Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File:                     BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier:          kLcRqIkRFiNJrIqhlKkWpd9QpC2o9ZxjJJErOhqwHaI=
Subject key identifier:   02:4C:1F:E3:03:CA:08:2E:56:1A:AA:C2:BB:95:BD:21:AC:B4:14:27
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       018F3D0F3280E98D47B2B3D89291B2A66149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number:          0C46
Signing time:             Fri 03 May 2024 06:05:57 +0000
Manifest this update:     Fri 03 May 2024 06:05:57 +0000
Manifest next update:     Sat 04 May 2024 06:05:57 +0000
Files and hashes:         1: 5FrrCUdRBeaXCyPloinbo5uzrvM.roa (hash: cpMgnEPKnILciJk+Zd8XOFvqgwnuPwNRptZ8/VlHKWo=)
                          2: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: 46nJTrd4h0gkxGlxvQKxgLRa52gRtjQO0GNJ3Wf2hDM=)
                          3: D5maXNQusX0-0l7RjDUKbtJEJBo.roa (hash: veA6h2ECktBO1GXrF8VhhgTUGv0Z92l/dw1pJ3t23Fw=)
                          4: ImqGpadxiBCf4ORVtpQ-O4OMQHA.roa (hash: /eUvKdvOX1J6h0VQ6X96iAVLr8hOx4hfOs9jfqrqEeQ=)
                          5: WBtDJJfr2LkMRXxKSF30r5PevV8.roa (hash: KIVlLFAjf2TkyGDdpaHmPeOTxfir0X83YQpjCqSIMvo=)
                          6: Y8ymtLlnODS9kLW1mj2CSTLTTMM.roa (hash: oAD2HBJdf8BLMKB1y8NrIxNH6Wkk41OPyL1skEdM+D8=)
                          7: ZG9oP5csBKwjoqegD-r82uAGI-s.roa (hash: yH6n07sd6pWCAQA/dU8wZ9ROBd6jUKPVylpkpiXaGKg=)
                          8: a52zYx3AlkW7pybjUJ7WnOtDjHY.roa (hash: pE06bAOUnnYwz5aDEAW7RsVFE9MC3i7Bv8jI8mcI0j8=)
                          9: isPNhcmvKfxwyAQtzcUnqKAPTMY.roa (hash: MuV09FUhxwi91x5/tuaLzbOFwvFo/V8Lhiqwi69Y4/w=)
                          10: v5cjj8B0AwMatuyGe-pZuxqAYQE.roa (hash: C9s252QpzPjd00esz7bg0+AVJ6newbwhugxHVlcsTx8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 06:05:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:3d:0f:32:80:e9:8d:47:b2:b3:d8:92:91:b2:a6:61:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: May  3 06:05:57 2024 GMT
            Not After : May  4 06:05:57 2024 GMT
        Subject: CN=024c1fe303ca082e561aaac2bb95bd21acb41427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d8:5d:64:1a:43:f0:db:e1:54:3e:0f:8e:fe:
                    76:71:c6:1d:9c:41:66:45:2e:10:0b:89:f0:07:f6:
                    0e:73:95:78:45:d0:cb:fa:6b:64:48:92:7b:4e:d1:
                    c7:81:76:db:4a:13:7d:60:6a:b9:c7:f8:60:15:bb:
                    75:55:2f:e6:c5:ba:01:8e:bf:ba:4b:35:7c:05:2d:
                    ef:5e:a9:24:75:a8:c1:7c:e1:21:e0:6e:d3:41:a7:
                    1d:4b:e5:76:1f:12:98:2a:64:6d:03:aa:55:9e:58:
                    4d:93:ae:b5:da:27:ed:bc:b4:ef:fa:d2:c7:7f:d1:
                    d8:ba:e0:34:b0:54:21:f6:40:70:51:b3:55:c3:b2:
                    a9:01:1f:93:13:f2:1f:03:53:4e:03:f4:f6:fb:68:
                    2d:68:a1:16:bc:76:51:25:a9:2a:ea:e5:ee:54:43:
                    d8:da:62:2d:61:06:8b:1f:91:b3:ae:7f:83:71:18:
                    d9:bf:9c:9c:63:52:96:15:44:4f:c9:3c:96:c5:47:
                    5e:59:99:f2:e8:8f:4d:bf:31:33:5a:06:14:1e:7a:
                    7b:b6:05:89:0b:e8:f9:c7:92:ac:c5:86:34:fd:f1:
                    5d:43:60:86:14:ee:2e:63:0f:4e:9e:2f:5a:56:de:
                    6b:61:27:60:09:4a:d3:23:49:aa:dc:a7:f6:ac:6c:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4C:1F:E3:03:CA:08:2E:56:1A:AA:C2:BB:95:BD:21:AC:B4:14:27
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:19:db:9d:4c:37:41:b8:48:87:aa:97:2d:49:96:50:e9:56:
         86:2f:5e:57:f5:95:01:c4:f9:17:d8:1a:33:d5:c9:9d:ce:58:
         e0:da:59:3e:b8:11:0d:09:d6:98:15:47:a4:db:07:2c:44:49:
         75:d6:c0:89:b6:76:a1:3d:14:b0:44:54:40:cc:8a:92:91:80:
         e3:bb:00:02:87:9a:b5:05:69:38:51:40:f2:c0:71:72:95:2e:
         ab:25:62:60:62:ff:34:da:b9:cf:de:b9:70:4a:7e:62:01:67:
         30:27:c1:26:c7:c7:c5:c6:fc:07:51:b7:e7:23:4b:56:f4:3d:
         35:e3:d4:e7:fe:05:b3:17:55:ce:89:28:7d:b9:04:1e:de:ae:
         cc:79:21:d5:14:44:35:ea:fc:7a:d5:f1:f3:b0:f6:ed:2b:29:
         22:3f:36:59:2a:38:11:bc:8f:7c:9a:a8:97:9c:0d:7e:42:ca:
         40:a4:db:84:2a:07:42:e9:4b:cc:5a:42:6e:d1:55:8c:0b:27:
         11:3e:96:57:03:f3:12:3e:f4:66:35:b5:6f:76:6d:77:2f:b6:
         c8:f8:0c:bc:c4:a6:ef:7b:2e:f6:9d:b5:0e:69:24:f9:31:69:
         d6:a7:3a:14:96:67:2c:95:4e:b5:7b:62:53:68:f0:bc:21:56:
         93:2c:03:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 16:49:40 2024 by rpki-client on console-fra.rpki-client.org