Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          +o8zxadj9qZdeaW/OFA0Ob5Sr4wtdE2uzb6arT5b0hk=
Subject key identifier:   F7:59:1F:38:AD:C9:DA:C1:A1:91:AA:3F:02:E0:B5:1F:BC:BF:13:89
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       018F5994FDAA7A64757AD69040319B0D9CD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          1164
Signing time:             Wed 08 May 2024 19:01:27 +0000
Manifest this update:     Wed 08 May 2024 19:01:27 +0000
Manifest next update:     Thu 09 May 2024 19:01:27 +0000
Files and hashes:         1: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: 47mpAfbkSrgqvsb5kPJXzWszZ9eFpwkVtO6gTcH5n+w=)
                          2: luOABzTvJ_X4UcXX8-7ogQhOxzI.roa (hash: gIx5rG/8rxLrfXms7U0pLR8kL7qpl5uapCq+ukUEdnM=)
                          3: vP2GhzL3vC1_BBu1dAjm3kxQUpA.roa (hash: 8qFlHNXtckmnlI/F6VDKHAvZ1YiyoySJj0kR7r1MwcU=)
                          4: zRRVUcaOM2cODvqJEHiaoDwTJ7Y.roa (hash: UQv6IWXQ6qSsqMplXQgt2/GqqUfJr6Z2VvNDpDx71nU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:59:94:fd:aa:7a:64:75:7a:d6:90:40:31:9b:0d:9c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: May  8 19:01:27 2024 GMT
            Not After : May  9 19:01:27 2024 GMT
        Subject: CN=f7591f38adc9dac1a191aa3f02e0b51fbcbf1389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:49:2e:44:45:8e:27:e6:91:8f:1b:e2:ce:
                    f8:9d:5a:9f:d3:60:8e:86:62:03:cb:01:5f:95:1d:
                    76:52:e3:1d:77:b2:71:05:a1:8d:f7:18:a7:b2:b3:
                    39:87:2f:72:40:0b:2d:30:a2:bb:83:9e:c5:89:6c:
                    5b:4c:cf:60:c6:a1:0c:ef:57:b8:61:3b:62:e4:fe:
                    01:bf:28:ab:35:33:22:65:5c:cc:67:47:96:95:21:
                    b2:92:9b:06:be:0e:8b:b2:ef:b7:4e:8c:72:47:bd:
                    b4:70:83:70:d7:ac:b6:b5:b9:3a:31:78:d1:8f:5a:
                    9d:5f:b7:43:80:59:03:09:f3:94:9c:bd:27:f6:65:
                    71:eb:71:ab:f5:c6:a0:c4:1f:f2:dc:c3:77:be:eb:
                    bd:3a:cd:e4:ff:c3:9d:73:3f:f6:38:3f:bf:e7:74:
                    b7:d6:44:e8:ab:c8:3f:fe:9c:20:c0:0f:8d:85:68:
                    c6:dc:07:f8:00:41:bb:b0:f1:24:b3:56:70:69:0f:
                    ef:31:06:3a:40:25:51:8b:0e:43:b9:3f:ff:ee:24:
                    af:d0:10:b5:ba:8a:62:40:98:59:fb:78:a3:af:f1:
                    3d:8d:49:46:23:f8:d9:d3:a6:b6:29:46:45:95:3f:
                    98:8a:6f:d0:e6:1c:97:93:34:05:3d:c1:72:fc:5c:
                    d9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:59:1F:38:AD:C9:DA:C1:A1:91:AA:3F:02:E0:B5:1F:BC:BF:13:89
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d6:e9:b5:87:02:cc:d5:fc:c8:3b:23:3e:cc:82:c5:f4:37:
         23:f0:7f:59:a6:79:4f:b4:63:36:fa:7d:63:4c:9a:58:58:89:
         73:22:1d:3b:85:74:c7:ef:f7:6d:e8:3c:79:3f:a5:e8:a9:f3:
         69:79:35:60:8f:ba:ed:96:5e:12:33:5c:1b:82:50:93:17:7c:
         2d:84:b6:e9:de:6a:47:83:ae:c4:d9:8d:11:27:9e:c6:24:8a:
         dd:8f:e1:33:f4:e8:5a:45:70:f2:7c:3a:39:86:fb:97:8e:04:
         f4:2f:0b:f0:17:e7:33:dd:d6:8f:5e:4e:a5:a5:c1:a4:e9:a1:
         01:55:cd:ba:af:7f:35:19:7a:f1:70:76:ef:83:9d:c6:9b:57:
         f8:d8:ea:d5:d3:da:70:3c:e7:5e:b1:f4:45:d1:c9:a6:08:73:
         e4:02:37:82:b5:c4:77:b1:e5:e0:b0:c6:55:6c:89:3c:60:a3:
         a4:0e:3e:63:97:42:df:e2:2b:74:da:83:ce:9a:3e:ce:68:7d:
         af:79:db:b6:1b:a7:b4:ef:b8:ea:42:54:de:76:17:99:a3:ee:
         91:ac:a8:2a:77:1f:6c:ac:33:0a:ea:9d:59:c3:6e:c6:46:ad:
         cb:14:11:fc:da:03:41:52:0a:c0:94:7b:14:88:95:47:f1:83:
         f2:cd:93:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9ZlP2qemR1etaQQDGbDZzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNjQyYjYwN2I5NGExNDNmZjQxYzU1NGM5MTNiZDVhNjUx
ZjhjMDUwHhcNMjQwNTA4MTkwMTI3WhcNMjQwNTA5MTkwMTI3WjAzMTEwLwYDVQQD
EyhmNzU5MWYzOGFkYzlkYWMxYTE5MWFhM2YwMmUwYjUxZmJjYmYxMzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwO5JLkRFjifmkY8b4s74nVqf02CO
hmIDywFflR12UuMdd7JxBaGN9xinsrM5hy9yQAstMKK7g57FiWxbTM9gxqEM71e4
YTti5P4BvyirNTMiZVzMZ0eWlSGykpsGvg6Lsu+3ToxyR720cINw16y2tbk6MXjR
j1qdX7dDgFkDCfOUnL0n9mVx63Gr9cagxB/y3MN3vuu9Os3k/8Odcz/2OD+/53S3
1kToq8g//pwgwA+NhWjG3Af4AEG7sPEks1ZwaQ/vMQY6QCVRiw5DuT//7iSv0BC1
uopiQJhZ+3ijr/E9jUlGI/jZ06a2KUZFlT+Yim/Q5hyXkzQFPcFy/FzZAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdZHzitydrBoZGqPwLgtR+8vxOJMB8GA1UdIwQY
MBaAFABkK2B7lKFD/0HFVMkTvVplH4wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUt
MTliYzdiZGNjYmMxLzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUtMTliYzdiZGNjYmMx
LzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtbptYcC
zNX8yDsjPsyCxfQ3I/B/WaZ5T7RjNvp9Y0yaWFiJcyIdO4V0x+/3beg8eT+l6Knz
aXk1YI+67ZZeEjNcG4JQkxd8LYS26d5qR4OuxNmNESeexiSK3Y/hM/ToWkVw8nw6
OYb7l44E9C8L8BfnM93Wj15OpaXBpOmhAVXNuq9/NRl68XB274OdxptX+Njq1dPa
cDznXrH0RdHJpghz5AI3grXEd7Hl4LDGVWyJPGCjpA4+Y5dC3+IrdNqDzpo+zmh9
r3nbthuntO+46kJU3nYXmaPukayoKncfbKwzCuqdWcNuxkatyxQR/NoDQVIKwJR7
FIiVR/GD8s2THg==
-----END CERTIFICATE-----
Generated at Wed May 8 21:34:54 2024 by rpki-client on console-ams.rpki-client.org