Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
File:                     azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json)
Hash identifier:          IypgUGdsotro3zGB1O3sB2dk4ew+/+XeQwo6lztdlOg=
Subject key identifier:   95:AA:08:86:E7:45:AE:E0:B5:FB:E0:9B:7E:81:C7:B6:E8:F6:8F:48
Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25
Certificate issuer:       /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
Certificate serial:       019351625F26219F4AD16805BF15C592D54E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
Manifest number:          1001
Signing time:             Fri 22 Nov 2024 01:00:21 +0000
Manifest this update:     Fri 22 Nov 2024 01:00:21 +0000
Manifest next update:     Sat 23 Nov 2024 01:00:21 +0000
Files and hashes:         1: 3jxhFd9dq-tEv7ewk60uRKpaclk.roa (hash: nJ/KUP/aYJmRdP7lZIRS4ck90C5wXzK7hMqjWGpXPE4=)
                          2: YCCfjdnd8AjLqnPb2kV2y7gIDWU.roa (hash: Z26l2+kFVwn91Y8Aqf3q6p5U8uxAomBbJmI6IRMTong=)
                          3: Z0SiCXWrFcTSybPOzkmlAdDgM58.roa (hash: v3eej4g/NTQ2FeU0a39En3t5kBnYDFaUzRcYFP+C/JQ=)
                          4: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: Xq3U7NbgeFY0thcMqazI7T0H2M0fBlP0oim70CLsYM0=)
                          5: lwOTX2_KYkQLlPIhnCQV7dS98Vk.roa (hash: 0rKUDa8Jwe0Chwcry2HnVPh6vIHyEP3lgV6QV0WPz9s=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:51:62:5f:26:21:9f:4a:d1:68:05:bf:15:c5:92:d5:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825
        Validity
            Not Before: Nov 22 01:00:21 2024 GMT
            Not After : Nov 23 01:00:21 2024 GMT
        Subject: CN=95aa0886e745aee0b5fbe09b7e81c7b6e8f68f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:32:53:ec:37:6a:73:82:51:09:3b:31:49:a8:
                    db:0e:02:2e:69:26:8c:61:ef:14:c2:7b:f0:57:7e:
                    24:c9:65:3c:3c:5c:7a:b1:ad:de:d5:45:36:8b:4a:
                    08:b6:70:73:40:a4:35:b3:bb:ef:92:34:ef:a3:1a:
                    49:cf:e3:d8:c4:a5:98:b2:87:d5:d1:54:2f:b7:f7:
                    3b:d4:db:f0:79:e5:99:4e:20:c5:ab:e6:bf:67:9c:
                    9c:a8:ca:db:cf:a4:29:81:6e:ac:64:38:06:55:36:
                    58:a6:a5:c2:fd:12:17:aa:52:69:bb:02:3d:17:fd:
                    4d:cf:d5:92:40:6c:f6:fe:dd:57:f3:01:8b:cb:45:
                    ef:18:f6:99:b4:b9:9b:b7:82:f9:81:3d:53:92:5d:
                    ff:14:31:e5:20:f5:86:45:47:61:b9:a3:67:4b:4b:
                    68:86:fd:15:82:ca:2e:13:3d:24:fd:90:3d:4b:ab:
                    f5:be:5d:b7:22:48:54:9c:cc:1f:69:4a:08:e9:b3:
                    0f:1f:3d:75:f2:88:8f:71:1c:e6:2c:68:a0:58:b1:
                    6e:8c:d2:68:0a:6a:b1:e5:8f:7c:82:e1:2d:47:ec:
                    7c:23:cc:e8:a7:37:69:56:76:75:0a:f1:59:46:f2:
                    2c:ba:08:1e:a9:8f:fa:17:03:fb:20:38:92:f7:d3:
                    42:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AA:08:86:E7:45:AE:E0:B5:FB:E0:9B:7E:81:C7:B6:E8:F6:8F:48
            X509v3 Authority Key Identifier:
                keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:01:14:97:7b:9a:76:b0:ab:bb:e1:dd:48:3e:78:9c:7d:c6:
         19:e0:92:0e:a0:94:85:dc:79:e8:4b:0a:78:5c:54:01:58:25:
         db:64:84:e1:64:81:cc:f9:52:c1:21:69:0f:9d:a0:4c:0c:dc:
         89:8c:08:f2:56:ce:51:b4:fa:01:bc:8f:cb:bd:7d:1d:c4:7d:
         1d:d8:fd:09:5d:68:dc:79:71:61:68:14:2f:dd:d8:c3:99:66:
         25:c1:fd:3c:1d:0a:cc:2f:8d:65:0d:f1:c2:04:35:77:f4:5c:
         a5:12:04:76:35:14:25:bb:4e:51:5b:b2:79:eb:c5:57:53:36:
         54:35:3f:27:16:4d:c2:fc:4a:cc:3f:f0:27:3f:b2:eb:fd:e1:
         ac:1a:76:a3:cd:09:dc:d7:20:ba:af:d2:20:94:b5:2a:7e:39:
         d5:3c:e6:88:c1:fe:39:60:48:eb:b4:e2:7b:4f:54:49:dc:27:
         ff:77:1a:fb:64:a8:fa:7b:a6:6e:56:3e:d1:22:31:18:91:d6:
         17:7b:b8:fc:b7:0d:00:5d:e2:f0:ed:09:b4:ab:90:2e:43:f7:
         0d:ca:22:16:28:d6:ac:40:69:bd:53:be:67:c8:cd:3c:6c:e8:
         d9:20:91:7e:8b:14:1b:f2:88:a5:6b:0f:14:68:44:7e:04:4c:
         d3:bf:67:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:57:08 2024 by rpki-client on console-ams.rpki-client.org