Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
File:                     AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft (raw, json)
Hash identifier:          JAAhT2zV0fpIf0ECg9F42nrbpkV5nLWs8NMM3gagiPw=
Subject key identifier:   C8:28:31:7B:7B:76:DE:8F:A5:92:ED:10:F1:1D:E1:55:33:EC:0C:22
Authority key identifier: AE:DC:29:8D:25:2D:56:47:DD:0D:0C:9E:33:35:51:7D:F6:F4:98:01
Certificate issuer:       /CN=aedc298d252d5647dd0d0c9e3335517df6f49801
Certificate serial:       46FACCABCA5CFA5BB6ECA9C08FC35FD0775DAEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
Manifest number:          0A9C
Signing time:             Mon 25 Nov 2024 13:44:18 +0000
Manifest this update:     Mon 25 Nov 2024 13:39:18 +0000
Manifest next update:     Tue 26 Nov 2024 17:12:18 +0000
Files and hashes:         1: AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl (hash: sZxDFPU/bl4BjcJakH/SPhuAMSJLS2S9FhgBjJ80r7s=)
                          2: 33312e32342e38352e302f32342d3234203d3e20323035363539.roa (hash: VMXyT3RWSUasYdwhisrKxteHuM6tNfJ75ub8wAAY4QI=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fa:cc:ab:ca:5c:fa:5b:b6:ec:a9:c0:8f:c3:5f:d0:77:5d:ae:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc298d252d5647dd0d0c9e3335517df6f49801
        Validity
            Not Before: Nov 25 13:39:18 2024 GMT
            Not After : Nov 26 17:12:18 2024 GMT
        Subject: CN=C828317B7B76DE8FA592ED10F11DE15533EC0C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:9a:d9:7b:00:29:c0:3e:77:fa:60:44:f1:
                    55:fb:ce:4c:af:25:24:aa:2c:3f:b2:70:47:d5:5f:
                    d9:87:2a:4c:f5:58:92:d8:e2:59:a1:d3:6b:f8:49:
                    70:d7:70:99:c8:f7:44:10:33:47:47:7c:3d:23:a3:
                    d1:8a:f0:f8:6c:94:54:1a:6b:4c:48:85:8c:0c:57:
                    cd:9b:b8:94:bb:3a:20:dd:6d:9f:56:04:8e:5d:1c:
                    6f:4c:a3:a9:85:af:1e:00:83:31:ac:31:21:6b:09:
                    dc:a1:27:3c:5e:72:29:58:be:53:13:f1:c7:d4:c4:
                    71:c0:b8:d0:a0:0e:84:93:4f:aa:4f:d1:c7:c5:a7:
                    8e:24:e5:9a:d2:20:ca:ea:0f:f7:07:09:43:0e:19:
                    46:8e:e6:14:c2:02:b9:13:f7:e6:74:5e:13:7a:cd:
                    33:2d:53:1b:bd:52:51:9c:03:03:0c:2b:f8:2e:b6:
                    d2:b6:cd:1e:7e:0e:d2:2f:d7:38:8f:da:98:08:41:
                    5b:85:3a:05:67:a6:24:a8:00:3e:9a:0a:2a:d0:83:
                    82:29:bb:46:d8:c4:2d:39:51:15:5e:8e:9b:de:45:
                    93:67:44:55:6a:d0:35:54:01:f8:01:f9:41:1b:90:
                    c0:85:5a:e7:cc:2b:ce:bf:1e:6e:49:ad:a6:83:03:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:28:31:7B:7B:76:DE:8F:A5:92:ED:10:F1:1D:E1:55:33:EC:0C:22
            X509v3 Authority Key Identifier:
                keyid:AE:DC:29:8D:25:2D:56:47:DD:0D:0C:9E:33:35:51:7D:F6:F4:98:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtwpjSUtVkfdDQyeMzVRffb0mAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/190/AEDC298D252D5647DD0D0C9E3335517DF6F49801.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:eb:72:84:b6:fb:6e:44:87:44:77:50:03:bb:4f:59:2c:d7:
         b4:39:49:b8:70:ee:e8:07:1a:8c:11:d0:67:09:92:a7:dd:87:
         d2:a7:4f:bc:15:a2:91:d9:67:d8:de:e7:7b:85:69:79:61:e8:
         9c:5c:38:73:8e:42:d6:24:02:a8:68:3e:6b:e7:ec:76:15:ab:
         fc:3f:1c:1c:57:3e:1c:38:24:04:13:39:cd:35:6a:af:b9:f0:
         a3:ef:20:79:02:5f:dc:0b:77:42:81:d4:3c:13:b5:be:f1:24:
         25:eb:2c:d7:cb:7e:5d:7d:8a:77:71:b6:fd:9f:9f:27:94:a1:
         f0:1c:2d:58:05:20:a7:ab:53:24:ea:78:cf:41:71:83:9b:00:
         ad:35:2b:b2:db:86:39:94:8a:dd:88:2e:11:05:e7:7b:ee:98:
         95:2d:87:43:52:a5:6e:94:a9:6e:71:a0:35:14:b9:09:14:9b:
         34:26:51:7b:a5:87:72:79:72:cd:6e:d9:6a:c9:49:1c:18:55:
         29:59:51:6f:a2:bc:af:2f:4e:5d:d5:8b:18:59:39:87:37:8f:
         8d:a3:3e:6c:76:66:74:c2:85:a6:53:9b:e7:f1:58:ca:1e:0d:
         6c:33:ae:d2:30:49:ae:0d:6d:1d:59:10:69:07:e8:66:90:a7:
         cb:d5:17:c5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURvrMq8pc+lu27KnAj8Nf0HddrvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWVkYzI5OGQyNTJkNTY0N2RkMGQwYzllMzMzNTUxN2Rm
NmY0OTgwMTAeFw0yNDExMjUxMzM5MThaFw0yNDExMjYxNzEyMThaMDMxMTAvBgNV
BAMTKEM4MjgzMTdCN0I3NkRFOEZBNTkyRUQxMEYxMURFMTU1MzNFQzBDMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9cZrZewApwD53+mBE8VX7zkyv
JSSqLD+ycEfVX9mHKkz1WJLY4lmh02v4SXDXcJnI90QQM0dHfD0jo9GK8PhslFQa
a0xIhYwMV82buJS7OiDdbZ9WBI5dHG9Mo6mFrx4AgzGsMSFrCdyhJzxecilYvlMT
8cfUxHHAuNCgDoSTT6pP0cfFp44k5ZrSIMrqD/cHCUMOGUaO5hTCArkT9+Z0XhN6
zTMtUxu9UlGcAwMMK/guttK2zR5+DtIv1ziP2pgIQVuFOgVnpiSoAD6aCirQg4Ip
u0bYxC05URVejpveRZNnRFVq0DVUAfgB+UEbkMCFWufMK86/Hm5JraaDA8yXAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUyCgxe3t23o+lku0Q8R3hVTPsDCIwHwYDVR0j
BBgwFoAUrtwpjSUtVkfdDQyeMzVRffb0mAEwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xOTAvQUVEQzI5OEQyNTJENTY0N0REMEQwQzlFMzMzNTUxN0RGNkY0OTgw
MS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3J0d3BqU1V0VmtmZERReWVNelZS
ZmZiMG1BRS5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE5MC9BRURDMjk4RDI1MkQ1
NjQ3REQwRDBDOUUzMzM1NTE3REY2RjQ5ODAxLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+tyhLb7bkSH
RHdQA7tPWSzXtDlJuHDu6AcajBHQZwmSp92H0qdPvBWikdln2N7ne4VpeWHonFw4
c45C1iQCqGg+a+fsdhWr/D8cHFc+HDgkBBM5zTVqr7nwo+8geQJf3At3QoHUPBO1
vvEkJess18t+XX2Kd3G2/Z+fJ5Sh8BwtWAUgp6tTJOp4z0Fxg5sArTUrstuGOZSK
3YguEQXne+6YlS2HQ1KlbpSpbnGgNRS5CRSbNCZRe6WHcnlyzW7ZaslJHBhVKVlR
b6K8ry9OXdWLGFk5hzePjaM+bHZmdMKFplOb5/FYyh4NbDOu0jBJrg1tHVkQaQfo
ZpCny9UXxQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:44:10 2024 by rpki-client on console-fra.rpki-client.org