Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
File:                     1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json)
Hash identifier:          +Ci4tjpds/F0XlzYTw+ghazRhhF7wihXZA7DoJfpIrI=
Subject key identifier:   0B:19:EA:D5:29:10:8B:A5:F2:B7:5C:3E:B0:90:89:FB:A5:A6:F7:99
Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77
Certificate issuer:       /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
Certificate serial:       27B237DA225C76AFF5ADBE00D019C486D01CDC7A
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
Manifest number:          0150
Signing time:             Thu 21 Nov 2024 08:31:37 +0000
Manifest this update:     Thu 21 Nov 2024 08:26:37 +0000
Manifest next update:     Fri 22 Nov 2024 09:19:37 +0000
Files and hashes:         1: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: Ev3rOkqZsW7zdikCCUw3UiV18aO5+Lr8u68oqxdnuog=)
                          2: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 17qN8Bd0gWBZvDkn96RHqKMURz1HVyJmOiwn1OSD2G0=)
                          3: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: s8PXZ6xun7QdEzluX2KYTIUVTeLEFzlJ1flicK9iKH8=)
                          4: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: 8VIJvS4DRohWd1Y0K8fQgnGOXF/vTHOcI7Xson0U+54=)
                          5: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: hLmxywOTn2v4iv//wqgMLMQxfJouQHupbxrvDFSX9Zg=)
                          6: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: GcV9N8X9s2uHdEzyPc2IWdnUBlbIkV9Ott353G6xxsA=)
                          7: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: PeIsCkDSoavJPo2g0zxTJ1XkAim2DieAEnHktN86nIs=)
                          8: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: 4pQ/Tm3sEN21OSDLGShbgXjYjLEvnSsg+1BFZFLkbGo=)
                          9: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: kyhJCUB0IZ58PgjtuOoqKcwGy0FM5AeasKvHtiY4Nqs=)
                          10: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: CFN97R35TUA0q9T8HLJHqRflaLyXUQ+FQ2g6IwbOaNQ=)
                          11: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: qH56+JuOcxy6imv53qXK3cs4RJCz3TF1ltwJcKjbU38=)
                          12: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Z++XNVAKl2i3elIZ9myp5G2o2TKjv3Anv7s5uuElaws=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 09:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b2:37:da:22:5c:76:af:f5:ad:be:00:d0:19:c4:86:d0:1c:dc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377
        Validity
            Not Before: Nov 21 08:26:37 2024 GMT
            Not After : Nov 22 09:19:37 2024 GMT
        Subject: CN=0B19EAD529108BA5F2B75C3EB09089FBA5A6F799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:04:36:59:2e:2d:17:7e:37:19:db:46:22:
                    ff:35:95:e8:6b:0d:33:43:4a:29:98:c5:49:7b:e5:
                    e5:e0:51:48:c9:33:ee:57:57:22:98:d1:9b:d0:5c:
                    5d:09:dc:92:ee:03:3e:2a:99:ec:a4:57:24:e0:26:
                    06:a7:be:b4:c3:d2:10:d9:81:35:23:83:f7:21:58:
                    47:90:c9:42:1f:f8:41:21:74:e2:d8:89:f6:11:d9:
                    56:e5:2b:bd:df:17:37:ec:a8:02:75:09:eb:67:ea:
                    45:69:54:ea:37:b6:ba:6b:72:54:28:f4:e9:a0:25:
                    dd:fc:f6:07:d4:d9:1a:86:86:ea:17:24:46:05:70:
                    25:f2:c7:7d:23:58:59:5d:67:f1:1c:37:15:b9:de:
                    23:fa:e8:ef:0c:a2:ec:af:7f:c2:1f:bc:81:a5:47:
                    6e:7d:74:3d:b1:a9:77:b0:90:23:c0:de:d3:4c:c9:
                    5b:ec:f8:ca:5d:5d:30:af:17:af:5e:d2:0f:25:50:
                    cd:e3:dc:a8:bc:47:2b:56:a9:0c:b8:4c:64:4a:e8:
                    af:84:50:c6:a4:98:b8:a4:e5:cb:fd:16:6f:82:c4:
                    d6:f7:06:a3:27:2e:4f:9f:2f:c0:a3:9f:9a:91:01:
                    1f:20:c1:aa:e6:1e:75:b2:d3:a7:4a:58:a2:7d:6b:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:19:EA:D5:29:10:8B:A5:F2:B7:5C:3E:B0:90:89:FB:A5:A6:F7:99
            X509v3 Authority Key Identifier:
                keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:64:b7:d9:8f:78:57:39:19:75:ba:a2:95:9b:65:9d:31:21:
         43:b2:6c:87:43:30:7c:af:8b:6d:b8:88:0e:d5:95:07:5b:ef:
         0f:5b:ba:15:9d:4c:bc:af:f0:c6:cb:b1:46:33:89:ca:ff:1e:
         a8:92:88:e4:dd:15:07:95:ee:5a:1b:70:94:cc:12:61:24:68:
         f1:16:30:ea:b6:e2:1f:8b:9e:89:63:e8:e3:f0:8e:2d:03:a8:
         52:6b:49:bd:4f:4a:84:a7:76:a0:77:69:55:19:c6:f8:3d:3d:
         97:a9:9d:7a:0e:98:21:75:c9:57:1b:7f:6b:34:c1:21:be:5e:
         3a:eb:47:5f:f6:cd:84:47:8d:17:4c:e7:c0:d6:5b:09:e2:cb:
         f0:04:5f:ac:da:fa:a0:22:0a:d4:33:e8:54:4c:5a:bf:d9:7a:
         12:a2:8e:c6:20:49:b7:9e:21:45:8e:e9:fb:5d:be:1c:8e:69:
         33:94:62:0d:43:6a:16:c0:cc:3b:a7:c6:9f:e0:62:a7:f2:92:
         86:e6:a2:01:16:77:7c:02:b4:a7:d4:48:65:cb:7e:f0:0b:05:
         3d:c3:5e:bb:7a:4f:a0:44:aa:04:aa:55:c2:68:55:ca:d5:61:
         a0:e8:82:45:b8:9b:e0:b2:33:0d:be:6f:7f:be:c8:7f:bd:04:
         35:dd:9d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 12:18:37 2024 by rpki-client on console-ams.rpki-client.org