Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.mft
File:                     DA90910C27E0A78D5F8A404E69C260275561C59B.mft (raw, json)
Hash identifier:          42WtPL5SgsgzLdvbLYGx4HKcdsd2PFDvWFGd40ViBuw=
Subject key identifier:   B1:20:C7:BA:33:41:20:CD:B1:2A:B5:93:F4:35:7F:C0:FA:67:D3:4E
Authority key identifier: DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B
Certificate issuer:       /CN=da90910c27e0a78d5f8a404e69c260275561c59b
Certificate serial:       5547057DE796C4D84D18C38E98830316B44EF405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.mft
Manifest number:          02A4
Signing time:             Tue 07 May 2024 03:31:42 +0000
Manifest this update:     Tue 07 May 2024 03:26:42 +0000
Manifest next update:     Wed 08 May 2024 07:00:42 +0000
Files and hashes:         1: 34352e3135342e362e302f32332d3234203d3e20383334.roa (hash: sEM+wvMa6H1pJO7WzojPoW/d6861xG/ziCdqwi+Y+Do=)
                          2: 34352e3135342e342e302f32342d3234203d3e20383334.roa (hash: Bq/4UsiQqUAjVtKyfwMorANTW2aYVj8J4b8/EZKAngc=)
                          3: DA90910C27E0A78D5F8A404E69C260275561C59B.crl (hash: c5ISaoIgcWVdkxIIvUoKRXC04VPN186T+oIdJ3jNWfY=)

Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:47:05:7d:e7:96:c4:d8:4d:18:c3:8e:98:83:03:16:b4:4e:f4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da90910c27e0a78d5f8a404e69c260275561c59b
        Validity
            Not Before: May  7 03:26:42 2024 GMT
            Not After : May  8 07:00:42 2024 GMT
        Subject: CN=B120C7BA334120CDB12AB593F4357FC0FA67D34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d9:77:ac:c9:de:6a:46:25:6c:6b:58:c5:ae:
                    71:74:9a:f8:28:9c:57:22:a5:1d:85:75:2b:70:3a:
                    fe:b5:2e:db:7a:9c:4c:e3:3a:dd:2d:07:43:6e:86:
                    78:ed:d9:74:a2:c8:26:73:db:90:7e:4c:f4:96:94:
                    4b:1e:5e:24:8a:69:b2:0a:4c:85:e6:6b:72:3d:4b:
                    31:c6:88:92:8b:55:f1:83:d0:aa:b1:aa:0e:76:6c:
                    ec:1b:1b:28:48:dd:b4:fd:f2:06:a5:22:e0:16:09:
                    3c:a8:54:d4:14:e0:51:96:69:c6:4b:59:3d:a8:91:
                    a3:41:1e:08:be:a4:9b:f9:5a:7b:0a:f4:3d:04:9d:
                    9c:a3:86:35:24:1b:c7:cc:56:de:da:6b:e0:6a:77:
                    99:d6:cd:aa:29:01:f2:48:10:1f:2e:77:ae:c1:93:
                    f1:8b:9d:01:83:f2:16:5b:02:58:da:f0:8f:aa:1a:
                    fc:c3:26:9d:b0:b5:b1:a3:be:d3:74:15:0a:a2:0a:
                    57:c2:4a:31:fb:93:db:18:fa:1d:68:d7:ef:ab:31:
                    16:77:91:cf:05:4a:27:8e:40:41:2f:42:91:6e:aa:
                    51:fe:bf:cf:4b:b4:5d:dc:d3:0b:56:d4:58:5b:b7:
                    ef:5f:d6:cc:eb:83:30:15:a3:86:6c:6e:2e:93:11:
                    03:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:20:C7:BA:33:41:20:CD:B1:2A:B5:93:F4:35:7F:C0:FA:67:D3:4E
            X509v3 Authority Key Identifier:
                keyid:DA:90:91:0C:27:E0:A7:8D:5F:8A:40:4E:69:C2:60:27:55:61:C5:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pCRDCfgp41fikBOacJgJ1VhxZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d43cc54b-e7ff-4945-90bc-fd4761ccc302/0/DA90910C27E0A78D5F8A404E69C260275561C59B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:54:49:ca:73:70:a0:04:a1:a9:57:1a:9a:45:7b:d3:cd:f1:
         0b:94:56:c7:87:58:33:af:4d:0d:f0:3b:c7:e8:ae:40:f9:65:
         43:d3:f0:dc:72:24:d2:9a:e6:10:22:30:d8:f0:ba:56:97:02:
         f4:62:53:e5:cf:98:6d:83:7a:bb:6b:e4:d1:79:da:11:11:24:
         cb:50:3c:27:5e:4d:dd:2b:d5:c7:95:9f:19:9c:11:7a:2d:3b:
         aa:32:d5:e8:69:01:90:2b:cd:46:17:32:1c:1e:2d:15:f5:57:
         1a:9e:91:ad:ae:0d:f9:69:ab:39:8c:a2:d4:cd:0b:e1:65:4b:
         1a:69:4b:b6:8b:36:09:1d:fe:5a:04:e2:d0:b4:ac:41:12:36:
         da:1a:c8:28:c4:44:2e:e5:4a:39:11:13:09:83:6e:e6:50:1f:
         14:0d:02:13:e1:fc:54:39:35:da:5c:02:a0:56:fb:be:d5:91:
         75:83:09:bb:af:ad:cb:a4:e5:57:fe:c7:47:6f:b3:12:f3:00:
         43:c8:b6:bc:d1:86:2d:ca:df:a2:97:57:66:85:f2:99:bb:26:
         18:ed:1f:85:79:cb:c8:e3:bc:d8:d3:03:31:8e:d4:0d:d2:54:
         91:fe:de:c1:23:15:47:58:20:8a:72:df:47:c0:1c:19:86:01:
         79:2f:4c:21
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUVUcFfeeWxNhNGMOOmIMDFrRO9AUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZGE5MDkxMGMyN2UwYTc4ZDVmOGE0MDRlNjljMjYwMjc1
NTYxYzU5YjAeFw0yNDA1MDcwMzI2NDJaFw0yNDA1MDgwNzAwNDJaMDMxMTAvBgNV
BAMTKEIxMjBDN0JBMzM0MTIwQ0RCMTJBQjU5M0Y0MzU3RkMwRkE2N0QzNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw2Xesyd5qRiVsa1jFrnF0mvgo
nFcipR2FdStwOv61Ltt6nEzjOt0tB0Nuhnjt2XSiyCZz25B+TPSWlEseXiSKabIK
TIXma3I9SzHGiJKLVfGD0Kqxqg52bOwbGyhI3bT98galIuAWCTyoVNQU4FGWacZL
WT2okaNBHgi+pJv5WnsK9D0EnZyjhjUkG8fMVt7aa+Bqd5nWzaopAfJIEB8ud67B
k/GLnQGD8hZbAlja8I+qGvzDJp2wtbGjvtN0FQqiClfCSjH7k9sY+h1o1++rMRZ3
kc8FSieOQEEvQpFuqlH+v89LtF3c0wtW1Fhbt+9f1szrgzAVo4Zsbi6TEQOtAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUsSDHujNBIM2xKrWT9DV/wPpn004wHwYDVR0j
BBgwFoAU2pCRDCfgp41fikBOacJgJ1VhxZswDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDQzY2M1NGItZTdmZi00OTQ1LTkwYmMtZmQ0NzYxY2Nj
MzAyLzAvREE5MDkxMEMyN0UwQTc4RDVGOEE0MDRFNjlDMjYwMjc1NTYxQzU5Qi5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJwQ1JEQ2ZncDQxZmlrQk9hY0pnSjFW
aHhacy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNDNjYzU0Yi1l
N2ZmLTQ5NDUtOTBiYy1mZDQ3NjFjY2MzMDIvMC9EQTkwOTEwQzI3RTBBNzhENUY4
QTQwNEU2OUMyNjAyNzU1NjFDNTlCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFRJynNwoAShqVcamkV7
083xC5RWx4dYM69NDfA7x+iuQPllQ9Pw3HIk0prmECIw2PC6VpcC9GJT5c+YbYN6
u2vk0XnaEREky1A8J15N3SvVx5WfGZwRei07qjLV6GkBkCvNRhcyHB4tFfVXGp6R
ra4N+WmrOYyi1M0L4WVLGmlLtos2CR3+WgTi0LSsQRI22hrIKMRELuVKORETCYNu
5lAfFA0CE+H8VDk12lwCoFb7vtWRdYMJu6+ty6TlV/7HR2+zEvMAQ8i2vNGGLcrf
opdXZoXymbsmGO0fhXnLyOO82NMDMY7UDdJUkf7ewSMVR1gginLfR8AcGYYBeS9M
IQ==
Generated at Tue May 7 04:41:25 2024 by rpki-client on console-ams.rpki-client.org