Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File:                     OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier:          k9sd3JbIgven8qrJW3Z84RPiFoGvQZgn/iAh5nl8QSg=
Subject key identifier:   8A:2B:B2:10:22:EC:17:F9:F3:12:E1:B1:74:49:96:F5:FB:07:44:26
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer:       /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial:       018F93F159CFE3792855120E9F44D2DDD13F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number:          091A
Signing time:             Mon 20 May 2024 03:00:18 +0000
Manifest this update:     Mon 20 May 2024 03:00:18 +0000
Manifest next update:     Tue 21 May 2024 03:00:18 +0000
Files and hashes:         1: H3ja-_RpNJZ9XVHPpNArKTAr64A.roa (hash: U0ffCz+03xDi+ASWYMhIvpBZEJ2skYSY9b9r6mOI2U8=)
                          2: LIfOtxAKUPdV_NUNInS3wfxYvGE.roa (hash: Td3H1Qmi3U1ybrK+hi4aHVMLWXDBLugb4Oua+jABNSM=)
                          3: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: YG4mpqXFrX/7FbQCrznLs8npbyLbPKme2aLpDhXQ0HQ=)
                          4: SsOFfJWb5ltZ4jgYG7koaJTeP84.roa (hash: /Z4YV1ADwkEpENmmMgI18jgDzyO8QkKmL1BHcFW5Z8Y=)
                          5: UXFGWgWQmvf1lObzRIsx2RBr4Rk.roa (hash: DFwaMwTy4Fvx1WbpuJIdyId3oPwmNk7U2M7XoBczY10=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 May 2024 19:51:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:93:f1:59:cf:e3:79:28:55:12:0e:9f:44:d2:dd:d1:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
        Validity
            Not Before: May 20 03:00:18 2024 GMT
            Not After : May 21 03:00:18 2024 GMT
        Subject: CN=8a2bb21022ec17f9f312e1b1744996f5fb074426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:55:53:ba:40:03:46:19:92:25:d0:5e:0b:f8:
                    0b:3f:de:d9:bb:52:5b:5a:76:9d:3b:f5:38:39:e4:
                    98:cb:fd:35:cd:61:c2:25:b4:a4:9e:8f:fa:26:d1:
                    c9:59:3c:dc:c8:56:6d:7d:74:5d:4c:ee:fd:2c:cb:
                    b2:dd:39:71:5b:a0:9e:53:06:22:84:03:43:cb:43:
                    53:14:9c:9e:ae:6b:3e:b0:95:c3:cb:3a:88:b2:35:
                    02:6a:64:0d:8f:c8:07:4a:52:cd:cf:71:55:56:cf:
                    d6:51:14:b9:1d:d9:9f:1a:24:ea:c7:e4:bc:cc:fd:
                    66:6d:86:0a:fe:b7:42:86:29:59:a9:11:e6:48:ad:
                    00:fc:0d:84:09:98:47:f6:69:80:c8:62:fd:e4:cc:
                    7c:b6:10:94:78:ec:9c:62:93:21:26:bb:60:bb:ab:
                    db:9b:52:03:79:38:87:1a:95:96:a3:1f:cd:d7:81:
                    1e:e5:6f:0e:16:84:c1:36:d5:8a:d5:ba:3d:37:f9:
                    62:ad:30:e0:69:31:04:7f:4f:7e:13:72:e1:b6:0e:
                    33:96:b9:8f:93:f9:db:1b:52:d0:90:6b:6e:e7:d6:
                    60:1a:39:c2:e9:d4:bb:63:0b:32:4a:7d:47:28:4d:
                    10:3e:d6:86:c8:93:56:d9:aa:6e:77:5f:2a:bc:73:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2B:B2:10:22:EC:17:F9:F3:12:E1:B1:74:49:96:F5:FB:07:44:26
            X509v3 Authority Key Identifier:
                keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:93:2b:3e:ef:f5:57:8e:fb:5b:cf:f4:bd:74:de:d7:4f:36:
         27:1f:4c:af:83:4f:ab:b2:20:ac:40:a2:42:7d:c2:8f:8e:1d:
         58:ab:9d:b9:38:b7:b2:55:6e:da:b4:c1:78:ee:ab:d0:09:48:
         50:fe:1a:d3:9b:da:02:74:1f:4a:9a:e3:89:46:0d:78:c6:5b:
         e4:c1:bf:b3:24:db:87:53:9d:da:91:21:22:85:14:2c:7e:2e:
         f7:b6:fb:6f:ab:94:8a:1a:34:ea:99:55:5e:a5:e6:25:ec:8d:
         c7:7d:95:57:ab:6f:91:87:5f:a1:ee:c4:ee:62:2d:d0:a8:c9:
         61:54:5e:07:44:8f:6e:a0:1d:db:a6:d3:cf:ff:66:07:45:d7:
         b2:44:ca:98:5d:25:3a:48:d5:d3:03:cf:6d:9e:d7:88:d7:36:
         3d:cb:ee:7b:4b:43:9e:6d:2c:a6:fc:0f:77:d6:58:1f:a5:72:
         57:b4:05:d0:b3:4c:df:7f:bc:ac:d5:ba:32:01:38:a8:64:22:
         5f:9a:40:b5:10:c4:f5:7d:15:27:ce:4b:25:d0:89:fc:e0:1b:
         2f:d3:af:d4:31:7b:c9:dd:ce:bf:08:f4:a3:72:27:4f:59:2c:
         f3:51:4a:8d:02:74:bf:97:ab:98:99:76:61:39:63:ff:77:9b:
         26:3a:af:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----