Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File:                     agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier:          Hz0S0KGZs7DM7dqfIbUKHr280X/qx2qIqPmxakR+tx4=
Subject key identifier:   38:D7:C5:58:27:0D:A8:40:19:66:1C:5C:DA:9E:40:44:34:D5:64:BB
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer:       /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial:       018F89381AC877FCC29D8DDE7ADABAE7D296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number:          1179
Signing time:             Sat 18 May 2024 01:01:46 +0000
Manifest this update:     Sat 18 May 2024 01:01:46 +0000
Manifest next update:     Sun 19 May 2024 01:01:46 +0000
Files and hashes:         1: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: X/cAIbOZGd1QeEc27ORjNGS0cQpcuKR539GlWmcDsts=)
                          2: cLzHWV48v4VQjF4qhTbyNCjRyHk.roa (hash: RMbHHGjzv44pm1MnUODTFtgZjaOxAZLTK/hLxG3aEjw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:89:38:1a:c8:77:fc:c2:9d:8d:de:7a:da:ba:e7:d2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
        Validity
            Not Before: May 18 01:01:46 2024 GMT
            Not After : May 19 01:01:46 2024 GMT
        Subject: CN=38d7c558270da84019661c5cda9e404434d564bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bd:e5:ab:d3:0d:47:28:f6:ae:e0:51:72:ef:
                    9f:f7:b2:8a:c0:98:d7:98:95:d0:67:fb:2a:33:84:
                    92:98:04:5c:8a:b4:30:3c:3e:b9:2c:3b:f7:dc:97:
                    43:e8:0d:a7:e5:77:5d:e5:13:e3:51:f2:21:f1:ab:
                    f6:b8:00:62:1e:f3:cd:61:15:e5:a7:61:09:50:44:
                    ff:ad:7f:ac:66:dd:ac:2b:66:00:35:2c:7c:f9:34:
                    e5:8a:84:ab:7e:20:1f:e9:1c:61:ec:c1:60:a9:6e:
                    b0:2f:2b:f7:71:d2:c7:f7:83:0f:21:2b:7d:aa:9e:
                    35:d4:ae:5e:e8:4e:f5:64:9b:fe:95:04:bf:8c:ed:
                    5b:9f:98:be:8a:c3:2c:58:70:35:fb:20:a2:f1:d9:
                    3f:26:61:a5:53:19:f9:90:03:35:44:90:a9:25:17:
                    d6:d9:1d:a0:eb:31:30:6a:1e:5c:0d:17:43:81:86:
                    63:39:6e:ed:ee:85:41:f6:1a:8e:2d:55:69:2a:1d:
                    83:81:4f:3f:be:c5:77:a4:da:2f:e1:6b:3e:3d:68:
                    53:11:32:03:b1:2e:ce:51:db:2d:91:ed:25:7a:d4:
                    93:a1:a0:78:b0:19:29:26:9a:a0:9c:23:9d:59:54:
                    9d:d3:b8:31:7d:83:d5:4d:61:b3:49:ca:c6:84:b8:
                    8a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D7:C5:58:27:0D:A8:40:19:66:1C:5C:DA:9E:40:44:34:D5:64:BB
            X509v3 Authority Key Identifier:
                keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:94:f7:d5:7a:32:8b:77:17:ae:a3:0f:3e:60:97:91:49:06:
         7c:91:e1:8a:0d:11:77:45:aa:fd:c3:97:c7:fa:74:2f:7c:a5:
         e5:6c:41:67:fe:cb:a3:3a:84:c7:69:12:03:a8:cd:03:98:e7:
         df:a2:ef:32:ea:fa:23:0c:34:c5:22:35:21:71:49:66:ba:73:
         74:82:19:4e:2d:82:a4:77:0e:db:c7:58:fd:4b:a9:44:9a:51:
         f1:0c:6b:4d:96:88:e9:c9:5c:37:fe:b4:b5:6f:04:7c:30:a1:
         28:ba:dc:2e:67:87:f1:f7:b6:25:cc:d7:67:9b:81:0b:ca:b5:
         f9:20:66:10:3e:22:e2:9b:66:d4:d9:1b:91:a1:7e:75:7b:97:
         76:cf:86:34:9f:2a:c1:1f:32:2f:30:a7:79:a8:9e:f8:be:9d:
         81:6c:07:03:f4:1f:2a:97:a1:fb:65:f7:3d:1b:99:94:71:ea:
         e8:e3:f3:33:1f:11:66:e3:d4:46:12:eb:c7:ce:12:77:27:24:
         c3:2a:09:97:08:06:86:c8:0b:cc:de:70:73:49:62:f1:46:9c:
         18:cb:d1:3a:9c:3e:31:53:a9:66:e7:f5:77:44:42:53:2f:73:
         c4:7a:6a:51:d4:4b:da:da:82:d2:98:6b:df:b6:69:6c:20:14:
         41:24:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:11:44 2024 by rpki-client on console-ams.rpki-client.org