Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
File:                     47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json)
Hash identifier:          fRVG92P8JhFE5Ik3Nycfgi0Mixm4MX5cz+J2D/KNd9g=
Subject key identifier:   C6:90:D8:C2:18:13:2E:FC:2A:5D:DB:C7:86:1B:51:BB:6F:84:D3:4C
Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41
Certificate issuer:       /CN=47E9555355C6B007AACD5D45BF41E3383E991641
Certificate serial:       6EA0767B6F917550E49A116636807749902C88D9
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
Manifest number:          01C3
Signing time:             Sun 19 May 2024 03:49:19 +0000
Manifest this update:     Sun 19 May 2024 03:44:19 +0000
Manifest next update:     Mon 20 May 2024 04:20:19 +0000
Files and hashes:         1: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 1+lMdnjYdbL4iWHh6STKSM8k3Z78ot5HK73iYhaXx98=)
                          2: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: 07QkUBZZ1Qt6O44NCm38uzZ1TsAPNitYaC46Dhs5ZyA=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft
                          rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 May 2024 09:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:a0:76:7b:6f:91:75:50:e4:9a:11:66:36:80:77:49:90:2c:88:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641
        Validity
            Not Before: May 19 03:44:19 2024 GMT
            Not After : May 20 04:20:19 2024 GMT
        Subject: CN=C690D8C218132EFC2A5DDBC7861B51BB6F84D34C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:a6:15:74:d5:f0:f8:5c:4e:13:c0:03:59:
                    16:8f:8c:a5:27:0d:80:94:4f:c7:be:1c:4f:ea:a3:
                    eb:16:7b:70:d4:58:07:a5:38:3a:18:1c:4d:83:e8:
                    a4:af:17:e7:76:29:20:04:68:eb:87:7a:60:ad:7e:
                    85:1d:c5:fb:e1:5f:c9:ff:ae:e2:9b:67:9e:3d:f7:
                    47:be:65:93:e5:93:02:16:bc:26:ee:1f:13:94:25:
                    3a:84:d3:96:c9:e8:66:49:a7:28:22:c4:65:a6:b2:
                    5e:21:55:a6:00:1f:0c:ca:1b:5c:42:ff:4e:9d:b5:
                    b6:64:cd:23:ea:a7:03:64:e7:92:e2:9d:4a:ba:1f:
                    70:10:49:ec:23:eb:56:bf:89:29:01:5c:83:d8:18:
                    e8:5f:2b:d8:b9:0a:b7:2e:40:c9:d2:98:4b:8c:42:
                    19:1c:82:5f:d2:f4:2b:40:20:8e:bc:89:72:42:ab:
                    56:93:c6:13:58:dc:00:d6:76:31:8e:ce:8c:cd:73:
                    12:12:e9:75:25:42:cb:0b:20:05:63:5f:36:00:a9:
                    f7:5e:f0:cd:a8:0c:b1:3a:c3:e4:28:77:ea:d2:f9:
                    3f:8a:8f:58:f9:0d:7d:09:b3:6f:d4:7e:48:13:89:
                    50:23:4a:24:57:45:7b:39:c5:1d:f1:4d:b5:9e:08:
                    79:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:90:D8:C2:18:13:2E:FC:2A:5D:DB:C7:86:1B:51:BB:6F:84:D3:4C
            X509v3 Authority Key Identifier:
                keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:3e:af:b9:74:08:ca:a0:11:07:e1:34:46:ab:0e:b6:a0:cf:
         7d:9e:18:54:37:c7:60:a2:5b:5e:1d:cb:2a:1d:c8:44:18:82:
         e4:da:f5:86:fc:01:11:1c:7b:ab:d7:6a:1b:8a:af:52:b6:be:
         38:bd:19:13:ae:ef:3b:e4:6d:fc:4f:10:a1:ef:2b:24:86:e0:
         52:b7:c1:f1:e7:b3:31:ab:67:87:dd:17:44:59:41:05:f4:98:
         76:e6:2c:e9:78:42:41:1b:71:e3:2d:0b:c9:15:90:e2:27:f6:
         02:0e:80:ae:e7:37:12:72:68:ca:5f:ec:75:04:8c:ac:5e:d2:
         60:48:60:9e:87:66:b4:ec:ca:7c:51:0e:33:dd:42:3c:cc:2b:
         bd:43:c4:6d:cc:b3:6e:6b:a7:35:01:6a:6c:91:9d:6b:18:dc:
         97:a0:eb:f3:94:c3:a1:84:02:9d:d3:f1:28:9b:1d:3a:5f:23:
         eb:45:88:d8:35:33:62:2c:39:e7:3f:e0:49:5d:d7:5b:26:c7:
         a3:6a:47:cd:3c:36:e0:e7:99:3a:f6:17:05:22:15:a9:e5:13:
         9a:35:ee:75:7b:b5:6d:99:d5:62:0e:58:9f:4d:88:91:28:86:
         f0:5d:78:ed:c8:17:ce:53:7f:fc:f4:e5:bb:5b:77:4f:1e:28:
         5f:6f:10:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 04:20:46 2024 by rpki-client on console-ams.rpki-client.org