Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File:                     otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier:          YIwRHrTw9GpLZluZMGHyu/+SNnoVqDSr1hhBz0eErEk=
Subject key identifier:   A0:87:82:C4:2E:87:FA:43:08:53:A2:54:09:CB:A5:1D:3F:73:22:06
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer:       /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial:       018F87B6A014BE5F0CC345F128CF739AE3B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number:          117B
Signing time:             Fri 17 May 2024 18:00:43 +0000
Manifest this update:     Fri 17 May 2024 18:00:43 +0000
Manifest next update:     Sat 18 May 2024 18:00:43 +0000
Files and hashes:         1: 6ERuBYpce4eNog3FAJM62rT4mIE.roa (hash: DfCswzs/om8d7SY5MKx+5ssfwWigU3Le7yufSUWQkj0=)
                          2: _OzQtV5X_bdVnqWeEFrRxglNUmg.roa (hash: 3LX6fZ1HcS5LA/IjXDv5GyNEtCnhtEXfDp5WTE4CGMw=)
                          3: bxUdlG0ON62H_gOgMiUcPTsrmzw.roa (hash: 1WFgLuVnt4IOoG5kXriRDzH75BTBqLCUnyIEb0d5U7w=)
                          4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: 47umr1Hno+wKjktgX+M945XWiLD+d5nwSJVKZUCfj38=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:a0:14:be:5f:0c:c3:45:f1:28:cf:73:9a:e3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
        Validity
            Not Before: May 17 18:00:43 2024 GMT
            Not After : May 18 18:00:43 2024 GMT
        Subject: CN=a08782c42e87fa430853a25409cba51d3f732206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ce:d9:e7:8a:9d:ec:42:ab:83:9c:0c:0c:da:
                    6f:e1:b8:01:ec:b3:c5:be:28:65:2c:45:12:7e:f0:
                    45:0b:ff:eb:29:d3:0e:87:d1:65:1f:bb:c5:c5:77:
                    e6:0a:88:e6:20:0a:8d:2b:af:3a:c2:07:06:ce:3e:
                    4e:a6:fe:c7:75:f9:0f:96:30:c6:ac:c7:af:b4:7a:
                    5f:b0:14:10:cc:8b:be:37:fc:ab:0b:df:8c:93:ea:
                    a0:da:68:73:cf:de:51:7a:aa:42:75:f9:9d:8d:5b:
                    dd:60:ca:11:ab:50:c6:ea:90:fb:85:76:ee:12:af:
                    15:30:35:2e:95:77:50:96:e7:93:3b:bb:e5:68:92:
                    c8:e2:fd:36:45:38:12:9a:9a:dd:8b:c3:a4:01:b5:
                    f9:03:c6:ee:14:eb:a3:c2:a0:ac:fa:56:af:57:d5:
                    bf:c1:86:57:e8:fb:bf:45:88:45:da:2e:c5:88:c3:
                    af:b0:22:8c:c1:54:ea:8a:be:a1:17:41:fa:fd:dd:
                    d0:96:6a:c6:32:b0:09:56:91:98:76:79:7a:22:f3:
                    0c:e1:b8:96:a1:67:9f:26:1e:8d:40:c5:26:83:47:
                    70:b7:c8:76:28:42:3c:79:f3:81:3f:c0:5f:b9:77:
                    d3:8d:72:ff:5a:b5:e6:e9:b1:f8:41:56:6f:e0:e3:
                    f8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:87:82:C4:2E:87:FA:43:08:53:A2:54:09:CB:A5:1D:3F:73:22:06
            X509v3 Authority Key Identifier:
                keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c4:ac:02:07:88:5f:1c:3c:71:14:d7:91:81:a7:a7:49:8e:
         06:85:d5:f9:8d:00:6a:25:39:4a:0a:71:08:a9:e0:89:e1:d8:
         63:21:66:28:fa:4f:63:20:85:89:7f:93:da:4a:e3:28:8e:18:
         59:3b:27:9e:30:b8:6f:56:1f:69:81:ed:ec:be:7a:e8:39:b6:
         ac:8d:cc:b2:bb:cf:e0:53:df:93:e5:2d:8c:c7:34:a6:c6:3a:
         b1:d3:18:06:2d:d6:00:40:67:d6:fc:82:10:41:6b:b6:20:10:
         cd:ef:6e:1a:c5:83:e0:fb:0c:db:48:b4:1f:6e:b9:f7:2f:71:
         de:b6:5a:96:ef:ae:09:7c:76:9c:7e:5e:da:a3:50:b5:e0:8c:
         ae:88:21:82:07:67:6d:bc:b4:d1:3b:89:a6:05:33:d3:da:90:
         21:df:00:90:50:6e:e7:59:27:4c:de:d1:6a:47:39:91:61:e6:
         b7:42:d0:cc:9a:ed:29:e8:02:91:ff:e9:cd:b6:b1:07:27:78:
         7f:f4:25:00:7e:2d:47:eb:7a:fd:a8:b5:65:ed:f4:05:36:a5:
         41:76:45:3b:6d:4a:c7:8c:2f:c6:0c:d5:36:10:ef:d0:34:88:
         d4:9e:d5:95:24:bf:c9:3e:a4:99:40:65:1b:81:d8:72:ca:ba:
         ab:91:7d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:49:50 2024 by rpki-client on console-fra.rpki-client.org