Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File:                     BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier:          UU0DRBV3yAkQkfkzUh02P5dFUhwaTT/JlJrf2dxSaIc=
Subject key identifier:   40:61:E8:56:87:F6:50:40:E4:DB:66:9D:10:5D:CE:52:3E:90:DE:0D
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       018F83D96FBA469F82426FA835F32C7EF7FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number:          0C6C
Signing time:             Fri 17 May 2024 00:00:15 +0000
Manifest this update:     Fri 17 May 2024 00:00:15 +0000
Manifest next update:     Sat 18 May 2024 00:00:15 +0000
Files and hashes:         1: 5FrrCUdRBeaXCyPloinbo5uzrvM.roa (hash: cpMgnEPKnILciJk+Zd8XOFvqgwnuPwNRptZ8/VlHKWo=)
                          2: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: IuCYRokHZubeHVwQxpmJiei87A2KOmaeUclIyrFEsQQ=)
                          3: D5maXNQusX0-0l7RjDUKbtJEJBo.roa (hash: veA6h2ECktBO1GXrF8VhhgTUGv0Z92l/dw1pJ3t23Fw=)
                          4: ImqGpadxiBCf4ORVtpQ-O4OMQHA.roa (hash: /eUvKdvOX1J6h0VQ6X96iAVLr8hOx4hfOs9jfqrqEeQ=)
                          5: KP1ofchiyLhCfsMfMbf162Dz6N8.roa (hash: XyrLZxLN3WFPN8OUCU+bZLOM8kIPQn90rft4iEKyNd4=)
                          6: Y8ymtLlnODS9kLW1mj2CSTLTTMM.roa (hash: oAD2HBJdf8BLMKB1y8NrIxNH6Wkk41OPyL1skEdM+D8=)
                          7: ZG9oP5csBKwjoqegD-r82uAGI-s.roa (hash: yH6n07sd6pWCAQA/dU8wZ9ROBd6jUKPVylpkpiXaGKg=)
                          8: a52zYx3AlkW7pybjUJ7WnOtDjHY.roa (hash: pE06bAOUnnYwz5aDEAW7RsVFE9MC3i7Bv8jI8mcI0j8=)
                          9: byEXZ7l6KEemyDUKaT9cCiTkZ3s.roa (hash: vahFXlM3u4UlU+Wk7oE/6HaRmPEmRckabywkyF4rEA8=)
                          10: hhWK7LhJYNemBZ5mgdf-w5YQrnI.roa (hash: ukqzhzzeWZI7YApCKyU8A3YcuRP9/lWqfOsV5JpR1eI=)
                          11: isPNhcmvKfxwyAQtzcUnqKAPTMY.roa (hash: MuV09FUhxwi91x5/tuaLzbOFwvFo/V8Lhiqwi69Y4/w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:83:d9:6f:ba:46:9f:82:42:6f:a8:35:f3:2c:7e:f7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: May 17 00:00:15 2024 GMT
            Not After : May 18 00:00:15 2024 GMT
        Subject: CN=4061e85687f65040e4db669d105dce523e90de0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ee:c3:c9:2c:58:08:c3:7e:2a:77:d8:54:55:
                    77:8a:a4:2f:7d:51:36:28:74:cc:01:6c:b4:22:9c:
                    70:7b:b9:a8:13:8b:6f:8c:f4:2c:6e:10:55:04:fc:
                    ed:56:7c:93:e5:3d:a6:b6:c6:2e:5d:c3:73:45:f0:
                    76:84:0e:d2:f1:55:dc:06:47:15:ca:fb:65:7b:d5:
                    91:49:18:3b:82:5f:72:69:30:85:6c:43:b3:07:78:
                    d6:91:df:cf:d1:3a:a8:ba:9e:a4:a1:60:82:29:c8:
                    ad:e1:2a:f9:ca:50:eb:f6:53:40:7b:b4:62:fe:8c:
                    3a:cb:b0:b1:0f:78:49:0f:97:5f:44:79:c6:02:99:
                    7d:10:20:af:ba:76:b0:bb:f9:24:4c:52:bf:8f:b2:
                    22:9c:1b:50:e1:5a:14:8b:b4:c2:c6:8d:df:30:49:
                    66:c8:e7:20:78:af:5d:7f:fd:1e:78:a7:e4:b3:cb:
                    59:9d:c3:33:e8:01:1d:15:a1:e4:0a:e3:41:64:de:
                    31:1e:39:89:ab:1b:98:c7:97:d0:1a:39:da:68:94:
                    15:ec:cb:d2:6f:b3:27:2e:75:de:19:cc:30:5a:86:
                    a1:20:d4:f2:17:1f:6b:1d:3e:ad:6c:fb:d3:63:1f:
                    27:8c:97:a5:78:0f:30:4a:65:dc:e8:d1:40:ef:a8:
                    ee:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:61:E8:56:87:F6:50:40:E4:DB:66:9D:10:5D:CE:52:3E:90:DE:0D
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cb:5f:5b:f5:a6:e7:d5:1e:92:ab:ac:28:db:65:05:13:e4:
         98:24:3e:ec:48:28:be:55:05:96:65:b2:55:9c:13:97:a3:d6:
         eb:b9:65:20:5d:51:dd:7e:3e:55:d5:01:2c:a6:1f:05:83:1a:
         27:96:7e:e8:e8:19:8a:14:60:c6:94:53:a6:da:7f:2b:6e:81:
         52:ce:fb:99:8b:09:11:c9:61:4f:cd:8f:c2:1b:df:d4:7b:6d:
         74:06:90:6c:f5:21:9e:ec:11:ce:5e:b0:dd:cf:80:88:8f:90:
         ac:b4:99:48:c6:b5:21:48:93:25:a2:e5:a0:15:ca:38:ee:fa:
         78:74:5a:1b:b0:0c:b4:15:cc:b2:4e:01:20:a6:93:3e:f5:40:
         34:56:ea:7c:d9:f4:38:e2:e7:96:99:ff:da:6e:b6:cc:7e:e1:
         4b:46:a4:52:4b:58:d7:11:ee:f4:7a:52:5a:07:fd:5e:05:14:
         8c:28:16:6e:ab:ac:d8:38:c7:51:f1:75:fa:fe:ef:df:8b:90:
         c0:17:57:82:8b:b7:02:a5:86:84:36:59:ec:f7:0d:57:2e:cf:
         d5:b5:53:7e:69:7e:cc:a1:41:92:62:e9:c5:0f:89:a6:58:89:
         fe:60:e0:97:e0:b9:08:45:ac:37:fc:a2:63:7a:6d:b8:2b:4d:
         1a:9e:7e:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+D2W+6Rp+CQm+oNfMsfvf8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjQwNTE3MDAwMDE1WhcNMjQwNTE4MDAwMDE1WjAzMTEwLwYDVQQD
Eyg0MDYxZTg1Njg3ZjY1MDQwZTRkYjY2OWQxMDVkY2U1MjNlOTBkZTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e7DySxYCMN+KnfYVFV3iqQvfVE2
KHTMAWy0Ipxwe7moE4tvjPQsbhBVBPztVnyT5T2mtsYuXcNzRfB2hA7S8VXcBkcV
yvtle9WRSRg7gl9yaTCFbEOzB3jWkd/P0Tqoup6koWCCKcit4Sr5ylDr9lNAe7Ri
/ow6y7CxD3hJD5dfRHnGApl9ECCvunawu/kkTFK/j7IinBtQ4VoUi7TCxo3fMElm
yOcgeK9df/0eeKfks8tZncMz6AEdFaHkCuNBZN4xHjmJqxuYx5fQGjnaaJQV7MvS
b7MnLnXeGcwwWoahINTyFx9rHT6tbPvTYx8njJeleA8wSmXc6NFA76jupQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBh6FaH9lBA5NtmnRBdzlI+kN4NMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8tfW/Wm
59UekqusKNtlBRPkmCQ+7EgovlUFlmWyVZwTl6PW67llIF1R3X4+VdUBLKYfBYMa
J5Z+6OgZihRgxpRTptp/K26BUs77mYsJEclhT82Pwhvf1HttdAaQbPUhnuwRzl6w
3c+AiI+QrLSZSMa1IUiTJaLloBXKOO76eHRaG7AMtBXMsk4BIKaTPvVANFbqfNn0
OOLnlpn/2m62zH7hS0akUktY1xHu9HpSWgf9XgUUjCgWbqus2DjHUfF1+v7v34uQ
wBdXgou3AqWGhDZZ7PcNVy7P1bVTfml+zKFBkmLpxQ+JpliJ/mDgl+C5CEWsN/yi
Y3ptuCtNGp5+tw==
-----END CERTIFICATE-----
Generated at Fri May 17 07:20:35 2024 by rpki-client on console-fra.rpki-client.org