Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
File:                     C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json)
Hash identifier:          zK3C5X/z211s9So3mTOnXMbUPrSHC5YWJjAGNTzU7YM=
Subject key identifier:   69:D9:FA:54:EC:6A:83:D6:CC:41:5E:36:2B:0C:DB:ED:6C:9F:11:5B
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Certificate issuer:       /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial:       019367EA54FCD3A7200F554F1F8F048EAC61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
Manifest number:          02FF
Signing time:             Tue 26 Nov 2024 10:00:30 +0000
Manifest this update:     Tue 26 Nov 2024 10:00:30 +0000
Manifest next update:     Wed 27 Nov 2024 10:00:30 +0000
Files and hashes:         1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: cVz5Y47uf/t5J5Q5NEyoGy7eR6G2RE7uztKGmlTQuGo=)
                          2: YPtN1B3M3SQn4MPVGdMZZt64FSo.roa (hash: IXTXt0yoxdA9qTWi5e8w8gHgvqwQq5aR6SW3axxbT84=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 Nov 2024 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:67:ea:54:fc:d3:a7:20:0f:55:4f:1f:8f:04:8e:ac:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
        Validity
            Not Before: Nov 26 10:00:30 2024 GMT
            Not After : Nov 27 10:00:30 2024 GMT
        Subject: CN=69d9fa54ec6a83d6cc415e362b0cdbed6c9f115b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:c1:9f:9d:7a:7c:aa:36:45:45:0a:46:7a:
                    f6:2b:ba:b1:cc:93:73:a1:e2:d8:31:83:2e:9b:b1:
                    d4:64:c1:47:d6:6d:ae:cc:88:18:47:a6:06:7a:03:
                    5a:92:1b:a1:51:71:1a:7a:37:81:7f:7e:11:10:36:
                    ff:16:73:9b:66:90:5d:ae:3a:8d:24:a6:3e:ff:ab:
                    d8:0a:33:12:0c:03:17:4f:93:d0:d8:45:42:ef:63:
                    9b:c0:15:b6:d1:eb:12:ca:67:ae:a4:d5:c6:38:20:
                    2d:99:7a:0f:06:23:27:a6:44:72:48:e0:90:48:e3:
                    0b:7b:55:b2:88:9a:4f:76:95:46:f3:16:23:93:b9:
                    ec:c7:20:b7:0a:0e:57:de:dd:9e:fd:34:ba:c6:4e:
                    22:55:fb:db:e4:57:dd:17:e6:e5:2c:c5:6e:b8:d9:
                    ed:2d:1e:fd:d8:1c:34:83:f4:19:7e:63:5c:be:ef:
                    57:80:5f:83:57:e8:eb:9a:d8:f1:11:f3:da:2a:2e:
                    9d:94:5a:31:a9:27:85:3e:6d:c6:a8:3c:c0:8f:5f:
                    1c:dc:a6:d2:ee:cc:51:7c:0c:8f:3a:83:ad:c6:ea:
                    dc:38:f1:3c:b3:fe:14:56:fb:c6:0d:ee:f6:58:3f:
                    24:ff:b0:4b:db:1a:fa:fc:63:06:24:4d:59:4d:e5:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D9:FA:54:EC:6A:83:D6:CC:41:5E:36:2B:0C:DB:ED:6C:9F:11:5B
            X509v3 Authority Key Identifier:
                keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a0:43:61:f5:91:70:f7:4c:da:9c:26:a3:61:42:c2:fc:24:
         eb:fb:13:12:e4:f8:32:d8:e3:ef:30:a3:ad:29:c1:74:ec:47:
         9b:20:af:20:a9:81:a8:2e:2d:06:5c:e2:d0:13:f8:7f:04:60:
         c6:50:86:79:cf:eb:6f:2a:02:57:bd:27:ff:50:50:a2:5c:37:
         f0:7a:57:2a:21:58:fe:8b:dd:32:91:61:a3:58:a0:f4:3b:de:
         73:d9:7a:04:ba:54:d3:2e:e1:b4:a7:96:53:43:15:7e:75:ea:
         b4:e7:26:8a:0d:e4:0a:de:5d:a4:fa:3e:0a:ff:3c:52:96:4c:
         4b:70:a4:53:e4:41:55:d1:34:07:53:5a:44:29:73:ce:e8:90:
         28:e4:84:ba:0e:d3:ca:3e:f7:5b:20:d1:ce:55:b8:a0:1d:70:
         53:0f:ea:ac:dd:13:0d:50:00:af:83:f5:20:42:97:82:ca:dd:
         26:c9:5b:03:09:da:1a:24:64:51:4f:c6:aa:84:95:c2:f3:55:
         3f:24:f3:5d:4f:e8:58:2d:30:45:12:35:60:bc:0e:6d:e6:25:
         67:73:65:81:7c:4c:19:cb:32:f4:43:bc:fc:32:97:79:8b:ab:
         fe:f4:f8:e5:1d:bc:12:eb:1b:22:e5:ca:f2:f4:55:86:00:f9:
         53:59:34:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNn6lT806cgD1VPH48EjqxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjNiY2ZhMGJhODJkOTNkMTRmODU1ODcwMjdhN2U3NzM1
MTFhNjEwHhcNMjQxMTI2MTAwMDMwWhcNMjQxMTI3MTAwMDMwWjAzMTEwLwYDVQQD
Eyg2OWQ5ZmE1NGVjNmE4M2Q2Y2M0MTVlMzYyYjBjZGJlZDZjOWYxMTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsDBn516fKo2RUUKRnr2K7qxzJNz
oeLYMYMum7HUZMFH1m2uzIgYR6YGegNakhuhUXEaejeBf34REDb/FnObZpBdrjqN
JKY+/6vYCjMSDAMXT5PQ2EVC72ObwBW20esSymeupNXGOCAtmXoPBiMnpkRySOCQ
SOMLe1WyiJpPdpVG8xYjk7nsxyC3Cg5X3t2e/TS6xk4iVfvb5FfdF+blLMVuuNnt
LR792Bw0g/QZfmNcvu9XgF+DV+jrmtjxEfPaKi6dlFoxqSeFPm3GqDzAj18c3KbS
7sxRfAyPOoOtxurcOPE8s/4UVvvGDe72WD8k/7BL2xr6/GMGJE1ZTeWQhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGnZ+lTsaoPWzEFeNisM2+1snxFbMB8GA1UdIwQY
MBaAFAvzvPoLqC2T0U+FWHAnp+dzURphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUt
YTYzMzEyNWI3ZTIzLzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUtYTYzMzEyNWI3ZTIz
LzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqBDYfWR
cPdM2pwmo2FCwvwk6/sTEuT4Mtjj7zCjrSnBdOxHmyCvIKmBqC4tBlzi0BP4fwRg
xlCGec/rbyoCV70n/1BQolw38HpXKiFY/ovdMpFho1ig9Dvec9l6BLpU0y7htKeW
U0MVfnXqtOcmig3kCt5dpPo+Cv88UpZMS3CkU+RBVdE0B1NaRClzzuiQKOSEug7T
yj73WyDRzlW4oB1wUw/qrN0TDVAAr4P1IEKXgsrdJslbAwnaGiRkUU/GqoSVwvNV
PyTzXU/oWC0wRRI1YLwObeYlZ3NlgXxMGcsy9EO8/DKXeYur/vT45R28EusbIuXK
8vRVhgD5U1k0pg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 14:42:23 2024 by rpki-client on console-ams.rpki-client.org