Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
File:                     OjSIklHnyxM-kGxwiRuhoEle2GA.mft (raw, json)
Hash identifier:          /Rr1E271AyHprdCpEJJNUi6GHzT4pkqyRaFysJ0frB0=
Subject key identifier:   12:77:75:C6:D2:E5:F3:D1:A8:98:37:D4:88:41:20:6E:55:83:7B:E7
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Certificate issuer:       /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial:       018F712F8A35BDFC3EDED91E08981B2E6667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
Manifest number:          0908
Signing time:             Mon 13 May 2024 09:01:31 +0000
Manifest this update:     Mon 13 May 2024 09:01:31 +0000
Manifest next update:     Tue 14 May 2024 09:01:31 +0000
Files and hashes:         1: H3ja-_RpNJZ9XVHPpNArKTAr64A.roa (hash: U0ffCz+03xDi+ASWYMhIvpBZEJ2skYSY9b9r6mOI2U8=)
                          2: LIfOtxAKUPdV_NUNInS3wfxYvGE.roa (hash: Td3H1Qmi3U1ybrK+hi4aHVMLWXDBLugb4Oua+jABNSM=)
                          3: OjSIklHnyxM-kGxwiRuhoEle2GA.crl (hash: XRgTzsMIVjIkWqGa5E8HJkdiaTzIwMe6tfdmHmKVkNU=)
                          4: SsOFfJWb5ltZ4jgYG7koaJTeP84.roa (hash: /Z4YV1ADwkEpENmmMgI18jgDzyO8QkKmL1BHcFW5Z8Y=)
                          5: UXFGWgWQmvf1lObzRIsx2RBr4Rk.roa (hash: DFwaMwTy4Fvx1WbpuJIdyId3oPwmNk7U2M7XoBczY10=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 14 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:71:2f:8a:35:bd:fc:3e:de:d9:1e:08:98:1b:2e:66:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
        Validity
            Not Before: May 13 09:01:31 2024 GMT
            Not After : May 14 09:01:31 2024 GMT
        Subject: CN=127775c6d2e5f3d1a89837d48841206e55837be7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:48:c8:62:3b:b4:3b:7a:c9:1e:c6:29:50:
                    93:d3:39:ad:cd:7a:c2:0f:02:a3:7d:e1:09:ec:b5:
                    48:81:0b:82:9e:29:ed:8d:26:7c:7f:ab:d5:0d:3c:
                    04:fa:cf:6f:4c:6a:b9:a4:b5:9f:b6:d7:99:5a:a9:
                    52:be:85:21:34:59:16:c7:e8:eb:53:69:d0:e2:9d:
                    6d:f7:e6:9c:9c:c9:1f:8c:ce:b0:65:e2:bf:4b:43:
                    a9:07:4f:eb:cc:04:54:d1:3c:ad:98:6c:9d:8d:57:
                    95:6c:d8:43:77:e7:50:a4:45:9e:84:64:39:e6:5b:
                    38:09:64:ee:7f:47:05:33:aa:78:03:78:b0:7d:71:
                    19:dc:00:91:ff:11:71:ec:bd:59:2e:53:b8:4b:e4:
                    f4:bc:68:18:51:11:e5:ee:54:29:aa:35:c6:83:ba:
                    ca:e5:4b:d8:8b:01:97:e3:d2:35:2a:ac:37:7a:aa:
                    9d:9b:81:47:ec:a1:3f:04:a1:a5:38:df:80:4f:52:
                    fd:5f:8c:03:a8:32:57:7a:5d:b1:4c:4f:c0:6a:23:
                    97:b7:3d:7f:41:f4:82:c3:69:83:13:0d:f3:ea:75:
                    fe:aa:8f:ff:96:98:c1:84:3c:cf:76:d0:f3:69:48:
                    62:c3:bc:bd:80:84:fc:7e:79:24:20:47:4d:2b:c0:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:77:75:C6:D2:E5:F3:D1:A8:98:37:D4:88:41:20:6E:55:83:7B:E7
            X509v3 Authority Key Identifier:
                keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:d7:9a:0a:81:cb:22:57:8a:76:a7:d8:9c:e6:33:62:96:
         fe:b0:b4:86:99:49:4c:29:b7:86:29:ea:81:95:b3:b3:fb:af:
         4c:34:3a:d6:e8:3f:87:ab:60:1c:6b:b1:fa:d4:50:dd:27:51:
         91:31:ca:8d:01:58:3b:29:b1:0f:56:2a:31:d5:11:f8:ca:fe:
         6b:ea:64:d6:46:c2:bf:b0:41:d6:b0:18:8e:50:c7:56:75:4c:
         ab:cc:d9:19:6c:03:62:75:bc:25:ed:6d:47:2f:c0:1d:cf:d2:
         aa:ec:67:7f:86:91:6b:0c:02:2e:9a:7c:aa:7b:84:d7:b2:bc:
         4d:04:81:09:26:44:11:06:7c:ce:cf:43:98:5c:9d:18:a4:42:
         e5:ff:d5:b8:6f:95:34:fc:d2:66:9e:9d:f7:73:d7:7d:5f:a1:
         b7:58:46:5a:06:cc:10:d8:c7:fd:15:42:56:a2:39:2b:7e:66:
         c7:92:5e:8e:93:19:1b:90:37:71:8d:9d:29:c8:7a:26:50:f4:
         d1:69:c2:7a:a5:69:17:1d:f0:df:61:f4:86:db:1c:02:90:cb:
         95:23:de:d1:d6:8f:a3:88:db:32:0d:91:4e:ce:9e:26:19:fc:
         23:8b:1b:79:e7:b3:a7:b7:07:2a:b4:07:56:ba:48:9c:4a:5d:
         74:3a:4f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----