Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File:                     OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier:          AvnxbmFknmb38fSzKGJDzA6Y7RCdwBcLQI/QL2kKNcc=
Subject key identifier:   8E:56:C8:87:7D:55:6E:58:1E:DE:88:90:63:4A:EF:59:43:26:5F:45
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer:       /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial:       018F874A1055ED29F3A33A1C594C5AF22D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 16:02:09 +0000
Manifest this update:     Fri 17 May 2024 16:02:09 +0000
Manifest next update:     Sat 18 May 2024 16:02:09 +0000
Files and hashes:         1: LcNSXGkRMAWjY_MmqNH4L1IVG38.roa (hash: Ua3XDkPviwryLy6nSZvXoj2w/0SvbM/CVytus0lD6hU=)
                          2: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: BnY/p1Qsu/KBvThcy6tfBMxg/0VFXgvi0a/EGWqBoH4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:4a:10:55:ed:29:f3:a3:3a:1c:59:4c:5a:f2:2d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
        Validity
            Not Before: May 17 16:02:09 2024 GMT
            Not After : May 18 16:02:09 2024 GMT
        Subject: CN=8e56c8877d556e581ede8890634aef5943265f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5e:70:72:db:cb:a9:40:fa:bc:f9:4e:c4:99:
                    f6:91:c1:1d:8b:39:21:47:49:4f:b0:e7:c9:2c:4c:
                    74:db:86:c2:e0:16:c6:81:2f:67:07:df:cd:3b:49:
                    6b:95:30:5c:ad:1a:ff:8e:9d:c0:f4:bb:5c:c8:1f:
                    7e:bd:41:43:f2:57:71:87:e3:76:a9:95:00:e2:26:
                    a8:eb:87:9b:2a:02:21:b4:1e:8d:a4:ed:62:b0:fb:
                    ab:bd:98:fd:2a:1a:b9:d6:dc:be:aa:70:94:5e:2c:
                    c8:a3:c1:40:56:d4:e2:ea:5b:0d:6a:fc:82:18:b8:
                    02:42:7a:01:18:b5:08:44:7f:6c:1e:22:53:ad:8e:
                    d7:87:c4:eb:51:b8:ed:07:fd:35:7a:93:f7:3d:12:
                    24:c8:72:8a:b3:c3:95:10:f2:d2:a5:9f:5b:ed:8d:
                    d9:b3:0c:30:0e:ac:69:c2:df:c6:8e:81:67:62:20:
                    cf:c0:49:c9:be:f8:70:f2:7e:41:fa:31:1f:5a:0a:
                    9b:cb:51:27:67:7d:5a:5c:20:8f:9a:16:1a:bc:07:
                    22:ea:bd:7b:3c:a5:13:31:30:ed:02:5c:32:52:93:
                    51:e0:49:2e:35:85:c4:11:df:d0:ed:e5:5c:dc:7b:
                    e0:ad:77:2d:e8:6f:be:b2:f2:f7:5a:5c:f5:0d:3f:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:56:C8:87:7D:55:6E:58:1E:DE:88:90:63:4A:EF:59:43:26:5F:45
            X509v3 Authority Key Identifier:
                keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:b6:39:f7:55:d9:40:0a:07:51:dd:08:91:99:03:c3:90:65:
         c1:98:99:4c:7e:fc:f9:3f:78:88:ab:53:e8:fa:3a:8e:35:c1:
         60:71:47:64:0d:83:dc:f8:d0:3e:52:c7:a7:c8:71:9e:85:3f:
         4b:4a:bc:c1:b2:c7:5d:2d:38:86:bb:65:f3:52:a1:5f:63:ea:
         73:2e:fe:24:f5:ac:1e:0e:7f:37:4c:c5:91:82:48:84:20:07:
         48:d0:9a:4f:d7:05:cd:48:df:c8:9b:8c:33:0f:34:68:d8:33:
         0a:de:47:85:10:81:9f:b2:03:2a:0d:08:c5:3d:77:5b:29:4c:
         e1:39:2f:a3:4c:db:b2:50:10:90:39:35:6d:5c:30:4a:82:44:
         8b:d4:c6:5e:52:71:13:37:e7:b9:aa:25:98:b5:c0:21:cf:5e:
         56:45:47:e4:db:3f:97:e4:51:82:4d:25:55:c6:bf:6e:0e:fc:
         0d:b1:7f:6f:e6:41:90:8a:55:af:27:89:4f:7a:cc:58:40:24:
         4b:92:1e:25:4b:a6:0a:7d:89:fe:c6:23:f1:aa:30:47:d4:5e:
         cc:28:9e:41:97:f2:7d:5b:f5:c7:99:e5:77:33:b9:e5:64:e7:
         cc:05:ad:16:27:9f:c3:29:a0:cf:30:7a:6d:69:f7:d7:2c:f4:
         f8:47:d5:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HShBV7SnzozocWUxa8i09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDJmN2NjMjc1MzMwOTgzMzAzMWJhODk0NjQ5YTgwY2Zm
YjEzZTgwHhcNMjQwNTE3MTYwMjA5WhcNMjQwNTE4MTYwMjA5WjAzMTEwLwYDVQQD
Eyg4ZTU2Yzg4NzdkNTU2ZTU4MWVkZTg4OTA2MzRhZWY1OTQzMjY1ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn15wctvLqUD6vPlOxJn2kcEdizkh
R0lPsOfJLEx024bC4BbGgS9nB9/NO0lrlTBcrRr/jp3A9LtcyB9+vUFD8ldxh+N2
qZUA4iao64ebKgIhtB6NpO1isPurvZj9Khq51ty+qnCUXizIo8FAVtTi6lsNavyC
GLgCQnoBGLUIRH9sHiJTrY7Xh8TrUbjtB/01epP3PRIkyHKKs8OVEPLSpZ9b7Y3Z
swwwDqxpwt/GjoFnYiDPwEnJvvhw8n5B+jEfWgqby1EnZ31aXCCPmhYavAci6r17
PKUTMTDtAlwyUpNR4EkuNYXEEd/Q7eVc3HvgrXct6G++svL3Wlz1DT+ZJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5WyId9VW5YHt6IkGNK71lDJl9FMB8GA1UdIwQY
MBaAFDrS98wnUzCYMwMbqJRkmoDP+xPoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEt
ZjZhZDkzMzBjNGIwLzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS82ZWJjMWMtNDJhYi00NTU5LTg0YjEtZjZhZDkzMzBjNGIw
LzEvT3RMM3pDZFRNSmd6QXh1b2xHU2FnTV83RS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbY591XZ
QAoHUd0IkZkDw5BlwZiZTH78+T94iKtT6Po6jjXBYHFHZA2D3PjQPlLHp8hxnoU/
S0q8wbLHXS04hrtl81KhX2Pqcy7+JPWsHg5/N0zFkYJIhCAHSNCaT9cFzUjfyJuM
Mw80aNgzCt5HhRCBn7IDKg0IxT13WylM4Tkvo0zbslAQkDk1bVwwSoJEi9TGXlJx
EzfnuaolmLXAIc9eVkVH5Ns/l+RRgk0lVca/bg78DbF/b+ZBkIpVryeJT3rMWEAk
S5IeJUumCn2J/sYj8aowR9RezCieQZfyfVv1x5nldzO55WTnzAWtFiefwymgzzB6
bWn31yz0+EfVFA==
-----END CERTIFICATE-----
Generated at Fri May 17 18:01:55 2024 by rpki-client on console-ams.rpki-client.org