Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.mft
File:                     DA90910C27E0A78D5F8A404E69C260275561C59B.mft (raw, json)
Hash identifier:          OPzsXka931aR/iKoH1O5XBUIpEXLeDhngY+Re1RFo2E=
Subject key identifier:   16:30:B0:48:A0:43:23:37:E1:67:98:05:7E:C7:D7:2B:5A:61:BF:72
Authority key identifier: DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
Certificate issuer:       /CN=da90910c27e0a78d5f8a404e69c260275561c59b
Certificate serial:       0108FBDF7F7F355CBB591619D1AF5EE22C8D5444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.mft
Manifest number:          02B3
Signing time:             Sat 18 May 2024 09:12:08 +0000
Manifest this update:     Sat 18 May 2024 09:07:08 +0000
Manifest next update:     Sun 19 May 2024 11:20:08 +0000
Files and hashes:         1: 34352e3135342e362e302f32332d3234203d3e20383334.roa (hash: sEM+wvMa6H1pJO7WzojPoW/d6861xG/ziCdqwi+Y+Do=)
                          2: DA90910C27E0A78D5F8A404E69C260275561C59B.crl (hash: i0PwX7+GkwDBm+HfUqXxClMT7+gFg0uitDJXWZknrs0=)
                          3: 34352e3135342e342e302f32342d3234203d3e20383334.roa (hash: Bq/4UsiQqUAjVtKyfwMorANTW2aYVj8J4b8/EZKAngc=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 02:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:08:fb:df:7f:7f:35:5c:bb:59:16:19:d1:af:5e:e2:2c:8d:54:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da90910c27e0a78d5f8a404e69c260275561c59b
        Validity
            Not Before: May 18 09:07:08 2024 GMT
            Not After : May 19 11:20:08 2024 GMT
        Subject: CN=1630B048A0432337E16798057EC7D72B5A61BF72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5e:d2:93:33:38:ff:cc:9b:7c:26:12:00:8a:
                    43:e3:77:0c:b6:af:d7:6c:64:85:5b:21:e2:18:7d:
                    ee:d0:14:80:e7:c4:84:d5:8c:69:f2:fc:31:37:1a:
                    e3:b8:ec:39:4a:ae:a5:59:67:33:22:fe:2a:3f:f1:
                    0b:4e:65:dc:17:6b:d1:4c:05:9d:4d:6e:0e:43:e0:
                    32:af:62:2f:2a:ba:ce:80:a3:ea:21:33:cd:05:b6:
                    61:4f:50:15:b7:e4:68:1f:c2:dc:52:90:87:de:e0:
                    80:a6:29:f2:1c:18:23:59:86:07:fc:2d:26:04:72:
                    a2:24:47:db:51:d1:60:7a:99:fb:75:3c:c0:bd:f9:
                    9c:f1:f2:32:82:ae:9f:b8:ec:18:e9:8b:0e:60:86:
                    50:62:e4:97:f8:23:bc:bc:20:b7:91:27:83:2d:7d:
                    93:d7:56:a3:d8:78:39:b4:78:62:ae:af:46:99:f9:
                    8f:4b:a0:5b:93:56:cd:0b:38:6d:fd:23:b8:e8:3d:
                    5d:f1:5d:5f:05:f0:4f:23:26:7a:12:56:03:7e:ab:
                    cd:fb:d3:a1:21:03:f3:1b:de:f4:67:f0:50:80:95:
                    ba:ab:c8:e2:3c:22:e8:97:98:db:68:0f:65:d2:80:
                    c9:79:d0:2d:23:cc:ae:1d:c7:d1:99:f0:f7:bc:db:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:30:B0:48:A0:43:23:37:E1:67:98:05:7E:C7:D7:2B:5A:61:BF:72
            X509v3 Authority Key Identifier:
                keyid:DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8c:58:95:12:63:a6:2c:c2:92:49:e4:0d:b2:ec:ca:ea:63:
         92:3e:25:c1:8b:86:5a:1e:6c:24:4a:74:72:5d:7d:3b:3e:d8:
         c2:a2:2f:4b:2e:d2:a1:aa:19:5b:73:3f:17:1e:53:0a:ee:a0:
         1a:a2:a0:0e:fe:04:96:0d:d7:48:4c:97:01:eb:0d:d9:16:58:
         6c:5f:91:5c:e6:b1:d7:86:b1:45:7b:b3:0a:32:be:44:6e:b0:
         a8:ac:b6:af:6b:bf:43:4e:4d:5e:2d:d3:2a:7c:4b:af:27:cc:
         77:ea:1a:4a:81:9b:fc:97:2d:4c:3e:a7:3a:e4:8b:8e:ff:de:
         28:e8:10:34:42:11:c7:62:0f:4c:ba:85:77:4b:ae:e6:7b:88:
         4a:10:06:b9:ef:1c:8c:f4:48:54:65:72:9c:1c:ae:4a:42:7c:
         e8:bf:86:8a:d1:0e:0f:04:d5:9c:65:7c:61:11:bc:8a:af:ac:
         ff:9f:28:cf:1f:a5:0f:f5:ad:17:e3:b9:ef:85:42:2a:16:6a:
         08:8a:a4:ec:c7:2b:37:43:79:4d:04:0b:aa:74:9d:82:4a:ae:
         f8:cc:64:5e:a0:ab:ca:cf:35:f7:2d:07:e5:9e:54:a1:f4:46:
         0d:21:5b:3a:ba:57:79:b5:67:2a:8a:10:78:bb:45:fc:20:91:
         7a:a8:92:65
-----BEGIN CERTIFICATE-----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Generated at Sat May 18 09:58:36 2024 by rpki-client on console-fra.rpki-client.org