Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
File:                     C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json)
Hash identifier:          7+On3UOf9V5zwiXGp4IznCwaoFlHhrgg3u5VlTggZxY=
Subject key identifier:   09:5D:37:0F:4B:D8:EC:EE:C3:40:19:23:02:7A:8D:32:BB:11:16:8C
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Certificate issuer:       /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial:       0196895D007663DC160B900763DA20AB7BEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
Manifest number:          049F
Signing time:             Thu 01 May 2025 01:01:35 +0000
Manifest this update:     Thu 01 May 2025 01:01:35 +0000
Manifest next update:     Fri 02 May 2025 01:01:35 +0000
Files and hashes:         1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: y0MPSptMv908OPPe6mBZ9FhzL2HxGD3byv8bBzJIt0k=)
                          2: UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa (hash: 4U1yrHFJUucJ8q4Do7bByqlbkCfcvDVqW8/VtgVvyc8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:89:5d:00:76:63:dc:16:0b:90:07:63:da:20:ab:7b:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
        Validity
            Not Before: May  1 01:01:35 2025 GMT
            Not After : May  2 01:01:35 2025 GMT
        Subject: CN=095d370f4bd8eceec3401923027a8d32bb11168c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:da:9c:b4:14:03:f2:0f:f5:a6:6f:af:4c:a9:
                    26:85:98:46:2e:e7:a3:42:f8:23:bb:ba:ce:72:0c:
                    5e:fc:e2:6f:bd:5b:fc:b1:a8:a3:25:01:71:fc:50:
                    79:e7:f3:6b:08:28:6b:00:50:fc:85:81:ef:14:52:
                    b2:2e:dd:b4:35:ba:cb:68:fa:d4:42:9a:1d:a4:cd:
                    1a:23:6a:fd:14:fa:1b:5e:b8:4e:ae:86:16:b6:ea:
                    3d:d9:ed:60:38:16:ac:4c:8d:ef:fa:52:19:b5:ad:
                    33:9f:74:8c:8f:d8:f4:14:ab:ff:9c:a5:37:bb:ab:
                    e4:d3:fe:0b:a6:21:5e:ae:e9:61:98:ad:01:43:cf:
                    44:c5:92:75:1b:5b:0a:df:5f:a0:8f:48:8a:1d:62:
                    c9:a3:a1:8a:11:91:01:02:8b:8c:ea:03:68:16:ad:
                    05:b9:dc:1b:af:64:26:81:4b:42:2c:7f:1f:bc:35:
                    6c:82:16:ea:3e:a2:fc:5c:86:3e:0e:50:8a:d0:38:
                    bc:3b:45:48:87:7c:63:f5:02:17:51:53:fe:8f:a0:
                    0c:18:53:b1:63:fd:1b:2f:fd:d1:80:ca:b8:b4:3f:
                    c0:ed:3a:86:d4:af:b0:33:2c:15:61:6f:5e:a5:46:
                    95:2b:df:03:f8:a2:d5:2d:02:98:08:7c:d7:03:1d:
                    4b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5D:37:0F:4B:D8:EC:EE:C3:40:19:23:02:7A:8D:32:BB:11:16:8C
            X509v3 Authority Key Identifier:
                keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b8:e1:79:74:f5:8c:9d:b4:07:7d:db:c3:e5:ee:cd:32:77:
         aa:63:1a:ee:7b:22:6f:53:b6:1d:3e:b6:78:40:b2:ef:52:b4:
         83:3c:d2:95:05:67:bf:63:43:20:4e:36:b3:e4:6e:a0:63:1d:
         84:69:e9:c7:6c:ae:cf:e2:29:d9:75:c5:fe:eb:98:9e:68:c2:
         06:c6:48:dd:75:88:43:9e:71:a6:b6:c9:46:be:d9:88:9b:f5:
         82:d2:85:98:f4:8b:10:3c:71:da:1a:a2:77:5e:04:6b:54:2b:
         37:bd:b9:fa:05:7b:38:34:ed:88:41:e9:48:35:04:cb:37:17:
         31:fe:0a:5e:85:37:9b:99:db:1a:d0:9e:d7:af:2f:78:47:1c:
         e4:9a:d1:0e:91:67:8e:89:9a:51:a8:35:03:29:6b:fc:0d:c8:
         64:ec:9d:8c:f2:bf:e1:77:80:d5:23:3b:43:ea:43:f8:86:b2:
         22:8e:5c:b4:6a:d7:36:fc:d1:09:5d:89:84:eb:de:e8:99:06:
         96:0a:76:22:9f:c6:7d:0d:c3:1a:40:23:fd:74:24:db:1e:82:
         93:cb:3c:ed:df:ba:40:12:c7:da:e2:cc:a6:7a:b4:b6:66:20:
         57:97:96:d2:3e:e1:dc:e4:c1:59:be:04:3d:64:ae:87:e0:4f:
         c9:68:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:48:55 2025 by rpki-client