Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
File:                     91Ohm13OHUFZNSIpQmqf232fmjs.mft (raw, json)
Hash identifier:          L9YHmaF1wSuKB/7fduwlrrxjqDUKg9N5vvmKC0NYHoo=
Subject key identifier:   19:EB:27:38:2F:83:DA:AD:23:07:1E:00:87:13:0F:42:01:EF:90:0E
Authority key identifier: F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B
Certificate issuer:       /CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
Certificate serial:       018F3C66196CD6870C6813232574B8432AC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
Manifest number:          045F
Signing time:             Fri 03 May 2024 03:01:15 +0000
Manifest this update:     Fri 03 May 2024 03:01:15 +0000
Manifest next update:     Sat 04 May 2024 03:01:15 +0000
Files and hashes:         1: 91Ohm13OHUFZNSIpQmqf232fmjs.crl (hash: rpqyVemA4RjmlVi8JcjZj9hRTx1rw4ovUZTOu50zlF8=)
                          2: kBrk4L8G2Vd9k54b_5G7UQD_33s.roa (hash: tDvQ1x/qv5IjwLMFnSIkZ6+unViPy86ieV5hQtg7b/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 03:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3c:66:19:6c:d6:87:0c:68:13:23:25:74:b8:43:2a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f753a19b5dce1d4159352229426a9fdb7d9f9a3b
        Validity
            Not Before: May  3 03:01:15 2024 GMT
            Not After : May  4 03:01:15 2024 GMT
        Subject: CN=19eb27382f83daad23071e0087130f4201ef900e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:06:e2:42:e7:53:12:6c:ff:d3:0d:7e:04:
                    e8:04:5b:f3:20:f1:e3:b7:77:a5:60:ea:8f:b0:42:
                    a3:eb:da:37:dd:4b:2a:cc:80:ca:fb:0a:a4:09:fd:
                    ad:2b:2a:d8:16:4c:0a:7b:0b:a6:42:cd:f9:30:93:
                    24:5d:ae:bb:53:fc:54:ec:44:69:24:2b:24:ac:b3:
                    c8:0d:70:08:58:ae:7a:cf:dc:ba:45:fc:fc:89:2d:
                    2d:c7:e3:de:b4:bd:43:85:59:0c:0d:8d:23:15:33:
                    0f:d8:e4:b2:43:62:18:a6:72:88:56:ef:f8:6b:b8:
                    b0:1d:01:de:a1:23:fa:30:97:01:2f:db:86:3d:c7:
                    c8:48:60:b3:af:5c:fd:8b:53:6d:b2:94:87:77:a6:
                    c8:e8:7a:1f:f1:45:e0:0f:7c:08:b8:47:59:fc:10:
                    75:90:68:83:60:68:ec:a1:2b:93:0f:f6:bf:e9:c9:
                    66:d7:b1:48:c1:54:3d:07:ce:e7:b2:80:ae:15:fc:
                    be:b7:96:0e:e6:a3:43:87:38:88:91:9b:b3:d0:6c:
                    b1:64:f5:81:7d:2d:92:ca:ba:d9:dc:31:40:7b:dd:
                    20:13:02:30:7b:0b:50:29:60:fa:37:1c:bf:11:99:
                    84:0a:8a:5f:15:24:36:9b:fa:50:5f:b2:46:1c:0e:
                    99:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:EB:27:38:2F:83:DA:AD:23:07:1E:00:87:13:0F:42:01:EF:90:0E
            X509v3 Authority Key Identifier:
                keyid:F7:53:A1:9B:5D:CE:1D:41:59:35:22:29:42:6A:9F:DB:7D:9F:9A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91Ohm13OHUFZNSIpQmqf232fmjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ffe07c-16f0-4999-8894-10f0093eaae0/1/91Ohm13OHUFZNSIpQmqf232fmjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:74:d6:50:a8:f6:c7:56:f9:0c:57:e1:a3:9c:3f:54:55:b1:
         13:c0:d3:5a:76:0b:39:96:1b:b9:5e:24:bd:6a:7f:0c:36:3f:
         6c:d0:ef:7c:5f:1e:90:4b:db:72:99:bb:78:04:7b:6b:aa:4d:
         13:17:2f:19:70:88:30:ef:0e:61:0d:ee:21:c9:e7:f4:3e:dd:
         3a:a9:9f:d4:27:22:f3:96:88:fa:fd:03:46:5b:64:6d:f4:be:
         d0:c0:08:38:63:63:77:b5:dc:7d:f4:19:b2:77:76:af:69:f2:
         96:a9:71:64:c9:39:0f:6e:01:45:ae:aa:f8:bb:34:96:ea:8b:
         a0:09:5f:ae:ec:07:80:e7:74:0c:b2:13:b3:9a:d3:f2:c1:dd:
         5f:4c:48:45:f3:89:fa:fc:83:ca:3e:c5:43:09:35:66:53:61:
         69:03:84:5d:94:c6:4a:6d:a3:8d:2e:39:7f:9b:7a:b2:48:8a:
         58:d9:a4:62:fd:05:47:29:e0:65:4b:ca:d0:c1:73:c7:b8:65:
         35:c8:81:99:23:35:f8:e0:c2:f3:35:07:3a:7a:79:86:69:9a:
         f0:35:4c:40:81:83:a5:2e:5a:23:7d:a9:de:94:77:fd:d1:f1:
         17:f8:ac:34:a9:46:7b:6c:14:08:91:b6:f8:98:66:b0:cc:7b:
         49:81:13:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:38:07 2024 by rpki-client on console-fra.rpki-client.org