Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
File:                     agPhC26juPNiz7I671icd3cefso.mft (raw, json)
Hash identifier:          C8U8XR7KDKhkMF+yCUj2vUID6b5YyZ9v/Lsjd9HWUXg=
Subject key identifier:   6A:B7:0B:8F:3A:46:CF:90:89:F3:3C:DB:1E:CF:99:DA:EA:1A:BB:DF
Authority key identifier: 6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
Certificate issuer:       /CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Certificate serial:       01903EC20419C1F51B8A6C95C0B61F287306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
Manifest number:          03D0
Signing time:             Sat 22 Jun 2024 07:03:40 +0000
Manifest this update:     Sat 22 Jun 2024 07:03:40 +0000
Manifest next update:     Sun 23 Jun 2024 07:03:40 +0000
Files and hashes:         1: agPhC26juPNiz7I671icd3cefso.crl (hash: Zq55ff8rCU/w69oHWznKZrF5TZCENidqMNLmP6CiXtw=)
                          2: mo2o2QmU5q_aBoxYQet4Yhose9c.roa (hash: XU/0F4GEd6+d7ZobL6xdUadMKLtx75fkjoOO0EBOoqs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:3e:c2:04:19:c1:f5:1b:8a:6c:95:c0:b6:1f:28:73:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
        Validity
            Not Before: Jun 22 07:03:40 2024 GMT
            Not After : Jun 23 07:03:40 2024 GMT
        Subject: CN=6ab70b8f3a46cf9089f33cdb1ecf99daea1abbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b1:fd:ea:92:54:34:3a:ea:be:fe:01:79:53:
                    0c:08:eb:02:14:42:f7:46:6a:7a:6a:cb:3d:23:b3:
                    70:ba:19:ff:24:74:56:30:80:a0:8a:8d:58:a2:2e:
                    86:f4:2b:99:dd:a7:df:2f:68:5d:73:14:f9:6d:56:
                    5e:34:ef:02:25:2b:0a:38:78:47:fb:dd:b1:75:41:
                    44:a5:af:69:dd:83:c8:42:49:c2:11:57:31:75:4c:
                    ae:ad:fa:3e:ad:65:e2:a5:ac:cf:ee:63:e6:6e:04:
                    97:e3:b9:ff:4e:a6:5d:4e:ab:d3:90:49:88:f8:64:
                    c5:0b:a6:3d:45:21:4c:cd:bf:2c:d0:03:06:4d:35:
                    b7:e8:12:b9:4c:9a:64:02:b5:90:25:3c:82:9b:2d:
                    7c:89:25:e8:f9:51:51:2c:da:63:3f:6f:8d:d9:32:
                    99:05:8a:74:6e:8d:49:d4:09:10:aa:b0:0f:aa:69:
                    0d:3d:42:e3:1e:40:21:5a:9a:00:b7:cb:8e:86:22:
                    4f:b7:85:5d:21:e9:a1:66:b2:12:4e:79:b0:b3:f9:
                    21:a3:e6:f7:fb:6f:27:cc:30:02:97:0e:ee:e0:6c:
                    34:94:01:57:71:ff:0b:e5:31:93:a2:db:db:d7:16:
                    17:5c:09:7d:81:71:b9:d3:8a:3e:cd:4b:10:7d:b3:
                    72:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B7:0B:8F:3A:46:CF:90:89:F3:3C:DB:1E:CF:99:DA:EA:1A:BB:DF
            X509v3 Authority Key Identifier:
                keyid:6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e7:7c:26:77:ef:78:ed:14:bd:bf:d3:7e:22:01:79:11:f9:
         7c:4f:13:f7:db:c9:1b:1d:82:b3:b9:e9:3d:d4:59:4c:e6:2f:
         44:b6:d3:23:ca:ad:6e:74:4e:37:bb:15:f7:44:b3:97:55:70:
         26:9f:d0:dd:5b:7e:66:97:e0:a9:53:a2:a7:5a:4b:cb:ea:1d:
         82:cb:3d:84:33:f9:fa:02:30:bf:27:76:26:4a:fb:f9:bf:c2:
         3e:93:42:ba:88:61:c5:90:5e:58:54:87:4b:98:9d:f1:de:26:
         2d:89:fc:0e:55:80:0b:9c:dd:45:fc:cf:85:b4:65:b2:31:8c:
         23:d6:2f:d3:8e:3d:0a:08:c7:31:7a:e7:e3:72:ce:3c:6c:26:
         f5:5d:9e:9b:ad:96:c4:e5:93:fc:26:78:e6:34:0c:1d:33:24:
         23:ce:5f:67:70:c8:41:7e:b1:29:52:eb:e1:2b:df:24:27:f4:
         3b:5a:82:77:6d:51:1c:d9:bb:12:76:97:ac:49:33:04:c2:aa:
         a0:36:47:dc:2e:71:ef:e7:a8:d3:dc:9d:c9:4c:29:fd:09:f0:
         e7:a3:2c:26:88:74:01:f3:83:2b:4a:9d:8a:a9:99:d3:c4:49:
         5d:d1:7b:52:3d:d7:33:66:60:1a:45:dd:47:65:e5:63:a0:8a:
         43:80:2b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 10:02:24 2024 by rpki-client on console-ams.rpki-client.org