Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
File:                     az-2BsttcRGHiqeonJVaruhPPdw.mft (raw, json)
Hash identifier:          WufGOp2uPxMMVjHH497O9fLkkCEpA2162hF2poLndmc=
Subject key identifier:   23:A0:CE:91:32:F1:1E:D7:84:18:CF:BB:B9:30:E7:1C:04:EA:20:7D
Authority key identifier: 6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC
Certificate issuer:       /CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
Certificate serial:       019356F66EB792CBDEB986A7E58BE7E6F1EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
Manifest number:          12C1
Signing time:             Sat 23 Nov 2024 03:00:10 +0000
Manifest this update:     Sat 23 Nov 2024 03:00:10 +0000
Manifest next update:     Sun 24 Nov 2024 03:00:10 +0000
Files and hashes:         1: az-2BsttcRGHiqeonJVaruhPPdw.crl (hash: m3DlOn8tMXcCWfP8Syycc9PaoqgcKVy+1p/G4oFHwBI=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:56:f6:6e:b7:92:cb:de:b9:86:a7:e5:8b:e7:e6:f1:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3fb606cb6d7111878aa7a89c955aaee84f3ddc
        Validity
            Not Before: Nov 23 03:00:10 2024 GMT
            Not After : Nov 24 03:00:10 2024 GMT
        Subject: CN=23a0ce9132f11ed78418cfbbb930e71c04ea207d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:8c:58:86:67:1f:b3:76:0d:52:ad:50:5b:
                    8c:35:b1:49:a2:bb:6d:ef:04:fb:6a:50:04:d5:9a:
                    82:ff:de:31:74:89:a5:1b:e1:7d:78:62:e7:0e:a1:
                    dd:72:dc:f7:12:71:9a:d1:40:f0:c4:94:b9:12:f6:
                    98:99:26:ea:31:dd:39:99:9b:4d:49:86:96:0f:3f:
                    e4:c5:63:3f:fa:f1:6b:16:ea:ed:5a:73:35:7d:3e:
                    e1:0a:ba:35:9a:5e:c8:14:61:e2:fe:3f:66:20:07:
                    d8:28:6a:ce:0f:c5:81:6d:fc:f1:6c:9d:48:50:bf:
                    7c:af:ca:6a:a2:05:29:db:07:69:10:f9:ab:eb:14:
                    71:ad:0a:1c:98:2c:7e:c9:c3:27:d1:47:6c:2e:ba:
                    8c:77:a2:5d:bc:fb:d9:74:4c:d6:b8:5d:8d:f8:02:
                    83:49:0c:bc:39:96:80:f6:6f:c1:69:a0:61:8d:a8:
                    ee:0f:5f:1b:a9:83:8e:80:38:d8:40:62:d6:ba:0a:
                    e6:ce:56:92:e3:6a:f3:66:90:6c:e3:cd:b6:f3:71:
                    c7:a6:af:45:18:a5:35:1f:35:60:0e:6b:9b:68:86:
                    0c:94:6c:53:b5:42:6b:71:19:0e:48:41:1e:97:e7:
                    15:e0:dd:c1:36:c2:99:b1:cf:61:dc:65:0b:95:c2:
                    a7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A0:CE:91:32:F1:1E:D7:84:18:CF:BB:B9:30:E7:1C:04:EA:20:7D
            X509v3 Authority Key Identifier:
                keyid:6B:3F:B6:06:CB:6D:71:11:87:8A:A7:A8:9C:95:5A:AE:E8:4F:3D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az-2BsttcRGHiqeonJVaruhPPdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/068089-9eff-4b4b-a5e0-9caf6b55803f/1/az-2BsttcRGHiqeonJVaruhPPdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6b:b6:6d:57:36:bf:fa:ca:d7:bd:12:e0:d5:31:0c:5a:8a:
         36:39:09:87:26:25:8a:a1:3f:0e:c4:4b:be:c0:88:f7:f3:b6:
         81:71:37:0e:83:73:8a:e6:9d:a9:43:83:15:ae:7b:1d:7a:29:
         13:ad:a1:8d:ce:b8:c3:23:ba:37:62:08:5d:60:50:e2:64:9d:
         52:f0:35:21:3b:ff:a9:5c:60:56:3e:39:7e:02:d6:4a:f0:f9:
         0a:97:fb:91:72:95:5e:19:d6:5a:be:b1:2d:e9:20:d0:9f:6d:
         a3:84:ac:c3:0d:1e:34:82:f2:ef:41:24:e6:d5:1c:09:e1:96:
         9b:4a:88:dc:49:c6:a1:72:9d:e5:ed:0e:0d:1d:94:69:01:a6:
         5d:2f:67:fd:f2:da:25:b5:5f:7b:1a:66:7b:75:4a:e6:cc:1c:
         86:0e:58:c2:52:7c:1a:fc:e5:7b:7c:c6:71:88:18:b1:12:c0:
         69:04:38:73:6b:a7:c6:96:88:a6:51:f9:88:a0:ae:01:35:ca:
         8e:02:c3:75:fc:7d:7a:7f:9a:57:2f:28:66:a1:b3:30:a8:a0:
         72:40:b8:fc:a2:59:f1:ac:39:fc:ec:fa:bc:a6:04:01:4d:32:
         50:82:65:39:3c:dd:06:3a:8e:87:d1:d4:56:64:6f:28:cf:b0:
         a5:2c:9d:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNW9m63ksveuYan5Yvn5vHuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiM2ZiNjA2Y2I2ZDcxMTE4NzhhYTdhODljOTU1YWFlZTg0
ZjNkZGMwHhcNMjQxMTIzMDMwMDEwWhcNMjQxMTI0MDMwMDEwWjAzMTEwLwYDVQQD
EygyM2EwY2U5MTMyZjExZWQ3ODQxOGNmYmJiOTMwZTcxYzA0ZWEyMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9CMWIZnH7N2DVKtUFuMNbFJortt
7wT7alAE1ZqC/94xdImlG+F9eGLnDqHdctz3EnGa0UDwxJS5EvaYmSbqMd05mZtN
SYaWDz/kxWM/+vFrFurtWnM1fT7hCro1ml7IFGHi/j9mIAfYKGrOD8WBbfzxbJ1I
UL98r8pqogUp2wdpEPmr6xRxrQocmCx+ycMn0UdsLrqMd6JdvPvZdEzWuF2N+AKD
SQy8OZaA9m/BaaBhjajuD18bqYOOgDjYQGLWugrmzlaS42rzZpBs482283HHpq9F
GKU1HzVgDmubaIYMlGxTtUJrcRkOSEEel+cV4N3BNsKZsc9h3GULlcKnNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOgzpEy8R7XhBjPu7kw5xwE6iB9MB8GA1UdIwQY
MBaAFGs/tgbLbXERh4qnqJyVWq7oTz3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAt
OWNhZjZiNTU4MDNmLzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8wNjgwODktOWVmZi00YjRiLWE1ZTAtOWNhZjZiNTU4MDNm
LzEvYXotMkJzdHRjUkdIaXFlb25KVmFydWhQUGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWu2bVc2
v/rK170S4NUxDFqKNjkJhyYliqE/DsRLvsCI9/O2gXE3DoNziuadqUODFa57HXop
E62hjc64wyO6N2IIXWBQ4mSdUvA1ITv/qVxgVj45fgLWSvD5Cpf7kXKVXhnWWr6x
Lekg0J9to4Ssww0eNILy70Ek5tUcCeGWm0qI3EnGoXKd5e0ODR2UaQGmXS9n/fLa
JbVfexpme3VK5swchg5YwlJ8Gvzle3zGcYgYsRLAaQQ4c2unxpaIplH5iKCuATXK
jgLDdfx9en+aVy8oZqGzMKigckC4/KJZ8aw5/Oz6vKYEAU0yUIJlOTzdBjqOh9HU
VmRvKM+wpSydAQ==
-----END CERTIFICATE-----