Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft
File:                     503177A5FC39DD005C41B770207D6705510713A8.mft (raw, json)
Hash identifier:          FWjAItVYf35CkjduktX0KwxadoemtGmTJBriHlSBhI4=
Subject key identifier:   CF:EB:0A:64:89:D9:2E:DF:FC:FD:66:D2:B1:E1:04:B5:93:5C:04:AF
Authority key identifier: 50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8
Certificate issuer:       /CN=503177A5FC39DD005C41B770207D6705510713A8
Certificate serial:       2CA1FCE9189465998A97E323CA1CE896BD4C2DFE
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft
Manifest number:          08
Signing time:             Tue 25 Jun 2024 16:32:54 +0000
Manifest this update:     Tue 25 Jun 2024 16:27:54 +0000
Manifest next update:     Wed 26 Jun 2024 17:15:54 +0000
Files and hashes:         1: 503177A5FC39DD005C41B770207D6705510713A8.crl (hash: Y0ePCmsvzXPmfsK2Y+gp5o59lTc0olfX80IA1zNabmo=)
                          2: 326131323a646434373a383430303a3a2f34352d3438203d3e20323033303639.roa (hash: hf0sTrKrDJ4boI08ZHhNaHWTmMq+esR34eLQdUrR3Dc=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/34E6AAC74193FE34C57CB5F562608EE1E50DAD51.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 16:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a1:fc:e9:18:94:65:99:8a:97:e3:23:ca:1c:e8:96:bd:4c:2d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503177A5FC39DD005C41B770207D6705510713A8
        Validity
            Not Before: Jun 25 16:27:54 2024 GMT
            Not After : Jun 26 17:15:54 2024 GMT
        Subject: CN=CFEB0A6489D92EDFFCFD66D2B1E104B5935C04AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a0:ff:da:fc:e0:6b:26:eb:b8:a1:f6:27:9c:
                    c9:22:0d:98:c4:1d:e1:d9:12:88:8c:05:2a:b8:9c:
                    5e:aa:17:d9:10:f2:34:eb:ba:00:78:14:c5:2e:e4:
                    09:3a:1b:0f:35:2d:16:7e:63:d2:c4:66:4e:b9:ba:
                    c4:d3:30:ab:0d:aa:2a:f7:08:2d:cf:c1:d3:a4:4e:
                    12:fb:98:e4:1d:5c:e2:f2:b9:4e:50:4e:c3:db:15:
                    bf:13:f0:9b:f5:97:e4:7d:65:da:a1:29:bb:8f:47:
                    23:b2:be:82:e9:4e:cb:aa:d3:36:89:62:45:30:38:
                    6a:2b:a6:9e:f2:60:8e:27:80:32:a1:17:ba:ed:f5:
                    aa:7a:54:b5:dd:5c:15:88:5c:4b:03:ef:a0:75:42:
                    74:42:40:09:e4:5c:92:4a:6a:16:14:17:95:a0:94:
                    d5:03:47:24:70:a1:ec:9f:b1:ab:47:87:e9:04:58:
                    41:a9:aa:51:a2:97:ae:74:dc:85:6e:b7:f8:c2:39:
                    64:a3:0a:17:20:62:a3:16:1a:5f:0d:9e:a2:00:04:
                    97:bb:9b:f0:68:3f:76:c8:ed:9c:fa:ce:12:b9:1c:
                    91:87:46:58:fd:a0:7f:31:32:55:d3:4c:c8:6b:90:
                    89:0e:63:15:d2:63:15:96:a6:51:32:ee:03:ad:bd:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EB:0A:64:89:D9:2E:DF:FC:FD:66:D2:B1:E1:04:B5:93:5C:04:AF
            X509v3 Authority Key Identifier:
                keyid:50:31:77:A5:FC:39:DD:00:5C:41:B7:70:20:7D:67:05:51:07:13:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bf8e977-7278-46cf-abd1-99cd1fd2be4e/6/503177A5FC39DD005C41B770207D6705510713A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60be8f7b-d44c-4ca2-beb3-2dd41baee837/3/503177A5FC39DD005C41B770207D6705510713A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:17:d6:cc:37:1d:c4:5b:e3:d0:e6:93:6e:80:25:f0:17:3d:
         e4:ba:49:97:8f:df:cc:2e:d1:20:04:88:ba:cb:0b:42:d3:d9:
         8d:8c:f2:2c:d2:15:af:3a:fd:47:17:6d:86:cf:02:e8:75:66:
         b2:34:c4:b1:8e:88:b1:26:a1:7b:2a:c3:ec:b3:dc:2b:2b:48:
         e9:2a:bf:c6:7c:f9:24:43:20:aa:22:5d:c8:bd:ce:df:50:d4:
         c2:1d:9f:d9:32:86:d5:b1:10:22:63:e1:75:fb:00:cd:01:04:
         46:cd:d0:f6:b2:a2:05:85:46:bc:52:3f:2e:52:cd:9e:af:21:
         28:0d:9a:91:bb:92:c9:39:8d:ff:92:cc:ed:ff:b0:76:c8:5d:
         fb:db:b6:ab:80:1b:4e:d8:d2:9e:11:93:78:16:80:98:fd:5f:
         e3:48:e3:4d:7f:d0:b4:7a:6f:8f:6b:6c:0d:0a:05:5f:49:cb:
         41:1d:ae:42:81:8e:de:d1:1d:ab:5a:5a:a0:b7:f6:7a:d6:7f:
         bf:de:38:90:df:0d:02:b2:ee:c0:7b:b4:d3:c6:66:46:f2:d5:
         d4:91:f0:97:75:0d:4e:d1:97:d0:d8:c2:71:5e:31:7c:c8:fe:
         fb:ff:2f:f5:fc:9f:43:8f:da:be:02:89:a9:09:85:22:74:3e:
         5c:e7:96:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:30:21 2024 by rpki-client on console.sobornost.net