Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File:                     91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier:          YvQ3tipjTTriQnSqRl+dLD+g6FzcFr84vgb3+XKpUKo=
Subject key identifier:   F4:06:A9:2F:6C:77:AB:F2:4F:2D:56:C0:7C:10:97:5E:E1:C1:60:09
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer:       /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial:       10ACFB47B95FC7AA3429E8904E29AD306889B5E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number:          FE
Signing time:             Fri 17 May 2024 11:07:04 +0000
Manifest this update:     Fri 17 May 2024 11:02:04 +0000
Manifest next update:     Sat 18 May 2024 13:05:04 +0000
Files and hashes:         1: 3139352e3234352e3139382e302f32342d3234203d3e203538303631.roa (hash: 9YAWwBFuVoA8rtdYrYQp4TDh1e2kiQckI+n+cdlWt8c=)
                          2: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: Rw+eu7BeizoBPbrl2UMuf8XzKWRrfEtdG5hvTlEXi6Q=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 08:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ac:fb:47:b9:5f:c7:aa:34:29:e8:90:4e:29:ad:30:68:89:b5:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
        Validity
            Not Before: May 17 11:02:04 2024 GMT
            Not After : May 18 13:05:04 2024 GMT
        Subject: CN=F406A92F6C77ABF24F2D56C07C10975EE1C16009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0a:f1:b2:2a:fd:44:bc:1c:b1:79:b0:73:67:
                    d8:83:4b:af:17:f9:86:4e:1a:76:ce:c2:00:ab:d0:
                    64:c5:61:14:38:9e:06:a8:e1:5e:56:f1:f9:88:c7:
                    4f:2c:76:e9:c6:45:bd:ab:b2:e9:27:77:41:b0:ab:
                    f8:49:b0:06:7c:0b:e9:dc:35:cc:a1:94:b6:0f:f6:
                    e3:82:f0:f9:5e:e2:68:57:65:41:d8:de:5e:3c:81:
                    14:af:c6:3d:99:65:fe:eb:7f:b0:7e:1b:dd:eb:93:
                    d9:3b:a0:52:15:7e:20:eb:47:20:09:d5:d2:38:df:
                    9f:41:0a:b2:c8:e5:28:56:76:d3:fb:f7:35:63:b9:
                    1c:36:1c:30:a2:7d:f9:31:fa:5a:48:7c:a2:e4:eb:
                    9c:0a:39:44:82:3f:21:aa:aa:e7:73:c9:a5:c5:f6:
                    fd:98:c5:49:d3:56:05:3f:bd:2d:67:62:93:96:2f:
                    db:07:1f:86:fd:a4:7c:b2:25:79:31:ed:09:03:4d:
                    eb:6c:49:1c:64:33:01:f4:7b:6a:1d:06:69:96:2f:
                    35:9c:62:75:79:bf:08:b0:7c:e5:0d:59:df:dc:15:
                    b7:00:20:78:06:7d:c5:87:bf:ad:bc:96:c9:a7:ec:
                    1f:25:70:82:21:08:ea:d5:9e:51:be:8d:4e:67:a9:
                    ad:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:06:A9:2F:6C:77:AB:F2:4F:2D:56:C0:7C:10:97:5E:E1:C1:60:09
            X509v3 Authority Key Identifier:
                keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3b:a2:20:52:89:f1:11:f8:a1:ec:1a:ee:1b:80:52:4b:90:
         a4:50:32:4d:e3:8c:e7:e1:65:e1:ea:c6:db:74:87:f3:4d:4a:
         21:1e:b7:3e:54:4b:97:30:3e:7e:57:08:ae:ca:73:e1:8f:e5:
         15:b9:f0:d6:24:54:4e:28:48:05:a7:ec:9a:3a:3d:f2:b0:a5:
         2b:4e:bd:0d:1f:fc:d3:0f:5e:51:8e:13:7e:92:80:47:5a:b4:
         3c:d4:2a:5d:c0:3e:6f:5b:79:99:b3:a0:4e:a1:dc:63:17:34:
         63:f3:c0:6e:e0:34:ce:c8:ab:41:68:e3:04:fc:9d:2f:38:e8:
         8d:33:ac:38:ee:d0:40:a1:0e:13:a8:d0:be:ee:29:d3:61:db:
         76:84:a2:7b:bf:6c:8b:a1:a4:05:94:f6:55:ad:88:f5:cc:6c:
         f7:04:41:97:27:df:8a:21:03:10:1a:98:f3:9e:8a:27:43:12:
         ed:a7:8c:95:0e:47:70:2b:db:89:d5:5f:24:ca:10:bf:3d:0a:
         79:03:47:64:a0:eb:6e:03:e8:0b:b6:f0:03:f8:d4:b3:d9:96:
         ae:54:04:b3:83:0b:50:ec:93:40:c2:e5:ad:e5:7f:75:70:42:
         c9:fa:88:a2:c1:a1:17:3f:7d:46:92:cf:c3:b9:c5:ef:11:63:
         53:bd:19:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:34:45 2024 by rpki-client on console-ams.rpki-client.org