Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File:                     H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier:          5eAqT+gxJk9ix/qH6y5rN/L/BXqrIF/I600lIFDG8C4=
Subject key identifier:   EE:D2:5C:3B:C8:57:39:D6:CA:00:EF:B0:21:E9:61:30:75:82:BF:48
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer:       /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial:       01901D46158FA9A5D534D612C672B7E03509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number:          0283
Signing time:             Sat 15 Jun 2024 19:00:50 +0000
Manifest this update:     Sat 15 Jun 2024 19:00:50 +0000
Manifest next update:     Sun 16 Jun 2024 19:00:50 +0000
Files and hashes:         1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: qr3VLtZBMWog03CIB1SokBG/WaNgWOhGVmRB3K71A+g=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:46:15:8f:a9:a5:d5:34:d6:12:c6:72:b7:e0:35:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
        Validity
            Not Before: Jun 15 19:00:50 2024 GMT
            Not After : Jun 16 19:00:50 2024 GMT
        Subject: CN=eed25c3bc85739d6ca00efb021e961307582bf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:37:99:d4:16:c7:ee:27:04:98:ba:56:f9:
                    07:36:37:27:f2:b6:da:89:93:47:12:7c:0f:a3:4f:
                    c0:65:81:75:85:07:97:41:fc:5f:2c:76:ce:f3:96:
                    40:f4:12:ff:9c:ef:68:73:74:ef:8f:b5:a7:97:cb:
                    6d:4a:07:0c:d9:fd:8c:5f:53:0d:7b:72:3b:a1:5f:
                    27:73:89:b0:e8:64:6d:ae:72:45:33:7e:0d:a6:59:
                    d1:82:6e:1b:ee:dd:68:57:47:be:8b:65:84:dd:da:
                    91:39:d8:44:ec:c3:2a:cb:5c:72:da:e3:c1:33:74:
                    19:81:2b:86:2d:55:ed:6e:af:fe:9d:55:f0:f7:59:
                    da:78:b3:e2:6e:be:a6:23:fe:88:95:85:68:e0:ad:
                    fa:7c:9b:8f:56:ea:8d:c5:f1:20:96:66:8d:57:d9:
                    4e:db:ee:e6:c6:9a:c1:27:3b:46:25:ca:0f:6b:49:
                    b9:03:1e:83:5e:1b:2c:98:74:d7:1b:cb:6f:88:ee:
                    e9:2b:a9:f3:a6:2e:fa:33:03:61:59:59:27:4d:7a:
                    f4:b7:f2:56:f7:63:a1:2c:5a:c7:07:7e:e5:a8:2c:
                    66:57:6f:c8:0b:96:c8:7c:30:c0:d1:e2:e8:cd:d9:
                    f2:5b:43:f5:7f:a5:b5:61:3b:34:93:31:e7:cd:be:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D2:5C:3B:C8:57:39:D6:CA:00:EF:B0:21:E9:61:30:75:82:BF:48
            X509v3 Authority Key Identifier:
                keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:75:9d:05:77:79:2f:df:c3:57:3b:5d:47:3f:bd:32:f5:dc:
         fc:5a:40:08:39:e0:ba:42:d3:10:86:10:d0:e2:dd:3e:c3:9d:
         ad:b3:20:a1:ed:35:b4:fc:d1:3c:9b:a9:65:8a:0d:08:9b:2c:
         fa:95:53:83:c8:67:b8:86:cb:4f:2e:1c:37:7a:54:5d:c7:b0:
         83:54:eb:f2:3a:7b:df:41:e1:85:57:1e:6f:2d:2f:18:8b:46:
         f4:87:ce:b0:ae:d7:dd:33:71:fb:2c:4d:a0:5a:a5:d2:0f:20:
         aa:4f:47:ee:8e:c2:1d:7d:35:04:93:e5:5c:ba:8e:37:ea:18:
         34:68:0b:6e:f5:ff:1a:fb:93:0f:1a:38:b0:20:b4:9b:4b:63:
         a4:2b:99:8f:28:e0:37:fe:6f:88:a7:57:42:1d:8f:8c:4f:cd:
         05:10:e9:3e:6d:d8:09:c2:59:75:88:9f:e8:49:99:e0:f2:53:
         0a:b5:2c:e0:2b:5f:df:c2:d1:6f:54:d3:6b:88:63:13:3a:f7:
         d2:84:06:c1:dd:32:46:98:26:57:b0:6d:66:d3:09:be:8f:14:
         40:2c:89:89:a7:9f:58:45:f2:e2:96:00:b3:f8:e3:a5:33:d1:
         b1:fb:12:26:20:49:15:bd:e2:cd:62:30:77:f5:01:4e:38:b9:
         bb:d1:1a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----