Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
File:                     974F44DCD416495219413C1B0D69A1F87F507288.mft (raw, json)
Hash identifier:          zbWY3+qZ2l/jsPG3tVPZyVDSlsj+qtIkjBdcckYt4zY=
Subject key identifier:   85:38:6B:18:B7:5B:B0:AF:1A:6E:F7:61:FE:38:A9:44:A4:2F:6B:F1
Authority key identifier: 97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88
Certificate issuer:       /CN=974f44dcd416495219413c1b0d69a1f87f507288
Certificate serial:       790A5324EB3431E1538E61E155EE7B3CC6E7139D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
Manifest number:          0296
Signing time:             Tue 25 Jun 2024 13:13:37 +0000
Manifest this update:     Tue 25 Jun 2024 13:08:37 +0000
Manifest next update:     Wed 26 Jun 2024 16:13:37 +0000
Files and hashes:         1: 974F44DCD416495219413C1B0D69A1F87F507288.crl (hash: QYQ5KaSoXqgtH3ERYzrPjPf+i1MAvlFmzPqtbqQCKX4=)
                          2: AS212245.asa (hash: ZYHS7bw/60aIF+HAe417yzc3y3QWiUxfEiwvjxJbGvk=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 16:13:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:0a:53:24:eb:34:31:e1:53:8e:61:e1:55:ee:7b:3c:c6:e7:13:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=974f44dcd416495219413c1b0d69a1f87f507288
        Validity
            Not Before: Jun 25 13:08:37 2024 GMT
            Not After : Jun 26 16:13:37 2024 GMT
        Subject: CN=85386B18B75BB0AF1A6EF761FE38A944A42F6BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:7f:92:a0:4e:3f:08:e8:ba:d1:01:56:fc:
                    06:98:72:9d:22:52:16:67:9e:7f:23:dc:fc:3d:21:
                    8f:20:8b:89:81:00:e5:54:31:e7:e3:22:17:91:ac:
                    65:2c:65:00:5c:eb:b5:64:4e:99:b3:6e:81:e8:c6:
                    e9:51:44:7b:f0:a4:1c:d2:92:a4:60:42:ed:dc:1e:
                    81:15:38:08:4d:de:18:df:32:9f:24:58:e1:93:e5:
                    72:ee:b3:c4:b9:e8:59:13:af:d6:d3:9b:26:0b:93:
                    2a:09:80:c7:a3:cb:08:af:5d:80:39:6a:37:56:d7:
                    c6:8f:e7:15:69:da:2d:e2:08:17:c7:83:83:ae:8f:
                    dd:fa:04:b5:3c:56:c9:cd:74:e1:e5:34:8d:c5:3f:
                    98:d2:7e:22:da:23:eb:01:61:61:8b:9a:b7:e8:d3:
                    7e:03:53:58:6d:20:22:c4:07:de:16:c0:48:7b:5b:
                    16:df:34:f8:16:e1:a8:22:d9:de:ce:c9:0a:5c:2a:
                    a7:3c:59:9b:93:ef:40:a7:9b:4f:d3:71:f1:2d:de:
                    85:3b:f3:99:6b:44:dc:d7:cd:46:ee:73:f3:2b:f1:
                    46:3f:14:77:d0:31:00:59:86:75:30:51:e6:41:19:
                    e4:ff:11:89:db:d6:b9:25:55:fa:67:7a:8f:53:f0:
                    c1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:38:6B:18:B7:5B:B0:AF:1A:6E:F7:61:FE:38:A9:44:A4:2F:6B:F1
            X509v3 Authority Key Identifier:
                keyid:97:4F:44:DC:D4:16:49:52:19:41:3C:1B:0D:69:A1:F8:7F:50:72:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l09E3NQWSVIZQTwbDWmh-H9Qcog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7b575ea7-786f-4b2d-a455-79d7fc43ecee/18/974F44DCD416495219413C1B0D69A1F87F507288.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:83:c2:3b:75:53:9a:61:b7:e6:34:a0:7e:f0:b1:1f:5b:38:
         87:da:9b:9f:77:61:29:3e:90:7b:72:15:c3:49:dc:6f:1c:dd:
         29:09:96:8a:08:57:09:88:16:ef:94:fe:f0:d0:9e:9b:02:d2:
         b7:ab:5a:45:ab:ae:5e:a2:0d:c7:52:c9:a7:5f:c6:6e:ff:9e:
         0f:e1:73:13:43:de:9c:90:c1:be:35:81:eb:72:c9:9a:a9:a0:
         25:4c:ce:ea:16:95:39:d0:c8:b9:98:18:52:be:d5:e5:2f:19:
         54:cf:d5:ef:16:7d:fa:f6:8b:f3:fc:49:7c:fb:0f:44:98:a2:
         52:da:bc:5a:51:e5:84:f4:fa:2c:f7:f9:72:cb:dc:2c:fc:9f:
         5a:be:56:6c:3e:73:4f:8a:4f:6e:ac:fe:03:07:f1:b0:41:64:
         6e:a6:a4:1d:74:2c:c1:ef:d8:3e:eb:dd:df:0c:7c:18:81:4f:
         fe:a9:c1:71:54:95:71:10:18:a3:46:43:4a:d1:4b:52:fb:b0:
         26:d1:2c:43:d5:b7:bc:8b:54:a3:e7:44:10:ea:e0:fc:74:bb:
         6f:9a:ff:ab:0c:6d:8d:7f:47:ba:55:12:d9:f5:f9:42:ef:32:
         93:72:bf:0f:9e:15:29:99:65:fd:cd:c6:45:70:81:3e:1e:27:
         be:0e:78:72
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUeQpTJOs0MeFTjmHhVe57PMbnE50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc0ZjQ0ZGNkNDE2NDk1MjE5NDEzYzFiMGQ2OWExZjg3
ZjUwNzI4ODAeFw0yNDA2MjUxMzA4MzdaFw0yNDA2MjYxNjEzMzdaMDMxMTAvBgNV
BAMTKDg1Mzg2QjE4Qjc1QkIwQUYxQTZFRjc2MUZFMzhBOTQ0QTQyRjZCRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjiH+SoE4/COi60QFW/AaYcp0i
UhZnnn8j3Pw9IY8gi4mBAOVUMefjIheRrGUsZQBc67VkTpmzboHoxulRRHvwpBzS
kqRgQu3cHoEVOAhN3hjfMp8kWOGT5XLus8S56FkTr9bTmyYLkyoJgMejywivXYA5
ajdW18aP5xVp2i3iCBfHg4Ouj936BLU8VsnNdOHlNI3FP5jSfiLaI+sBYWGLmrfo
034DU1htICLEB94WwEh7WxbfNPgW4agi2d7OyQpcKqc8WZuT70Cnm0/TcfEt3oU7
85lrRNzXzUbuc/Mr8UY/FHfQMQBZhnUwUeZBGeT/EYnb1rklVfpneo9T8MFpAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUhThrGLdbsK8abvdh/jipRKQva/EwHwYDVR0j
BBgwFoAUl09E3NQWSVIZQTwbDWmh+H9QcogwDgYDVR0PAQH/BAQDAgeAMIGXBgNV
HR8EgY8wgYwwgYmggYaggYOGgYByc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5LzdiNTc1ZWE3LTc4NmYtNGIyZC1hNDU1LTc5ZDdmYzQz
ZWNlZS8xOC85NzRGNDREQ0Q0MTY0OTUyMTk0MTNDMUIwRDY5QTFGODdGNTA3Mjg4
LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvbDA5RTNOUVdTVklaUVR3YkRXbWgt
SDlRY29nLmNlcjCBoAYIKwYBBQUHAQsEgZMwgZAwgY0GCCsGAQUFBzALhoGAcnN5
bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83YjU3NWVh
Ny03ODZmLTRiMmQtYTQ1NS03OWQ3ZmM0M2VjZWUvMTgvOTc0RjQ0RENENDE2NDk1
MjE5NDEzQzFCMEQ2OUExRjg3RjUwNzI4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACKDwjt1U5pht+Y0
oH7wsR9bOIfam593YSk+kHtyFcNJ3G8c3SkJlooIVwmIFu+U/vDQnpsC0rerWkWr
rl6iDcdSyadfxm7/ng/hcxND3pyQwb41getyyZqpoCVMzuoWlTnQyLmYGFK+1eUv
GVTP1e8Wffr2i/P8SXz7D0SYolLavFpR5YT0+iz3+XLL3Cz8n1q+Vmw+c0+KT26s
/gMH8bBBZG6mpB10LMHv2D7r3d8MfBiBT/6pwXFUlXEQGKNGQ0rRS1L7sCbRLEPV
t7yLVKPnRBDq4Px0u2+a/6sMbY1/R7pVEtn1+ULvMpNyvw+eFSmZZf3NxkVwgT4e
J74OeHI=
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:30:24 2024 by rpki-client on console.sobornost.net