Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
File:                     91A33711A470A1CAF41284B368F40FD2BDF16F01.mft (raw, json)
Hash identifier:          ont5jS9xcwo4ZTLgdu35SwQPZ+dVq+jL5OmlsH5/7vY=
Subject key identifier:   A3:37:0A:7B:71:AF:E6:79:04:9C:F5:3C:3E:86:F4:9A:C0:AE:FF:F2
Authority key identifier: 91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01
Certificate issuer:       /CN=91a33711a470a1caf41284b368f40fd2bdf16f01
Certificate serial:       61F068657879D5051BA6E5A1386AAD27317362E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
Manifest number:          02D9
Signing time:             Sat 10 May 2025 03:50:31 +0000
Manifest this update:     Sat 10 May 2025 03:45:31 +0000
Manifest next update:     Sun 11 May 2025 07:43:31 +0000
Files and hashes:         1: 91A33711A470A1CAF41284B368F40FD2BDF16F01.crl (hash: i5L+YD4Dy12WRSQ79It4tkZKELkykRPqD5xQ3O2pfUY=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 07:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f0:68:65:78:79:d5:05:1b:a6:e5:a1:38:6a:ad:27:31:73:62:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91a33711a470a1caf41284b368f40fd2bdf16f01
        Validity
            Not Before: May 10 03:45:31 2025 GMT
            Not After : May 11 07:43:31 2025 GMT
        Subject: CN=A3370A7B71AFE679049CF53C3E86F49AC0AEFFF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:3e:23:4d:5d:0d:fd:b9:ef:aa:f3:ae:6b:
                    31:cc:07:96:ea:54:f9:0e:59:d3:ed:3a:8f:50:f9:
                    cf:ab:f8:b9:d7:fc:0d:cf:50:99:61:ed:d3:7b:b2:
                    02:c1:76:97:7a:6a:c6:e1:1d:79:72:4e:a5:b4:fb:
                    1a:a0:f3:00:ee:23:a2:0c:79:c8:d8:33:82:40:7f:
                    ca:5d:2f:dc:1f:b7:73:b1:db:5f:40:4f:28:d1:3a:
                    4b:be:0b:20:54:0d:e8:63:58:4c:f8:46:97:33:26:
                    4a:68:60:de:ca:8a:1a:b5:77:f8:f1:c9:ef:fa:b9:
                    aa:bc:a5:70:85:10:04:84:b9:9b:69:b3:a7:7f:a2:
                    44:8c:b9:7d:08:46:74:71:4b:57:b3:20:de:31:0f:
                    8e:53:98:28:9c:fb:05:71:95:00:ad:8a:fe:c5:2c:
                    79:c5:bd:10:bb:09:37:b4:52:6e:2c:25:88:3a:95:
                    a4:c6:68:70:b9:98:22:f8:9f:ba:00:cb:0e:18:2c:
                    82:2f:64:30:8d:90:07:6b:4e:a9:3f:13:2f:bd:f1:
                    58:07:8a:70:d7:15:0e:09:65:4c:69:0c:69:64:14:
                    d0:bc:02:ef:70:0a:69:3f:04:5a:f4:27:c7:6c:8b:
                    58:d6:36:12:4b:f7:e4:d7:dd:8a:eb:00:f7:47:6a:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:37:0A:7B:71:AF:E6:79:04:9C:F5:3C:3E:86:F4:9A:C0:AE:FF:F2
            X509v3 Authority Key Identifier:
                keyid:91:A3:37:11:A4:70:A1:CA:F4:12:84:B3:68:F4:0F:D2:BD:F1:6F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kaM3EaRwocr0EoSzaPQP0r3xbwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d2b0a202-e1f4-4f72-a6d2-e2b297ac2b94/0/91A33711A470A1CAF41284B368F40FD2BDF16F01.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:37:f9:01:5d:7c:c1:b7:c3:05:d6:f6:73:0d:fc:f0:ed:a6:
         23:dd:1b:83:0c:64:a8:56:a8:3d:ba:68:d6:2d:c2:33:26:34:
         93:57:d9:c7:40:37:ef:93:cb:7f:36:bc:25:52:af:61:ba:e5:
         70:ac:04:b8:35:3e:cb:87:40:4d:c9:73:8b:3e:c0:97:6a:9d:
         f6:51:cf:03:14:96:a7:c6:c9:ad:17:5f:2b:83:11:d0:3a:d4:
         e7:41:8d:62:6f:f1:c9:a9:b2:b2:30:b2:a4:c0:75:97:76:df:
         bb:4c:a8:e9:08:75:71:e1:71:0f:fa:84:7f:ef:87:3f:8f:ce:
         2b:e7:de:3e:c4:b8:03:8b:75:e7:4e:1d:90:4f:16:58:c6:3c:
         37:1b:67:30:a3:1d:73:69:50:f5:50:df:24:7d:26:c7:a7:60:
         b4:74:91:b3:d4:cc:66:dc:f9:03:be:c5:fc:dd:cd:25:a8:1f:
         55:fe:a8:7b:9e:ca:2e:0e:0f:89:bf:49:09:dd:67:b3:e5:d7:
         89:54:b3:43:9a:30:f9:86:c1:f1:c4:31:30:e6:53:c7:a2:d7:
         17:15:b6:21:ee:ba:dc:5e:97:3b:ac:7a:78:87:8a:ce:2f:7d:
         60:47:0e:a0:cc:00:5a:9a:05:45:a6:4c:b9:e6:11:34:89:7f:
         4f:13:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:59:51 2025 by rpki-client