Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
File:                     agPhC26juPNiz7I671icd3cefso.mft (raw, json)
Hash identifier:          uL6V0/lLl++2j1926dyZNG7JgxxcL5tBY+Z4NsTbSsA=
Subject key identifier:   19:A8:BF:B3:42:F0:23:B1:30:52:A6:1F:57:E6:95:7B:03:8A:62:A4
Authority key identifier: 6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
Certificate issuer:       /CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Certificate serial:       01935688C0D5330C4887EAF4C6AEEF49B895
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
Manifest number:          056A
Signing time:             Sat 23 Nov 2024 01:00:22 +0000
Manifest this update:     Sat 23 Nov 2024 01:00:22 +0000
Manifest next update:     Sun 24 Nov 2024 01:00:22 +0000
Files and hashes:         1: agPhC26juPNiz7I671icd3cefso.crl (hash: 8ylRz1idhCQPH3eQy+PQQpUyCXxd3L146CF9wf0yLBU=)
                          2: mo2o2QmU5q_aBoxYQet4Yhose9c.roa (hash: XU/0F4GEd6+d7ZobL6xdUadMKLtx75fkjoOO0EBOoqs=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:88:c0:d5:33:0c:48:87:ea:f4:c6:ae:ef:49:b8:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
        Validity
            Not Before: Nov 23 01:00:22 2024 GMT
            Not After : Nov 24 01:00:22 2024 GMT
        Subject: CN=19a8bfb342f023b13052a61f57e6957b038a62a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:d0:e3:d8:aa:1a:03:d3:80:b6:16:9a:fb:
                    5b:58:0e:93:19:00:6c:3d:db:2a:16:61:bb:7e:3d:
                    6e:d8:bf:60:36:f3:b4:44:c7:43:4c:da:78:af:d5:
                    64:f5:6d:e4:3d:a6:4e:ac:d5:42:20:c5:b4:03:c5:
                    59:a7:c9:12:d5:04:f5:0b:7b:68:2d:a3:d0:39:6c:
                    c4:dd:9f:4d:cb:28:17:8f:a2:13:f8:ac:f5:c8:6d:
                    f2:e0:51:15:3f:32:62:52:f6:da:da:91:21:4f:71:
                    b7:8a:92:6b:9c:df:0f:3a:a0:ec:88:4f:f1:2c:18:
                    d3:4a:d2:1c:41:34:48:e9:78:91:23:f4:4d:c5:8f:
                    19:fc:b4:c9:7f:05:34:6f:93:e4:20:9a:65:a2:2d:
                    83:5b:3c:ec:40:34:ca:84:68:20:20:91:61:06:84:
                    60:1c:c2:27:6d:00:80:9a:91:0f:e8:dd:84:98:37:
                    69:ac:fb:1d:3a:1f:a5:ca:2a:c4:c3:eb:7a:91:4b:
                    a0:ea:ee:e4:fa:90:e6:be:0b:6e:33:ae:b8:9e:5e:
                    42:19:62:61:ae:da:a7:5f:30:03:23:2d:0e:cc:05:
                    4b:88:9a:fe:30:5a:95:2e:b2:fb:01:5d:01:ec:87:
                    bd:71:db:6e:7f:85:db:4e:25:46:c7:99:e4:f3:47:
                    f2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A8:BF:B3:42:F0:23:B1:30:52:A6:1F:57:E6:95:7B:03:8A:62:A4
            X509v3 Authority Key Identifier:
                keyid:6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:dc:6c:58:97:0e:51:36:92:4c:35:f8:94:d0:9d:a3:88:54:
         f8:21:00:71:09:f9:6b:ad:4d:3b:b8:f2:9f:b2:31:4c:7b:a3:
         d0:27:6b:00:18:27:00:91:97:80:34:3e:28:62:53:74:07:a3:
         ae:7a:6a:57:3c:43:c4:0c:c3:84:22:aa:28:54:9f:ae:b1:9b:
         8e:66:c8:08:84:de:b3:49:c0:75:31:7b:e5:fe:36:e2:1d:2b:
         c6:a2:05:1e:da:ad:f1:de:91:55:52:65:2e:02:f1:98:a9:8b:
         71:41:48:f1:08:d6:51:73:48:b8:78:db:f4:72:2b:9a:13:2b:
         07:a2:77:21:a9:e5:33:a8:35:22:b1:7a:9d:1f:3d:a0:8d:92:
         72:e2:6f:1e:3c:46:6d:51:51:f9:37:fe:c8:3a:3e:ac:c0:95:
         7b:51:c4:47:b1:57:03:be:27:04:ad:c0:0d:4a:c9:fe:d4:08:
         7f:95:06:16:47:8f:5f:6f:99:0d:b8:0f:2e:a2:55:21:bf:03:
         f0:0a:6f:96:6e:06:c5:28:76:8b:a4:ac:00:94:8b:2c:92:a5:
         c5:5a:02:f1:2a:50:ea:90:b1:41:37:e6:df:a5:68:4c:f4:4e:
         a0:51:7f:22:65:d9:83:f7:b6:37:93:f1:cb:27:49:96:fd:9c:
         a4:3a:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:42:40 2024 by rpki-client on console-fra.rpki-client.org