Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft
File:                     C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft (raw, json)
Hash identifier:          xurIVL+b/Uz3/E2s1c03QGg22ne/X7r5D7gXIluS2x4=
Subject key identifier:   39:EC:80:06:C8:0F:9F:21:BD:98:59:E4:C6:57:1E:65:8F:CD:6E:32
Authority key identifier: C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3
Certificate issuer:       /CN=C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3
Certificate serial:       7B26F8601B3E5908EAA767C1470745B14BCA328E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft
Manifest number:          0145
Signing time:             Sat 22 Jun 2024 08:38:38 +0000
Manifest this update:     Sat 22 Jun 2024 08:33:38 +0000
Manifest next update:     Sun 23 Jun 2024 08:59:38 +0000
Files and hashes:         1: 326130373a353463373a343063303a3a2f34322d3432203d3e20323136303839.roa (hash: 3fuuePzO+gd2KQC3A/GseUTsp1RqcYzkcPDSA/Bp670=)
                          2: 326130373a353463373a343130303a3a2f34322d3432203d3e20323136303839.roa (hash: UQhdlwi2R1tq4M7mOY7PLw9g6SJ3hn+hPmf4ghbVyJA=)
                          3: 326130373a353463373a343030303a3a2f34322d3432203d3e20323136303839.roa (hash: ArdkIfiBJGccdrCL4mekpC9PSP+RZzB4l9GNS6UuwLA=)
                          4: 326130373a353463373a343034303a3a2f34322d3432203d3e20323136303839.roa (hash: KxgINFYAMSV7tw3ULIKjMLrpW3Cp0WaSMgcsoG74MhE=)
                          5: C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.crl (hash: RopvC7pokVPl85zWauoORXbBDkdz1acQEjnAz5FuHnQ=)
                          6: 326130373a353463373a343038303a3a2f34322d3432203d3e20323136303839.roa (hash: MVfYB+A9qNwZCvH/L1dZhh1kqpoWNKwbu822BdWjQ/0=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 01:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:26:f8:60:1b:3e:59:08:ea:a7:67:c1:47:07:45:b1:4b:ca:32:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3
        Validity
            Not Before: Jun 22 08:33:38 2024 GMT
            Not After : Jun 23 08:59:38 2024 GMT
        Subject: CN=39EC8006C80F9F21BD9859E4C6571E658FCD6E32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:55:a9:26:ad:29:98:4a:dd:54:e9:ad:23:
                    ca:d0:0f:fd:f7:fd:c9:63:b2:b8:2a:19:b0:d5:33:
                    b5:65:0b:17:82:de:a2:19:12:e2:70:ce:84:f5:fd:
                    f0:f4:cb:37:4f:9f:c4:f8:6b:76:23:98:fa:eb:4d:
                    58:75:1a:fe:01:96:8f:7b:5a:04:72:e7:a0:c1:47:
                    87:ee:62:8e:aa:70:96:ab:dc:f1:2d:a3:6b:53:4f:
                    08:a0:92:80:b6:0f:bd:10:eb:2d:20:0f:07:94:f8:
                    17:52:bc:af:ae:c4:65:39:4f:bd:61:85:c2:c0:aa:
                    ef:f4:e7:50:cd:3c:c6:c2:11:ac:78:2a:e6:ec:bc:
                    55:a2:73:f0:0c:4a:da:b8:33:a6:f3:e3:32:40:8e:
                    11:fd:bc:3a:f5:bb:30:4f:1e:ab:39:49:f5:fa:92:
                    67:28:2e:0c:45:cc:ac:c5:24:7e:8c:4a:2f:de:4c:
                    26:ad:26:de:66:63:7a:4f:8b:10:75:2a:c5:9b:34:
                    f6:75:b0:48:ce:04:ea:81:18:1c:e1:c7:7f:2c:c2:
                    4a:f6:e6:19:e3:8d:32:e7:09:61:38:5e:93:dc:13:
                    be:ca:45:16:c1:21:59:3d:b8:f7:8a:75:b2:93:dc:
                    f7:a1:4d:07:99:4f:16:66:eb:ee:f2:e7:69:68:91:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EC:80:06:C8:0F:9F:21:BD:98:59:E4:C6:57:1E:65:8F:CD:6E:32
            X509v3 Authority Key Identifier:
                keyid:C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:0a:c4:8c:d8:a3:c7:2b:53:c8:db:17:8e:88:83:e3:d1:a0:
         96:70:ea:e8:32:01:2e:12:b4:09:3d:6a:c8:19:de:94:7d:8f:
         74:34:77:d3:fc:18:8f:d7:d6:83:f8:fa:d0:93:04:e7:42:2a:
         72:29:0d:9b:97:de:c9:c2:b6:4c:35:fa:a2:b0:05:02:3d:40:
         fe:e3:08:01:1a:85:64:c2:93:df:bb:82:27:44:12:09:d7:94:
         75:f5:34:e4:e8:fc:54:65:1b:42:ed:21:1f:88:21:f3:25:19:
         69:a4:3f:b5:77:59:ef:4a:a0:81:18:ea:ac:51:94:aa:79:e3:
         a7:7e:53:46:e6:43:c3:7a:d6:98:39:c6:14:53:b1:70:ae:f2:
         81:83:e8:d5:82:a6:56:7b:2b:8f:eb:e7:ea:df:ef:3e:09:5a:
         4a:d5:1c:cf:8d:db:eb:39:c8:b7:4a:00:28:e1:38:7b:4c:8b:
         ca:75:59:bd:9f:ee:a9:64:a8:a7:b1:17:5f:d2:ca:f2:f1:23:
         2f:e1:bc:e9:2f:b6:e6:d7:1b:1e:c1:28:40:af:95:cc:1b:66:
         47:3c:9e:84:37:88:03:be:30:76:c3:57:3e:73:af:bc:ad:b4:
         e8:9e:e3:c6:01:6f:99:bb:52:fa:51:f6:a3:8f:67:aa:10:38:
         ae:23:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 10:18:27 2024 by rpki-client on console-fra.rpki-client.org