Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
File:                     01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft (raw, json)
Hash identifier:          yxO1puv0g7MjLsv4PKU2pNKL3xnkCTW/QH0sHINgFdY=
Subject key identifier:   E7:29:DC:CB:81:91:FB:CB:BB:D6:D3:72:ED:C1:76:CB:DF:A4:44:9E
Authority key identifier: 01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88
Certificate issuer:       /CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
Certificate serial:       738188255738F983EF63CECB23A855280CE2D030
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
Manifest number:          21
Signing time:             Fri 04 Apr 2025 06:01:10 +0000
Manifest this update:     Fri 04 Apr 2025 05:56:10 +0000
Manifest next update:     Sat 05 Apr 2025 06:16:10 +0000
Files and hashes:         1: 01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl (hash: Lwb52N/KWL1vM4OI+OkFQ2POtNhj+rBpixRXdlX5XzM=)
                          2: 3139322e36372e33352e302f32342d3332203d3e203437323732.roa (hash: ksX8z7ZW9gymrqj00x+2X/C8X7o9+JqUVnJjpd/TsDA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 06:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:81:88:25:57:38:f9:83:ef:63:ce:cb:23:a8:55:28:0c:e2:d0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01CFF7E74189563B0EC45D0E9BB7C5628B2E4388
        Validity
            Not Before: Apr  4 05:56:10 2025 GMT
            Not After : Apr  5 06:16:10 2025 GMT
        Subject: CN=E729DCCB8191FBCBBBD6D372EDC176CBDFA4449E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e1:a3:40:b5:4d:19:35:33:95:20:9c:b7:b4:
                    50:e1:d2:76:c7:c8:a2:f1:b8:df:8c:44:b2:71:51:
                    70:d0:76:6e:8b:5c:41:70:46:07:4b:48:70:89:d5:
                    82:6e:b8:dd:3e:34:10:fe:d5:4d:32:b9:ee:99:cd:
                    61:87:d5:8c:04:a3:c2:82:42:72:32:bd:0d:ef:80:
                    4c:e5:f0:93:8d:ff:e2:06:9d:fe:a0:30:97:af:42:
                    f8:06:ff:5d:c3:76:c6:9c:0b:7a:97:10:8a:98:23:
                    24:4a:65:4d:17:e4:9b:5d:58:f7:9a:5e:fa:d9:5b:
                    01:29:d2:cc:b6:8d:f2:15:d4:ee:ed:6b:68:5a:46:
                    8a:5a:ea:69:b1:34:34:c2:d0:e6:df:a4:79:68:66:
                    ff:71:39:ce:4e:45:d7:5c:84:93:2c:8e:e6:da:4a:
                    1b:ba:4d:0d:bb:6e:e9:44:d2:87:a1:f8:e2:ca:59:
                    49:6f:21:55:1e:91:64:9f:51:e9:54:9d:04:80:d8:
                    68:40:f3:8b:d9:04:d7:92:aa:ab:df:46:41:88:d8:
                    6f:67:5d:57:b2:b9:7a:bf:72:b7:1a:c2:74:de:fb:
                    a1:61:82:6c:58:b5:12:12:f2:df:33:33:92:78:88:
                    b1:19:78:90:00:4c:b5:0c:f3:41:b9:86:a7:c5:ac:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:29:DC:CB:81:91:FB:CB:BB:D6:D3:72:ED:C1:76:CB:DF:A4:44:9E
            X509v3 Authority Key Identifier:
                keyid:01:CF:F7:E7:41:89:56:3B:0E:C4:5D:0E:9B:B7:C5:62:8B:2E:43:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/4/01CFF7E74189563B0EC45D0E9BB7C5628B2E4388.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cf:d9:e4:a3:c9:50:d7:a9:9c:a5:64:ac:4f:43:15:fd:2f:
         ca:95:79:b2:4a:73:72:75:ce:39:1d:81:65:da:ee:d9:ec:e4:
         c2:7d:18:bb:cf:55:e5:31:fb:be:a2:9b:0b:b9:b9:05:d1:14:
         99:55:75:22:b4:37:2d:82:49:18:38:2d:29:ac:57:ce:aa:a0:
         b0:be:c6:d8:fc:bc:23:d2:ab:5e:62:68:db:b6:46:36:42:9f:
         59:36:81:10:ce:41:77:7c:37:17:c9:c4:35:64:f9:81:6f:20:
         d5:83:f0:f7:69:28:6a:34:e3:cf:00:fe:8a:e9:16:d6:f7:cb:
         11:b2:f7:15:28:cc:c3:8f:af:3e:bb:ee:e7:eb:41:14:f7:fb:
         a7:22:6f:96:26:52:1e:18:35:68:c3:c6:e1:c3:9c:d2:8a:79:
         1a:6f:8d:aa:1b:70:e4:32:58:82:19:24:c9:7f:61:ce:aa:f3:
         80:fe:89:11:6d:7e:fe:c2:6e:dc:07:4c:4b:36:91:b9:c3:ef:
         4e:33:d0:2a:23:c8:1f:6f:b7:9d:46:92:88:72:76:10:a0:39:
         27:da:ae:66:d5:94:c8:1b:8d:6d:44:09:48:c0:06:7d:03:58:
         4c:f5:22:6b:31:7c:7f:6f:45:41:ed:8c:6e:c3:99:16:3c:c2:
         e6:ea:a9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:13:45 2025 by rpki-client