Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File:                     AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier:          rL2YbPfRDta85khf1fvXTovFbZ0ds4NnQdlfoTdDCgI=
Subject key identifier:   DA:13:B9:A9:58:5E:70:84:85:5B:C6:6D:AF:B2:84:FC:4E:63:27:C4
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer:       /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial:       019369DAB82ABA3AD4BCAA569817D9A4C42D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number:          0D2E
Signing time:             Tue 26 Nov 2024 19:02:41 +0000
Manifest this update:     Tue 26 Nov 2024 19:02:41 +0000
Manifest next update:     Wed 27 Nov 2024 19:02:41 +0000
Files and hashes:         1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: 6hD/VwOc4/RrZCYm22zYpTYrsR4oYFRTFasU5HF7TnE=)
                          2: cZmX-9_Fm317ua4HHTSAhVeLj_0.roa (hash: elOEAVFLFahwQw1XsoduyP8pId5RTb0PGl9jVeuqL4k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 19:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:69:da:b8:2a:ba:3a:d4:bc:aa:56:98:17:d9:a4:c4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
        Validity
            Not Before: Nov 26 19:02:41 2024 GMT
            Not After : Nov 27 19:02:41 2024 GMT
        Subject: CN=da13b9a9585e7084855bc66dafb284fc4e6327c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:75:ef:4a:36:a1:90:de:e4:4e:f7:c2:7b:
                    ea:6d:24:c8:14:1c:49:3c:2a:8c:a8:33:a1:2e:b0:
                    03:0a:88:ad:b7:4a:82:db:29:b7:cb:49:80:49:b7:
                    20:ba:68:a1:1e:7f:4d:b6:a1:c4:4a:bd:99:e9:74:
                    bb:3b:70:22:67:7d:2b:4b:e4:ba:97:6f:b4:2d:25:
                    6a:76:9c:cb:05:09:2e:e5:45:4b:55:6e:4e:ab:ef:
                    6e:a3:81:0e:4f:bc:0a:db:fa:e5:73:73:db:c1:c1:
                    b4:dc:6d:35:44:2a:9c:ed:58:bb:49:4d:46:76:be:
                    32:6c:71:c2:37:e0:65:d9:6b:ba:2d:c3:e7:01:0a:
                    34:38:8a:f4:72:7d:4e:a9:31:36:63:63:7e:da:71:
                    ef:68:ff:c2:ec:e0:d2:75:81:25:79:41:5a:a1:7e:
                    1b:98:ee:d7:ff:20:8a:2c:55:67:0c:2e:3a:66:1d:
                    7c:fc:1e:c5:fa:d4:8a:8b:e2:8c:27:f9:fe:ab:5a:
                    53:4c:d2:96:6d:f6:2a:8a:8c:e6:07:63:75:5c:0f:
                    56:b2:e1:42:88:56:7f:48:75:14:fd:9a:28:c2:d7:
                    19:ea:05:04:ab:99:de:29:d0:94:0e:5b:ea:9d:80:
                    13:33:9b:00:1c:c2:77:67:2b:07:4b:58:bd:94:b5:
                    4e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:13:B9:A9:58:5E:70:84:85:5B:C6:6D:AF:B2:84:FC:4E:63:27:C4
            X509v3 Authority Key Identifier:
                keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e0:28:13:72:f2:00:01:d7:58:b5:63:69:5d:2e:68:54:ff:
         50:2d:a4:42:72:85:85:24:c7:f0:e4:87:47:f5:07:ae:f9:f5:
         1d:3c:02:61:85:7c:52:f5:e1:00:9c:9d:da:3d:0f:12:15:7d:
         72:e6:e7:b2:f5:48:91:32:41:56:45:5b:b6:29:f5:d7:25:92:
         00:53:48:4a:a8:67:ea:72:3a:56:7b:26:41:64:ce:62:90:b0:
         d9:2e:07:49:6f:e1:ae:fe:1f:e4:9b:63:cd:22:c6:89:b5:79:
         1c:93:af:bb:e9:e4:55:c5:90:c9:7a:0f:84:d6:ab:1c:51:08:
         51:32:63:53:6f:bb:a2:56:03:4b:88:19:42:65:15:da:73:57:
         94:d4:89:7c:13:12:cf:c5:a0:e5:65:bd:56:e5:f5:db:6b:02:
         6d:62:07:e9:e9:f2:0c:3e:53:f7:e8:3d:f0:48:13:d2:52:06:
         e1:10:0a:60:a1:06:d6:9b:4d:83:bc:1f:a7:a5:af:ce:8a:86:
         14:35:64:1f:42:bd:aa:4d:ac:e4:4f:37:75:dd:9a:d6:3d:10:
         67:09:5c:91:01:85:f5:bb:de:40:2f:f2:9b:62:fe:d2:d4:fc:
         15:53:3e:2b:ad:df:03:0f:6d:a3:e1:57:95:5d:33:87:b2:4a:
         7a:0f:a3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:28 2024 by rpki-client on console-fra.rpki-client.org