Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
File:                     C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json)
Hash identifier:          Z6hmQLZrfjrFs3hxLoQw2pFzJNrpvm9tVrK8u6kCVlQ=
Subject key identifier:   0E:A4:71:64:E8:70:96:CE:B2:97:B9:74:CA:58:44:29:DB:48:AD:38
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Certificate issuer:       /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial:       019647B324BF5859CF9C8CA8A7196927A375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
Manifest number:          047D
Signing time:             Fri 18 Apr 2025 07:00:44 +0000
Manifest this update:     Fri 18 Apr 2025 07:00:44 +0000
Manifest next update:     Sat 19 Apr 2025 07:00:44 +0000
Files and hashes:         1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: 0kJkIdoRbHUVRVvTrte+/bhLY33nhF7R568TDHNPnJ8=)
                          2: UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa (hash: 4U1yrHFJUucJ8q4Do7bByqlbkCfcvDVqW8/VtgVvyc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 07:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:47:b3:24:bf:58:59:cf:9c:8c:a8:a7:19:69:27:a3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
        Validity
            Not Before: Apr 18 07:00:44 2025 GMT
            Not After : Apr 19 07:00:44 2025 GMT
        Subject: CN=0ea47164e87096ceb297b974ca584429db48ad38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:ba:20:3d:17:ec:19:f3:58:18:c9:12:8c:
                    a5:28:b9:f9:ac:a1:d2:62:11:a0:27:6f:fc:db:32:
                    f8:40:cd:23:9e:d1:a9:f9:9a:40:64:c4:80:61:6f:
                    e1:b2:9f:83:de:a0:e5:59:94:3f:32:d9:f8:2b:91:
                    dd:07:29:75:cf:0d:9a:1b:2c:a0:1e:05:42:47:f5:
                    50:1f:d7:c5:58:02:04:c4:41:ad:2e:bc:25:6f:cc:
                    6e:aa:74:82:19:e8:11:5e:57:e7:bc:ac:84:e0:1c:
                    78:ac:9a:3a:01:25:cb:ed:f8:46:c4:ec:40:eb:eb:
                    d5:48:a9:5a:46:1a:ea:37:62:5e:77:2b:03:cf:1f:
                    1d:a8:1b:34:5d:36:c4:67:1e:91:6e:6b:81:f2:d1:
                    37:fa:6b:83:63:06:7d:87:47:11:6e:1c:ec:92:71:
                    15:8f:3a:d3:99:51:a8:57:ae:61:e5:08:c8:ef:dd:
                    1d:ec:bb:35:12:96:d7:21:cc:37:57:3a:1a:8a:b3:
                    9e:56:2c:76:ad:44:c5:dc:90:6c:5d:11:a0:0e:c1:
                    4d:20:fd:54:45:77:b5:b5:56:a8:d6:86:93:4c:3d:
                    6d:2f:ad:0f:f9:80:04:2e:39:1d:7c:ad:6f:23:73:
                    fb:3e:85:a5:0f:78:70:59:04:55:a1:7b:e8:e8:1a:
                    2d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A4:71:64:E8:70:96:CE:B2:97:B9:74:CA:58:44:29:DB:48:AD:38
            X509v3 Authority Key Identifier:
                keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ee:7c:18:f3:95:ab:1f:44:07:c5:c0:f7:b4:cf:3f:dd:a7:
         96:61:77:82:d7:11:b1:8a:a2:cc:4b:68:5b:e3:3b:a5:78:8a:
         6d:db:b0:ca:d4:99:fa:0e:71:33:f9:90:c3:09:de:10:f9:3f:
         2e:39:eb:c0:2c:ba:c2:13:32:1b:18:8c:1b:09:4c:0e:a2:f3:
         e1:90:db:db:54:e0:91:1b:8c:1e:8e:ea:fa:69:fd:da:2e:f9:
         3f:05:b9:81:44:81:7e:3d:9c:b3:1f:9b:56:c4:97:af:f6:55:
         18:37:bf:23:08:53:8c:f3:40:69:11:8e:fc:00:ce:10:03:08:
         3b:46:40:12:d4:4e:4c:54:1a:15:b1:36:68:41:41:ce:92:5d:
         0a:68:f7:10:76:d6:6b:66:12:be:e2:94:9f:fb:20:30:5a:e0:
         0a:80:40:d2:d8:a9:63:d5:36:94:28:d1:d6:10:ab:0f:19:35:
         57:d7:a5:18:f2:62:24:ab:02:b0:22:70:b1:6d:92:69:d3:a4:
         cd:a0:4c:1f:ec:62:c7:82:3c:52:dc:76:5b:59:f7:6b:1d:98:
         56:db:94:48:c4:fa:f0:d5:ce:60:cb:02:b7:0f:e1:6b:25:9f:
         77:c3:1d:b6:04:b7:b5:f4:51:ab:0c:8c:d3:9d:79:0f:2a:d6:
         39:91:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:18:12 2025 by rpki-client