Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          WL1NiavHpMIdmMnULrWR3AgFUOCOj9FpG18Cv8kZxl0=
Subject key identifier:   79:5E:ED:43:4E:45:01:4B:03:67:A9:C6:71:3C:F8:CF:20:E9:43:19
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       019353514F83E3B91987B0D6A008BC04DF40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          1373
Signing time:             Fri 22 Nov 2024 10:00:57 +0000
Manifest this update:     Fri 22 Nov 2024 10:00:57 +0000
Manifest next update:     Sat 23 Nov 2024 10:00:57 +0000
Files and hashes:         1: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: DqefgcI0yy5xm2gbKvzdI3ZUa8hDek6UAl2a080yCI8=)
                          2: luOABzTvJ_X4UcXX8-7ogQhOxzI.roa (hash: gIx5rG/8rxLrfXms7U0pLR8kL7qpl5uapCq+ukUEdnM=)
                          3: vP2GhzL3vC1_BBu1dAjm3kxQUpA.roa (hash: 8qFlHNXtckmnlI/F6VDKHAvZ1YiyoySJj0kR7r1MwcU=)
                          4: zRRVUcaOM2cODvqJEHiaoDwTJ7Y.roa (hash: UQv6IWXQ6qSsqMplXQgt2/GqqUfJr6Z2VvNDpDx71nU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:51:4f:83:e3:b9:19:87:b0:d6:a0:08:bc:04:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Nov 22 10:00:57 2024 GMT
            Not After : Nov 23 10:00:57 2024 GMT
        Subject: CN=795eed434e45014b0367a9c6713cf8cf20e94319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cd:b2:5c:8e:b5:73:fb:d4:a9:9a:b5:1f:84:
                    80:ac:d3:52:3a:cb:06:7d:97:0b:12:5f:bd:31:d0:
                    33:a4:91:96:a9:ac:e2:81:53:30:b1:94:31:24:b3:
                    22:57:df:56:ab:24:46:32:a5:92:ab:26:74:0c:56:
                    9d:9d:a3:03:8b:8e:88:f3:00:c0:42:a2:a8:ec:ec:
                    c1:6d:e7:de:e5:d9:6d:88:cd:59:30:ea:85:dc:52:
                    9d:16:e8:1d:62:3f:c4:f2:a2:79:21:6c:a9:ec:bb:
                    15:24:15:12:74:9d:65:57:3b:85:72:d5:43:64:df:
                    01:85:45:a0:bd:c4:3b:82:e7:38:e2:e2:8f:39:a5:
                    9f:fb:71:9e:c8:75:26:a6:61:48:c9:ac:20:26:93:
                    c5:e0:21:e1:e7:dc:fc:bc:f5:15:3e:ae:62:6f:6c:
                    d1:69:f3:a8:1d:06:b8:e7:27:fe:39:26:0f:87:fe:
                    99:3c:82:42:13:0a:1d:68:5c:c0:8b:db:f8:2b:65:
                    29:f0:50:bc:44:e1:8d:27:84:d2:41:e5:f3:ff:17:
                    cb:a9:8e:3f:8f:c1:da:52:c5:4f:1b:7a:83:f5:7d:
                    02:85:92:12:2c:f3:2b:91:11:24:0f:98:bf:06:6b:
                    a0:0f:f4:bd:c2:1c:74:08:88:fa:d4:4b:56:df:41:
                    30:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5E:ED:43:4E:45:01:4B:03:67:A9:C6:71:3C:F8:CF:20:E9:43:19
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c3:18:0d:21:7d:a2:d1:5c:6e:af:38:e6:13:b8:22:34:1c:
         21:6d:50:94:18:d7:7d:ed:d4:63:ae:dd:c2:ba:2b:19:bf:10:
         ea:5a:4d:7e:5d:2d:44:31:18:1a:bf:e9:42:b2:d6:a9:86:9c:
         fa:5a:d9:c0:ca:70:bf:59:8d:77:22:90:4d:0f:f6:a3:be:84:
         43:e7:cf:0c:12:15:60:2b:cf:31:f2:ea:ec:fd:2d:75:b1:26:
         87:a0:a3:77:58:d2:3c:76:cb:14:42:53:f0:26:a5:d3:2c:ef:
         0b:e3:99:09:1e:56:31:38:6c:26:a7:23:a8:d5:ef:9f:8e:7a:
         51:5d:e9:27:2a:98:04:63:64:5c:46:51:c8:e9:c1:78:81:76:
         3b:0e:0c:69:be:97:54:6d:d6:4e:33:6b:a3:5f:c9:ff:f6:47:
         01:e9:10:80:8b:9e:c4:42:70:6c:64:1d:19:af:92:04:3e:78:
         5b:0a:6a:b7:00:ad:34:4c:1e:9b:b3:f1:e3:55:27:6e:14:e6:
         f3:6c:b5:9d:b0:41:57:3a:d6:b2:86:7c:ce:72:56:5c:41:dd:
         f9:e6:68:03:90:d6:3e:00:3a:87:eb:55:9e:9c:3c:96:1c:45:
         0d:0a:87:1a:57:26:59:d5:f6:7a:f4:68:fe:8b:10:c1:cd:20:
         bb:9d:56:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:56:15 2024 by rpki-client on console-ams.rpki-client.org