Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft
File:                     07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft (raw, json)
Hash identifier:          N7rnJVVFQg+byyU3s6cx10vHhNeq/JxROq9/HuFtcTw=
Subject key identifier:   3A:94:6D:0C:AE:E5:57:74:3E:B5:EB:42:8B:5B:43:E7:59:8A:BB:5F
Authority key identifier: 07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE
Certificate issuer:       /CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
Certificate serial:       023F37819A98C80482793731AF224CAC2C2027C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft
Manifest number:          B3
Signing time:             Wed 03 Jul 2024 12:39:40 +0000
Manifest this update:     Wed 03 Jul 2024 12:34:40 +0000
Manifest next update:     Thu 04 Jul 2024 14:26:40 +0000
Files and hashes:         1: AS43607.asa (hash: sZAu9o3gCJdxhZl/rLbIkl0SqdUp27taq/wDNi4IKdk=)
                          2: 3139332e31372e322e302f32342d3234203d3e203433363037.roa (hash: QV7AW+QX/X6aUgIncvErYRoohj9PT1pN2OjgZR/RRqc=)
                          3: 326130373a323438363a6666303a3a2f34342d3438203d3e20323136333930.roa (hash: lpdtyMpTQi0Y5Zw42RBZiyX5zOVSadD9uTrMLpzqTCU=)
                          4: 326130373a323438363a6665303a3a2f34342d3438203d3e203434333331.roa (hash: JOh1qDxez9MViTehCFAKFSEpPEUI46E4zUCwiRpViWk=)
                          5: AS215569.asa (hash: neB1rV+Mf0kvdvSgMpEsfAUwihy8vDtMFnS4Ta4J6B8=)
                          6: AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer (hash: xatF46EgoCuoQ6b73GnREyudGXnf2rIduDBudS6mjrU=)
                          7: 326130373a323438363a343030663a3a2f34382d3438203d3e20323134393030.roa (hash: JVYwjDBhfdlpoA1NjQkIy2F5GvCl3ZhHo6E2kO0aNUk=)
                          8: 86A3055545CB4F4C420BE943F5C18559EBC1F39B.cer (hash: ScQfetH0RLx+2RK3OECS4B54DAj4IKITJ2d/b8TY5+4=)
                          9: 28FA507C2092BDD1BBD1B0816C9D71CD4681096C.cer (hash: dQ0N9CKVy3hxnwywpwJUo8yLDsXpt3wwg/MmomIjiLs=)
                          10: AB988C63F14514C64BA41F5464D70E7BB3EA8764.cer (hash: chx+B9anus/zy+EJkPnSNwLpqQPj8ik0zubrq7LS5+U=)
                          11: 07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl (hash: rD9w9zhookRkkTTyQ7hPPknO9S0MsT1b+6MU6Lmtx5o=)
                          12: 326130373a323438303a3a2f33322d3438203d3e203433363037.roa (hash: pJkuLbGnU3X2bJVPr6ErCwUvKgDfH/rC1D+p0+2tkoY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jul 2024 14:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3f:37:81:9a:98:c8:04:82:79:37:31:af:22:4c:ac:2c:20:27:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d362bdd7ca6e80e2c244437597bd47ef7a4fde
        Validity
            Not Before: Jul  3 12:34:40 2024 GMT
            Not After : Jul  4 14:26:40 2024 GMT
        Subject: CN=3A946D0CAEE557743EB5EB428B5B43E7598ABB5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8f:e1:dd:c2:96:b9:02:c0:07:37:2b:5d:e9:
                    6f:d7:e9:a3:d5:3b:a6:f2:34:53:bb:4e:22:f6:24:
                    77:ec:1c:6e:3c:f4:ac:8f:77:d3:16:05:9d:b8:24:
                    c7:a9:07:de:c8:cb:55:f9:8b:6e:74:7a:cf:33:92:
                    6a:f5:3a:4b:05:99:bd:4a:91:15:58:20:02:53:8d:
                    cf:77:d7:17:7c:4a:a0:1e:18:91:db:0d:5b:71:97:
                    c3:2b:5f:e3:96:68:a7:c4:aa:4e:e0:a8:1b:6f:14:
                    37:64:95:3b:8a:35:09:15:e4:99:ef:ea:09:7b:7b:
                    6d:64:6d:fa:ea:e8:bd:c2:5b:86:2b:45:73:b2:dd:
                    c9:5d:4f:f4:89:3e:0e:e6:6f:df:93:39:96:e2:29:
                    1a:9c:10:54:7f:ec:c2:f4:0a:42:c8:c0:83:7d:9b:
                    da:c5:f9:5f:cb:26:c6:bd:52:3c:e5:57:5c:45:e9:
                    45:bd:8d:8e:24:27:b6:a9:9c:b1:bb:54:1e:f5:6f:
                    06:af:a6:be:db:39:63:0c:fc:12:e9:5c:24:a3:ea:
                    f9:1d:f4:17:1c:5f:84:16:e8:e7:0a:2b:70:0e:de:
                    a0:c6:f7:d5:ed:e0:e3:aa:c9:37:c5:d2:84:c6:a0:
                    fd:bb:92:63:be:9d:40:9b:d6:26:9c:06:15:04:dd:
                    f9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:94:6D:0C:AE:E5:57:74:3E:B5:EB:42:8B:5B:43:E7:59:8A:BB:5F
            X509v3 Authority Key Identifier:
                keyid:07:D3:62:BD:D7:CA:6E:80:E2:C2:44:43:75:97:BD:47:EF:7A:4F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:18:20:2a:26:f1:54:16:ff:b2:61:d5:71:0a:48:80:61:c4:
         07:d6:32:df:63:43:41:e2:a1:fe:49:35:e7:0d:0a:41:ed:ae:
         6c:c6:9b:3d:0e:1f:e6:6e:d6:af:bf:72:e3:e5:e8:4f:6f:5b:
         40:11:2f:04:de:d9:ff:88:4f:60:bd:c2:33:02:ea:08:14:44:
         8f:93:d1:f7:93:ee:e0:f0:80:b3:94:e9:5d:d3:e4:cc:83:d3:
         b0:a4:86:a8:88:6f:af:b4:44:1e:3c:22:3a:b0:92:88:d7:fe:
         36:5e:99:6f:38:33:6e:21:e6:2f:48:7c:cb:03:d3:77:17:06:
         9d:31:6a:f6:66:69:a4:45:1b:b4:5c:f0:5b:3b:d6:aa:c5:dc:
         04:f7:e7:8f:a8:18:89:3b:46:99:c8:7e:11:11:fd:4d:98:59:
         55:1e:67:5f:1f:ac:4b:25:d4:3b:72:e1:f4:9f:02:4a:f1:b8:
         3a:bc:44:dc:ce:a5:b8:dc:22:84:93:fa:c3:35:e3:87:48:c5:
         41:7e:fb:59:ae:e5:3d:d4:33:92:e8:65:79:16:37:e7:7b:6f:
         38:33:a6:0a:db:c8:3d:81:46:3c:7c:d3:97:4e:1e:84:5d:18:
         84:4c:61:da:80:b2:45:5f:98:01:16:ed:33:84:db:d1:93:8a:
         9c:3e:8a:84
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUAj83gZqYyASCeTcxryJMrCwgJ8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDdkMzYyYmRkN2NhNmU4MGUyYzI0NDQzNzU5N2JkNDdl
ZjdhNGZkZTAeFw0yNDA3MDMxMjM0NDBaFw0yNDA3MDQxNDI2NDBaMDMxMTAvBgNV
BAMTKDNBOTQ2RDBDQUVFNTU3NzQzRUI1RUI0MjhCNUI0M0U3NTk4QUJCNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfj+Hdwpa5AsAHNytd6W/X6aPV
O6byNFO7TiL2JHfsHG489KyPd9MWBZ24JMepB97Iy1X5i250es8zkmr1OksFmb1K
kRVYIAJTjc931xd8SqAeGJHbDVtxl8MrX+OWaKfEqk7gqBtvFDdklTuKNQkV5Jnv
6gl7e21kbfrq6L3CW4YrRXOy3cldT/SJPg7mb9+TOZbiKRqcEFR/7ML0CkLIwIN9
m9rF+V/LJsa9UjzlV1xF6UW9jY4kJ7apnLG7VB71bwavpr7bOWMM/BLpXCSj6vkd
9BccX4QW6OcKK3AO3qDG99Xt4OOqyTfF0oTGoP27kmO+nUCb1iacBhUE3fmxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUOpRtDK7lV3Q+tetCi1tD51mKu18wHwYDVR0j
BBgwFoAUB9NivdfKboDiwkRDdZe9R+96T94wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvMjFhNzk3ZjktM2MxMC00NTM2LWFhNjQtMDljYTJkOTU0
NWM4LzAvMDdEMzYyQkREN0NBNkU4MEUyQzI0NDQzNzU5N0JENDdFRjdBNEZERS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0I5Tml2ZGZLYm9EaXdrUkRkWmU5Ui05
NlQ5NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yMWE3OTdmOS0z
YzEwLTQ1MzYtYWE2NC0wOWNhMmQ5NTQ1YzgvMC8wN0QzNjJCREQ3Q0E2RTgwRTJD
MjQ0NDM3NTk3QkQ0N0VGN0E0RkRFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRggKibxVBb/smHVcQpI
gGHEB9Yy32NDQeKh/kk15w0KQe2ubMabPQ4f5m7Wr79y4+XoT29bQBEvBN7Z/4hP
YL3CMwLqCBREj5PR95Pu4PCAs5TpXdPkzIPTsKSGqIhvr7REHjwiOrCSiNf+Nl6Z
bzgzbiHmL0h8ywPTdxcGnTFq9mZppEUbtFzwWzvWqsXcBPfnj6gYiTtGmch+ERH9
TZhZVR5nXx+sSyXUO3Lh9J8CSvG4OrxE3M6luNwihJP6wzXjh0jFQX77Wa7lPdQz
kuhleRY353tvODOmCtvIPYFGPHzTl04ehF0YhExh2oCyRV+YARbtM4Tb0ZOKnD6K
hA==
-----END CERTIFICATE-----
Generated at Thu Jul 4 03:51:51 2024 by rpki-client on console.sobornost.net