Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File:                     AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier:          N/0E/GbF58x/3WMKMjVCjXdUF1CSh130hLVfzyqPjtM=
Subject key identifier:   97:A5:A6:39:0A:5C:68:AB:F0:29:9F:81:62:27:40:DA:8A:DD:8B:D3
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer:       /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial:       018F381D3D71BF3E587176C1CE40F4160842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number:          0BBE
Signing time:             Thu 02 May 2024 07:03:11 +0000
Manifest this update:     Thu 02 May 2024 07:03:11 +0000
Manifest next update:     Fri 03 May 2024 07:03:11 +0000
Files and hashes:         1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: 3or2Ov3Wsk84aIxXJoVroIjP/mxAJVMNwEoP0PeEjZc=)
                          2: KwI6QXa2bH3b3_NHnDH5O8uJKFc.roa (hash: uuN0Qq/UG8z3JCbI6p8x0JzwjnuMOKNBkhwzueDRMHc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 May 2024 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:38:1d:3d:71:bf:3e:58:71:76:c1:ce:40:f4:16:08:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
        Validity
            Not Before: May  2 07:03:11 2024 GMT
            Not After : May  3 07:03:11 2024 GMT
        Subject: CN=97a5a6390a5c68abf0299f81622740da8add8bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:5d:37:3a:89:19:10:2e:6d:52:ab:f8:c5:
                    6c:a3:96:cf:9e:2d:3b:4a:45:f1:32:db:83:39:17:
                    ff:51:76:45:0a:ad:72:12:27:36:e5:3f:7e:19:2a:
                    ca:84:ad:73:95:2c:f6:17:09:4c:96:72:66:2f:54:
                    0a:7a:04:8f:03:4e:65:a5:a2:61:67:62:30:04:d2:
                    0d:86:41:f9:b6:52:07:dd:79:d5:6d:49:3c:b0:e2:
                    01:ad:9a:cf:06:98:7b:ff:6a:54:e7:c1:43:ac:e6:
                    aa:03:c5:2a:bf:5e:16:48:cf:9f:87:44:1d:6b:57:
                    97:3b:b3:06:5e:37:38:55:6c:53:83:53:5a:fb:c8:
                    37:d2:00:9f:32:84:08:a6:03:07:dd:4c:03:d7:93:
                    9f:db:49:f2:30:69:4e:ee:06:4f:e8:11:bb:b9:c0:
                    02:e9:7a:19:27:a8:48:f1:ad:db:57:80:fb:12:ae:
                    2c:de:95:3c:ab:da:9b:b5:ed:23:ae:17:2b:88:8d:
                    45:71:06:3b:74:80:18:76:88:d1:cc:11:50:e6:68:
                    0a:a7:8f:c7:04:66:45:96:46:34:6e:98:1e:c1:6d:
                    6c:2d:69:e8:d0:d3:ae:60:74:20:5c:3e:6f:fe:95:
                    86:d7:e3:36:8e:5b:a8:1d:6d:41:c4:92:fb:06:75:
                    ed:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A5:A6:39:0A:5C:68:AB:F0:29:9F:81:62:27:40:DA:8A:DD:8B:D3
            X509v3 Authority Key Identifier:
                keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:73:9a:c4:c8:47:a6:62:50:6e:00:05:08:d1:8a:da:1c:64:
         47:e5:df:0e:37:05:e8:b9:74:9e:fc:58:8f:9f:9e:d9:56:36:
         99:a4:50:b8:85:f5:ee:18:66:40:f7:b2:97:83:fb:87:bf:6a:
         a0:51:f9:a5:19:0f:03:33:bf:f9:70:f1:81:d4:33:e7:9b:57:
         c6:aa:86:17:6f:20:7e:d6:33:a3:b8:c5:e9:a9:a5:58:63:a7:
         1d:3c:c7:f6:7b:36:93:03:cc:ca:75:4b:90:7b:f3:d4:2e:44:
         ef:81:61:5a:66:22:df:8a:1e:89:f5:e7:64:4b:59:b2:c0:1e:
         8a:43:52:97:04:9f:b4:a6:ba:c1:b5:37:68:7f:fc:3a:08:ee:
         a4:88:02:3a:17:44:3d:ac:99:7b:93:a7:f8:9f:e7:52:26:50:
         3c:e0:d2:ec:16:d5:90:b4:e0:9d:22:43:6f:ba:19:78:b0:bb:
         6e:66:e3:7e:85:7b:5e:79:76:b3:4d:ea:a0:93:eb:ad:57:60:
         93:e5:d6:68:ac:de:a1:96:11:01:1c:5c:af:3c:91:7f:82:28:
         94:60:38:70:8c:bb:b7:cf:40:2d:fe:3d:c4:ab:90:52:c8:f8:
         84:54:d8:ed:01:a5:5d:09:fd:39:84:70:1a:9f:a7:18:1d:c2:
         26:f2:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:07:31 2024 by rpki-client on console-ams.rpki-client.org