Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
File:                     23D444E7DED3712847CAE2B46DDD886FC2914D54.mft (raw, json)
Hash identifier:          loVM2wW/YsyhZ9Jh7kDDyo8AQfCvZlZz+MTU2cfX3ic=
Subject key identifier:   FD:26:6B:DF:9D:FE:C9:FE:92:CB:7F:53:C6:0C:DF:17:E2:CF:04:5B
Authority key identifier: 23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54
Certificate issuer:       /CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
Certificate serial:       2D96D5146AECD9D16AF00240247E72B2208532B1
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
Manifest number:          0277
Signing time:             Sat 28 Sep 2024 12:14:31 +0000
Manifest this update:     Sat 28 Sep 2024 12:09:31 +0000
Manifest next update:     Sun 29 Sep 2024 13:25:31 +0000
Files and hashes:         1: 326130613a363034303a646230303a3a2f34302d3438203d3e20323131313531.roa (hash: wGBqAzu0M+mLqVLFFdIyUacIzJo2wxLiPXDa+r545ew=)
                          2: 23D444E7DED3712847CAE2B46DDD886FC2914D54.crl (hash: rJCJZrFfJdLTWXv4DPr6wDi9Qv7E8vJKruPH8U/v7bw=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Sep 2024 06:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:96:d5:14:6a:ec:d9:d1:6a:f0:02:40:24:7e:72:b2:20:85:32:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23D444E7DED3712847CAE2B46DDD886FC2914D54
        Validity
            Not Before: Sep 28 12:09:31 2024 GMT
            Not After : Sep 29 13:25:31 2024 GMT
        Subject: CN=FD266BDF9DFEC9FE92CB7F53C60CDF17E2CF045B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:85:db:81:1f:d2:98:c4:34:73:83:20:9a:0f:
                    72:f2:37:03:a0:24:b4:63:ee:38:ed:6e:1d:ea:e0:
                    6a:ca:13:2f:99:97:31:4d:b1:f7:2f:f2:9e:42:0b:
                    89:57:35:68:ac:eb:af:f7:ab:8d:8d:a2:93:a9:10:
                    02:91:e0:81:14:8a:ec:a8:c3:fc:61:77:89:c1:6c:
                    50:11:95:e2:70:b2:49:ad:94:33:9a:8b:9f:0f:59:
                    90:d6:17:d0:db:50:74:d2:7f:a1:b0:d2:0f:61:eb:
                    5e:b8:10:88:b9:2e:e8:e2:7f:32:e3:00:91:a1:dd:
                    1b:94:87:b3:98:a4:45:f2:a5:1e:05:fd:f9:54:de:
                    b5:e2:27:82:ba:e6:19:40:50:61:a2:77:2d:31:da:
                    35:e8:51:12:be:44:cb:4e:cf:45:67:9d:15:c8:29:
                    d1:6d:e3:49:40:58:b5:f3:71:cb:55:c3:0b:bd:ee:
                    27:aa:43:a0:de:66:a2:58:3c:43:cd:61:9d:42:dd:
                    91:4f:18:b8:84:0a:ef:2f:70:d5:9b:24:44:cf:de:
                    bb:07:46:2d:ff:3e:c2:86:54:60:f4:d4:38:fc:88:
                    44:22:1e:67:63:a1:51:fc:81:b9:18:b4:ba:a4:68:
                    86:3d:15:da:c7:f1:19:c7:90:08:01:97:36:e6:b4:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:26:6B:DF:9D:FE:C9:FE:92:CB:7F:53:C6:0C:DF:17:E2:CF:04:5B
            X509v3 Authority Key Identifier:
                keyid:23:D4:44:E7:DE:D3:71:28:47:CA:E2:B4:6D:DD:88:6F:C2:91:4D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/23D444E7DED3712847CAE2B46DDD886FC2914D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c128271e-c269-4954-87db-d184df17f85c/3/23D444E7DED3712847CAE2B46DDD886FC2914D54.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:41:88:f7:d2:5b:26:6a:e1:7c:37:37:9e:fa:5d:20:ea:2a:
         27:43:7f:12:8e:cf:f1:19:63:ed:c3:4a:4c:40:29:e7:67:c9:
         26:3e:94:9f:87:29:30:ca:35:fa:4c:a5:c6:87:7d:1f:79:e8:
         65:49:63:3b:de:a5:95:d1:d6:d6:34:08:de:12:ce:e1:3b:bb:
         d8:db:54:db:e2:61:18:5c:4d:5b:ff:20:f5:c3:25:ed:f3:5a:
         60:64:bc:83:77:fa:eb:ee:79:10:44:ac:2d:5f:cc:e7:7c:11:
         ff:f0:d0:43:41:63:ae:97:d7:e4:1a:b1:b7:1d:c1:c3:f8:f5:
         77:7e:2f:2a:37:bb:98:a9:72:49:27:c1:cb:64:c1:40:50:eb:
         15:08:f0:7e:7e:62:a9:1a:12:b2:10:f3:99:37:98:b1:86:c0:
         71:30:06:a7:2b:3b:c4:25:f5:3f:b6:b0:21:f3:8e:a2:9f:35:
         5c:0f:11:32:66:14:c2:63:29:20:1b:20:a4:1c:84:0f:45:d8:
         ad:c7:7a:dd:fc:05:d1:a0:9e:48:46:c5:d3:04:d4:75:5a:e9:
         46:e4:22:28:54:31:17:5e:56:5c:cf:8c:8e:cb:49:5e:30:9a:
         bf:8f:86:af:a0:94:f2:78:47:1d:df:54:5d:60:c9:81:cd:33:
         5e:ce:af:41
-----BEGIN CERTIFICATE-----
MIIFUzCCBDugAwIBAgIULZbVFGrs2dFq8AJAJH5ysiCFMrEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjNENDQ0RTdERUQzNzEyODQ3Q0FFMkI0NkRERDg4NkZD
MjkxNEQ1NDAeFw0yNDA5MjgxMjA5MzFaFw0yNDA5MjkxMzI1MzFaMDMxMTAvBgNV
BAMTKEZEMjY2QkRGOURGRUM5RkU5MkNCN0Y1M0M2MENERjE3RTJDRjA0NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCThduBH9KYxDRzgyCaD3LyNwOg
JLRj7jjtbh3q4GrKEy+ZlzFNsfcv8p5CC4lXNWis66/3q42NopOpEAKR4IEUiuyo
w/xhd4nBbFARleJwskmtlDOai58PWZDWF9DbUHTSf6Gw0g9h6164EIi5LujifzLj
AJGh3RuUh7OYpEXypR4F/flU3rXiJ4K65hlAUGGidy0x2jXoURK+RMtOz0VnnRXI
KdFt40lAWLXzcctVwwu97ieqQ6DeZqJYPEPNYZ1C3ZFPGLiECu8vcNWbJETP3rsH
Ri3/PsKGVGD01Dj8iEQiHmdjoVH8gbkYtLqkaIY9FdrH8RnHkAgBlzbmtPHfAgMB
AAGjggJdMIICWTAdBgNVHQ4EFgQU/SZr353+yf6Sy39TxgzfF+LPBFswHwYDVR0j
BBgwFoAUI9RE597TcShHyuK0bd2Ib8KRTVQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdm
ODVjLzMvMjNENDQ0RTdERUQzNzEyODQ3Q0FFMkI0NkRERDg4NkZDMjkxNEQ1NC5j
cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt
cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzIzRDQ0NEU3REVEMzcx
Mjg0N0NBRTJCNDZEREQ4ODZGQzI5MTRENTQuY2VyMIGeBggrBgEFBQcBCwSBkTCB
jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0
L3JlcG9zaXRvcnkvYzEyODI3MWUtYzI2OS00OTU0LTg3ZGItZDE4NGRmMTdmODVj
LzMvMjNENDQ0RTdERUQzNzEyODQ3Q0FFMkI0NkRERDg4NkZDMjkxNEQ1NC5tZnQw
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC
AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKZBiPfSWyZq4Xw3N576XSDqKidDfxKOz/EZY+3DSkxAKednySY+lJ+H
KTDKNfpMpcaHfR956GVJYzvepZXR1tY0CN4SzuE7u9jbVNviYRhcTVv/IPXDJe3z
WmBkvIN3+uvueRBErC1fzOd8Ef/w0ENBY66X1+QasbcdwcP49Xd+Lyo3u5ipckkn
wctkwUBQ6xUI8H5+YqkaErIQ85k3mLGGwHEwBqcrO8Ql9T+2sCHzjqKfNVwPETJm
FMJjKSAbIKQchA9F2K3Het38BdGgnkhGxdME1HVa6UbkIihUMRdeVlzPjI7LSV4w
mr+Phq+glPJ4Rx3fVF1gyYHNM17Or0E=
-----END CERTIFICATE-----
Generated at Sat Sep 28 13:04:57 2024 by rpki-client on console-fra.rpki-client.org