Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File:                     CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier:          +ZsWX0HdP21lGpi3JvvT4YFtPEIXwOryBwiZxQkkJSc=
Subject key identifier:   80:FC:CC:5C:17:4B:4E:6F:DC:31:34:2A:71:C8:3F:A6:33:AF:E1:3E
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer:       /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial:       0193572E003408D5C7056E21C16927406E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number:          08A0
Signing time:             Sat 23 Nov 2024 04:00:52 +0000
Manifest this update:     Sat 23 Nov 2024 04:00:52 +0000
Manifest next update:     Sun 24 Nov 2024 04:00:52 +0000
Files and hashes:         1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: mJ4ODGPQCcQVXw6GbvP0M3UWoH88pxeEBA57f8zJk4g=)
                          2: x1uAxembrKCX37S3V5cqeBayjIA.roa (hash: Ce4pd3jWlTiJVQFTqQbYqJAaUjfXjICVCIcXCWUZB7g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:2e:00:34:08:d5:c7:05:6e:21:c1:69:27:40:6e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
        Validity
            Not Before: Nov 23 04:00:52 2024 GMT
            Not After : Nov 24 04:00:52 2024 GMT
        Subject: CN=80fccc5c174b4e6fdc31342a71c83fa633afe13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:03:b9:65:49:45:04:7d:92:a5:f8:45:3f:
                    3a:6a:89:fa:71:a9:ab:7d:c0:cc:fd:38:5f:50:19:
                    15:29:d1:86:50:25:2b:26:f8:7b:3e:af:b6:cd:ba:
                    47:10:95:c6:dc:4e:fc:48:6e:10:26:80:61:b5:ff:
                    35:b5:5b:42:da:47:ce:30:16:53:e8:5e:7c:a8:bf:
                    20:3e:eb:67:88:af:e6:9f:29:ae:dd:e5:15:bf:68:
                    fe:66:cb:9a:68:2f:8d:fc:cd:f7:9b:84:55:dc:e1:
                    52:53:60:20:dc:48:13:35:07:06:f5:c0:7c:b1:d9:
                    a2:11:76:ba:26:5e:f9:b5:75:30:a4:d2:51:b2:47:
                    5f:39:bc:01:d3:0d:bb:13:a6:e2:76:5e:a9:f3:7d:
                    78:40:2b:47:c9:be:78:5f:9d:7f:a8:ec:3c:7b:ef:
                    45:74:ea:86:ad:0a:8d:04:ff:95:53:3b:a9:3d:ee:
                    58:30:84:e8:93:15:11:cc:83:9e:36:a1:fc:ea:3c:
                    3b:a3:37:3c:d9:53:7e:6a:25:10:dd:33:13:b8:97:
                    68:51:bb:38:a0:45:c5:c2:6b:81:5b:5f:e3:c6:c2:
                    78:d9:a7:70:f3:82:e7:e7:06:fd:de:da:26:09:3a:
                    1b:cd:68:f3:64:66:5e:db:92:2b:9d:63:a4:6e:f1:
                    87:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FC:CC:5C:17:4B:4E:6F:DC:31:34:2A:71:C8:3F:A6:33:AF:E1:3E
            X509v3 Authority Key Identifier:
                keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:2c:6a:a8:b3:8c:30:8d:75:59:eb:7f:ab:19:64:d5:2d:e8:
         9c:50:04:28:27:c2:27:8d:50:d0:d9:d2:9a:9d:2f:2e:e1:71:
         b7:f0:c6:b9:01:75:3b:a4:3c:e2:ff:1d:fe:87:4f:ee:75:8c:
         a1:e3:6f:5d:91:ab:ed:76:10:42:4d:7d:78:fc:b9:f1:5a:9c:
         e4:35:39:0d:8f:97:b9:57:9e:40:45:6b:97:09:f3:e9:25:92:
         8b:9f:30:58:33:93:a9:eb:09:28:29:c0:bb:db:ea:0e:10:23:
         c1:1b:42:60:57:c4:9c:fd:2d:1a:3f:47:8b:e6:e2:7b:a1:15:
         7f:ae:ec:35:56:8c:70:81:51:79:32:bb:10:70:7b:5b:0c:90:
         a6:8b:24:6f:87:e2:3d:bc:30:73:b2:59:41:7d:f3:86:4a:37:
         0f:02:d6:68:a7:f9:57:0e:b0:d0:8a:bf:5d:cb:2d:ea:cf:c3:
         e6:06:08:6f:1a:ea:ec:13:63:27:d2:7b:f6:09:8e:b2:61:6b:
         42:c0:51:cc:34:a4:a0:7c:8e:25:a0:fd:56:64:6b:5b:16:f1:
         c2:74:83:59:42:0c:a2:e2:ba:7b:69:88:bb:0a:96:c6:1e:89:
         86:7f:4d:3e:ed:d3:7c:ee:a9:75:29:cd:fc:c3:bf:f2:c2:06:
         05:13:9a:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXLgA0CNXHBW4hwWknQG5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYzgxN2ZlNDg2YWM3N2JlOTRlMjk3YWNlM2E5NWNmMjdk
ZmZiMWEwHhcNMjQxMTIzMDQwMDUyWhcNMjQxMTI0MDQwMDUyWjAzMTEwLwYDVQQD
Eyg4MGZjY2M1YzE3NGI0ZTZmZGMzMTM0MmE3MWM4M2ZhNjMzYWZlMTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5EDuWVJRQR9kqX4RT86aon6camr
fcDM/ThfUBkVKdGGUCUrJvh7Pq+2zbpHEJXG3E78SG4QJoBhtf81tVtC2kfOMBZT
6F58qL8gPutniK/mnymu3eUVv2j+ZsuaaC+N/M33m4RV3OFSU2Ag3EgTNQcG9cB8
sdmiEXa6Jl75tXUwpNJRskdfObwB0w27E6bidl6p8314QCtHyb54X51/qOw8e+9F
dOqGrQqNBP+VUzupPe5YMITokxURzIOeNqH86jw7ozc82VN+aiUQ3TMTuJdoUbs4
oEXFwmuBW1/jxsJ42adw84Ln5wb93tomCTobzWjzZGZe25IrnWOkbvGHGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFID8zFwXS05v3DE0KnHIP6Yzr+E+MB8GA1UdIwQY
MBaAFArIF/5Iasd76U4pes46lc8n3/saMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jMjUwOTgtZDdjOS00ZmE5LWEzYzEt
ZDdmYzhjNWQwMGFhLzEvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jMjUwOTgtZDdjOS00ZmE5LWEzYzEtZDdmYzhjNWQwMGFh
LzEvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYixqqLOM
MI11Wet/qxlk1S3onFAEKCfCJ41Q0NnSmp0vLuFxt/DGuQF1O6Q84v8d/odP7nWM
oeNvXZGr7XYQQk19ePy58Vqc5DU5DY+XuVeeQEVrlwnz6SWSi58wWDOTqesJKCnA
u9vqDhAjwRtCYFfEnP0tGj9Hi+bie6EVf67sNVaMcIFReTK7EHB7WwyQposkb4fi
Pbwwc7JZQX3zhko3DwLWaKf5Vw6w0Iq/Xcst6s/D5gYIbxrq7BNjJ9J79gmOsmFr
QsBRzDSkoHyOJaD9VmRrWxbxwnSDWUIMouK6e2mIuwqWxh6Jhn9NPu3TfO6pdSnN
/MO/8sIGBROadw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:45:51 2024 by rpki-client on console-ams.rpki-client.org