Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File:                     BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier:          Km2AvEEw6sLeBrkcLhKmjfM+p3YWydjDYnBXlEsAjzI=
Subject key identifier:   E3:DA:72:E0:C2:9F:05:84:0C:07:C0:85:21:5E:55:4F:77:20:1F:96
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer:       /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial:       019358778B6605F242CBEBB295DFCD49A649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number:          0A8E
Signing time:             Sat 23 Nov 2024 10:00:49 +0000
Manifest this update:     Sat 23 Nov 2024 10:00:49 +0000
Manifest next update:     Sun 24 Nov 2024 10:00:49 +0000
Files and hashes:         1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: TXzSoLtw6YeGs5XVkq0VfMTjBTpN9xDzz/Gf0DxXuhk=)
                          2: i9E9qX8H5X3AlD1pTKh298_zlys.roa (hash: Tl3XNuEWZZCZHvKi+51d1YG8QKkTjXdnQdpvaP7yGVE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:77:8b:66:05:f2:42:cb:eb:b2:95:df:cd:49:a6:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
        Validity
            Not Before: Nov 23 10:00:49 2024 GMT
            Not After : Nov 24 10:00:49 2024 GMT
        Subject: CN=e3da72e0c29f05840c07c085215e554f77201f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a8:bb:37:2c:b5:5d:b8:d4:45:ca:0a:2d:81:
                    4e:1b:68:e7:97:99:b5:8f:d9:ec:a0:a6:5d:93:bf:
                    39:b4:8e:a2:88:49:aa:ca:f6:c4:a0:0a:3d:cd:e0:
                    87:37:22:f7:c5:fc:3f:8a:2e:7d:75:2a:20:30:f5:
                    7d:de:48:df:ab:8e:08:3c:df:f4:c8:2a:c4:4a:90:
                    fb:4a:96:25:18:19:20:f0:46:75:34:6d:93:e0:e2:
                    af:ee:d9:61:8b:7c:ea:c4:88:e8:96:ca:26:20:c2:
                    be:6b:98:dc:60:fd:fd:f5:2e:0c:e5:d8:ab:0c:8a:
                    0e:6e:bf:79:f8:94:1a:bb:6b:22:f9:89:95:5a:b3:
                    f5:b9:68:b1:cd:36:97:50:e9:e8:b5:65:97:ca:33:
                    99:f4:95:68:d2:71:61:49:8f:7f:5a:7c:33:40:24:
                    1c:34:66:1c:dd:19:81:ce:9c:fc:f7:ff:28:2c:cc:
                    f8:09:85:dc:86:ca:d6:e7:93:96:da:f2:00:91:ed:
                    4f:d3:ac:8a:a1:5f:be:45:ec:fd:b4:ed:76:43:21:
                    3d:cf:58:9c:2a:09:5e:0a:35:65:87:26:48:bb:2c:
                    1b:3e:6b:0e:cb:38:29:84:92:37:2f:9b:91:2b:7c:
                    f0:a2:2d:ee:5f:38:84:25:f5:60:74:57:13:00:be:
                    d4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:72:E0:C2:9F:05:84:0C:07:C0:85:21:5E:55:4F:77:20:1F:96
            X509v3 Authority Key Identifier:
                keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:71:ff:66:e4:54:21:ca:1c:9d:d9:d6:08:d1:97:ea:5c:75:
         37:38:1d:6e:f9:07:31:d0:a7:ec:51:e2:8f:c7:78:e9:ca:1a:
         68:56:0c:c4:e2:19:c3:8c:7e:0e:7a:01:25:eb:ed:4d:11:6a:
         b5:21:bb:78:72:c8:05:b1:78:04:d5:14:11:92:e8:9b:e2:f3:
         ea:a5:cf:c4:be:59:c9:ff:2a:2a:83:51:1d:d6:c1:aa:70:90:
         bb:87:5c:e8:34:5b:e7:de:5d:58:85:43:40:61:6b:e4:63:b5:
         2f:b9:93:f9:68:b5:9a:08:fa:75:48:5b:70:7f:db:b8:38:c8:
         51:b6:6e:c0:2d:8d:4c:79:22:b6:91:38:9e:b3:c0:1f:57:01:
         5f:10:25:44:a8:11:f6:a2:f2:b6:33:bb:5c:5a:f3:d8:22:48:
         7c:71:39:ac:26:72:69:5b:77:86:88:d5:a6:e6:e2:84:54:bd:
         83:01:a1:36:22:dc:f1:31:4e:e4:18:a1:6d:61:e2:97:73:69:
         0f:34:5e:8d:21:94:24:5d:a4:3f:c6:aa:d9:14:28:4d:0a:ec:
         a4:2d:d3:36:d5:00:93:ce:5a:5c:9c:ad:3a:85:9d:9b:55:71:
         b9:87:5f:57:32:44:76:e6:0e:dc:45:49:22:a1:17:0c:e2:4b:
         13:4e:3a:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYd4tmBfJCy+uyld/NSaZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0ZTY1YjgzZDIxMzE1ZjhiYTc1NzhlODhiZGYzODEzMjk1
ZGRlMGEwHhcNMjQxMTIzMTAwMDQ5WhcNMjQxMTI0MTAwMDQ5WjAzMTEwLwYDVQQD
EyhlM2RhNzJlMGMyOWYwNTg0MGMwN2MwODUyMTVlNTU0Zjc3MjAxZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6i7Nyy1XbjURcoKLYFOG2jnl5m1
j9nsoKZdk785tI6iiEmqyvbEoAo9zeCHNyL3xfw/ii59dSogMPV93kjfq44IPN/0
yCrESpD7SpYlGBkg8EZ1NG2T4OKv7tlhi3zqxIjolsomIMK+a5jcYP399S4M5dir
DIoObr95+JQau2si+YmVWrP1uWixzTaXUOnotWWXyjOZ9JVo0nFhSY9/WnwzQCQc
NGYc3RmBzpz89/8oLMz4CYXchsrW55OW2vIAke1P06yKoV++Rez9tO12QyE9z1ic
KgleCjVlhyZIuywbPmsOyzgphJI3L5uRK3zwoi3uXziEJfVgdFcTAL7UKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPacuDCnwWEDAfAhSFeVU93IB+WMB8GA1UdIwQY
MBaAFATmW4PSExX4unV46IvfOBMpXd4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjct
M2U3ODFkYzFlN2U5LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jZGRiNjEtMTJhMC00NmJkLTlmYjctM2U3ODFkYzFlN2U5
LzEvQk9aYmc5SVRGZmk2ZFhqb2k5ODRFeWxkM2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXH/ZuRU
IcocndnWCNGX6lx1NzgdbvkHMdCn7FHij8d46coaaFYMxOIZw4x+DnoBJevtTRFq
tSG7eHLIBbF4BNUUEZLom+Lz6qXPxL5Zyf8qKoNRHdbBqnCQu4dc6DRb595dWIVD
QGFr5GO1L7mT+Wi1mgj6dUhbcH/buDjIUbZuwC2NTHkitpE4nrPAH1cBXxAlRKgR
9qLytjO7XFrz2CJIfHE5rCZyaVt3hojVpubihFS9gwGhNiLc8TFO5BihbWHil3Np
DzRejSGUJF2kP8aq2RQoTQrspC3TNtUAk85aXJytOoWdm1VxuYdfVzJEduYO3EVJ
IqEXDOJLE046iQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:37 2024 by rpki-client on console-fra.rpki-client.org