Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File:                     csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier:          JWKNVe4iOL9GK6ebtThAPh0rF2+NQWw5A7FT7zFvOmQ=
Subject key identifier:   C1:92:1F:E8:B0:67:2A:CB:E8:82:D0:50:A7:B3:C5:BC:02:AC:E1:21
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer:       /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial:       018F8749D3D3DBA36BBD84D6DD67FA583B69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number:          0F67
Signing time:             Fri 17 May 2024 16:01:53 +0000
Manifest this update:     Fri 17 May 2024 16:01:53 +0000
Manifest next update:     Sat 18 May 2024 16:01:53 +0000
Files and hashes:         1: 6LGGKWxklOO9v3UCX0yIubTdJEc.roa (hash: W33KDx6S9Bqe34QzhumRZ5pQKlJYBwbX97Uv+ZBKwBo=)
                          2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: K96ujJIhtdFV7mSEWr2bwIddMugc8dC6CQdBXHt+Udw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:d3:d3:db:a3:6b:bd:84:d6:dd:67:fa:58:3b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
        Validity
            Not Before: May 17 16:01:53 2024 GMT
            Not After : May 18 16:01:53 2024 GMT
        Subject: CN=c1921fe8b0672acbe882d050a7b3c5bc02ace121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:73:59:8f:0e:7b:6c:69:38:42:77:c6:00:
                    64:d5:4c:fc:f6:da:9e:45:50:22:48:6e:95:62:52:
                    38:84:8d:57:4a:f9:bd:2b:eb:b9:80:03:b4:a5:ed:
                    a6:5c:55:5e:a3:7b:a1:f1:26:c2:31:73:77:d7:cc:
                    bd:d5:59:59:7c:c9:c4:85:6a:06:53:a0:cf:30:04:
                    7a:8f:18:2f:6a:b5:61:4a:6d:0e:02:15:15:3f:9f:
                    a8:e5:40:ee:b2:ae:b5:d8:e3:41:77:d7:ac:2b:00:
                    3c:11:66:26:e8:c2:43:28:e4:ef:ef:58:ec:39:04:
                    39:a6:3b:62:f4:58:b0:bd:d3:12:af:b4:cd:b4:02:
                    ee:af:a1:9a:48:9d:4b:ba:4e:b5:53:88:60:37:5d:
                    17:c5:5c:2f:e5:f8:8f:56:33:81:1c:dc:66:36:e9:
                    2d:42:55:0d:6b:ed:53:14:e4:85:2a:3f:ec:8e:40:
                    9a:f0:2f:a6:62:42:54:e3:df:b4:77:5c:ec:f7:7a:
                    49:7a:e2:6b:28:9b:04:ef:8d:49:71:64:47:52:e3:
                    23:3d:59:ff:58:49:e6:16:cd:87:37:e0:52:e1:b8:
                    db:48:51:65:dc:d3:55:0c:32:15:5b:f0:0e:18:66:
                    2a:7c:cc:d4:4d:74:f1:0d:f9:42:11:ba:9c:a3:41:
                    cd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:92:1F:E8:B0:67:2A:CB:E8:82:D0:50:A7:B3:C5:BC:02:AC:E1:21
            X509v3 Authority Key Identifier:
                keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:00:61:13:7a:22:5a:89:95:59:13:0c:d8:c2:6f:76:d0:17:
         cd:89:13:7e:39:f0:2a:fa:bc:01:c1:0c:be:2d:c2:02:27:ba:
         3a:16:b3:22:c6:d3:45:af:2b:19:1c:d7:d9:86:a1:d4:bd:49:
         81:36:46:69:db:d8:9f:63:c7:30:24:ec:c6:80:07:9b:a6:cc:
         1b:59:28:b4:ec:5f:b7:40:f6:d9:8b:0d:45:50:fc:ed:a9:12:
         ec:27:0d:ee:28:44:d9:5e:46:67:80:6d:9a:6b:a8:d7:ee:6c:
         ce:b7:45:f5:50:42:38:72:2f:15:3f:9f:9e:a5:dc:d3:34:63:
         f6:06:b9:32:88:16:ed:a1:dc:fc:83:f3:23:33:bc:f3:20:d6:
         32:f7:ef:cc:98:13:84:bf:1a:27:5c:28:53:cb:00:fc:d1:6e:
         e7:10:89:31:a5:06:6a:7c:f0:20:c2:01:e4:6e:d6:75:ae:b8:
         51:f7:22:66:77:98:a6:22:af:af:33:8b:6b:8f:41:97:61:da:
         ca:c7:e3:8f:da:58:68:0a:ed:7f:3a:11:4b:55:ff:0a:28:6b:
         37:58:cf:a6:74:6b:15:33:c9:9b:72:e2:47:f5:ff:03:68:8a:
         c2:51:df:8e:70:26:73:f4:c1:2a:40:ad:40:8f:2a:b0:fd:a6:
         d5:3b:2d:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSdPT26NrvYTW3Wf6WDtpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYzNhOWEzYWQzMjBhOGZjNjFiNWY4Nzg5ZjUyNWQwN2U1
YmUyNTEwHhcNMjQwNTE3MTYwMTUzWhcNMjQwNTE4MTYwMTUzWjAzMTEwLwYDVQQD
EyhjMTkyMWZlOGIwNjcyYWNiZTg4MmQwNTBhN2IzYzViYzAyYWNlMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYRzWY8Oe2xpOEJ3xgBk1Uz89tqe
RVAiSG6VYlI4hI1XSvm9K+u5gAO0pe2mXFVeo3uh8SbCMXN318y91VlZfMnEhWoG
U6DPMAR6jxgvarVhSm0OAhUVP5+o5UDusq612ONBd9esKwA8EWYm6MJDKOTv71js
OQQ5pjti9FiwvdMSr7TNtALur6GaSJ1Luk61U4hgN10XxVwv5fiPVjOBHNxmNukt
QlUNa+1TFOSFKj/sjkCa8C+mYkJU49+0d1zs93pJeuJrKJsE741JcWRHUuMjPVn/
WEnmFs2HN+BS4bjbSFFl3NNVDDIVW/AOGGYqfMzUTXTxDflCEbqco0HN7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGSH+iwZyrL6ILQUKezxbwCrOEhMB8GA1UdIwQY
MBaAFHLDqaOtMgqPxhtfh4n1JdB+W+JRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZmE0ZDctOTlhNy00YzE4LTgwZmQt
ZDI5ZjQ1Zjc5M2M3LzEvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZmE0ZDctOTlhNy00YzE4LTgwZmQtZDI5ZjQ1Zjc5M2M3
LzEvY3NPcG82MHlDb19HRzEtSGlmVWwwSDViNGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQBhE3oi
WomVWRMM2MJvdtAXzYkTfjnwKvq8AcEMvi3CAie6OhazIsbTRa8rGRzX2Yah1L1J
gTZGadvYn2PHMCTsxoAHm6bMG1kotOxft0D22YsNRVD87akS7CcN7ihE2V5GZ4Bt
mmuo1+5szrdF9VBCOHIvFT+fnqXc0zRj9ga5MogW7aHc/IPzIzO88yDWMvfvzJgT
hL8aJ1woU8sA/NFu5xCJMaUGanzwIMIB5G7Wda64UfciZneYpiKvrzOLa49Bl2Ha
ysfjj9pYaArtfzoRS1X/CihrN1jPpnRrFTPJm3LiR/X/A2iKwlHfjnAmc/TBKkCt
QI8qsP2m1TstfQ==
-----END CERTIFICATE-----
Generated at Fri May 17 18:41:29 2024 by rpki-client on console-fra.rpki-client.org