Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
File:                     D-ObQQdMfWrcjuJ04jn3uOs1hek.mft (raw, json)
Hash identifier:          eguCoqOKNrS8jXj2a0NWwhyuEo/gFCj3Uc7DjlqhWDw=
Subject key identifier:   A9:54:26:51:59:CA:3D:94:35:02:68:EB:6E:A8:D7:95:66:8B:0E:B2
Authority key identifier: 0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9
Certificate issuer:       /CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
Certificate serial:       018F2080546995C9EB025DD053A98DB5823F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
Manifest number:          102B
Signing time:             Sat 27 Apr 2024 17:00:32 +0000
Manifest this update:     Sat 27 Apr 2024 17:00:32 +0000
Manifest next update:     Sun 28 Apr 2024 17:00:32 +0000
Files and hashes:         1: 6VLkJrSppWxh5IxGtrwPZn_LidE.roa (hash: rKih+LHXBuvgbFbapySn47Ghsk445DkKWFe6UB6Hvmo=)
                          2: D-ObQQdMfWrcjuJ04jn3uOs1hek.crl (hash: UMDNHn/HeYDPtOSDaGImJN/bx0plaW8idhoPHyyx5Mc=)
                          3: Zs2O9LS7c2plZGZGRqqkpsmW8v8.roa (hash: UEcnE88KEotGmtiZXVGvg5ratRqqM3Yzu5+iGXwXYBY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 28 Apr 2024 11:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:20:80:54:69:95:c9:eb:02:5d:d0:53:a9:8d:b5:82:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe39b41074c7d6adc8ee274e239f7b8eb3585e9
        Validity
            Not Before: Apr 27 17:00:32 2024 GMT
            Not After : Apr 28 17:00:32 2024 GMT
        Subject: CN=a954265159ca3d94350268eb6ea8d795668b0eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:15:27:5b:e5:cd:9d:19:22:64:3b:46:f3:36:
                    2e:5b:95:ef:58:00:d5:65:2b:59:76:48:a2:2f:22:
                    13:77:50:f2:74:27:a7:58:a6:72:3e:17:29:fb:ce:
                    bf:00:3a:fe:41:f6:48:4a:f1:cb:da:07:7f:07:da:
                    ca:40:6c:b5:11:b0:d6:75:41:87:20:e9:43:63:b4:
                    6d:ad:d4:79:08:df:c1:52:97:96:8d:9d:5a:2f:59:
                    b1:0d:d6:1f:a3:96:22:a0:04:b3:db:d9:fc:26:2e:
                    e6:14:32:34:fb:18:32:86:08:16:a3:70:fe:c0:ec:
                    f1:94:fd:bf:b9:02:11:c3:9d:51:34:b5:26:16:9f:
                    a2:ca:b8:b1:d4:ad:34:30:5f:19:3b:79:03:ab:ca:
                    a8:4f:5f:e5:1b:20:b4:8f:16:52:be:c3:c3:33:b5:
                    0a:86:cb:54:50:9e:21:27:29:f6:4a:5f:99:5b:e0:
                    8b:74:5e:bf:e3:14:1f:c4:82:c3:a7:49:5e:13:bb:
                    25:41:2a:b0:e6:a9:72:c9:0c:28:5f:94:63:42:15:
                    40:64:b2:ee:34:81:71:06:b0:df:4a:5b:03:9e:9c:
                    1a:2d:ae:8d:bf:58:71:a7:cc:bd:51:16:7d:c3:bf:
                    05:0b:22:aa:48:5d:d2:d8:e2:5c:75:ab:36:98:fd:
                    6f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:54:26:51:59:CA:3D:94:35:02:68:EB:6E:A8:D7:95:66:8B:0E:B2
            X509v3 Authority Key Identifier:
                keyid:0F:E3:9B:41:07:4C:7D:6A:DC:8E:E2:74:E2:39:F7:B8:EB:35:85:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-ObQQdMfWrcjuJ04jn3uOs1hek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/13ea1f-0bc1-457c-8ab5-04e812d48e72/1/D-ObQQdMfWrcjuJ04jn3uOs1hek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:f0:af:c0:4e:57:6b:fb:ca:c7:93:8c:86:8a:39:54:fe:
         33:53:7e:a2:d4:ab:f6:b6:6a:98:a3:69:10:07:08:7d:a6:17:
         25:80:55:50:f0:da:66:de:67:54:e5:1f:f7:01:3e:30:dc:f8:
         6d:d8:33:fa:fe:e2:68:b6:f0:85:e3:bd:3a:36:62:c8:fc:40:
         26:f6:7f:0e:ea:d7:d2:c4:08:36:b3:2e:a3:60:39:16:a2:86:
         73:74:5a:57:46:40:f5:80:54:da:18:24:1e:9a:b9:76:3b:dc:
         f4:64:a0:a6:5a:e5:a6:cf:e0:98:e7:1f:0c:cf:ac:f3:5f:38:
         86:af:c5:b2:3d:63:1f:67:40:11:bb:4c:49:5c:f0:a5:55:78:
         d7:33:d4:18:ff:b3:cd:aa:c9:63:00:77:19:30:b1:d4:a3:18:
         88:03:f0:42:90:16:e4:69:35:af:9b:37:42:36:b5:7f:db:c1:
         5b:68:12:12:ca:db:9b:1b:6c:6e:06:0c:9a:6a:4a:81:bc:96:
         09:71:b4:37:38:cb:c4:87:cc:20:15:f0:e5:ad:23:f3:c1:97:
         f0:93:59:f4:28:da:13:52:bd:d7:8f:fa:1f:c1:42:b5:3a:25:
         b9:26:ab:5e:6d:19:51:c5:c7:1f:18:6a:a9:96:7e:f8:43:20:
         98:82:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----