Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft
File:                     5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft (raw, json)
Hash identifier:          1qg6YyrHIro/csu1TaBWNomnN6lUhUiLjN2T8/Rejt0=
Subject key identifier:   02:2D:55:B3:90:6E:BE:6A:7C:7C:9F:58:AA:7A:32:94:10:D9:37:B7
Authority key identifier: 55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60
Certificate issuer:       /CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
Certificate serial:       25153886D1C7025E41433D56023D3F90DB771DC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft
Manifest number:          0250
Signing time:             Mon 25 Nov 2024 09:36:30 +0000
Manifest this update:     Mon 25 Nov 2024 09:31:30 +0000
Manifest next update:     Tue 26 Nov 2024 12:58:30 +0000
Files and hashes:         1: 3139332e3230312e37332e302f32342d3234203d3e20323036323634.roa (hash: UaKmXoR9NNc0+EzImNm8FN5YOGbqcqynjHxgUP6CTtw=)
                          2: 3139332e3230312e37332e302f32342d3234203d3e20323039313738.roa (hash: YdPbeCKeHzTxC+uWm2ow9Rgx+NRyUqOYKhW8jZLhclE=)
                          3: 5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl (hash: qlobwv57cG/AvQxLr2SUgd6/NUJ9dXJ767D0OXi6Hio=)
                          4: 3139332e3230312e37322e302f32342d3234203d3e20313439343537.roa (hash: IP0uzV9rWd0ZorOSj1B8b/iGZQUw5ZtYHISrcsa/oKg=)
                          5: 3139332e3230302e3130322e302f32332d3234203d3e20323134373835.roa (hash: 02yFXexx0RukReo8+AwmPQHmksLCVOWv/mWLCeyTOYY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:15:38:86:d1:c7:02:5e:41:43:3d:56:02:3d:3f:90:db:77:1d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5511f6d7def4c0ffb6e2b3b3f0c4455dcd14c160
        Validity
            Not Before: Nov 25 09:31:30 2024 GMT
            Not After : Nov 26 12:58:30 2024 GMT
        Subject: CN=022D55B3906EBE6A7C7C9F58AA7A329410D937B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:02:1e:22:67:7b:52:1a:1e:04:ad:1e:1f:cf:
                    a5:56:4a:48:ac:50:37:ee:44:55:1d:80:11:fe:31:
                    fc:da:f0:25:eb:af:e0:d5:46:52:5f:6a:3b:1f:14:
                    bb:44:b7:a3:b5:78:fe:ed:60:31:c9:0b:c6:d9:d5:
                    fc:7d:27:ed:d6:40:ee:68:fc:89:84:a8:7d:48:c7:
                    9b:89:17:b9:53:7e:8b:8c:10:a2:89:38:7f:6f:49:
                    ee:ea:b8:79:43:5b:2f:a4:e2:fb:3b:7f:4a:08:61:
                    73:c2:94:84:79:f0:52:f7:81:d4:0a:52:98:24:4f:
                    45:eb:0a:fa:74:c1:c1:a9:b6:d6:bb:0f:bb:a2:69:
                    29:c3:70:2b:ca:ed:46:c4:02:e4:e0:ba:3f:83:37:
                    80:02:3f:b4:2d:d3:80:ff:a6:1f:4f:3b:d1:f9:a8:
                    2f:86:1c:5b:3f:08:05:8d:1c:5a:ca:31:29:e6:47:
                    b4:b9:35:02:97:c2:e3:26:8f:e7:fa:b6:10:a9:bf:
                    9d:0c:25:88:24:43:4c:92:d3:9c:99:77:68:b1:7d:
                    fb:13:23:02:c9:83:e5:ab:b8:99:f5:c4:47:66:cf:
                    ed:e3:0e:f9:d4:f1:f4:7d:2a:27:83:f8:eb:fe:75:
                    17:7a:06:ce:97:a5:97:4b:05:8d:1a:ef:ed:13:a0:
                    2d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2D:55:B3:90:6E:BE:6A:7C:7C:9F:58:AA:7A:32:94:10:D9:37:B7
            X509v3 Authority Key Identifier:
                keyid:55:11:F6:D7:DE:F4:C0:FF:B6:E2:B3:B3:F0:C4:45:5D:CD:14:C1:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRH21970wP-24rOz8MRFXc0UwWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d08bc49d-0338-4b5f-8204-0004a66105c9/0/5511F6D7DEF4C0FFB6E2B3B3F0C4455DCD14C160.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6c:43:ae:07:06:8b:3c:9f:5e:d7:c9:d6:1b:35:62:b1:dd:
         61:b8:88:a9:76:33:c5:e6:2c:13:84:cd:a3:ac:ed:55:ad:03:
         53:87:22:bf:0f:ac:66:b7:ce:e2:3a:cc:78:4c:be:c4:e8:63:
         f5:de:6c:84:ec:bc:65:61:f3:2a:48:1e:c8:64:1d:db:38:1c:
         8b:d3:a5:32:18:7d:1e:fe:ce:99:e0:03:61:62:5b:7c:72:57:
         67:38:3f:d0:fb:14:85:23:56:cf:ef:c9:a8:08:d3:83:16:1f:
         8b:da:43:8b:07:d6:51:dc:4b:fe:00:60:05:c3:ec:8e:03:49:
         68:8c:04:20:58:d3:45:97:2a:b2:0f:40:90:1d:a9:75:db:0e:
         00:85:ac:29:46:60:03:a3:55:ef:c8:dd:b7:bd:18:26:92:b1:
         20:9d:80:a2:56:ac:80:c5:a0:fd:61:c2:1e:e9:f3:05:2d:1a:
         6d:31:6c:6f:19:90:b7:50:5a:b0:c6:55:ca:38:14:05:00:83:
         68:59:72:f5:be:1b:10:d0:6c:d0:f1:94:7a:d2:dd:71:ab:54:
         a4:63:7b:06:0c:69:13:5b:56:6d:59:66:e5:2b:9a:b1:35:09:
         74:a2:fe:6a:45:b4:43:a3:f5:fe:7c:4a:2f:b0:c4:e6:13:2b:
         ef:f3:16:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 12:00:56 2024 by rpki-client on console-ams.rpki-client.org