Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.mft
File:                     AZISi0assf-fCvD-1z40EhxVS7c.mft (raw, json)
Hash identifier:          xlbesV0Xiei+O9kbi2w8xEPxukc7DixWM9c5Lnst3rY=
Subject key identifier:   6D:DA:11:FD:9E:43:0E:C8:96:D7:66:66:0E:EB:0F:FC:08:AE:F2:31
Authority key identifier: 01:92:12:8B:46:AC:B1:FF:9F:0A:F0:FE:D7:3E:34:12:1C:55:4B:B7
Certificate issuer:       /CN=0192128b46acb1ff9f0af0fed73e34121c554bb7
Certificate serial:       018F411F179BA64E85767C97C682ECFED1BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZISi0assf-fCvD-1z40EhxVS7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.mft
Manifest number:          0FB1
Signing time:             Sat 04 May 2024 01:01:47 +0000
Manifest this update:     Sat 04 May 2024 01:01:47 +0000
Manifest next update:     Sun 05 May 2024 01:01:47 +0000
Files and hashes:         1: AZISi0assf-fCvD-1z40EhxVS7c.crl (hash: WB2yDvVa0/31iK2TKimN58TOkVE2FUJrZfFygGl4Qvo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZISi0assf-fCvD-1z40EhxVS7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:41:1f:17:9b:a6:4e:85:76:7c:97:c6:82:ec:fe:d1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0192128b46acb1ff9f0af0fed73e34121c554bb7
        Validity
            Not Before: May  4 01:01:47 2024 GMT
            Not After : May  5 01:01:47 2024 GMT
        Subject: CN=6dda11fd9e430ec896d766660eeb0ffc08aef231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:b8:d1:e9:d2:15:d5:67:57:f6:cd:2e:33:
                    4c:d6:0b:86:33:70:38:8c:fc:4e:af:44:c4:61:9a:
                    b5:11:8a:48:f1:46:56:42:9d:a9:03:38:e2:dc:62:
                    c6:01:34:d2:b7:88:7e:6a:c6:c5:23:21:00:23:19:
                    e3:3d:13:2f:07:45:43:99:94:55:a7:0d:bb:2f:67:
                    50:d5:e6:9d:c9:5d:6b:b3:5c:ef:2e:ca:ae:c4:86:
                    80:7f:95:b8:c5:ce:ac:32:9a:08:96:cc:82:f7:cf:
                    55:39:83:a6:33:3b:cc:ea:ab:b9:84:e2:b4:5c:05:
                    27:8d:5a:42:f1:07:8c:7f:ed:31:72:9a:15:a2:f5:
                    f9:c0:be:d9:7d:35:d1:67:91:5c:ff:f6:bd:74:13:
                    6a:d2:d4:e3:f9:ca:3b:32:a1:fd:bb:b0:83:4a:04:
                    9c:ba:82:06:6a:b9:c1:b3:ef:64:6c:a7:2a:4c:8a:
                    6f:5e:03:38:3e:01:ab:4f:b3:f1:07:9f:06:42:b6:
                    86:3c:72:48:c4:72:dc:01:3d:4a:18:31:76:3c:3c:
                    11:ec:95:ab:13:72:1b:23:58:8a:18:ec:dd:d5:7a:
                    3d:5d:c2:cf:aa:c4:03:13:b1:11:ab:a5:49:32:4e:
                    23:2b:03:66:65:de:8b:41:dc:e0:51:20:17:00:ff:
                    c0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DA:11:FD:9E:43:0E:C8:96:D7:66:66:0E:EB:0F:FC:08:AE:F2:31
            X509v3 Authority Key Identifier:
                keyid:01:92:12:8B:46:AC:B1:FF:9F:0A:F0:FE:D7:3E:34:12:1C:55:4B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZISi0assf-fCvD-1z40EhxVS7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/a3a914-fa3a-4859-9439-5b373d7e7635/1/AZISi0assf-fCvD-1z40EhxVS7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:29:21:a3:78:17:8f:fc:31:e0:b0:cb:13:31:a8:fe:33:3d:
         1e:d2:1e:71:5c:fc:65:d5:ab:5b:39:bd:10:87:c5:df:ef:23:
         24:d7:bd:3a:ea:7f:ed:0a:44:76:59:8c:fa:a3:22:6b:7b:b9:
         10:11:5f:42:40:a4:47:fb:b3:82:7a:b7:5c:0a:e8:33:21:a7:
         19:6a:0b:bc:19:fd:c1:4e:a2:1d:95:24:31:75:6b:94:cd:f1:
         fd:a1:06:f2:9f:80:bb:0d:d8:21:6f:79:ed:d5:52:52:3c:94:
         5b:1e:f4:11:d9:46:9e:80:5f:c0:a1:7d:70:ea:c6:94:d3:00:
         cd:3b:7a:45:5b:d2:2e:6d:63:6b:19:d2:4b:2f:f0:37:3a:e9:
         7d:0b:1c:c9:6f:67:60:de:53:47:c8:36:55:6e:eb:28:59:87:
         df:37:c9:38:ee:35:44:c8:4e:df:49:1a:fe:31:dc:82:cf:a2:
         6d:af:c4:8a:df:8d:3e:59:e1:23:f9:7a:bf:41:d2:f9:53:a3:
         e6:e3:77:9e:32:d1:11:a6:be:d6:31:ba:4f:35:75:6d:45:51:
         cf:2a:4f:73:c6:7b:60:a7:72:d3:68:72:c5:36:e1:b3:79:ba:
         3d:fc:98:41:b2:1f:ae:bf:32:74:c4:3a:8a:a7:04:e0:69:25:
         d0:fa:c5:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:13:26 2024 by rpki-client on console-ams.rpki-client.org