Manifest

$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft
File:                     02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft (raw, json)
Hash identifier:          8Krrrd326ztbYOgnsJgFwkUrOnY/AIddG/AxCEU8olg=
Subject key identifier:   BC:EC:CB:23:78:44:ED:53:01:B8:5B:96:2F:A3:F3:E5:8C:07:40:54
Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3
Certificate issuer:       /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
Certificate serial:       2FA2B26811831F3644C02DD15FF68E67BEB06B2F
Authority info access:    rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
Subject info access:      rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft
Manifest number:          01EE
Signing time:             Sat 27 Apr 2024 10:57:07 +0000
Manifest this update:     Sat 27 Apr 2024 10:52:07 +0000
Manifest next update:     Sun 28 Apr 2024 12:01:07 +0000
Files and hashes:         1: 326131323a646434373a383630373a3a2f34382d3438203d3e203530353535.roa (hash: Rd+dhCr5rYQwNoo+Nfmrr7x2WYwry9aUIha3WakJOtM=)
                          2: 326131323a646434373a383630643a3a2f34382d3438203d3e203530353535.roa (hash: pSS9lyg/r63hrLK6N28zfZCmJTpAFyPUHcuhnyC7Nds=)
                          3: 326131323a646434373a383630323a3a2f34382d3438203d3e203530353535.roa (hash: HoZAYr0ETH2ygTyVLT/TWLTc95YKlgYR4RlonB/RlJc=)
                          4: 326131323a646434373a383630313a3a2f34382d3438203d3e203530353535.roa (hash: xB9YMf9WLWlWJJykuB4jTj50Tz2/aBV24p0/bWTRB1I=)
                          5: 326131323a646434373a383630613a3a2f34382d3438203d3e203530353535.roa (hash: UUvAqv9dTkpD3vnCpeK0nyckqw5fsjh4xIE1BuffKT4=)
                          6: 326131323a646434373a383630343a3a2f34382d3438203d3e203530353535.roa (hash: q33k4Pm8Tc9+J+nVAuAOoyc9sZ/RYxCpNBmpPMyinh4=)
                          7: 326131323a646434373a383630363a3a2f34382d3438203d3e203530353535.roa (hash: WhLiHVWIRrDdTM2/q/GOyUAgwW6kR1FOY914Re+OVhA=)
                          8: 326131323a646434373a383630383a3a2f34382d3438203d3e203530353535.roa (hash: yvJARCYuZKCcQdrZehBg3pmqGSxsDFgahe/Ya4VuMCA=)
                          9: 326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa (hash: 1rnTFeDfRItQJKSerIoroO/PmIgosaC04bWnM0thBoA=)
                          10: 326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa (hash: g1At5H1WGB9pJd143T4S3ULq7iOWiXWKs6MoqCgmWaY=)
                          11: 326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa (hash: 5jqra/OjEkdlCmNdY3X6oPmDKMUiE1/Q7yXAt6z6K6A=)
                          12: 326131323a646434373a383630333a3a2f34382d3438203d3e203530353535.roa (hash: TVIb8+DyhB/YMbNeWImxDAGqBc36mjWnaSKjIIF5q1w=)
                          13: 326131323a646434373a383630623a3a2f34382d3438203d3e203530353535.roa (hash: P8JskXQq8rhMqJmwd4lSnoyKOklqs5FaDVyanSYeqcg=)
                          14: 326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa (hash: 8eFv2RBBtby1mcmk3KpRwsZCQZSgRLjiy2M/X1iLuSk=)
                          15: 326131323a646434373a383630663a3a2f34382d3438203d3e203530353535.roa (hash: KdHvWmuZQHcbpceQ+U8MEcEFLjMenHgqGnoMsp2lirk=)
                          16: 02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl (hash: P6UqELdgTuJCsw3gmz1ntJ37hjqJHyhxePOKUd8zHNg=)
                          17: 326131323a646434373a383630303a3a2f34302d3430203d3e2030.roa (hash: bVgB6CY0EAnJitkx1Xv6J5wT2KqsqRck5c0cRpR6E6U=)
                          18: 326131323a646434373a383630303a3a2f34342d3434203d3e203530353535.roa (hash: Y30p0MzCB2JiuAvDBKLSZwu+ZD8hbij5EEaa/uw9slo=)
                          19: 326131323a646434373a383630303a3a2f34382d3438203d3e203530353535.roa (hash: bCptdjmvnQpm+VU0b5omGZ2gseXuWLCMxMKaXw2vivs=)

Validation:               OK
Signature path:           rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl
                          rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft
                          rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 04:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a2:b2:68:11:83:1f:36:44:c0:2d:d1:5f:f6:8e:67:be:b0:6b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3
        Validity
            Not Before: Apr 27 10:52:07 2024 GMT
            Not After : Apr 28 12:01:07 2024 GMT
        Subject: CN=BCECCB237844ED5301B85B962FA3F3E58C074054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:15:e1:e2:ed:87:fc:cb:47:c3:67:39:fc:
                    06:46:ae:21:a1:b5:0e:b3:24:08:0d:d9:f8:18:92:
                    6d:1e:db:a2:37:f4:14:f5:92:1b:dc:53:54:9c:75:
                    4e:5e:44:86:63:7d:3e:f3:85:a7:dd:e5:18:aa:a8:
                    c7:f9:00:f5:ce:32:f0:0c:14:e1:21:27:5a:ae:a5:
                    0f:7a:85:cb:73:bf:68:f7:e3:3b:ea:2a:d1:b8:ba:
                    da:91:bd:a7:a0:97:24:ee:34:4e:69:ef:a6:a1:c8:
                    c1:ca:70:01:c4:f8:0e:e5:9b:3c:43:a6:29:55:99:
                    0b:31:59:54:f8:7a:cf:ca:96:32:93:f3:40:fa:85:
                    37:d5:af:8d:75:78:5d:5c:dc:3f:a1:c9:23:0d:fc:
                    75:83:ee:19:86:d8:ae:0d:04:99:25:4a:bd:35:be:
                    85:50:e8:7d:06:14:cb:e5:9c:07:c4:16:44:91:15:
                    87:3f:01:6f:62:11:1a:9f:a4:b0:5d:d8:10:8e:c7:
                    a1:1d:fc:a7:e4:ce:df:11:e6:36:2e:8e:c8:8a:6f:
                    c0:ee:cf:d5:e4:ed:31:45:b0:f3:6c:b3:dd:8d:14:
                    da:c0:6f:65:22:d6:af:0d:a0:bb:d2:76:27:5d:de:
                    1c:2c:a4:e0:f5:0c:c8:62:22:43:4a:5d:77:13:b7:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EC:CB:23:78:44:ED:53:01:B8:5B:96:2F:A3:F3:E5:8C:07:40:54
            X509v3 Authority Key Identifier:
                keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:01:2c:2b:f4:ae:9d:9e:63:91:c8:51:7a:d7:0e:18:70:c8:
         78:d2:fd:51:ad:b7:ef:99:b7:99:da:7e:7c:74:8d:cd:cf:ac:
         79:8c:30:46:c1:81:bf:5f:a2:c8:4f:4e:8f:c5:37:ce:a3:9b:
         3b:2f:cd:fd:d5:87:50:be:af:f6:9f:fc:eb:d3:b7:bd:5d:1d:
         fe:31:47:ed:57:15:d3:cf:6a:b8:68:74:70:fe:55:a6:97:f1:
         ae:0c:72:ff:a6:cd:94:b3:e4:05:23:20:72:e4:89:b3:6d:e9:
         72:35:86:9f:ce:8d:92:ea:81:0a:67:be:45:4e:e6:c5:eb:e7:
         ea:ff:f3:f9:8a:4a:16:18:0a:28:70:a3:0a:73:67:f5:1d:93:
         b4:6f:b5:12:41:3b:4f:eb:f5:dd:13:34:88:d4:ac:47:ec:04:
         d7:cd:e2:29:d4:4b:9c:94:a2:61:28:5d:0c:80:f2:8d:1c:f6:
         cd:d9:4a:1e:08:15:f2:ca:5e:f1:20:95:71:db:fb:bb:4b:ef:
         db:70:6e:58:9e:cf:81:73:d8:54:42:84:0b:d4:78:d5:3c:7b:
         9a:7e:a2:7d:ba:78:a3:14:d7:25:b9:43:71:03:c3:ed:36:d7:
         ee:f6:3c:ce:b9:20:3f:a1:bb:e4:7c:e2:66:e7:d9:56:98:ec:
         fc:ef:2d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:40 2024 by rpki-client on console-ams.rpki-client.org