Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File:                     rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier:          dZlzS8SzjbYimZJkOFZoQWyI6w+ZnL74MgX1DV4wN6g=
Subject key identifier:   72:87:BE:2F:01:70:EC:83:12:A8:DA:2B:6B:79:A3:CA:1F:E6:04:B7
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer:       /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial:       018F87B6390AE2AA2393B2C93526098BCCB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number:          1175
Signing time:             Fri 17 May 2024 18:00:17 +0000
Manifest this update:     Fri 17 May 2024 18:00:17 +0000
Manifest next update:     Sat 18 May 2024 18:00:17 +0000
Files and hashes:         1: aEF4QqmH6mEr_OfxlyMWQyqpzCs.roa (hash: 1JD4pO8+tDSALQOhJOQpSPkswatYwNcQkC1zpWr216I=)
                          2: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: 0xJ6V+OhN7+gLx2A+Ij7T/ax0+KNLqRmKkSpegg9gC0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:46:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:39:0a:e2:aa:23:93:b2:c9:35:26:09:8b:cc:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
        Validity
            Not Before: May 17 18:00:17 2024 GMT
            Not After : May 18 18:00:17 2024 GMT
        Subject: CN=7287be2f0170ec8312a8da2b6b79a3ca1fe604b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:09:36:6b:f2:a1:e4:cd:a5:24:a7:c9:92:
                    e4:3d:5d:1b:e6:b1:06:48:6e:1c:8d:6f:ec:4f:2c:
                    30:2f:80:6b:9b:3d:76:a5:2b:76:09:da:d3:1d:6f:
                    b3:26:5d:43:41:68:93:de:46:e0:67:31:73:b5:76:
                    25:65:4f:33:f7:7f:be:64:0f:3f:23:93:51:82:64:
                    75:9b:bc:81:bc:dc:47:da:31:43:d9:c1:76:2e:1d:
                    53:47:08:20:dc:df:f0:cc:8c:3a:fd:1b:42:c4:5f:
                    6e:fc:be:00:b7:bf:67:e0:8c:fe:21:68:d4:a4:c0:
                    c0:52:31:2a:46:71:16:5a:02:87:9a:b9:f0:f9:45:
                    3a:89:29:a6:12:03:4f:ea:29:66:80:cc:e7:b3:ee:
                    f9:3f:4c:6b:40:71:4d:f9:d2:ca:f2:5e:47:a7:47:
                    38:d1:fa:27:51:c9:0f:91:26:ee:3b:d6:44:1f:1a:
                    2b:b8:f5:10:d3:91:10:fb:3e:9e:9d:97:15:92:45:
                    7d:d8:2b:c3:6e:12:b6:8f:2b:ac:fe:55:a1:f8:32:
                    d4:28:0a:27:7a:a4:0e:78:60:73:6a:16:d6:3e:32:
                    14:ef:b9:f3:37:9f:23:27:04:7e:7c:5d:a9:03:e1:
                    bd:72:4a:a7:fd:1a:9a:50:1e:d6:2b:f3:da:ac:62:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:87:BE:2F:01:70:EC:83:12:A8:DA:2B:6B:79:A3:CA:1F:E6:04:B7
            X509v3 Authority Key Identifier:
                keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:49:72:d8:96:40:ba:e6:71:a3:a0:b6:ce:2a:e3:67:1c:7e:
         b7:24:9d:3d:96:08:7c:33:89:d0:f7:b0:55:a6:53:e1:15:d9:
         ca:fe:a3:7a:b0:c1:cb:04:38:91:b3:ff:0e:a7:93:38:e2:1b:
         00:c1:73:73:26:5c:7f:f4:e4:d3:b7:8c:c4:64:bf:a2:57:16:
         19:95:91:da:fa:56:92:2e:ac:2a:14:97:4d:5d:f6:f6:9d:62:
         ac:15:ac:ea:97:59:23:bc:88:b2:61:88:03:ba:04:4f:17:17:
         fb:b0:2f:64:3b:43:7e:d2:f7:af:d5:24:d9:11:2b:8c:21:c9:
         16:a1:e9:cd:7a:fb:19:19:76:9f:a4:28:2c:ff:53:30:2f:e8:
         2f:cc:24:d9:ba:57:5d:8d:6c:7e:45:5d:7f:b6:b6:1a:43:76:
         61:7d:1d:6c:91:f0:e0:05:50:8e:4d:21:57:b0:39:de:1d:ef:
         2e:77:15:0b:14:e3:76:12:22:19:6b:b8:f1:1c:bb:8c:92:57:
         07:02:0a:de:12:48:01:04:5d:0d:c1:6a:14:08:38:d3:cc:90:
         70:96:c3:82:76:64:38:d7:a3:cc:f5:90:03:4e:15:de:6e:24:
         37:12:1a:e9:61:ca:88:da:07:f5:6e:a1:18:41:ff:a2:ea:95:
         67:0a:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:14:12 2024 by rpki-client on console-fra.rpki-client.org