Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/beb8ea69-d68a-4a79-bb5d-68342170ba31/0/59730750F2A855056056BA7CF74A3E27B63A5A49.mft
File:                     59730750F2A855056056BA7CF74A3E27B63A5A49.mft (raw, json)
Hash identifier:          OpmOUR61Xkbrb/+pyb9BAdTV6V589npVWpwOu+tJk6c=
Subject key identifier:   29:43:7D:95:9E:C8:00:29:8C:FF:95:19:2E:07:55:81:F7:0D:02:66
Authority key identifier: 59:73:07:50:F2:A8:55:05:60:56:BA:7C:F7:4A:3E:27:B6:3A:5A:49
Certificate issuer:       /CN=59730750f2a855056056ba7cf74a3e27b63a5a49
Certificate serial:       63C7AA4CA6F1464EC66CA9D55C65B36F1540AFF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXMHUPKoVQVgVrp890o-J7Y6Wkk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/beb8ea69-d68a-4a79-bb5d-68342170ba31/0/59730750F2A855056056BA7CF74A3E27B63A5A49.mft
Manifest number:          8A
Signing time:             Sat 04 May 2024 17:53:02 +0000
Manifest this update:     Sat 04 May 2024 17:48:02 +0000
Manifest next update:     Sun 05 May 2024 21:07:02 +0000
Files and hashes:         1: 59730750F2A855056056BA7CF74A3E27B63A5A49.crl (hash: 83coqnitowOPLiLGqzUpFl00kHDzxSnmFPDry2tmvUE=)
                          2: AS203236.asa (hash: YLfrzbKcbxA8Pj7QqFh/IvNUDaxz9qqolMv4hHtwQ+I=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/beb8ea69-d68a-4a79-bb5d-68342170ba31/0/59730750F2A855056056BA7CF74A3E27B63A5A49.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/beb8ea69-d68a-4a79-bb5d-68342170ba31/0/59730750F2A855056056BA7CF74A3E27B63A5A49.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXMHUPKoVQVgVrp890o-J7Y6Wkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c7:aa:4c:a6:f1:46:4e:c6:6c:a9:d5:5c:65:b3:6f:15:40:af:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59730750f2a855056056ba7cf74a3e27b63a5a49
        Validity
            Not Before: May  4 17:48:02 2024 GMT
            Not After : May  5 21:07:02 2024 GMT
        Subject: CN=29437D959EC800298CFF95192E075581F70D0266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:04:f9:f3:fa:46:a3:c6:af:37:5a:b8:9f:
                    8f:53:80:04:97:61:49:61:f2:99:18:2c:58:91:67:
                    c0:83:34:de:1f:dd:9b:0e:2a:90:1e:46:0f:ff:5a:
                    7e:c2:22:b4:cd:d5:1c:8f:2e:26:47:ad:62:c6:fc:
                    7e:78:96:6e:a4:fe:2a:27:a0:2a:ed:cb:57:b1:d9:
                    02:01:2b:1e:78:ae:c8:04:64:aa:43:a3:4b:09:6f:
                    0b:44:f5:04:ee:d6:1f:ee:e2:2b:3f:83:92:e2:cf:
                    a4:cc:a3:83:5b:e9:21:eb:e0:e1:9d:a5:22:aa:2a:
                    80:17:48:5d:6b:b8:ce:97:a8:bd:99:f5:d9:e9:5d:
                    32:85:b9:40:59:6f:52:fd:b6:0b:9b:c2:de:00:20:
                    9e:0c:e3:02:89:b6:6c:b8:71:c3:ac:27:d8:37:98:
                    fa:cb:cb:8c:6c:7c:f8:da:99:90:4c:39:ec:27:86:
                    10:aa:3d:8c:e5:cd:f0:2b:f7:12:d3:db:5d:5f:17:
                    aa:89:d2:b5:4d:6e:8b:94:ff:4c:d1:ef:1d:25:b6:
                    e8:e5:d4:0b:c8:e6:2e:2e:9f:ff:54:5e:f6:1f:9f:
                    77:35:15:ae:69:47:2a:32:27:4a:19:9c:5a:5f:55:
                    c9:fa:54:f7:4b:71:87:08:a6:d0:f4:1b:d1:3a:b3:
                    73:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:43:7D:95:9E:C8:00:29:8C:FF:95:19:2E:07:55:81:F7:0D:02:66
            X509v3 Authority Key Identifier:
                keyid:59:73:07:50:F2:A8:55:05:60:56:BA:7C:F7:4A:3E:27:B6:3A:5A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/beb8ea69-d68a-4a79-bb5d-68342170ba31/0/59730750F2A855056056BA7CF74A3E27B63A5A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXMHUPKoVQVgVrp890o-J7Y6Wkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/beb8ea69-d68a-4a79-bb5d-68342170ba31/0/59730750F2A855056056BA7CF74A3E27B63A5A49.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:46:1a:97:ae:b2:9f:05:6b:99:7e:bd:bc:ec:fa:65:72:
         f6:8e:6b:f7:30:6a:75:3a:52:6d:5e:2b:89:8c:b1:51:5c:91:
         3a:48:ef:de:42:77:76:d0:87:4d:72:f1:6b:eb:76:c7:a7:da:
         e6:07:5b:33:b0:81:eb:84:38:22:3a:dc:07:7f:68:77:8c:7a:
         be:1a:32:83:ea:69:40:a9:46:6b:0f:9c:55:16:45:dc:33:55:
         0f:32:04:c7:ce:45:d6:60:8d:5f:29:70:f1:6a:f5:5d:ec:2e:
         f9:8c:b0:5a:9b:8b:25:85:07:8b:df:f9:08:1f:e8:28:1e:83:
         81:bf:6e:f0:b8:ee:e1:a2:d6:ac:c5:26:42:8b:c1:43:64:4c:
         1d:7b:cf:79:27:ee:2e:6c:9c:fc:f8:68:1a:38:92:65:37:c2:
         68:59:b0:6a:9a:6d:4d:43:6f:ee:f4:42:8f:a0:b6:d0:b4:ee:
         d7:4e:b6:4b:f8:cc:e9:0f:84:6b:f9:59:8e:9b:d0:50:b3:fa:
         33:3a:d3:00:f9:69:7b:f5:52:70:3e:77:64:b3:ef:d0:2d:d4:
         30:39:22:07:0d:10:9d:b3:b1:8e:6d:23:e6:1f:a8:d8:c4:6c:
         fe:9f:ac:7c:8c:34:bc:94:48:a2:c5:23:f1:66:4c:d7:98:3f:
         a2:59:5a:05
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUY8eqTKbxRk7GbKnVXGWzbxVAr/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTk3MzA3NTBmMmE4NTUwNTYwNTZiYTdjZjc0YTNlMjdi
NjNhNWE0OTAeFw0yNDA1MDQxNzQ4MDJaFw0yNDA1MDUyMTA3MDJaMDMxMTAvBgNV
BAMTKDI5NDM3RDk1OUVDODAwMjk4Q0ZGOTUxOTJFMDc1NTgxRjcwRDAyNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgwT58/pGo8avN1q4n49TgASX
YUlh8pkYLFiRZ8CDNN4f3ZsOKpAeRg//Wn7CIrTN1RyPLiZHrWLG/H54lm6k/ion
oCrty1ex2QIBKx54rsgEZKpDo0sJbwtE9QTu1h/u4is/g5Liz6TMo4Nb6SHr4OGd
pSKqKoAXSF1ruM6XqL2Z9dnpXTKFuUBZb1L9tgubwt4AIJ4M4wKJtmy4ccOsJ9g3
mPrLy4xsfPjamZBMOewnhhCqPYzlzfAr9xLT211fF6qJ0rVNbouU/0zR7x0ltujl
1AvI5i4un/9UXvYfn3c1Fa5pRyoyJ0oZnFpfVcn6VPdLcYcIptD0G9E6s3OFAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUKUN9lZ7IACmM/5UZLgdVgfcNAmYwHwYDVR0j
BBgwFoAUWXMHUPKoVQVgVrp890o+J7Y6WkkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYmViOGVhNjktZDY4YS00YTc5LWJiNWQtNjgzNDIxNzBi
YTMxLzAvNTk3MzA3NTBGMkE4NTUwNTYwNTZCQTdDRjc0QTNFMjdCNjNBNUE0OS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dYTUhVUEtvVlFWZ1ZycDg5MG8tSjdZ
Nldray5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZWI4ZWE2OS1k
NjhhLTRhNzktYmI1ZC02ODM0MjE3MGJhMzEvMC81OTczMDc1MEYyQTg1NTA1NjA1
NkJBN0NGNzRBM0UyN0I2M0E1QTQ5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoI5GGpeusp8Fa5l+vbzs
+mVy9o5r9zBqdTpSbV4riYyxUVyROkjv3kJ3dtCHTXLxa+t2x6fa5gdbM7CB64Q4
IjrcB39od4x6vhoyg+ppQKlGaw+cVRZF3DNVDzIEx85F1mCNXylw8Wr1Xewu+Yyw
WpuLJYUHi9/5CB/oKB6Dgb9u8Lju4aLWrMUmQovBQ2RMHXvPeSfuLmyc/PhoGjiS
ZTfCaFmwapptTUNv7vRCj6C20LTu1062S/jM6Q+Ea/lZjpvQULP6MzrTAPlpe/VS
cD53ZLPv0C3UMDkiBw0QnbOxjm0j5h+o2MRs/p+sfIw0vJRIosUj8WZM15g/olla
BQ==
-----END CERTIFICATE-----
Generated at Sat May 4 20:52:53 2024 by rpki-client on console-fra.rpki-client.org