Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.mft
File:                     ADD73B35695BB3BF25B467196329EFCAAC867E5E.mft (raw, json)
Hash identifier:          26Mcbs40QzeZhstKPlhTbhVO8wcIrKFdovPJpe76uQA=
Subject key identifier:   34:C9:30:48:28:72:69:C3:F0:81:5F:5B:45:A9:22:3A:9B:57:6D:6D
Authority key identifier: AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E
Certificate issuer:       /CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
Certificate serial:       0E3A147CD1768935211221BFBF2D075E8DEB43F5
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.mft
Manifest number:          6A
Signing time:             Sat 29 Jun 2024 09:58:20 +0000
Manifest this update:     Sat 29 Jun 2024 09:53:20 +0000
Manifest next update:     Sun 30 Jun 2024 12:50:20 +0000
Files and hashes:         1: 326130363a396638313a333066643a3a2f34382d3438203d3e20323033393739.roa (hash: DgZW8pL5yQ/+tnAFMIrusLiNazd1tO+Sk9B2W/gMggY=)
                          2: 326130363a396638313a333031313a3a2f34382d3438203d3e20313531333439.roa (hash: 3uJCOhEGeUoZLhGs3vIu0mthONv00zBut0cPIsl+AOM=)
                          3: 326130363a396638313a333066663a3a2f34382d3438203d3e20323135303837.roa (hash: dHXLarpOP2/2Ai/efD/0qko+DaW8z73y3vf92pDMJpk=)
                          4: 326130363a396638313a333030333a3a2f34382d3438203d3e20313531333439.roa (hash: VqpOH3JB7kumbyw4OPBmixjJvwk4WT0FskamZu4ZUto=)
                          5: 326130363a396638313a333033313a3a2f34382d3438203d3e20313531333439.roa (hash: 55XoROYLqfXPsu2wc+5hUiP1grUorMG/PcWnSK3uMHM=)
                          6: 326130363a396638313a333030323a3a2f34382d3438203d3e20313531333439.roa (hash: 829mL7zNg8OV+ipGxn6TrNnQeEgDdq40dqK/Wq9q1GA=)
                          7: ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl (hash: DMrpA2F5JPysMoihBS+cCSEqcqrJJcXnNREdNLUEowQ=)
                          8: 326130363a396638313a333033303a3a2f34382d3438203d3e20313531333439.roa (hash: +heFp/HogOer+JX0DCA9KlHIxXM6ZSYcBAHEX6Ffr7s=)
                          9: 326130363a396638313a333038303a3a2f34342d3434203d3e20313339333131.roa (hash: Y0807me3fnLtYVRrMNj3P9iojnjFNFOxiZi1j7INkos=)
                          10: 326130363a396638313a333030313a3a2f34382d3438203d3e20313531333439.roa (hash: DF+lmI5wWmIcKXa4Wpjrou68b980Y4wo3Yx6cQxakvs=)
                          11: 326130363a396638313a333066653a3a2f34382d3438203d3e20323135303837.roa (hash: T+UH26QLW0J9fvaMsqSHI81YN8u6D4igl4Tf3/9pyH8=)
                          12: 326130363a396638313a333030303a3a2f34382d3438203d3e20313531333439.roa (hash: OUhhUL9VybYAR1xm+Ds81oHSIwC+8bDrO4JLKl4ev8s=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Jun 2024 12:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:3a:14:7c:d1:76:89:35:21:12:21:bf:bf:2d:07:5e:8d:eb:43:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADD73B35695BB3BF25B467196329EFCAAC867E5E
        Validity
            Not Before: Jun 29 09:53:20 2024 GMT
            Not After : Jun 30 12:50:20 2024 GMT
        Subject: CN=34C93048287269C3F0815F5B45A9223A9B576D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:9a:a4:2f:92:c6:de:25:19:de:6d:30:e5:
                    59:43:72:52:4a:a6:4b:49:4b:72:8f:d5:d6:6d:06:
                    a0:80:ed:95:6b:08:28:aa:11:84:ec:83:0e:27:35:
                    72:76:9c:68:4e:b7:a9:de:24:38:51:e5:45:c7:aa:
                    cb:8f:19:76:43:82:7b:0c:a0:31:b8:e8:f8:eb:a9:
                    86:6a:b1:e7:21:3e:17:2f:72:08:46:08:40:2d:ba:
                    34:b7:62:46:1c:8f:db:4e:01:5e:76:10:07:38:60:
                    cc:fb:a2:5a:f8:35:ce:42:03:98:40:32:13:16:74:
                    e0:3b:fb:aa:d2:97:fe:cf:14:42:dd:87:6a:4b:a0:
                    a3:0b:df:c5:fe:7e:6a:46:b4:05:c6:e0:61:4a:6f:
                    3a:22:97:1d:cd:81:d4:ff:55:0e:85:73:75:bc:07:
                    5f:6d:34:cc:40:7a:d6:74:1b:74:78:dc:dd:92:52:
                    60:5b:c1:60:85:30:d3:2c:b9:24:00:d7:a9:c3:dd:
                    fc:68:05:e0:aa:37:14:dd:2d:e6:ab:be:b2:88:0b:
                    33:a7:e0:06:4f:eb:8b:ad:4e:e3:c5:84:3d:00:ee:
                    a9:6f:70:27:c5:df:30:20:ec:95:db:30:0e:72:f7:
                    40:ed:3e:fa:67:5b:8e:e1:fa:4d:01:dc:18:03:3d:
                    fd:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C9:30:48:28:72:69:C3:F0:81:5F:5B:45:A9:22:3A:9B:57:6D:6D
            X509v3 Authority Key Identifier:
                keyid:AD:D7:3B:35:69:5B:B3:BF:25:B4:67:19:63:29:EF:CA:AC:86:7E:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a9b0deda-55ce-44b1-b964-d8abdd6d55ce/0/ADD73B35695BB3BF25B467196329EFCAAC867E5E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:a0:d5:23:c1:1e:19:1f:78:ec:aa:9d:9b:2a:67:66:e3:87:
         6f:74:9c:01:f3:92:52:f4:67:c4:09:6e:13:07:7c:6f:53:73:
         dc:35:24:7a:ae:7c:3a:b6:2e:50:b6:8a:27:a1:c1:c0:d9:a6:
         0e:8d:be:48:b3:0e:3d:72:c1:e0:0c:6f:1e:61:dc:16:7c:3e:
         8c:3c:03:5e:de:bf:59:24:03:d2:59:f1:1c:f8:7d:e4:77:d6:
         89:b7:35:20:ac:29:63:77:75:25:6f:9a:1a:e5:57:4a:5e:b3:
         90:a1:8f:a2:4c:8b:68:ff:dd:d5:72:98:61:d5:e7:8b:de:8c:
         f9:7a:b3:3b:06:79:08:52:9f:18:d1:86:70:6d:15:5c:c6:48:
         1f:86:2f:c2:37:01:a0:ca:a9:8b:54:5c:16:59:1e:f5:21:af:
         fa:bf:6f:5c:27:1a:09:bf:72:5d:11:78:16:1a:40:64:7e:87:
         22:ae:29:7d:6b:3f:43:40:b4:73:de:ae:68:e3:bd:6b:6d:4f:
         3a:b9:22:6e:fd:ec:f1:a2:6b:0a:16:6f:4a:77:15:9d:8d:00:
         bf:58:ac:eb:1c:14:93:86:2c:f7:17:84:e0:60:fa:a9:3f:b1:
         52:7d:04:31:dd:94:b5:f0:81:72:4b:1b:9d:1c:e8:7f:c9:85:
         63:43:e6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 07:00:53 2024 by rpki-client on console.sobornost.net