Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft
File:                     341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft (raw, json)
Hash identifier:          G2+QY5pZR4F2PGFp17hiSYf1Pwoy131Y3ZSMXyrjdX8=
Subject key identifier:   C3:E9:CE:1E:22:D8:E2:D5:03:B7:9A:24:25:87:37:A0:3F:F5:4E:9B
Authority key identifier: 34:1D:D2:47:82:0B:7D:2A:D4:F0:85:FF:7F:59:88:AD:F1:0F:4A:C6
Certificate issuer:       /CN=341DD247820B7D2AD4F085FF7F5988ADF10F4AC6
Certificate serial:       2D7E2587295CD55A0E2F0C70CB3E1D175D6CBE20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft
Manifest number:          08
Signing time:             Mon 17 Jun 2024 20:55:30 +0000
Manifest this update:     Mon 17 Jun 2024 20:50:30 +0000
Manifest next update:     Tue 18 Jun 2024 21:53:30 +0000
Files and hashes:         1: 326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa (hash: 0PZ2HJID9XheP2ZR30M5e+uc9KFWb33URoG3R3EDvcw=)
                          2: 341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.crl (hash: 2c9KrCH2LLtqxqnPS2VFdsNtqgSMttJv9L2g0zYgd4A=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Jun 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7e:25:87:29:5c:d5:5a:0e:2f:0c:70:cb:3e:1d:17:5d:6c:be:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341DD247820B7D2AD4F085FF7F5988ADF10F4AC6
        Validity
            Not Before: Jun 17 20:50:30 2024 GMT
            Not After : Jun 18 21:53:30 2024 GMT
        Subject: CN=C3E9CE1E22D8E2D503B79A24258737A03FF54E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:98:6b:77:f6:20:8f:bf:40:d3:b3:46:44:c2:
                    70:98:4d:c8:a4:58:ce:f1:b8:f5:85:77:5a:fb:73:
                    13:83:29:fc:21:0a:4d:5d:fc:fe:a1:cd:31:75:25:
                    f7:88:42:50:01:5b:dd:07:7f:b7:f5:23:4b:2d:23:
                    1b:20:e9:c4:0f:86:7e:ff:18:61:f8:b4:c7:dc:81:
                    f5:29:ef:8c:31:8f:2d:b2:a9:f5:8e:74:26:a7:b9:
                    2f:49:bc:a0:0a:9e:2d:66:c4:c3:bd:79:bd:ab:6a:
                    59:80:01:9e:4f:65:5b:97:82:2d:2c:87:a2:b2:c3:
                    ce:d5:dd:40:71:5e:a8:30:f5:1a:df:0a:3b:2f:76:
                    2d:c2:b7:61:5a:59:f8:ae:41:3c:02:e2:7c:d5:08:
                    25:2b:e1:84:99:e8:6f:c1:30:67:b2:54:43:67:ba:
                    e7:34:df:2b:e2:f3:a6:b3:3b:82:04:27:59:15:56:
                    d5:c2:67:ff:af:2a:a2:8e:30:a8:9a:30:69:05:72:
                    99:29:47:43:21:08:fd:e3:84:33:86:76:66:2f:52:
                    b9:ec:57:0e:6d:79:86:60:59:bf:a0:ce:d1:13:51:
                    6c:38:47:63:39:e8:4e:d7:23:4b:49:98:65:80:84:
                    2d:64:43:e6:bb:2a:a3:b6:84:0f:b7:20:18:eb:5b:
                    b4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E9:CE:1E:22:D8:E2:D5:03:B7:9A:24:25:87:37:A0:3F:F5:4E:9B
            X509v3 Authority Key Identifier:
                keyid:34:1D:D2:47:82:0B:7D:2A:D4:F0:85:FF:7F:59:88:AD:F1:0F:4A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/da9f215d-a978-402c-9064-4de4fd4943af/1/341DD247820B7D2AD4F085FF7F5988ADF10F4AC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:48:55:0a:9b:b0:32:cd:c4:24:e8:04:45:2f:14:f2:af:02:
         58:2b:2a:af:4a:36:9c:a7:ec:96:8a:fd:bd:ac:43:ff:82:69:
         3c:fe:4b:0b:94:ac:45:c5:80:52:fc:c9:5d:eb:b3:86:a2:11:
         79:43:58:ae:ec:a0:c9:e1:16:df:94:e3:1d:96:37:7c:b9:35:
         ce:b2:96:ee:fa:5e:a4:ee:57:b7:b1:a3:ac:56:a3:3c:46:e4:
         b3:23:e4:d7:13:64:98:c1:d3:f2:f2:ca:70:07:51:c8:35:6d:
         c2:4d:c6:79:ad:a8:50:a5:91:4a:43:01:a2:bf:b1:60:21:3b:
         3e:49:9a:5d:de:58:db:2b:50:e9:21:55:3d:92:32:e6:5f:f9:
         78:ba:5c:f5:6d:0c:7c:bb:f1:3d:16:2c:8e:e7:a1:5d:83:51:
         81:36:09:95:b8:5d:ee:2d:e7:d1:0b:b5:4d:95:92:a3:bf:41:
         54:68:ad:9a:ad:4e:5f:a7:e6:bc:d0:95:d1:f5:68:91:d8:6b:
         8e:08:21:68:9d:e8:c5:44:32:b9:27:b0:23:bd:66:11:30:d1:
         26:55:b6:42:2e:27:a7:c5:3d:03:7f:43:3c:07:00:e6:57:28:
         2f:ee:34:96:2f:f2:8f:2e:bf:41:24:c8:2f:2a:cf:3e:e1:38:
         44:ff:cb:9e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIULX4lhylc1VoOLwxwyz4dF11sviAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzQxREQyNDc4MjBCN0QyQUQ0RjA4NUZGN0Y1OTg4QURG
MTBGNEFDNjAeFw0yNDA2MTcyMDUwMzBaFw0yNDA2MTgyMTUzMzBaMDMxMTAvBgNV
BAMTKEMzRTlDRTFFMjJEOEUyRDUwM0I3OUEyNDI1ODczN0EwM0ZGNTRFOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtmGt39iCPv0DTs0ZEwnCYTcik
WM7xuPWFd1r7cxODKfwhCk1d/P6hzTF1JfeIQlABW90Hf7f1I0stIxsg6cQPhn7/
GGH4tMfcgfUp74wxjy2yqfWOdCanuS9JvKAKni1mxMO9eb2ralmAAZ5PZVuXgi0s
h6Kyw87V3UBxXqgw9RrfCjsvdi3Ct2FaWfiuQTwC4nzVCCUr4YSZ6G/BMGeyVENn
uuc03yvi86azO4IEJ1kVVtXCZ/+vKqKOMKiaMGkFcpkpR0MhCP3jhDOGdmYvUrns
Vw5teYZgWb+gztETUWw4R2M56E7XI0tJmGWAhC1kQ+a7KqO2hA+3IBjrW7RlAgMB
AAGjggKCMIICfjAdBgNVHQ4EFgQUw+nOHiLY4tUDt5okJYc3oD/1TpswHwYDVR0j
BBgwFoAUNB3SR4ILfSrU8IX/f1mIrfEPSsYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZGE5ZjIxNWQtYTk3OC00MDJjLTkwNjQtNGRlNGZkNDk0
M2FmLzEvMzQxREQyNDc4MjBCN0QyQUQ0RjA4NUZGN0Y1OTg4QURGMTBGNEFDNi5j
cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu
Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi
YjItYTg0ZC01NWRhMjEyOGYxOTYvMC8zNDFERDI0NzgyMEI3RDJBRDRGMDg1RkY3
RjU5ODhBREYxMEY0QUM2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2RhOWYyMTVkLWE5NzgtNDAyYy05MDY0LTRkZTRmZDQ5NDNhZi8xLzM0MUREMjQ3
ODIwQjdEMkFENEYwODVGRjdGNTk4OEFERjEwRjRBQzYubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJSFUK
m7AyzcQk6ARFLxTyrwJYKyqvSjacp+yWiv29rEP/gmk8/ksLlKxFxYBS/Mld67OG
ohF5Q1iu7KDJ4RbflOMdljd8uTXOspbu+l6k7le3saOsVqM8RuSzI+TXE2SYwdPy
8spwB1HINW3CTcZ5rahQpZFKQwGiv7FgITs+SZpd3ljbK1DpIVU9kjLmX/l4ulz1
bQx8u/E9FiyO56Fdg1GBNgmVuF3uLefRC7VNlZKjv0FUaK2arU5fp+a80JXR9WiR
2GuOCCFonejFRDK5J7AjvWYRMNEmVbZCLienxT0Df0M8BwDmVygv7jSWL/KPLr9B
JMgvKs8+4ThE/8ue
-----END CERTIFICATE-----
Generated at Mon Jun 17 22:55:41 2024 by rpki-client on console.sobornost.net