Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
File:                     AzZPzt1pE1dzPNXM1wKduOYdHjo.mft (raw, json)
Hash identifier:          w5Z1VuD+MB2D6GADMSUEX1p8h5gsS2Ha64ZSvEu6tUE=
Subject key identifier:   5F:A3:3A:E0:3A:C7:C2:F7:CF:D1:63:40:6C:DE:53:6E:BF:72:D4:79
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Certificate issuer:       /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial:       01935387B3185962569C51AE10FAD68BFE10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
Manifest number:          015A
Signing time:             Fri 22 Nov 2024 11:00:22 +0000
Manifest this update:     Fri 22 Nov 2024 11:00:22 +0000
Manifest next update:     Sat 23 Nov 2024 11:00:22 +0000
Files and hashes:         1: AzZPzt1pE1dzPNXM1wKduOYdHjo.crl (hash: B0aCI1bbeDfEsJP/TYrQKV0Vv5a15BOoqyR2WTVci6k=)
                          2: hOD9wX3Eal9dRV07MeubZKmST4Y.roa (hash: 0TUkd4KGWJ/iY7pGS+v+aK0lzvEmHjHqT7RSZDnxO7s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 11:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:53:87:b3:18:59:62:56:9c:51:ae:10:fa:d6:8b:fe:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
        Validity
            Not Before: Nov 22 11:00:22 2024 GMT
            Not After : Nov 23 11:00:22 2024 GMT
        Subject: CN=5fa33ae03ac7c2f7cfd163406cde536ebf72d479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:0c:4c:41:03:23:b5:91:4f:a3:57:81:8f:
                    5b:d7:55:3b:38:2b:03:52:f2:34:ce:77:c4:54:00:
                    df:4b:02:70:07:df:7f:32:44:37:8d:79:10:44:8f:
                    4e:00:49:c4:ee:80:f8:f6:81:a4:a2:ee:61:b1:69:
                    c2:8c:d1:74:60:00:15:ef:6e:38:3a:0e:8d:cc:4c:
                    f4:c4:fe:3b:d2:d7:e2:df:cf:be:ef:16:25:df:a4:
                    50:9e:8e:5b:3e:82:af:81:78:0f:b3:9a:90:ea:3f:
                    4f:c2:bb:93:f3:eb:27:ab:d9:1f:77:46:a0:bd:c2:
                    71:5d:f6:e2:d5:d6:2d:27:be:8c:09:84:15:ab:ce:
                    3e:34:e5:ff:de:09:ec:b2:7c:54:b7:a8:1c:8b:ca:
                    59:34:48:47:0a:54:99:54:72:b2:bc:6e:61:9c:00:
                    c6:7d:fb:8b:4f:37:76:4d:08:4c:0d:c5:1e:ee:2a:
                    ee:88:59:87:4f:d1:bd:e1:0f:7d:64:49:53:57:91:
                    bb:e4:20:1e:41:6e:54:76:07:4e:50:5e:dd:e0:c7:
                    2d:49:6d:eb:3d:ef:1a:7e:22:8f:37:7d:d2:51:59:
                    a3:5f:de:4e:26:4c:7b:f2:bc:8d:45:a2:44:43:51:
                    00:4a:14:41:d8:3e:35:33:42:d8:5d:a9:f6:7a:f3:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A3:3A:E0:3A:C7:C2:F7:CF:D1:63:40:6C:DE:53:6E:BF:72:D4:79
            X509v3 Authority Key Identifier:
                keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2a:e2:82:a7:f3:a0:af:a3:c3:ad:c6:00:f2:65:25:a2:eb:
         17:98:6a:cc:de:82:d6:72:6c:79:dc:b1:0d:75:26:db:ab:e8:
         b2:4c:6e:72:f8:78:09:bd:89:50:80:fb:e1:0c:46:c5:d5:b9:
         b4:c1:e6:97:6c:e5:48:76:fd:b2:e8:2b:43:a5:ff:b2:50:c5:
         1a:92:51:38:48:18:bc:42:a0:52:a4:64:e7:f4:64:4a:47:a4:
         85:56:75:b7:e2:76:1e:cf:c6:13:70:12:d7:1b:67:23:1c:28:
         da:73:e5:8d:98:9a:9b:eb:66:e2:2c:f2:c6:5b:56:32:4a:22:
         5e:29:10:39:0d:30:4b:7b:07:a3:a1:cd:b9:bd:4e:86:41:d2:
         4b:2b:7c:41:56:82:ba:5a:c2:9b:c2:12:96:7a:ff:f2:1d:75:
         0e:d0:eb:c2:61:25:7e:cd:32:3c:ac:d8:81:93:4f:90:33:67:
         b9:41:c0:3c:b7:d9:35:0e:df:29:eb:c3:34:18:32:66:a6:cc:
         6c:e1:50:00:46:6c:e4:ac:b5:ce:27:85:c2:bc:08:2c:9a:c4:
         b1:64:26:16:3b:88:32:b7:80:a6:07:96:a6:d8:1d:58:bf:64:
         35:7f:ff:01:8d:9a:14:42:2f:64:eb:4e:e0:8f:11:01:11:ed:
         c0:81:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:44:06 2024 by rpki-client on console-ams.rpki-client.org