Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.mft
File:                     AZISi0assf-fCvD-1z40EhxVS7c.mft (raw, json)
Hash identifier:          /VAcPSz3rnlpkN9uPoTn5O+IuzBtDsqK90HblxMQ3fY=
Subject key identifier:   84:D8:3A:80:7A:E2:F0:40:1B:06:8D:20:40:98:74:7F:0D:44:54:C1
Authority key identifier: 01:92:12:8B:46:AC:B1:FF:9F:0A:F0:FE:D7:3E:34:12:1C:55:4B:B7
Certificate issuer:       /CN=0192128b46acb1ff9f0af0fed73e34121c554bb7
Certificate serial:       019355E3E79632F661FFFDCB49128BAF8BA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZISi0assf-fCvD-1z40EhxVS7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.mft
Manifest number:          11CE
Signing time:             Fri 22 Nov 2024 22:00:19 +0000
Manifest this update:     Fri 22 Nov 2024 22:00:19 +0000
Manifest next update:     Sat 23 Nov 2024 22:00:19 +0000
Files and hashes:         1: AZISi0assf-fCvD-1z40EhxVS7c.crl (hash: 5J/oD4t/TCYmf8kHKMFdgyWDV9rLsUfthnxU0++4R8o=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZISi0assf-fCvD-1z40EhxVS7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:55:e3:e7:96:32:f6:61:ff:fd:cb:49:12:8b:af:8b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0192128b46acb1ff9f0af0fed73e34121c554bb7
        Validity
            Not Before: Nov 22 22:00:19 2024 GMT
            Not After : Nov 23 22:00:19 2024 GMT
        Subject: CN=84d83a807ae2f0401b068d204098747f0d4454c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:c0:be:79:fd:97:53:e6:cb:3b:b9:f8:fc:
                    8b:35:76:fe:0c:e1:60:08:d6:2b:64:80:54:d9:d9:
                    d1:7b:87:d1:ac:de:e6:d0:6c:f8:a8:75:5d:be:5f:
                    78:20:0a:bb:a8:4e:da:79:c7:92:80:d4:96:d5:28:
                    be:30:fa:2c:95:f7:0e:ac:24:9c:dc:fe:7e:31:ee:
                    73:12:7b:5e:12:f9:73:94:9d:06:7d:13:fc:d3:18:
                    f7:87:a8:2a:bb:73:97:e0:dc:c3:c3:af:3c:70:51:
                    3b:66:d2:1c:6b:36:1d:60:a7:bc:4e:4b:d1:18:f7:
                    44:27:f9:18:b8:e4:6c:da:2b:95:08:79:bb:c1:a7:
                    d8:0a:39:9f:81:36:e8:b8:9f:a5:cb:ec:9f:95:dd:
                    1b:9e:dd:13:17:15:c5:72:26:3a:30:f3:80:ba:92:
                    29:82:cc:b3:c9:2e:15:9f:1b:e4:c8:7d:9d:94:fc:
                    9b:1a:61:4a:5d:5a:3a:6d:c6:46:13:66:53:0d:54:
                    e6:71:e5:a8:55:c0:8c:a0:49:12:1e:5b:bf:08:25:
                    62:6a:61:b0:29:c9:23:4e:3a:4a:02:f4:ae:1b:c5:
                    28:4a:fd:53:4e:83:19:cc:02:43:c7:de:2a:1a:89:
                    de:09:28:c6:c9:fc:88:cc:73:e7:6e:80:7b:07:be:
                    bf:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D8:3A:80:7A:E2:F0:40:1B:06:8D:20:40:98:74:7F:0D:44:54:C1
            X509v3 Authority Key Identifier:
                keyid:01:92:12:8B:46:AC:B1:FF:9F:0A:F0:FE:D7:3E:34:12:1C:55:4B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZISi0assf-fCvD-1z40EhxVS7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:44:cf:8b:5b:cb:33:43:6f:71:0e:f6:f7:83:aa:2b:82:ef:
         43:11:25:ad:37:c9:98:8c:ba:1a:0b:b1:77:61:55:95:ed:48:
         27:88:cc:df:4f:eb:e6:fe:fe:e7:fa:83:73:36:8f:2e:3f:e4:
         1f:c8:30:3c:52:d9:51:bd:f2:82:b8:72:09:f5:48:f0:53:2d:
         94:fd:68:f3:80:92:2b:2b:3c:d2:f4:fd:51:6c:9f:e6:b2:9b:
         76:11:8b:0a:29:7e:1f:98:ae:a6:a0:90:5f:98:3b:5f:13:13:
         b0:87:b9:11:bd:6c:47:04:d9:10:f3:ae:74:42:7a:f0:3f:0a:
         b7:4b:c1:69:0a:6c:40:a7:c5:60:b5:c8:ff:1f:0b:a1:59:ad:
         41:3d:fe:e0:ce:63:83:b8:e7:0c:1d:48:f4:80:9f:d1:7b:55:
         43:e9:81:a0:fd:67:fa:d5:01:50:0a:d2:92:8c:c1:02:de:00:
         94:d0:8b:72:30:e3:94:c4:cc:a9:a6:21:c0:ee:75:c1:0a:d1:
         5b:4a:02:dd:19:12:52:a1:21:ba:a2:f2:fc:bf:fb:1b:6e:92:
         35:0f:6c:35:b5:4c:c3:43:f5:e8:c7:3b:18:82:f5:18:aa:9a:
         dc:df:ca:dd:91:51:3f:4c:9c:b7:46:8f:3c:29:13:5b:a1:9a:
         c3:18:13:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:41:21 2024 by rpki-client on console-fra.rpki-client.org