Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
File:                     9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft (raw, json)
Hash identifier:          YXagb2yYfpBFRzc4b3PpifttZ83Tgtq2Sxf3kKf6sOY=
Subject key identifier:   B5:2D:58:26:4C:77:EA:68:7E:C5:9E:E6:A1:15:87:B6:0F:F3:90:DC
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       52972CBB112E648F59CCD2834FD20C05E4C7FF74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
Manifest number:          01B5
Signing time:             Fri 10 May 2024 20:06:43 +0000
Manifest this update:     Fri 10 May 2024 20:01:43 +0000
Manifest next update:     Sat 11 May 2024 22:02:43 +0000
Files and hashes:         1: AS8220.roa (hash: MCOcACLUrRVfYOjpSuWMB8i96LhvfBuoWmZiZcJ3PEI=)
                          2: AS21859.roa (hash: 09tSiolm/leamLm1I0WBwX7niOlwsHvW7/iHs3UdiKs=)
                          3: AS5065.roa (hash: NnQZohNqd1olGXksByc77E4FIXg7xPu85M2f6oLvjgA=)
                          4: AS174.roa (hash: M9D2dGqSp8ifwu1+2pH3SqQngfxMhnfFULy2Q+vFPnU=)
                          5: AS42689.roa (hash: IgqAEfgJE2FFiSr0fDq95IA9lF8aeK1ZeabgIRY2FHk=)
                          6: AS8075.roa (hash: GgFQarexz2WuUBdGOsnFHstsXkivf+q8AGl7KmmEOdM=)
                          7: AS201780.roa (hash: GR1JbRsa0LvWkSZjywtahQteJ/5jQTiszlqI+t6XG9M=)
                          8: AS3320.roa (hash: 0BAUPCNIVsk4vxtsK70Wxp2N84dTrStNQUcWDPSqXjA=)
                          9: AS58061.roa (hash: j5QES1Yud7gycp0D+9vLcmxBgaCsaGiUXTZ3dxyj5j4=)
                          10: AS23679.roa (hash: Ok4XRwELul6iFmUKDyMknSIfPHCtzWteFSULXbhO4Js=)
                          11: 9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl (hash: jKdDiiqhHO5+sSHkJIOks91d7LAzAowJykRMRZH9GuQ=)
                          12: AS834.roa (hash: iSzvtD8ycNtem0dTiUGtzBOZuk53+sJ/n0fmoGEg0CM=)
                          13: AS6849.roa (hash: /qecrz5Y3NdYXPjj0Iyi+5Cx9yOCHfpR409XaS4UnO4=)
                          14: AS10753.roa (hash: kMJqFsWRzxXCyiqPJ7GPAM9HN+Tm9gJ6BeCdPFHS/hw=)
                          15: AS7018.roa (hash: OLO5Z60y+0edpM5FLH8aCGfYWSAMYmpQgpPDJQmFCVA=)
                          16: AS53616.roa (hash: ke9Cm1lMId27aNxO4HyR15KCsZFD5kogunV6wefLPOw=)
                          17: AS3356.roa (hash: GM6PVeTjFUloAHOVtUaJKI3YkMlpiZfqqEF9e+CoBIY=)
                          18: AS51269.roa (hash: ly4zBSpwx3tnZLY/d6YnnWs6Zn6bGuThPWTO4b0Q9qg=)
                          19: AS2914.roa (hash: gBQ3uhtKi/IDVrn22PSzwI2DFNNIEWGRAesRxHq9+jI=)
                          20: AS209474.roa (hash: 7mExHNImQTUwBUELnYwfhacnz1T3mWONpLHGQ2gAR0U=)
                          21: AS29802.roa (hash: WoSIqRTSqZv1z2EmPCIA+7sPicYbyj+Dbk+Sv3RCXOs=)
                          22: AS3949.roa (hash: oTX09F0sGtSVYDdiB5nLuG5oRwQ3ommq/qN39kjuNtY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:97:2c:bb:11:2e:64:8f:59:cc:d2:83:4f:d2:0c:05:e4:c7:ff:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: May 10 20:01:43 2024 GMT
            Not After : May 11 22:02:43 2024 GMT
        Subject: CN=B52D58264C77EA687EC59EE6A11587B60FF390DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:93:7a:c6:2a:36:6c:a3:74:c5:c9:b9:6a:8d:
                    6d:6c:61:2c:26:99:c3:28:38:8f:50:d1:fe:c6:0a:
                    45:d6:e7:27:46:04:c8:e7:4e:05:4b:1c:e5:c2:a1:
                    95:7d:ee:0d:7c:cc:7a:00:47:eb:34:fe:ec:ed:95:
                    79:92:fa:1c:26:ee:58:5d:bd:29:09:be:57:e4:18:
                    16:bb:57:20:ed:25:68:be:06:1e:54:69:c2:39:cc:
                    e5:76:ca:ed:c9:af:a1:6a:68:a3:f0:df:2d:e6:78:
                    e8:4b:c4:b8:18:a1:47:ad:8f:62:93:63:4b:b4:e8:
                    3e:0c:27:d3:d1:d3:d2:3b:a9:4b:3b:24:1a:0b:eb:
                    31:3d:37:8d:96:50:8b:1b:12:e0:fe:eb:3f:27:08:
                    52:98:3e:9d:84:28:ea:a1:3b:54:bf:92:99:33:5b:
                    68:b1:e0:08:aa:74:eb:8b:a7:c2:e2:b3:92:96:a8:
                    5e:c4:ff:69:5e:3a:3c:7a:ba:a9:88:75:48:2b:2e:
                    b6:60:aa:d1:40:f5:8a:7e:46:1e:eb:81:e7:29:ec:
                    b4:65:df:fc:a0:e6:14:e8:49:6e:73:aa:06:db:81:
                    54:eb:3b:96:d1:be:1a:04:c3:ee:ef:68:c4:23:ae:
                    94:cd:fe:8c:93:a2:42:de:26:4b:c7:be:a0:60:8d:
                    75:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2D:58:26:4C:77:EA:68:7E:C5:9E:E6:A1:15:87:B6:0F:F3:90:DC
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3d:f1:43:33:78:e8:66:46:ef:2a:3e:60:b5:04:ac:13:1f:
         a9:3b:8b:b9:59:84:f2:76:df:61:62:9b:e3:f0:eb:84:74:7b:
         40:0b:87:b2:b1:7e:bd:d5:24:96:af:e0:fd:10:2d:74:d8:8c:
         e1:fe:72:cc:3f:4d:79:79:fd:8c:b1:1a:ae:cb:54:12:40:56:
         0c:a6:81:47:81:4d:9f:61:52:50:b2:88:6b:e1:c2:2b:ef:79:
         33:b2:f1:35:c8:e0:12:52:a3:30:d2:9b:6a:ee:66:cf:26:fe:
         c2:c0:72:21:65:36:d2:58:5e:f6:5f:a3:ad:90:52:1d:18:41:
         f5:32:60:ec:e1:6f:0a:47:44:27:5a:27:c0:f7:42:0d:93:86:
         b9:9e:ba:74:bf:2a:ce:aa:ee:f3:89:0c:3e:43:41:92:db:dc:
         38:8f:14:ba:ee:7d:8b:66:dc:d9:34:49:18:ce:ca:3e:9a:c6:
         af:b4:1b:6d:8a:8d:ca:5a:92:25:59:bd:d7:a1:e4:74:0d:98:
         5a:f1:76:82:c7:66:22:c2:bc:8b:5f:3e:51:80:d6:60:4b:5b:
         6e:5e:e6:ff:c0:12:9e:d6:22:c1:65:a4:13:d3:ea:8f:66:6a:
         f5:7c:05:88:ba:28:c8:f7:5d:a8:b7:58:ef:c8:15:72:12:03:
         72:58:6c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 00:26:30 2024 by rpki-client on console-ams.rpki-client.org