Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
File:                     AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft (raw, json)
Hash identifier:          U1cJe/yAQtXibVdASyk2NV4Mz8N46UzxgkKJtmWqd3c=
Subject key identifier:   16:FD:F7:BF:3F:AE:07:5C:01:93:6A:10:80:D8:F6:EF:E5:10:C4:E6
Authority key identifier: 03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F
Certificate issuer:       /CN=0330d772ba83225bed588ccd1c5c96af03b3770f
Certificate serial:       018F223821D250DF2B1B3D677EB7E0F5E619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
Manifest number:          0E4F
Signing time:             Sun 28 Apr 2024 01:00:54 +0000
Manifest this update:     Sun 28 Apr 2024 01:00:54 +0000
Manifest next update:     Mon 29 Apr 2024 01:00:54 +0000
Files and hashes:         1: AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl (hash: P08iZQRuye4WiYb1I1B73dS8LdsuFSvb6/VfVX1Wddg=)
                          2: HGBM8GjXUx3lgxqRxAbMWDqEw04.roa (hash: iz8Ub8EFmzrdsNcEG50M90poRSbixzTEf/r4OBbsHZQ=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:22:38:21:d2:50:df:2b:1b:3d:67:7e:b7:e0:f5:e6:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0330d772ba83225bed588ccd1c5c96af03b3770f
        Validity
            Not Before: Apr 28 01:00:54 2024 GMT
            Not After : Apr 29 01:00:54 2024 GMT
        Subject: CN=16fdf7bf3fae075c01936a1080d8f6efe510c4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:70:7a:03:e5:fd:08:3e:ef:e3:e2:eb:8c:
                    20:df:eb:0d:f9:17:0e:ce:50:f1:11:33:6a:fc:87:
                    83:89:a6:58:fd:9a:d2:39:bd:6c:59:16:8d:e6:80:
                    ad:1c:72:86:fe:fe:f6:57:db:9d:56:90:bf:5f:cd:
                    a6:58:27:30:44:d8:0d:2f:72:4f:fd:0d:41:79:55:
                    48:a7:2d:9c:c6:3d:6f:6f:4d:d4:0a:a0:00:8f:91:
                    20:5d:7c:01:e4:25:fe:46:25:55:ab:ad:6b:bf:85:
                    00:17:24:11:30:19:02:64:83:52:6f:5b:c3:d9:3e:
                    3b:be:02:6b:8c:d1:fb:1e:df:27:3a:f1:b5:a7:53:
                    56:52:03:71:b2:f5:9d:3f:b6:ca:19:07:d4:08:aa:
                    30:0f:be:74:9b:27:39:84:15:c0:98:28:35:0f:01:
                    ba:b2:05:5c:cb:78:bf:84:ef:cf:cf:e2:07:8b:42:
                    b9:52:8e:cd:16:96:29:f3:fa:8e:e6:ab:a2:58:ff:
                    24:35:01:2e:1d:ab:de:eb:aa:dc:75:ae:b1:59:66:
                    df:13:fd:38:48:91:5d:6d:f7:45:09:ba:cb:5f:84:
                    5f:0e:c1:07:de:54:db:63:5c:79:a0:d5:22:76:60:
                    85:04:ae:85:d4:b1:c1:6a:e8:1d:a3:6b:b8:f6:45:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FD:F7:BF:3F:AE:07:5C:01:93:6A:10:80:D8:F6:EF:E5:10:C4:E6
            X509v3 Authority Key Identifier:
                keyid:03:30:D7:72:BA:83:22:5B:ED:58:8C:CD:1C:5C:96:AF:03:B3:77:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzDXcrqDIlvtWIzNHFyWrwOzdw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48cbcb-50de-4838-a887-7e451c80d56f/1/AzDXcrqDIlvtWIzNHFyWrwOzdw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:9c:84:68:b9:4e:27:ae:2c:6f:54:c3:db:33:1a:07:2f:23:
         f9:09:06:1e:ff:47:0c:41:31:cc:6b:57:67:b5:92:98:41:1b:
         c0:41:93:22:bb:8b:b7:1b:49:5e:05:54:9f:53:89:3c:29:40:
         b7:e4:ec:c9:4e:6a:73:d7:15:9f:8c:52:8b:21:20:39:ee:19:
         79:58:71:24:d1:17:e3:1f:81:ca:ab:86:b0:aa:d4:ec:13:d9:
         b6:57:50:5e:0f:29:2f:47:31:0e:7a:c4:62:85:86:21:f4:af:
         38:01:de:13:19:ad:b0:10:56:25:6e:27:43:04:11:dd:ee:5a:
         27:60:0e:83:d8:6c:de:4f:60:95:82:c9:81:fa:3b:c2:ed:68:
         3b:77:5a:7b:39:0c:12:37:12:b2:d3:f8:f6:11:63:29:c9:50:
         68:ab:da:d4:5e:48:01:7a:3a:b1:c2:09:c4:58:f5:29:4c:f0:
         b1:be:90:c5:d0:03:e4:9a:c7:09:80:f8:f5:e7:9b:2b:42:c5:
         fa:79:b8:7a:0c:50:8e:a9:c5:20:be:1a:60:ef:10:cd:70:97:
         67:7f:d7:43:d9:79:31:cb:19:b0:7f:37:31:54:85:c2:83:d6:
         74:a6:96:a0:79:41:25:9e:72:af:a6:68:22:9b:12:47:4c:3a:
         70:08:ee:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 04:24:13 2024 by rpki-client on console-ams.rpki-client.org