c:e4:ea:13:26:d2:24:89:04:f7:9a:bf:86:d6:
                    65:f1:1d:59:83:40:07:b3:e6:d7:b5:b4:d9:a3:0b:
                    e2:3e:dc:c3:e8:19:fd:aa:b8:04:dc:60:1c:6f:bd:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3D:3E:C0:11:72:BE:1F:25:C4:29:3A:86:0B:6D:5F:BD:EC:23:56
            X509v3 Authority Key Identifier:
                keyid:48:24:CF:99:4F:D8:A3:6F:35:B0:3D:1A:C6:9C:7B:4F:57:56:B1:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/0/4824CF994FD8A36F35B03D1AC69C7B4F5756B19C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ec:45:04:b2:bb:79:ff:7e:04:37:61:95:66:ec:e8:4b:c9:
         06:76:98:6c:b3:63:3c:a8:06:b1:e6:2e:0c:74:11:2f:75:f4:
         61:6b:80:bf:da:5f:f2:60:e7:43:ee:3b:79:cc:0a:98:a1:09:
         27:35:77:ff:ef:2f:2b:88:3e:ce:84:59:e7:31:50:ab:e3:f0:
         dd:ef:0f:7d:3f:c1:7e:2c:93:aa:18:36:77:32:ae:12:86:19:
         4e:78:24:da:71:a0:3e:b9:e0:ff:fa:e2:c1:aa:50:bb:5d:1b:
         a2:2e:b3:4a:93:2e:11:2c:0e:b4:bb:0c:31:44:01:d4:19:09:
         f8:87:9e:62:27:61:56:11:d6:e4:46:29:e2:31:57:6c:87:b5:
         b3:f0:44:4d:f9:d1:b6:d5:11:2c:de:63:70:83:16:a7:a6:01:
         25:50:05:c8:48:7b:f5:59:f5:6a:d9:b0:a9:78:0c:95:cc:7a:
         87:2e:aa:a0:e0:69:4b:ad:0a:7f:76:5f:2b:2f:96:1c:03:16:
         99:54:3d:61:db:a0:5f:06:9b:13:df:39:de:d3:f0:a3:1f:d7:
         9f:5b:7e:a9:26:31:61:93:70:a9:8e:52:fb:e8:a9:33:38:a7:
         4e:ba:15:21:07:59:fd:86:4b:cf:c3:8e:d1:a5:17:7a:ab:6e:
         19:48:37:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:45:33 2024 by rpki-client on console-ams.rpki-client.org