Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.mft
File:                     AC2B083EE37BCF2D737C576EF9D532ED717A1711.mft (raw, json)
Hash identifier:          tIIUh5P4hJB8cLNDqfPRIkXImsIdL6n32TzBHYPtlkM=
Subject key identifier:   D4:F3:41:18:C5:D0:C8:4E:98:10:13:3D:6E:55:66:8D:09:66:75:1A
Authority key identifier: AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11
Certificate issuer:       /CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
Certificate serial:       364A913AC47514DADC6B42F6878F9C49905A4017
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.mft
Manifest number:          A2
Signing time:             Wed 03 Jul 2024 06:54:53 +0000
Manifest this update:     Wed 03 Jul 2024 06:49:53 +0000
Manifest next update:     Thu 04 Jul 2024 09:48:53 +0000
Files and hashes:         1: 326130373a323438363a6539303a3a2f34342d3434203d3e20323032313937.roa (hash: oEraGb8cVD417N/ZwdodkgGzgyHZSyxlMLOeOliW6CQ=)
                          2: 326130373a323438363a6565303a3a2f34342d3434203d3e203438373532.roa (hash: IPSTfsSaL5yAHab4ZCjCFaTIt2KyTRIGUmrk2Ctg0DE=)
                          3: 326130373a323438363a6533303a3a2f34342d3434203d3e203438373532.roa (hash: WDJmpgtYMTR9/hsq1Yyl3FztgUNiJzvER8pRhFL4Hf0=)
                          4: 326130373a323438363a6566303a3a2f34342d3438203d3e203539343439.roa (hash: u5UFM+e9kDgDQDZPDncHmI41i6cp2aoScUiSv2X5uhI=)
                          5: AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl (hash: JsokABZa9cgt3QO6T8tPz2vCy9GFCyZVb2XOcjt0/gI=)
                          6: 326130373a323438363a6563303a3a2f34342d3434203d3e203332393433.roa (hash: WkOYG8PsnBKNc2T7Uda7FD7iE61U6OXDXdCLL98RL9A=)
                          7: 326130373a323438363a6563303a3a2f34342d3434203d3e20323032313937.roa (hash: ETMhcQNefry+cQxQCxh+9IxpFP23nC7tdp2lCmpNvpk=)
                          8: 326130373a323438363a6564303a3a2f34342d3438203d3e20323136333836.roa (hash: 9vDn6XtE+SySLfcQMmr+MRHoSuqS5YzSFmb4Vv8zuoc=)
                          9: 326130373a323438363a6530303a3a2f34342d3434203d3e203438373532.roa (hash: hRcW2sgC+ljKo7qVuumyAMn71ZCbf7lH7HJZDNPrnGA=)
                          10: 326130373a323438363a6563303a3a2f34342d3434203d3e203438373532.roa (hash: ITjtohmRBu7Qw13Itg2keZHQu7CuBMdYrFWFWw3kpy8=)
                          11: 326130373a323438363a6566303a3a2f34342d3438203d3e20313938393233.roa (hash: hseuYSraXEZSRzxdMks6tQ9NPMbXIJG+SWKAnXoVeNk=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/07D362BDD7CA6E80E2C244437597BD47EF7A4FDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9NivdfKboDiwkRDdZe9R-96T94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 20:36:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4a:91:3a:c4:75:14:da:dc:6b:42:f6:87:8f:9c:49:90:5a:40:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC2B083EE37BCF2D737C576EF9D532ED717A1711
        Validity
            Not Before: Jul  3 06:49:53 2024 GMT
            Not After : Jul  4 09:48:53 2024 GMT
        Subject: CN=D4F34118C5D0C84E9810133D6E55668D0966751A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7b:2d:b0:4a:be:6b:68:73:fe:0a:b1:a2:3e:
                    62:ac:c4:6f:ec:0c:de:3d:67:24:43:bd:86:bb:0e:
                    0c:4a:88:43:4c:be:fe:d1:72:d8:7e:01:60:46:cb:
                    15:70:1f:6c:c2:44:27:e2:b5:77:90:f3:21:f9:7e:
                    d7:31:ce:47:55:cf:c3:97:d8:d2:1f:17:55:81:7e:
                    e4:01:4f:e3:f2:5d:a7:e7:55:91:b5:76:dc:dc:33:
                    2d:2e:f3:f9:37:de:63:9a:55:e2:01:66:ad:a9:f7:
                    cf:52:2b:05:4e:89:b6:1f:cf:c4:3c:e5:15:63:ce:
                    77:b1:b6:9b:c7:2a:f8:c5:3b:1b:3e:d9:fa:27:f0:
                    58:50:81:21:53:ca:75:38:90:d3:58:32:80:a2:27:
                    7e:91:fd:74:fa:f7:56:8d:23:04:ac:9f:59:39:07:
                    74:dc:88:84:33:e7:34:da:8a:46:f0:f8:cd:e8:ea:
                    0b:74:39:e5:b1:d9:2f:ec:9d:23:e4:56:60:21:06:
                    d6:c4:a7:2e:c4:78:54:42:cd:6a:f3:74:fd:e3:9b:
                    59:68:43:29:5b:a4:9f:8b:ca:0a:ea:6e:ad:12:f0:
                    ac:54:6f:06:fd:bd:10:2d:12:20:5d:47:fe:05:db:
                    46:97:2f:74:88:6a:ef:78:0f:2b:99:ff:28:c4:44:
                    d3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F3:41:18:C5:D0:C8:4E:98:10:13:3D:6E:55:66:8D:09:66:75:1A
            X509v3 Authority Key Identifier:
                keyid:AC:2B:08:3E:E3:7B:CF:2D:73:7C:57:6E:F9:D5:32:ED:71:7A:17:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/21a797f9-3c10-4536-aa64-09ca2d9545c8/0/AC2B083EE37BCF2D737C576EF9D532ED717A1711.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cd7a5527-fb19-4565-9733-d45a870050e5/1/AC2B083EE37BCF2D737C576EF9D532ED717A1711.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:04:89:42:ca:a2:3f:b0:b9:18:58:92:66:42:ad:13:ac:3e:
         36:29:19:4f:01:83:04:12:77:d0:31:75:19:c0:3f:4e:6c:b9:
         5a:41:0f:21:aa:cd:34:07:34:e1:63:29:ac:c5:d0:f9:52:7f:
         93:4b:e1:2d:bb:27:34:a0:e9:fd:30:92:69:db:91:11:df:63:
         0b:25:b5:b0:6a:ab:04:6e:bb:d0:53:d2:fd:e4:d7:7f:86:a8:
         a6:f4:39:ca:18:eb:8a:70:02:4a:a8:f0:10:de:6f:02:ba:36:
         83:5c:15:09:a1:03:e0:14:bf:06:66:cb:85:64:b5:61:d1:0c:
         25:b9:38:c0:81:53:49:39:7d:43:24:3a:de:98:76:33:14:81:
         b6:bc:82:a5:3f:fe:7a:c2:63:19:5f:fd:d9:f4:ea:41:8c:3e:
         f0:51:00:cc:aa:a7:82:4e:c4:b6:a3:3f:c6:75:90:5d:1b:8b:
         dd:73:1a:6e:94:5b:3a:42:de:36:6f:1f:a4:b3:33:9f:c7:26:
         28:6e:66:67:99:86:21:cb:43:8e:5b:a2:6b:c0:d9:56:cc:93:
         f4:12:4f:5b:b6:85:7e:e9:a3:f8:91:ad:4b:73:f5:3a:4a:1a:
         3a:6a:cc:09:13:31:93:7a:13:3e:ad:bf:9f:54:a8:19:6a:3e:
         15:36:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 08:46:59 2024 by rpki-client on console.sobornost.net