Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
File:                     D70A91D89E34C7A20009B1E160FB6C627063630C.mft (raw, json)
Hash identifier:          eexvvpW7uzaxQbt4IVMz8eiQ3diqLb/KKQReUpQrs6g=
Subject key identifier:   70:13:E9:D9:27:D3:C6:90:B4:A0:4F:E5:90:45:46:00:A0:1D:CC:B9
Authority key identifier: D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C
Certificate issuer:       /CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
Certificate serial:       4728A94EC43AC2D9819C9C98292CB003B82205FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
Manifest number:          C6
Signing time:             Fri 22 Nov 2024 08:32:52 +0000
Manifest this update:     Fri 22 Nov 2024 08:27:52 +0000
Manifest next update:     Sat 23 Nov 2024 12:24:52 +0000
Files and hashes:         1: 323630323a663838323a3a2f33362d3438203d3e20343031323138.roa (hash: 7+OQpnNul6GvEz/TmHkQD01IKA9VIbWseT8LVp2j0nw=)
                          2: 32332e3138332e3133362e302f32342d3234203d3e203539393933.roa (hash: V6xYMAJmLNi9a7jp/UV/wrxTo2CdoGJPenlXloSwxmY=)
                          3: D70A91D89E34C7A20009B1E160FB6C627063630C.crl (hash: XXr1r2e/cdMcjYGEyvjwcsABCF0rpmgGvGyv2JAuTd8=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:28:a9:4e:c4:3a:c2:d9:81:9c:9c:98:29:2c:b0:03:b8:22:05:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d
        Validity
            Not Before: Nov 22 08:27:52 2024 GMT
            Not After : Nov 23 12:24:52 2024 GMT
        Subject: CN=7013E9D927D3C690B4A04FE590454600A01DCCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:ce:79:d1:aa:b1:52:79:a0:ff:46:91:35:
                    b6:a3:ed:1b:0f:6c:02:01:43:0f:6c:2e:53:95:fc:
                    b8:53:2d:5d:40:cc:92:4d:d0:fc:0b:2a:4c:76:24:
                    47:cd:6c:ff:5d:26:29:ee:8a:7e:30:11:19:ed:f7:
                    65:ba:6b:00:eb:69:c4:0b:20:b9:15:fa:ff:dd:2c:
                    ac:54:54:b2:6e:22:af:4f:f1:40:b9:e7:98:18:95:
                    78:2b:a2:94:ba:7e:5d:42:7f:c9:53:83:fa:3c:f0:
                    19:04:77:5f:bb:91:b9:f7:c4:91:ac:41:39:78:a6:
                    60:b5:90:a8:92:2f:2a:75:e1:1c:84:73:06:3f:b0:
                    ba:b2:83:b3:70:1e:3e:21:94:cc:ba:bc:e5:b4:f0:
                    a2:5e:6d:c6:34:bc:24:b1:53:4d:a1:ed:8d:65:bd:
                    7d:c5:ab:02:3f:7b:21:83:a4:65:22:38:5b:dd:bd:
                    cc:0c:38:30:9d:29:58:bb:3b:f8:83:9d:6a:73:dc:
                    51:5b:83:35:d9:b4:15:76:5c:c8:a6:92:de:c5:ac:
                    b7:6b:ae:c7:50:d3:87:fd:e0:05:6f:66:f6:f6:2d:
                    68:84:51:47:37:3c:71:ae:7b:ae:f5:77:f5:29:32:
                    b9:25:e4:eb:17:e3:53:6d:f4:77:d1:73:62:7a:b8:
                    16:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:13:E9:D9:27:D3:C6:90:B4:A0:4F:E5:90:45:46:00:A0:1D:CC:B9
            X509v3 Authority Key Identifier:
                keyid:D7:0A:91:D8:9E:34:C7:A2:00:09:B1:E1:60:FB:6C:62:70:63:63:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/32619ff9-4a46-4e93-a9b5-dda2a33a9ffd/ba59c15b9777a4a5270c9b7a584e46978e09a7bd2d154bfa9d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/20/D70A91D89E34C7A20009B1E160FB6C627063630C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:7c:09:84:64:84:5a:15:36:7f:94:e3:81:35:ad:9f:67:22:
         25:27:70:a9:6e:63:95:d5:b4:de:71:51:88:1e:f8:fa:8d:f2:
         84:43:fd:ee:47:9a:be:ce:9c:9b:31:e0:a2:27:78:31:b9:bf:
         9e:b7:d6:92:53:67:13:a1:ea:87:ec:19:59:e9:02:74:2b:c7:
         eb:fe:a7:9f:8c:e7:40:7f:41:a8:51:23:bc:a6:49:a3:e8:b7:
         c3:b5:4a:f4:15:90:e2:c8:d6:9a:6c:ff:f4:98:40:b3:ee:ce:
         ed:af:95:83:01:5c:f1:1a:37:e8:fc:1c:40:7e:1e:67:92:a1:
         f5:a4:bc:cc:68:ba:ff:97:95:0c:56:a7:88:61:80:fc:ed:ae:
         15:ad:a4:18:da:2b:2d:cc:1f:89:17:2f:39:05:c0:41:57:24:
         bd:30:54:59:2a:31:ff:8f:ca:25:87:9e:61:76:ac:9f:b9:aa:
         8d:a2:49:63:4a:03:43:11:0e:79:e0:7d:22:e1:d6:dc:a9:f4:
         8a:11:e8:4e:f0:c3:04:21:72:20:65:42:e4:be:80:59:ec:7a:
         e5:92:b3:11:f0:73:68:6a:fb:b5:3d:4d:3f:3d:3e:ca:c5:a6:
         ee:4f:a1:67:b4:44:19:d7:3f:52:3a:7d:63:dc:b3:cc:65:58:
         32:64:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:01 2024 by rpki-client on console-fra.rpki-client.org