Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
File:                     Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json)
Hash identifier:          oGusFM1nVoAdbozDabywWou0R60fDXb17HuXrTA0KUM=
Subject key identifier:   52:41:12:73:BF:16:D8:C7:D6:A8:A2:A6:84:7A:23:4F:DD:16:9B:0E
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Certificate issuer:       /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial:       018F8749207FF9D4B9B11493B47020DF40DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
Manifest number:          1185
Signing time:             Fri 17 May 2024 16:01:07 +0000
Manifest this update:     Fri 17 May 2024 16:01:07 +0000
Manifest next update:     Sat 18 May 2024 16:01:07 +0000
Files and hashes:         1: 3x820wyZWrDiS3CsJvGU-Fnk2Oc.roa (hash: gLMpSko9qA6WULzOaWzi/YjWjkZceZYIkjjTjLzG9FA=)
                          2: 9WB6JcAwbl12U6AmKltelOCPsF8.roa (hash: It0+X2owicgN/2g1+4wtQpm3G7pdmPxOFZlW2wNcp+s=)
                          3: Nrm4H1_47dj5hjWLvqPA-OrOiDs.roa (hash: f36Y3oxXp02d0WRsijnv1V5dTz6Y3p135Ndbznq5lbM=)
                          4: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: UaW8CXqNV6qKGJ0PhQecfGUph6v66dP8cXl12bKGkO0=)
                          5: Sa7HX1lopPTMgW0n1CGLVi7ujes.roa (hash: f+DszG6+lmuM6xQETkYrjGx5AP9xTada5EJsvOv1cxU=)
                          6: aeES5Pz3Flbk0x2MA5gW5EKUff4.roa (hash: vl7NPaxW4l0Msf7S0cQCmC6bdYTw7KB7bGH33n5o2hM=)
                          7: dOEmpn6JQia3KJf5hUyDVvX4_ic.roa (hash: lX6nnizuFzqf1OzOVMFwPwrd90rZUD7JNLPNf/YCATg=)
                          8: flscxkHRrwjGYr8q9sSjIb_CmUw.roa (hash: UG4q8UqwSGEYi7cy4VeGVmD2P6PsFLyreTNWe9tNAqc=)
                          9: h5w3O0aSJVyA_h0KvQTI6v153wg.roa (hash: KHHkqVei8SiRTf1sZfet/7zxq5LDAmj48PZrV9GdC1g=)
                          10: kK-pQd-x-ePcBAXXCMT4m_2x-kk.roa (hash: MVyPfEIQy/qowKr8i7TkP7F+h7X7v2Sea/HYO2xbjng=)
                          11: kvvx0PZbb_a9Iv1WeaN5tbUS0lU.roa (hash: J7mqwKqzQ+ZGEeKWj7O8/3S4gvPxhHr0qTmommqQ+V4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:49:20:7f:f9:d4:b9:b1:14:93:b4:70:20:df:40:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
        Validity
            Not Before: May 17 16:01:07 2024 GMT
            Not After : May 18 16:01:07 2024 GMT
        Subject: CN=52411273bf16d8c7d6a8a2a6847a234fdd169b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:5d:31:35:d0:68:9e:79:ae:69:35:98:47:
                    0a:09:b8:90:af:28:ba:bf:ff:f0:5c:8f:da:d2:02:
                    85:ed:42:8b:c9:ac:f2:23:30:8c:8d:d4:fd:47:05:
                    f5:1d:8d:79:1c:59:96:97:9d:79:7b:bd:9a:bc:a0:
                    49:00:23:cb:21:2c:9e:a5:91:27:b3:73:8e:41:53:
                    1f:bc:bd:05:df:76:23:33:15:60:62:9b:4c:4d:b2:
                    8e:ff:c0:ce:4c:0d:c8:ab:11:97:dc:dd:88:81:4c:
                    46:96:87:9c:e2:c3:52:2e:d0:cd:21:41:82:86:13:
                    7f:85:c5:a7:08:79:d3:da:22:7e:b3:49:c5:2a:b3:
                    21:19:66:24:64:4e:41:08:42:34:40:b1:7a:d8:c5:
                    7c:26:7a:2b:77:6b:91:7b:b2:4f:1d:0b:64:51:d1:
                    bf:bd:8c:53:7d:b4:73:54:8c:67:2e:89:72:2c:0d:
                    f7:e8:01:f4:d1:53:4f:d9:c9:65:52:fe:1d:82:34:
                    cf:9a:d6:17:7b:b0:3f:15:b6:85:0d:8b:45:51:fd:
                    bc:b8:f6:73:41:a4:aa:9d:70:15:bc:3f:f4:31:e0:
                    db:5a:00:b7:72:75:67:83:d1:2a:8c:46:d1:97:e2:
                    9b:7d:ec:51:33:03:c5:2f:53:13:a8:06:04:38:8f:
                    b2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:41:12:73:BF:16:D8:C7:D6:A8:A2:A6:84:7A:23:4F:DD:16:9B:0E
            X509v3 Authority Key Identifier:
                keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:24:70:e4:e9:49:c3:ce:7e:75:b5:0f:2e:f9:87:ef:4c:4d:
         51:0a:08:96:5f:a0:a7:e6:cc:71:11:da:36:95:4b:0b:82:b7:
         4a:fd:46:d5:a9:84:e1:20:0c:4c:1a:b2:ae:a2:f1:89:70:92:
         81:85:af:fa:4a:c1:c1:ab:71:57:31:51:8b:65:00:85:0e:68:
         f9:2a:19:1c:e4:04:5d:7c:6e:10:f0:85:b0:34:93:22:ee:90:
         41:fb:9b:d9:dc:f4:26:dd:f9:d7:4e:c3:c8:93:73:ea:ce:95:
         9e:b9:f7:e5:0e:f3:b1:06:b2:e9:41:c4:2e:8d:98:9a:51:fd:
         c1:8f:43:1f:0e:72:2d:49:8c:ce:17:ce:1e:a2:24:c8:60:ef:
         07:05:00:b8:ec:a7:13:cf:ce:80:f6:b8:66:e5:d7:f6:b0:81:
         b8:d7:57:5b:26:be:bf:9b:04:a2:02:99:de:c2:d4:16:2c:04:
         c3:19:cf:e5:44:4c:0e:18:23:b9:49:c7:9d:68:25:d0:f2:a6:
         a5:36:73:bb:26:22:fc:68:91:69:33:f9:0a:42:9a:94:cf:d8:
         c0:1c:e6:b2:37:55:38:2c:6b:ec:3f:fd:37:27:09:1f:74:e2:
         ac:4e:69:1e:13:f8:cc:b5:41:f1:1d:d6:1b:7d:93:1f:13:2f:
         e1:14:24:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:29:21 2024 by rpki-client on console-fra.rpki-client.org