Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft
File:                     5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft (raw, json)
Hash identifier:          dOjSqBh1Y9kGzsLbSuQrdQPENYJhvSOSOD5nA4d2LR0=
Subject key identifier:   13:AF:10:D7:E5:9E:AF:40:3F:B7:4D:0A:F6:AA:85:85:E7:07:8B:19
Authority key identifier: 5A:2F:26:99:BA:53:59:EA:7F:37:02:C4:6D:4A:04:82:19:E1:A6:4B
Certificate issuer:       /CN=5a2f2699ba5359ea7f3702c46d4a048219e1a64b
Certificate serial:       44309E6A32D5F6F86505AE2ED19CE6A99EA12D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wi8mmbpTWep_NwLEbUoEghnhpks.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft
Manifest number:          0A8C
Signing time:             Fri 22 Nov 2024 07:44:22 +0000
Manifest this update:     Fri 22 Nov 2024 07:39:22 +0000
Manifest next update:     Sat 23 Nov 2024 07:47:22 +0000
Files and hashes:         1: 33312e32342e38342e302f32342d3234203d3e20313336373837.roa (hash: +xv4HQvE2izBfWSwUxF6zCYpXi1N3jphq4kcXafcSys=)
                          2: 5A2F2699BA5359EA7F3702C46D4A048219E1A64B.crl (hash: vJfj/kTac7gdHVmE6Iv/orI2u8ctCV8Gpqd9BoBq1xM=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wi8mmbpTWep_NwLEbUoEghnhpks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:30:9e:6a:32:d5:f6:f8:65:05:ae:2e:d1:9c:e6:a9:9e:a1:2d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a2f2699ba5359ea7f3702c46d4a048219e1a64b
        Validity
            Not Before: Nov 22 07:39:22 2024 GMT
            Not After : Nov 23 07:47:22 2024 GMT
        Subject: CN=13AF10D7E59EAF403FB74D0AF6AA8585E7078B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:58:d7:ec:13:08:8a:f7:17:82:1b:ce:81:
                    49:2d:e7:80:82:e5:de:40:12:f9:01:26:b9:0a:1a:
                    aa:ff:2f:96:d2:43:6c:73:12:81:51:82:6b:1e:32:
                    d3:b2:be:6a:96:a3:e0:f3:6d:ba:b1:5f:57:49:08:
                    5e:c9:b4:93:a4:2f:4e:a1:a6:29:d9:1a:6a:1f:66:
                    b6:d3:1b:f0:e7:b3:25:ac:c1:83:92:90:16:8a:06:
                    21:10:ef:42:8f:cc:43:58:ea:88:44:0e:0b:19:df:
                    27:33:98:5b:5d:32:61:dd:ad:7f:d7:3c:03:2f:95:
                    6a:84:87:84:87:a2:c1:c1:37:a2:63:37:d9:68:15:
                    8b:33:22:f3:b0:d5:7c:98:37:42:ea:df:dc:c9:07:
                    55:9f:dc:1d:3f:f1:91:1f:e5:35:cf:c3:1a:e3:17:
                    1d:57:c1:58:16:e9:03:69:1a:7c:ed:cf:63:13:2c:
                    71:bd:d9:aa:f5:c5:19:57:46:72:37:a8:83:2d:43:
                    47:c4:e3:64:24:bc:89:b4:ff:89:34:de:46:8f:ed:
                    17:ea:3a:dd:83:54:75:9a:ac:52:e6:e8:69:c7:ad:
                    f9:99:07:4d:c6:a8:0f:b6:2e:83:12:56:47:59:76:
                    1e:f8:72:a6:37:83:19:7c:7f:99:d2:d5:f9:ab:76:
                    c8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:AF:10:D7:E5:9E:AF:40:3F:B7:4D:0A:F6:AA:85:85:E7:07:8B:19
            X509v3 Authority Key Identifier:
                keyid:5A:2F:26:99:BA:53:59:EA:7F:37:02:C4:6D:4A:04:82:19:E1:A6:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wi8mmbpTWep_NwLEbUoEghnhpks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/211/5A2F2699BA5359EA7F3702C46D4A048219E1A64B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:08:aa:1a:55:64:ce:35:fb:47:1a:4a:4a:3b:7b:51:b8:1c:
         45:af:43:14:5f:4d:da:5b:8a:05:a1:64:d5:2f:c9:cd:33:6c:
         33:0d:db:5b:37:87:09:7a:c5:e1:15:d8:d0:eb:26:54:c7:6d:
         c1:2c:b4:af:15:89:ba:20:49:1f:67:24:f9:02:a2:e3:7f:7f:
         30:bc:7c:d3:b1:31:ac:53:71:31:c3:6f:7c:84:da:b3:f6:8f:
         b4:b1:12:c9:0b:7b:a6:c1:e5:c1:a2:c0:cb:93:3a:ed:1e:36:
         62:5f:82:36:d4:f2:54:3b:21:55:4f:2c:2d:28:46:b9:a3:9d:
         7a:f7:ed:95:8a:09:96:b9:e8:e3:25:53:94:26:31:de:3e:19:
         57:51:bd:c2:51:ad:d7:cc:b9:f4:ea:4d:6a:bb:c2:3c:24:7c:
         6a:0d:ee:74:ef:22:82:2c:da:6f:7a:f1:5b:39:ac:4f:a4:14:
         d3:1b:10:d0:78:8a:a8:fe:b3:a8:da:1e:35:a3:62:ea:ff:c5:
         59:e2:a6:d6:80:0e:1c:b2:c6:63:10:51:d3:06:87:08:fd:d3:
         b2:12:74:1f:41:45:24:8f:bb:e0:27:02:33:57:1e:b1:45:2f:
         c1:a5:46:6e:8f:61:ce:39:66:3c:b8:f7:83:66:3f:b0:6b:b6:
         a1:da:18:24
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIURDCeajLV9vhlBa4u0ZzmqZ6hLSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNWEyZjI2OTliYTUzNTllYTdmMzcwMmM0NmQ0YTA0ODIx
OWUxYTY0YjAeFw0yNDExMjIwNzM5MjJaFw0yNDExMjMwNzQ3MjJaMDMxMTAvBgNV
BAMTKDEzQUYxMEQ3RTU5RUFGNDAzRkI3NEQwQUY2QUE4NTg1RTcwNzhCMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC671jX7BMIivcXghvOgUkt54CC
5d5AEvkBJrkKGqr/L5bSQ2xzEoFRgmseMtOyvmqWo+DzbbqxX1dJCF7JtJOkL06h
pinZGmofZrbTG/DnsyWswYOSkBaKBiEQ70KPzENY6ohEDgsZ3yczmFtdMmHdrX/X
PAMvlWqEh4SHosHBN6JjN9loFYszIvOw1XyYN0Lq39zJB1Wf3B0/8ZEf5TXPwxrj
Fx1XwVgW6QNpGnztz2MTLHG92ar1xRlXRnI3qIMtQ0fE42QkvIm0/4k03kaP7Rfq
Ot2DVHWarFLm6GnHrfmZB03GqA+2LoMSVkdZdh74cqY3gxl8f5nS1fmrdsj1AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUE68Q1+Wer0A/t00K9qqFhecHixkwHwYDVR0j
BBgwFoAUWi8mmbpTWep/NwLEbUoEghnhpkswDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8yMTEvNUEyRjI2OTlCQTUzNTlFQTdGMzcwMkM0NkQ0QTA0ODIxOUUxQTY0
Qi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1dpOG1tYnBUV2VwX053TEViVW9F
Z2huaHBrcy5jZXIwgaEGCCsGAQUFBwELBIGUMIGRMIGOBggrBgEFBQcwC4aBgXJz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzIxMS81QTJGMjY5OUJBNTM1
OUVBN0YzNzAyQzQ2RDRBMDQ4MjE5RTFBNjRCLm1mdDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwwiqGlVkzjX7
RxpKSjt7UbgcRa9DFF9N2luKBaFk1S/JzTNsMw3bWzeHCXrF4RXY0OsmVMdtwSy0
rxWJuiBJH2ck+QKi439/MLx807ExrFNxMcNvfITas/aPtLESyQt7psHlwaLAy5M6
7R42Yl+CNtTyVDshVU8sLShGuaOdevftlYoJlrno4yVTlCYx3j4ZV1G9wlGt18y5
9OpNarvCPCR8ag3udO8igizab3rxWzmsT6QU0xsQ0HiKqP6zqNoeNaNi6v/FWeKm
1oAOHLLGYxBR0waHCP3TshJ0H0FFJI+74CcCM1cesUUvwaVGbo9hzjlmPLj3g2Y/
sGu2odoYJA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:02 2024 by rpki-client on console-fra.rpki-client.org