Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File:                     BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier:          ncjdaO3AjJ3BzrV8XdWPrIDrJfD4q7tpDfVhCjGP6JY=
Subject key identifier:   7F:C5:C1:92:73:90:EC:AE:7D:32:DE:14:8B:53:15:7E:C2:B0:4D:AF
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       019350F47113D74F145069DE35D8A80C0D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number:          0E7A
Signing time:             Thu 21 Nov 2024 23:00:17 +0000
Manifest this update:     Thu 21 Nov 2024 23:00:17 +0000
Manifest next update:     Fri 22 Nov 2024 23:00:17 +0000
Files and hashes:         1: 1-Jq697zJd-eCZhPNcosmOUrfBrM.roa (hash: kzEUiVE56tlCDpKvqGGscRK8ctKOX7I0IbahC+70bmg=)
                          2: 11joggcJbMEpsS1C6TYrYv7_wd4.roa (hash: hCblgXahSlLQI8dM6T4Jh8fr6bQuQBre6F6MTve8ygg=)
                          3: 1vcYuhDutVueicV5QxY3IPHbaYc.roa (hash: +3y9vtXG1Ru5ULTxB/yGR4nTeyZwm4+I6OjYnHmYes8=)
                          4: 7EM17zbgLZZeSZMYW5RnDJYJM94.roa (hash: +koF1C+E+EqZCOF5I1qWVki45RP+/5i97RjfaaFrVwg=)
                          5: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: KPMVpwGSPPffzIEv6JFjxB/Q1CgJaD1gqYORu5GNkUg=)
                          6: OlYubq6aJSP9blCUyl00FxqmK98.roa (hash: cLpKRkmjdQ5O1lodK2BVOOBnfoI5iaIG58Z5YhBTDOk=)
                          7: USSpE7xsLce4W828YLD1vFjLMhc.roa (hash: XTXWu+jXMj3+7LPNb6Jy5czEUSGG3peFgQ0qTEvXbMo=)
                          8: a52zYx3AlkW7pybjUJ7WnOtDjHY.roa (hash: pE06bAOUnnYwz5aDEAW7RsVFE9MC3i7Bv8jI8mcI0j8=)
                          9: byEXZ7l6KEemyDUKaT9cCiTkZ3s.roa (hash: vahFXlM3u4UlU+Wk7oE/6HaRmPEmRckabywkyF4rEA8=)
                          10: fdt8u8FkFj8BcRpPldB6FcJ7zEE.roa (hash: rJCUI1RqJYDW9zz8WCE3IaMa7w9k0I7CdXDeA2LQhiQ=)
                          11: hhWK7LhJYNemBZ5mgdf-w5YQrnI.roa (hash: ukqzhzzeWZI7YApCKyU8A3YcuRP9/lWqfOsV5JpR1eI=)
                          12: ipc0sbGOXRcIq3Hfxk6p6mk718U.roa (hash: Jnnz8hMwodRD2Df/594p7lE7g7K+XL0IyFs3od1QWVQ=)
                          13: isPNhcmvKfxwyAQtzcUnqKAPTMY.roa (hash: MuV09FUhxwi91x5/tuaLzbOFwvFo/V8Lhiqwi69Y4/w=)
                          14: pQsTGdYneWoKjCN4d2FGxNrn0Uw.roa (hash: IgokV6b6Dzoy2thGeo1WEFrbtvL7fxAVEZ3H1mPUToY=)
                          15: ra12yTY2gjwkWdQYx1zOzmQdhkQ.roa (hash: so4uYbIzkwm2J4YXDGo1z5tcLO62UX7MElHjvew5FzU=)
                          16: teY32oGRCANBHEAnCjnFn0hmRV8.roa (hash: INfqSyc+vuV2DcUWh0p58TyGno2vxeRHpgTuKIMxuaE=)
                          17: yWUWla5lc3r2enYOKkec8wVdxh4.roa (hash: gV6iN6iPh9xgn9dMCnyY6YfRc4YeRk/zouOdxpb3xb8=)
                          18: yiWY1OC9bGFZgpUJeFaVkSQ87BI.roa (hash: RPm7HJX/Dq7E8uOuhK9AzOs3wETFUVKCKkQtnp2wzvI=)
                          19: z1bfMWxeY9A6aTz4uiFpyNnx3A0.roa (hash: 6ttOF8BVcuLJOrWJmEbmD3H88QdtAcbcTl5SHQKauQQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 18:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:50:f4:71:13:d7:4f:14:50:69:de:35:d8:a8:0c:0d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Nov 21 23:00:17 2024 GMT
            Not After : Nov 22 23:00:17 2024 GMT
        Subject: CN=7fc5c1927390ecae7d32de148b53157ec2b04daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:99:02:5f:9e:05:c7:57:db:85:77:fa:e5:7f:
                    43:5a:4b:02:3c:cb:5c:10:6e:ed:5a:0b:4d:e3:1b:
                    ba:1a:67:b3:f2:bc:5e:a4:78:34:9e:0b:c5:5d:3c:
                    08:28:25:f8:a4:4c:bd:61:86:3c:ac:5f:ac:f6:9d:
                    17:3e:de:4b:8b:d9:83:f1:d5:bd:e4:e7:0b:38:ac:
                    32:5e:ac:4a:17:7b:e6:4a:44:f8:26:2a:82:bb:03:
                    c9:f0:eb:67:7a:e4:4a:ea:34:98:10:5e:02:26:c0:
                    0e:3a:5a:ef:88:4b:7f:ce:e8:d4:e2:23:80:c3:55:
                    b6:cc:e5:15:50:41:11:d7:93:e8:3e:bc:4a:a9:4b:
                    eb:6f:cf:b4:a8:fa:cc:c0:63:c0:ee:74:36:67:f5:
                    83:a5:0c:b0:e3:35:14:2c:dc:10:78:b2:22:42:80:
                    e6:ab:04:93:8f:f8:6b:b4:f6:5d:72:e2:46:b2:15:
                    a6:92:3e:0d:02:1e:71:e8:db:18:b2:b2:6f:8c:bd:
                    ad:7c:10:1f:4e:4d:61:88:ef:30:92:d2:2a:c8:0e:
                    7a:e4:bc:3a:0e:3b:82:f6:f3:ce:e6:3d:f5:19:e6:
                    6a:70:e1:28:36:9f:2c:93:70:16:cd:61:41:de:07:
                    ef:7c:b6:d0:7d:55:4d:b4:fb:96:80:67:9a:6a:40:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C5:C1:92:73:90:EC:AE:7D:32:DE:14:8B:53:15:7E:C2:B0:4D:AF
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:5e:c7:a1:22:d0:18:ca:3a:27:ac:ad:36:34:8b:09:29:1d:
         e6:81:69:62:49:a2:9c:c8:97:2f:a2:60:85:20:34:0b:1c:e7:
         5c:dd:64:96:e7:02:72:3e:a0:7a:85:a0:bd:83:af:39:4f:c4:
         c8:f3:de:d9:98:17:3e:fa:f0:d1:bc:54:32:66:25:2a:26:94:
         fa:88:46:5f:39:30:f7:47:66:3f:e3:e5:12:a6:f9:b6:bf:ca:
         b2:fe:de:9b:93:8a:67:a0:62:00:d5:85:4b:fe:76:e1:8d:48:
         9c:e0:ab:d8:21:4e:50:3a:1d:a2:a2:34:8d:91:7b:ca:15:13:
         c5:9c:c1:0d:1d:3a:ab:80:e7:c2:8a:c5:82:77:29:07:00:02:
         49:8e:46:5b:19:f2:43:83:6c:e4:0d:03:9d:5e:b3:64:50:86:
         08:83:a7:ca:c5:f9:ea:2a:c9:0a:a8:a3:ce:19:d2:c4:6d:80:
         75:f3:4e:57:1b:03:ce:91:04:d5:0c:ce:96:78:61:bd:e6:05:
         0a:1c:70:4e:a0:aa:e3:52:ac:97:a3:6a:e4:45:ef:96:bb:7a:
         7a:5e:c0:10:ce:9d:b0:62:3a:53:f6:95:57:e5:b6:fe:e9:71:
         d7:f1:3c:8a:96:1b:08:23:a2:aa:fc:e0:f9:d0:b8:8f:18:97:
         e4:67:99:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:33:37 2024 by rpki-client on console-ams.rpki-client.org