Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
File:                     BnHcx6msc1HHHgvCJ4z0X9Agri4.mft (raw, json)
Hash identifier:          1Ajxl2Mu63HUQ6tnvah2EbvDVpL/fZ00WM5DwdSkppg=
Subject key identifier:   1B:A1:9D:18:6B:99:B4:3E:D2:58:0B:35:F9:AB:92:E6:4F:A7:13:D2
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       01967642E32E1AD65F9414217E9B2BD6C7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
Manifest number:          1058
Signing time:             Sun 27 Apr 2025 08:00:16 +0000
Manifest this update:     Sun 27 Apr 2025 08:00:16 +0000
Manifest next update:     Mon 28 Apr 2025 08:00:16 +0000
Files and hashes:         1: 28rk6vVEaThskl5Oz8cUwJzvyPE.roa (hash: YmQ0Kx60sH8MZc89x92SrjX+sCOw13xB0G1V7AXRvnw=)
                          2: 4ltCuuM_GdOVrMzVXdtZZcpOj5g.roa (hash: cl1NwgdIll6nhRsIy37XQTOEGpdXa4qboW4bfYa6e4Y=)
                          3: B4xuVBeDw_ZFdgBfYNzvFE9Xdoo.roa (hash: uEBgOj1wL/lZxabuAzXGGt9tXkgNmy0WBweEZQ8DMa4=)
                          4: BTm3OMQjY7f4flmyBZ1O5fiBDxs.roa (hash: biLT4JhrLwf2X8ChjWAfH7u0E229MvoO7NLFEuPFfwM=)
                          5: BnHcx6msc1HHHgvCJ4z0X9Agri4.crl (hash: YYGQySr7azpJrF69taYWZLfv9zO6hDiCfhDA2FADxOY=)
                          6: K_EJriKArevlzfQZbolNDBtx8oo.roa (hash: 6w0sGv73nByWKd1Uamo+uAderKU68u5gHX69ydcFrwY=)
                          7: MZC0ct0Xstv22HLBnvUeWGBv83E.roa (hash: htp3HHZJT8KbtGdttjdWwv8CIeJ5zxP/H9XYr6UcMA8=)
                          8: ZEf9ahzTXSgn1CBsHK_EzzAv_DA.roa (hash: 8A0ZbBwJVxe/mI3qDF06TbRtLu8mKb/RfAg0IkfL6lA=)
                          9: cm8GtcTHwoYStisNyga9gSVGLUU.roa (hash: v40FCmdUz2OM9eR6s3YOOpZt+uxDnzYy59kW+69A10A=)
                          10: cpQDuCQS_PmKGa6mRrggJump5IQ.roa (hash: pejGEaNqW754xgC8ojt2JY5OjOdgLVYVhBOgK3JEQ/g=)
                          11: eSlIjU--zzeljHxDb7Lmc0oTcr0.roa (hash: 29lnhAvQJG6lXbXS0KcxL34Q9L1+10qH6WOklcnahZ4=)
                          12: gE7ueudz6XHmm5OIkUpikNoWJig.roa (hash: WPXfUdDpvK9mlUFw7x84SAWkZcxiBdQzE+WGfCvMXqA=)
                          13: gLTyoT53I5lI2-lkOJJIfUKtbTI.roa (hash: 12uR9b0I8gzTcAnLqYhZOre02X+/fR86aQPixtWQtWI=)
                          14: hM4RUMXGkSsGKGeXFlPc5WdVja8.roa (hash: +27OhfsKET5J+JAUfDDgfUlvTDk8tRsjQoV0ueuKdsc=)
                          15: i5GppiHBLQmwOIDk0BFsCJHp2Fk.roa (hash: yjCNT9c5vaPwsaCe9fT0EpKbcmfr4jqgrLJp2CjaPGI=)
                          16: iWm57G_OhEZoZtm420opEVVmjwk.roa (hash: tplvQrByHA3nV7i/oHw26AKWQE0TqsWHR752F20xeg8=)
                          17: kWgcOnHE4loB2SO1RafMA_sfxyo.roa (hash: qhX4ZFqSLA0ZjpIXxZoMeER1s51JEQ2ukADkC9RRayQ=)
                          18: mUn4bAz55ffqb0tiJskpWuVtNjA.roa (hash: BAAWKJEZVUELA0qluua1re9Mkphc7hB4/fV/DRwqpfQ=)
                          19: yWfOELdJhoe8LMukYDAJBTZQfjI.roa (hash: CrqW4V0u9pnO6V180nZ3E4+n94qS73tSB/q0By1xMJs=)
                          20: yX38jt3vI8i36FvJ3E_-UlmiSxQ.roa (hash: stQu9DFDxjZu1F/qyBAVnzlmn5IHuu+7EIChhkt6oKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Apr 2025 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:76:42:e3:2e:1a:d6:5f:94:14:21:7e:9b:2b:d6:c7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Apr 27 08:00:16 2025 GMT
            Not After : Apr 28 08:00:16 2025 GMT
        Subject: CN=1ba19d186b99b43ed2580b35f9ab92e64fa713d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:e2:c5:2c:38:c8:8e:d1:c1:7b:2f:a5:db:
                    03:3d:6c:1e:f3:b1:54:22:33:38:53:57:2b:29:9e:
                    d9:99:28:e6:c3:93:ab:10:3b:d7:e9:d9:42:36:d1:
                    3e:4b:fb:d1:e9:e0:58:6d:70:e6:d0:db:42:4f:ef:
                    bd:fa:a4:56:94:98:ce:31:5c:18:70:af:44:f8:98:
                    a9:f1:70:87:a6:96:35:d1:b4:52:e6:64:8d:c1:81:
                    5c:4e:1a:e4:7d:45:7e:09:9f:41:45:28:7a:24:0d:
                    ec:aa:68:72:1e:84:4b:b0:7d:8e:c7:9c:0e:cb:9f:
                    12:c1:e0:5f:87:fa:34:30:52:07:5c:aa:73:d9:09:
                    8a:7d:c8:aa:6d:8b:72:39:c9:2c:a6:3c:71:53:0a:
                    bc:9d:eb:51:49:5b:21:72:22:70:d2:6a:1b:32:45:
                    60:71:65:fc:dc:43:68:7e:85:6a:eb:4a:c8:dc:96:
                    64:6d:85:bd:91:1f:72:13:4e:83:96:8c:a5:02:47:
                    12:cb:2a:42:af:f5:55:39:9f:5b:70:0a:fb:98:5d:
                    30:4a:f8:8a:d4:aa:10:35:66:7a:b9:9c:9b:6a:d9:
                    b6:28:f8:fe:f3:70:bf:e2:4a:79:4b:26:cf:af:df:
                    d6:8c:0b:a6:c1:8f:80:3f:42:93:ec:4e:0d:23:86:
                    a9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A1:9D:18:6B:99:B4:3E:D2:58:0B:35:F9:AB:92:E6:4F:A7:13:D2
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:2c:4c:6e:0c:75:18:d6:af:d7:8a:d9:a0:58:44:3f:69:3f:
         b2:6c:97:54:16:a7:5c:8c:41:05:82:27:67:be:5c:b1:ef:ed:
         8b:3d:4d:1b:1b:61:e6:9b:b3:b7:92:8c:76:aa:08:4b:d8:8c:
         aa:2a:b8:1f:6d:9a:fb:ab:29:66:d4:d6:bb:b6:94:e9:20:2b:
         93:41:b9:dd:00:e5:2a:21:9e:83:a2:13:7a:7b:b5:c0:16:c7:
         eb:73:f1:e5:e3:e5:a1:f8:dd:41:12:5f:3b:b8:5b:e9:17:41:
         ff:b5:c8:b2:a9:ab:09:c5:58:41:7d:67:c3:ca:5d:68:69:63:
         b9:92:b0:7b:63:35:d2:59:01:cb:c2:cf:f1:db:32:31:8e:eb:
         07:63:80:21:a2:ad:bf:a8:b1:f7:2a:87:78:26:63:6d:b1:c1:
         a8:f7:41:72:74:ea:cc:7a:a2:e2:b4:5d:09:ab:93:b4:f2:9d:
         46:87:6e:54:a7:c8:d9:1c:da:a3:2b:48:ab:5a:53:9d:4c:59:
         54:c3:e6:90:73:aa:1b:10:4e:af:ed:b7:06:14:df:cd:f3:d3:
         41:29:2d:3e:9d:f1:58:ad:5e:8b:69:b2:97:66:40:fb:90:6d:
         c9:fe:07:83:ae:63:b8:2e:d9:27:95:40:ef:1b:e4:e0:93:a1:
         8c:cf:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 15:01:53 2025 by rpki-client