Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
File:                     CBSas_GOw-02_yqB1ImvEGmcs5I.mft (raw, json)
Hash identifier:          A24ZXUm8Vo04M5/zuYpoSE5FzCcP9pMdBs3fnkV23Y4=
Subject key identifier:   F0:D7:32:75:5E:39:6B:1F:E6:77:FE:BC:63:5A:3C:D5:9A:34:6C:08
Authority key identifier: 08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92
Certificate issuer:       /CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
Certificate serial:       019357D2714E53F9A23A37C09DA45E952BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
Manifest number:          0FCF
Signing time:             Sat 23 Nov 2024 07:00:29 +0000
Manifest this update:     Sat 23 Nov 2024 07:00:29 +0000
Manifest next update:     Sun 24 Nov 2024 07:00:29 +0000
Files and hashes:         1: CBSas_GOw-02_yqB1ImvEGmcs5I.crl (hash: WWL+zJFJyW62Pj8OkAtRR++FUiED7cRjbgmEE7YsJYg=)
                          2: HSb-Krl9aPi7nBDLWWJ9GGrGVr0.roa (hash: tr++QyId1pquJ4XOImxP96SG39p0LJVTgKfixRnm12g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:d2:71:4e:53:f9:a2:3a:37:c0:9d:a4:5e:95:2b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08149ab3f18ec3ed36ff2a81d489af10699cb392
        Validity
            Not Before: Nov 23 07:00:29 2024 GMT
            Not After : Nov 24 07:00:29 2024 GMT
        Subject: CN=f0d732755e396b1fe677febc635a3cd59a346c08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:45:5b:3e:60:4b:61:63:f9:f3:c4:59:51:25:
                    80:94:41:77:d4:0f:45:7b:05:6c:35:09:39:9d:d5:
                    78:ba:24:e2:2c:a2:cd:dc:d2:f8:7c:21:06:46:df:
                    cf:cf:4a:60:a8:d9:33:88:e5:b3:64:fb:52:06:62:
                    dd:2b:be:19:3e:cb:7f:11:83:73:df:3c:b5:ed:0e:
                    c3:c3:b7:df:85:f6:0b:60:c8:c4:0d:eb:7f:f9:ba:
                    8a:2c:f3:b3:cc:af:56:cc:66:60:55:50:69:1b:48:
                    04:aa:fd:a4:ec:2d:a9:91:e9:d3:3a:19:e0:b9:b8:
                    dc:8c:7f:2e:43:b5:8b:f5:d8:c5:ea:3d:39:e8:2b:
                    88:3f:c3:ec:3a:e0:01:6e:aa:f4:3f:8b:e2:a9:fd:
                    e2:ec:f5:01:a6:2e:e3:f1:0a:36:3e:41:da:a6:03:
                    08:70:ec:4c:5b:27:ae:28:d1:1a:45:7c:36:25:ff:
                    e9:d1:f0:f9:b7:a1:17:d9:5b:1b:f6:76:5f:5f:59:
                    e0:c3:f3:cf:03:55:ff:b8:9e:00:6f:e9:dd:00:76:
                    e4:6d:cd:ed:72:9a:8c:6e:a7:4a:a4:70:1f:5f:cd:
                    46:fc:83:c6:1b:6a:58:77:c5:b5:f2:28:ab:cb:91:
                    c0:69:af:10:77:89:dd:89:be:72:92:10:b4:61:99:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D7:32:75:5E:39:6B:1F:E6:77:FE:BC:63:5A:3C:D5:9A:34:6C:08
            X509v3 Authority Key Identifier:
                keyid:08:14:9A:B3:F1:8E:C3:ED:36:FF:2A:81:D4:89:AF:10:69:9C:B3:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBSas_GOw-02_yqB1ImvEGmcs5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/911a25-a383-48c2-bf63-d87112ca99ae/1/CBSas_GOw-02_yqB1ImvEGmcs5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:61:0a:6a:c7:e0:8b:01:37:54:98:8e:ba:8c:c6:9b:57:17:
         59:2c:6b:5d:a2:32:80:03:7a:44:d6:70:c5:a7:83:04:6e:4e:
         6c:05:61:a0:44:a0:54:52:7d:2d:6d:d5:e2:2d:6e:a5:55:fb:
         cd:1c:f7:a7:db:fd:6a:52:60:43:d1:d0:50:b8:23:1a:1f:f2:
         d7:2b:39:ce:15:13:4f:ed:bd:3f:81:7a:62:1b:80:07:6e:aa:
         df:5c:54:a7:11:fc:97:0f:27:70:71:76:51:80:0a:1d:15:d3:
         fc:f9:f4:5d:12:62:2d:9c:21:ed:c8:66:91:a1:55:cc:f4:50:
         a0:13:80:7c:74:2a:5b:f1:2d:03:3f:c8:bd:c5:b8:7a:e4:c4:
         04:4c:b0:ee:bc:7e:7c:35:c1:b4:2b:18:3f:f4:4e:78:e5:68:
         5a:f1:74:61:36:1a:14:c5:2e:c3:69:db:85:fe:75:51:ca:1a:
         2d:aa:fa:23:e2:fc:9f:c1:ac:2f:45:f7:28:6c:aa:f3:3c:ab:
         0b:13:32:c8:52:2f:92:1a:ba:27:c8:a1:e0:86:a4:64:c5:db:
         70:63:f3:33:12:ca:38:9f:4c:1a:e4:13:3e:b8:44:b4:dc:09:
         7c:44:cd:d3:68:09:d8:69:dd:fa:d6:66:d5:68:ec:8d:a5:f4:
         74:f5:fa:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNX0nFOU/miOjfAnaRelSvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MTQ5YWIzZjE4ZWMzZWQzNmZmMmE4MWQ0ODlhZjEwNjk5
Y2IzOTIwHhcNMjQxMTIzMDcwMDI5WhcNMjQxMTI0MDcwMDI5WjAzMTEwLwYDVQQD
EyhmMGQ3MzI3NTVlMzk2YjFmZTY3N2ZlYmM2MzVhM2NkNTlhMzQ2YzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkVbPmBLYWP588RZUSWAlEF31A9F
ewVsNQk5ndV4uiTiLKLN3NL4fCEGRt/Pz0pgqNkziOWzZPtSBmLdK74ZPst/EYNz
3zy17Q7Dw7ffhfYLYMjEDet/+bqKLPOzzK9WzGZgVVBpG0gEqv2k7C2pkenTOhng
ubjcjH8uQ7WL9djF6j056CuIP8PsOuABbqr0P4viqf3i7PUBpi7j8Qo2PkHapgMI
cOxMWyeuKNEaRXw2Jf/p0fD5t6EX2Vsb9nZfX1ngw/PPA1X/uJ4Ab+ndAHbkbc3t
cpqMbqdKpHAfX81G/IPGG2pYd8W18iiry5HAaa8Qd4ndib5ykhC0YZlMAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDXMnVeOWsf5nf+vGNaPNWaNGwIMB8GA1UdIwQY
MBaAFAgUmrPxjsPtNv8qgdSJrxBpnLOSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMt
ZDg3MTEyY2E5OWFlLzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85MTFhMjUtYTM4My00OGMyLWJmNjMtZDg3MTEyY2E5OWFl
LzEvQ0JTYXNfR093LTAyX3lxQjFJbXZFR21jczVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmEKasfg
iwE3VJiOuozGm1cXWSxrXaIygAN6RNZwxaeDBG5ObAVhoESgVFJ9LW3V4i1upVX7
zRz3p9v9alJgQ9HQULgjGh/y1ys5zhUTT+29P4F6YhuAB26q31xUpxH8lw8ncHF2
UYAKHRXT/Pn0XRJiLZwh7chmkaFVzPRQoBOAfHQqW/EtAz/IvcW4euTEBEyw7rx+
fDXBtCsYP/ROeOVoWvF0YTYaFMUuw2nbhf51UcoaLar6I+L8n8GsL0X3KGyq8zyr
CxMyyFIvkhq6J8ih4IakZMXbcGPzMxLKOJ9MGuQTPrhEtNwJfETN02gJ2Gnd+tZm
1WjsjaX0dPX6Iw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:54:53 2024 by rpki-client on console-fra.rpki-client.org