Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File:                     AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier:          aRWKjwUlVXnKYZHPVfcTg0GlMiX6L5jDOGDGGT5fB8o=
Subject key identifier:   74:5F:F4:A8:92:C4:01:83:F7:37:E3:3D:6B:22:5E:A5:97:92:7B:BD
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer:       /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial:       0191F9D93C5D052FB8143DA71C06242F2583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number:          A7
Signing time:             Mon 16 Sep 2024 08:00:48 +0000
Manifest this update:     Mon 16 Sep 2024 08:00:48 +0000
Manifest next update:     Tue 17 Sep 2024 08:00:48 +0000
Files and hashes:         1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: Ifwth3OVLjlXg3QH8kbPbNnvWPw1ETXVWd81DwYiXR8=)
                          2: hOD9wX3Eal9dRV07MeubZKmST4Y.roa (hash: 0TUkd4KGWJ/iY7pGS+v+aK0lzvEmHjHqT7RSZDnxO7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Sep 2024 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:f9:d9:3c:5d:05:2f:b8:14:3d:a7:1c:06:24:2f:25:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
        Validity
            Not Before: Sep 16 08:00:48 2024 GMT
            Not After : Sep 17 08:00:48 2024 GMT
        Subject: CN=745ff4a892c40183f737e33d6b225ea597927bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:37:3a:00:b5:02:4d:70:a9:f7:c5:d4:dc:
                    78:7d:f2:33:8a:ad:0b:d4:7d:62:a4:3a:23:fa:08:
                    d5:12:9c:5b:34:02:df:e3:3e:dd:fe:0f:61:45:9a:
                    a0:39:78:cb:9b:1f:e8:3b:4e:24:b5:e2:59:62:e6:
                    72:27:1a:a9:1a:7a:ad:98:a6:51:ce:25:49:96:74:
                    9b:90:f5:f9:d9:37:db:3f:ca:d5:4c:a1:44:64:aa:
                    c2:02:31:fe:bb:0b:11:00:68:f5:3c:a7:2c:34:65:
                    c8:f6:9e:a0:38:10:d1:b1:ee:31:b8:cd:37:aa:17:
                    ce:6c:c9:ec:3f:bf:d8:76:c1:64:84:b4:9a:c0:9f:
                    11:bf:ad:37:c4:dd:8f:ed:af:97:ca:f9:4c:bc:d6:
                    a7:f8:63:f6:d3:ec:f0:2a:62:dc:ee:17:7e:eb:c4:
                    98:54:3c:52:1b:7e:05:52:48:b6:8e:bc:f3:e2:ef:
                    dd:18:fc:83:fb:0e:d0:eb:58:4d:05:04:df:59:96:
                    e6:22:ae:1a:5b:3d:1e:f0:f2:e6:b4:ae:4a:1c:97:
                    4d:60:92:08:d6:0f:af:66:0d:bd:b4:26:2d:a7:49:
                    b6:df:33:cc:74:a9:3a:fe:5a:8e:66:2b:07:ce:27:
                    0b:ce:3f:4a:fd:54:63:63:a2:78:e7:9e:0b:a8:3e:
                    01:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5F:F4:A8:92:C4:01:83:F7:37:E3:3D:6B:22:5E:A5:97:92:7B:BD
            X509v3 Authority Key Identifier:
                keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:97:db:a1:69:e2:20:cd:e1:f7:85:dc:02:e4:8f:98:74:19:
         18:be:25:58:ce:0d:c7:46:59:9c:f6:8c:17:4d:29:d9:6f:98:
         a8:a7:c0:a9:04:31:6d:a2:aa:d9:66:15:17:f7:d5:70:05:a3:
         3a:10:63:37:96:f5:c0:a3:ee:36:15:c8:b7:84:5c:bf:48:92:
         00:88:d6:82:e8:b1:ef:b7:12:e5:9b:c5:b6:dc:7c:00:a5:4e:
         9e:aa:a6:dd:d0:6e:79:e4:95:82:7b:d7:0a:86:2f:33:e5:0d:
         31:17:9f:44:25:c6:fc:ef:b2:c2:29:9a:d6:8c:9f:a2:24:27:
         19:c3:fa:32:fe:38:d7:02:b3:a5:e0:aa:c2:fc:46:37:e4:cd:
         4c:d3:89:f0:0c:81:76:e9:bd:c7:e5:8e:f3:68:8b:72:f0:b2:
         b5:0c:bb:77:bf:40:b9:38:ca:30:cf:9e:1f:30:21:37:eb:bb:
         e1:fb:56:58:01:60:1c:c9:fb:51:68:6c:09:ad:30:2b:51:25:
         6f:60:fb:bb:41:fa:fc:3b:2e:53:25:8a:54:b7:65:c3:96:02:
         2b:98:04:6a:70:bb:74:0d:01:25:c9:49:ab:fd:d2:35:0f:0c:
         78:f0:7c:79:2c:4d:59:82:11:35:9d:c6:cd:d2:b0:41:70:65:
         bb:13:59:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 18:21:00 2024 by rpki-client on console-ams.rpki-client.org