Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
File:                     C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft (raw, json)
Hash identifier:          3qDGdEBGnWZlMrNcIKfRj39ohXbsM20tB45G5gVeiNM=
Subject key identifier:   4D:41:D8:2B:AD:D2:89:7E:F0:F9:0E:D3:6D:48:F3:16:20:45:1A:41
Authority key identifier: C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF
Certificate issuer:       /CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
Certificate serial:       234A4EC32A65A9CBAB0B39874ADC4A205C976D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
Manifest number:          0380
Signing time:             Thu 21 Nov 2024 16:58:40 +0000
Manifest this update:     Thu 21 Nov 2024 16:53:40 +0000
Manifest next update:     Fri 22 Nov 2024 20:06:40 +0000
Files and hashes:         1: 3139332e3234362e3130332e302f32342d3234203d3e203134343435.roa (hash: ufXtcIzi4rnGki461GEkPvVnVefe9lwcKtdLvFw4GmM=)
                          2: 3231372e3139382e3138372e302f32342d3234203d3e20323131343135.roa (hash: E9SrdbvV51R1eNOoUQlzgnaJf+DNT0FpddD5qSljJvo=)
                          3: 3139332e3234362e3130332e302f32342d3234203d3e20323131303631.roa (hash: T/dBN0pOoUI+TrElVFOUJYv4CWHohvxyPXXzro6OVbQ=)
                          4: 3139332e3234362e342e302f32342d3234203d3e203231383539.roa (hash: iisXo7tt/EOoR40Zq4dWFrL4aQJ5N/mysm6fOdjl4Ag=)
                          5: 3139332e3234362e352e302f32342d3234203d3e20313939343135.roa (hash: R8fLk9Ouwz6JjPj7wRSgx3bLi0ifZ6zKgiC/NJ8y+08=)
                          6: 3139332e3234362e3130322e302f32342d3234203d3e203630373831.roa (hash: DsxMlBpnaDBCTZCwZ+4l21L/Mim9agw8EK48LHeXcxw=)
                          7: C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl (hash: fCRgFGXfV8gBjouZHK8lSxOzDq7+YdADenLk4B8eVKM=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4a:4e:c3:2a:65:a9:cb:ab:0b:39:87:4a:dc:4a:20:5c:97:6d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79d02c618861ad45baf78ce39023cbcb494a7bf
        Validity
            Not Before: Nov 21 16:53:40 2024 GMT
            Not After : Nov 22 20:06:40 2024 GMT
        Subject: CN=4D41D82BADD2897EF0F90ED36D48F31620451A41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d5:e0:95:cc:87:f2:5a:3f:dd:94:8c:b9:fc:
                    48:32:c5:5d:0f:7c:f2:1e:02:d5:bc:e6:f1:29:ff:
                    4e:f4:f2:90:c2:d3:11:a2:36:ac:e1:97:f8:5f:2d:
                    35:54:c9:a0:a3:8b:95:77:7f:f5:1c:75:12:66:15:
                    d2:03:c2:92:fa:32:83:02:35:31:68:35:a3:0b:33:
                    58:11:b7:5a:b9:a9:db:75:ae:b2:0b:49:5b:ac:fc:
                    2c:bc:8e:73:c6:17:49:b9:e4:2c:ee:13:00:ca:b3:
                    9a:bc:c2:4d:c9:88:a2:fd:e0:cc:46:62:13:59:84:
                    7c:a1:9a:6f:8c:76:bb:d0:0f:49:4d:d7:d3:49:92:
                    95:0e:5c:ba:eb:46:cc:12:1f:26:fd:50:61:d8:64:
                    21:17:ff:a3:75:51:74:87:dd:d9:1c:db:a2:2b:7c:
                    4e:d0:1a:e6:df:6a:56:31:31:d6:df:d1:48:80:ed:
                    7e:f0:61:40:9e:b1:46:7b:ab:22:b4:74:ca:88:91:
                    6d:ba:04:6c:49:78:86:ef:4c:f6:ca:f8:80:2a:30:
                    43:ea:e8:6d:82:b7:71:d7:46:93:9a:21:da:a4:3a:
                    84:0e:c9:f8:c4:dc:d3:1e:de:b0:ea:45:da:37:ca:
                    16:23:c0:43:f2:22:b7:d5:7b:27:e3:92:f7:7a:02:
                    1e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:41:D8:2B:AD:D2:89:7E:F0:F9:0E:D3:6D:48:F3:16:20:45:1A:41
            X509v3 Authority Key Identifier:
                keyid:C7:9D:02:C6:18:86:1A:D4:5B:AF:78:CE:39:02:3C:BC:B4:94:A7:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x50CxhiGGtRbr3jOOQI8vLSUp78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d90a935a-a74d-4b98-9430-bc7ae5c24f28/0/C79D02C618861AD45BAF78CE39023CBCB494A7BF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:69:e5:7d:b9:2c:d6:9c:4d:02:45:7d:26:9c:ef:94:8b:06:
         38:65:e6:3b:84:9d:4f:55:3c:65:c4:d4:c8:07:bd:77:a2:35:
         65:26:5c:f0:48:5a:59:34:c3:1e:ae:a1:d7:ea:2c:39:31:57:
         70:79:71:90:ef:87:fc:5b:6d:22:d8:51:e3:d8:65:0c:c2:67:
         64:a4:9b:ae:5a:85:88:f5:9f:81:f1:fc:82:1a:ab:73:59:6a:
         5d:fa:4c:94:89:6f:16:d2:66:93:90:73:57:c3:85:06:dd:a5:
         3b:5b:70:76:fa:6d:43:3c:13:f8:39:5c:d4:7e:ca:69:69:28:
         59:60:41:5c:ab:f9:94:70:09:94:47:61:b6:12:13:da:99:40:
         5a:6b:50:5a:cb:e0:94:2b:82:01:95:07:b4:f6:e1:61:63:77:
         11:e6:bd:b2:28:01:b3:63:9d:dd:91:0f:41:7b:b0:33:35:3c:
         55:4a:a7:e4:41:e2:88:7d:ca:4e:62:6a:92:a0:c7:75:76:e5:
         19:6f:df:1f:2f:29:50:2c:5e:d3:31:8a:81:30:fb:15:31:7c:
         82:ba:b3:89:cc:d0:69:00:7f:95:d9:a5:f7:c7:b8:83:10:e6:
         79:05:73:67:ad:e0:8b:eb:4a:56:a7:fe:b5:d6:f6:b7:80:fe:
         bc:2f:16:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:41 2024 by rpki-client on console-fra.rpki-client.org