Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
File:                     E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft (raw, json)
Hash identifier:          4PHb42sO7/SOeA63SxJektixsPZ4iLr+DYZ6YGw9Yx0=
Subject key identifier:   11:FF:9B:C4:66:F4:C1:80:4B:A5:CE:8A:5D:66:6C:27:DC:45:72:3F
Authority key identifier: E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8
Certificate issuer:       /CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
Certificate serial:       07929D417CA7B9B7782AEFF6301E945FAA18A675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
Manifest number:          F2
Signing time:             Fri 22 Nov 2024 22:58:06 +0000
Manifest this update:     Fri 22 Nov 2024 22:53:06 +0000
Manifest next update:     Sat 23 Nov 2024 23:32:06 +0000
Files and hashes:         1: AS215131.asa (hash: VwG58DMBVe0JSSLsDooqpyl0bL54hGOcSKx6jhmgS1I=)
                          2: E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl (hash: CDLypR8cpkdiKzHzAw1Rm2/xCyVeCiDvRU2NsoGvH28=)
                          3: 323030313a3637633a6535633a3a2f34382d3438203d3e20323135313331.roa (hash: 8S1mRepLz4anZXttxO74tmjo+5TJ/IvIFNDFY67JQHA=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:92:9d:41:7c:a7:b9:b7:78:2a:ef:f6:30:1e:94:5f:aa:18:a6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4ba98fc3ebe806c782e589faf5295c3259212a8
        Validity
            Not Before: Nov 22 22:53:06 2024 GMT
            Not After : Nov 23 23:32:06 2024 GMT
        Subject: CN=11FF9BC466F4C1804BA5CE8A5D666C27DC45723F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:4f:52:09:ef:07:0b:1d:19:2e:77:61:ac:
                    ee:ca:33:ea:9a:7b:42:b8:5c:e4:b0:9c:ac:4f:27:
                    c6:c0:51:bb:bf:3b:98:51:57:4d:41:fe:52:15:83:
                    a4:89:aa:cd:2e:63:a6:ab:64:48:96:f3:c2:a2:f0:
                    15:4f:6d:ae:66:18:da:7f:64:dd:ef:7b:73:bc:52:
                    7a:55:ae:58:13:f5:98:7d:39:55:6d:cb:0c:c8:4b:
                    26:b7:a3:16:7e:c7:6e:de:77:3a:80:f3:2d:47:e9:
                    f5:46:d0:55:14:fa:97:44:98:00:b1:60:09:ec:b9:
                    93:a3:85:ee:09:e7:8c:9d:5d:41:50:25:a9:56:e4:
                    14:d6:8c:f0:10:32:6f:34:c2:c4:34:0c:5d:82:e8:
                    1c:22:fe:62:86:d3:93:34:cc:9e:ee:d9:a5:fc:69:
                    a8:7d:6c:9f:5d:ba:64:5c:fa:d0:ee:0c:ff:10:0a:
                    c6:af:00:17:b0:cd:e7:a4:a8:e9:b4:22:3a:01:25:
                    15:41:23:36:6d:8b:6d:23:cd:22:d7:31:6f:0d:77:
                    d7:22:7e:fa:cc:99:5b:da:d8:c3:08:f4:3a:d1:47:
                    c0:fc:ca:21:89:ac:e1:ab:bb:24:31:42:c3:f2:4c:
                    88:70:da:83:0d:4b:ac:88:1a:d0:86:8e:cc:79:ef:
                    7f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FF:9B:C4:66:F4:C1:80:4B:A5:CE:8A:5D:66:6C:27:DC:45:72:3F
            X509v3 Authority Key Identifier:
                keyid:E4:BA:98:FC:3E:BE:80:6C:78:2E:58:9F:AF:52:95:C3:25:92:12:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5LqY_D6-gGx4Llifr1KVwyWSEqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b6421908-75dc-430b-8fb9-748c75bb02c2/0/E4BA98FC3EBE806C782E589FAF5295C3259212A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:46:28:b5:1b:d6:6d:07:86:4f:00:aa:77:93:ce:7c:30:cf:
         80:1e:8a:7f:44:0b:34:f6:6c:52:86:58:2a:c2:3d:da:c7:60:
         9b:0b:1a:24:f8:05:0a:cb:14:df:f7:31:8a:cc:19:fc:6e:2a:
         1e:ea:8b:2b:7c:f6:69:b1:cc:58:d4:ee:c6:39:ae:e0:7d:ec:
         55:05:99:02:7f:1b:39:10:59:3a:04:b5:59:41:cf:3a:af:31:
         92:c6:a3:4b:24:b2:db:20:10:72:01:81:35:a5:10:75:b2:85:
         c4:24:8c:56:1e:c9:2f:94:c6:9a:f5:5b:f7:85:b0:0a:72:c3:
         bd:d2:fc:91:03:dd:9a:b7:4c:c5:80:62:e8:3b:14:f8:af:7c:
         bf:99:8a:77:58:71:00:a8:c3:35:36:aa:cc:39:62:49:6d:09:
         0a:6d:4f:92:fb:79:d3:40:b0:f7:2c:a4:2d:25:83:8a:ff:a2:
         54:b8:9a:9d:6b:42:b6:35:a7:14:ff:14:e4:33:f1:a8:12:26:
         17:10:73:6c:d7:61:3f:12:42:d0:b7:6d:0e:2f:e0:55:c0:c9:
         b1:d4:65:c7:25:dd:51:e1:ee:fc:fa:66:8e:41:ed:62:7f:4f:
         ab:51:1b:59:42:a6:1e:84:d0:a4:24:93:3d:55:af:35:95:cf:
         df:0c:ba:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:43:16 2024 by rpki-client on console-fra.rpki-client.org