Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
File:                     922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft (raw, json)
Hash identifier:          MuoeRykY/YvNz9znUysWj3fVWbDBlnxEn6voW9pg4bM=
Subject key identifier:   10:B0:3D:BD:95:B2:F1:F2:7D:0C:66:B6:13:14:EA:95:20:4F:82:7A
Authority key identifier: 92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18
Certificate issuer:       /CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
Certificate serial:       0C148C46A5FE3CCEACD4BA067CC8F9A1E43AA052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
Manifest number:          76
Signing time:             Fri 17 May 2024 08:37:04 +0000
Manifest this update:     Fri 17 May 2024 08:32:04 +0000
Manifest next update:     Sat 18 May 2024 11:02:04 +0000
Files and hashes:         1: 3138352e3232392e3230372e302f32342d3234203d3e203538303631.roa (hash: 8QMP51yDd/aRQi3NuOh6ee/haeGDJYpfA/NDhGQxuHs=)
                          2: 922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl (hash: FJoIgJWCejbU3KdgbGa+Il7+5mppLB1afAkQ0QiB2BY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:14:8c:46:a5:fe:3c:ce:ac:d4:ba:06:7c:c8:f9:a1:e4:3a:a0:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=922085cff3657fa2aec6f91d91bbf0cd4dd24418
        Validity
            Not Before: May 17 08:32:04 2024 GMT
            Not After : May 18 11:02:04 2024 GMT
        Subject: CN=10B03DBD95B2F1F27D0C66B61314EA95204F827A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:af:cf:49:cb:fe:34:76:fa:8d:58:d1:0b:4c:
                    c1:1c:ef:ad:d4:e1:c4:70:02:aa:04:af:49:8d:15:
                    ef:f3:26:53:1f:00:e9:bb:03:ae:27:5b:5c:3a:bc:
                    4e:8f:d5:37:2c:36:9f:b9:1d:f2:4d:1d:c6:cb:b1:
                    0d:aa:82:76:fb:1a:50:16:72:d5:74:4b:2a:2b:6b:
                    80:c0:6b:d6:71:3b:2d:b2:26:4a:43:7a:06:4c:8c:
                    db:2e:87:6c:45:99:33:23:91:70:af:88:cd:48:58:
                    ed:70:5a:46:ce:91:68:17:5b:33:a6:92:d9:b3:dc:
                    83:75:1c:5e:e3:22:f1:7b:dd:2f:cd:28:ae:2d:e8:
                    8a:6a:f5:ef:0b:55:a6:f7:9c:6e:59:02:31:55:da:
                    31:fc:64:11:dc:2c:ca:84:ba:06:b5:f5:6d:ba:81:
                    89:4f:8d:d8:7c:53:b9:23:8b:1c:92:e3:4b:3e:82:
                    59:fc:db:f8:37:82:f4:d8:9d:4f:51:03:89:31:7f:
                    90:88:98:5f:2d:88:82:4a:f5:0c:77:3c:2e:6a:e4:
                    e8:91:16:fd:08:ec:8d:3b:91:33:e1:c0:fc:bd:c7:
                    bf:97:dd:f0:76:e8:d5:ae:1c:3e:1a:0f:70:27:e8:
                    30:e6:4c:a9:9e:dd:7c:40:bb:b8:cf:04:99:dd:af:
                    17:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B0:3D:BD:95:B2:F1:F2:7D:0C:66:B6:13:14:EA:95:20:4F:82:7A
            X509v3 Authority Key Identifier:
                keyid:92:20:85:CF:F3:65:7F:A2:AE:C6:F9:1D:91:BB:F0:CD:4D:D2:44:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiCFz_Nlf6KuxvkdkbvwzU3SRBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ed81477e-510b-4d37-a229-ed4e88fbe65a/0/922085CFF3657FA2AEC6F91D91BBF0CD4DD24418.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:2b:41:c5:a8:7e:ea:76:ab:ac:6a:28:dd:b4:5a:a0:86:87:
         9c:9f:ba:99:37:c9:e5:87:50:3c:c1:bd:86:fa:da:35:da:ba:
         86:95:ff:fa:28:f8:a8:5f:ca:82:6f:ea:78:55:91:73:9f:d7:
         6f:45:77:aa:9a:83:50:3b:4f:7d:64:82:51:65:38:d8:30:22:
         5d:84:c8:22:f0:bd:49:91:c2:0e:6f:cd:97:83:a6:ea:9a:84:
         9a:56:0e:ed:a8:a1:23:77:17:cd:11:4b:c4:cd:3a:a2:08:8d:
         de:82:82:60:cd:70:27:70:cc:6d:67:fd:13:46:20:22:21:e2:
         7e:f5:4f:13:64:35:44:c3:ba:29:f1:0b:18:9f:55:52:37:43:
         95:f3:cc:19:8a:1d:2f:4d:04:90:5a:91:25:8c:2f:a7:c5:6b:
         8b:af:d7:65:ef:9d:e0:8f:fd:f3:ee:ff:1a:51:ce:5e:de:c0:
         b8:d5:66:83:93:14:b3:21:e1:9f:2f:94:53:de:b8:47:ac:c5:
         8b:58:f1:e2:7b:35:0c:99:ea:d9:33:ba:5a:bc:2c:63:90:e1:
         94:17:68:48:16:01:1e:04:40:a7:b8:0f:8e:40:91:4f:a7:20:
         bf:1d:03:85:45:25:2b:fc:df:71:5b:6c:02:b4:7b:a5:0a:af:
         f5:6e:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:28:24 2024 by rpki-client on console-ams.rpki-client.org