Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
File:                     547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json)
Hash identifier:          +OmBJDnHx5JPMfpF9ZJGVRGMvs8N5EJV5cJCIsm91EQ=
Subject key identifier:   A5:25:43:C5:3C:47:6B:43:01:5F:E9:96:84:11:BE:84:82:AA:73:5F
Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09
Certificate issuer:       /CN=547bc28c92a229a5ac78c0de287d89ce37726409
Certificate serial:       0A3C14A6ADA98FEDF9220911F7E9EB2104F1B1BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
Manifest number:          84
Signing time:             Sat 23 Nov 2024 00:01:04 +0000
Manifest this update:     Fri 22 Nov 2024 23:56:04 +0000
Manifest next update:     Sun 24 Nov 2024 03:16:04 +0000
Files and hashes:         1: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: qPQeu/7M50ShpMjQ7Dkik+VbeEdUIQ58WUoPL4CU+wI=)
                          2: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: nR48aVSXVSZvCd3jlcODIB7um6yNk/WjtYd9EtNwPFs=)
                          3: AS60431.asa (hash: 1yjN11917GW0TSCe8YRjY6h1qeAEgaExsIF6mAie8ns=)
                          4: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: 7g0LpVsSDMV0pvELL/wo1XjFTeT+wdOPHNP03CG6NG0=)
                          5: AS204931.asa (hash: mjmEdZgmj+BXkWpIt5aZmdkAsVD4VtcK2Ogxa+QnMrQ=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:3c:14:a6:ad:a9:8f:ed:f9:22:09:11:f7:e9:eb:21:04:f1:b1:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409
        Validity
            Not Before: Nov 22 23:56:04 2024 GMT
            Not After : Nov 24 03:16:04 2024 GMT
        Subject: CN=A52543C53C476B43015FE9968411BE8482AA735F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:28:4d:41:e9:8f:c2:8a:bb:db:13:7b:d9:
                    60:43:12:e6:8c:b6:52:71:21:c4:59:d3:83:aa:3d:
                    f3:8e:24:fc:39:c4:29:05:50:8c:6e:71:9e:da:47:
                    85:04:cb:8b:2b:92:39:cf:09:ea:45:85:8d:c8:31:
                    d8:b0:c9:18:34:bd:e4:e7:f7:a5:11:8c:94:b6:77:
                    10:96:f1:10:31:d3:20:1c:d7:9d:41:fc:a2:d9:b6:
                    3b:7b:fa:47:69:0d:82:a3:4d:58:8f:89:e9:bd:02:
                    2e:f0:1b:f8:db:a4:22:7f:c6:f0:53:2a:f5:40:ff:
                    9b:e9:8f:ba:02:df:3e:3c:10:7e:9b:ce:30:81:f0:
                    0c:37:06:a0:f5:2a:1b:52:bc:98:6c:48:0b:76:aa:
                    2b:01:2f:4c:c6:43:9c:6a:b8:f3:2d:8d:e9:6c:a6:
                    8c:47:44:fe:b3:69:67:e7:a3:34:e5:e1:89:ee:08:
                    48:8e:20:18:8d:a5:b8:85:3d:de:f6:fd:b9:c3:ce:
                    d5:db:4c:ac:f1:c1:00:97:5b:06:6d:a1:10:41:d8:
                    72:e8:e4:08:d8:14:98:e8:a8:2b:87:0a:4f:be:4f:
                    77:98:b0:29:50:d7:0f:e8:34:e1:b4:98:20:3d:db:
                    05:5a:d5:d9:6c:7e:c1:bd:2e:71:1d:96:5f:fc:41:
                    09:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:25:43:C5:3C:47:6B:43:01:5F:E9:96:84:11:BE:84:82:AA:73:5F
            X509v3 Authority Key Identifier:
                keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:60:e4:57:fa:6b:99:ae:42:40:5a:6f:8d:54:5a:39:b4:d6:
         73:5e:f5:04:0b:38:ec:c2:d7:2e:76:b0:2b:b5:84:09:53:1f:
         6a:52:06:15:b2:ad:1b:de:3f:8b:e8:a4:16:c1:b0:a4:03:a6:
         e0:0c:42:14:71:f1:ff:13:80:fa:c9:cf:58:46:ed:ae:5f:28:
         5d:96:f5:75:cf:c5:49:52:2b:91:54:f1:9c:d2:20:57:3b:14:
         b9:e0:49:49:1a:12:c7:8b:3c:a6:a4:71:82:6e:08:3b:60:e9:
         15:9c:39:2c:a7:58:81:c5:62:5b:44:d7:12:39:20:8b:8f:8b:
         9f:d2:21:26:4b:33:e2:e4:0b:50:ac:d9:4b:ee:d6:54:b1:a5:
         2e:43:f3:e2:19:b1:1e:e0:d2:15:bf:36:ae:85:5f:29:93:b2:
         8d:bb:c8:de:b9:23:fd:b2:42:94:02:b3:54:c3:03:92:1b:08:
         8b:42:0b:ff:05:f3:e5:03:3b:9c:58:8b:c0:4d:ea:eb:f2:6f:
         13:72:7f:d2:7e:e2:58:48:3a:17:eb:15:0a:12:18:fb:f9:e0:
         e0:6e:73:6e:2e:ac:64:7c:3f:60:b4:69:e6:a6:6b:cf:80:2e:
         ca:9a:24:29:5a:04:22:1a:7a:db:f8:e2:70:ae:75:ff:2f:18:
         1e:36:08:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:32:36 2024 by rpki-client on console-ams.rpki-client.org