Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File:                     H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier:          nFGfeaUHwyc//wTL/KOhV8NN2uc9VOZtLW298qmz6Wk=
Subject key identifier:   0E:31:19:60:12:12:E1:BF:C7:84:61:8A:99:14:6E:07:0D:50:96:ED
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer:       /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial:       01901B57F08D2B44330735A042832EDA79C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number:          0282
Signing time:             Sat 15 Jun 2024 10:01:06 +0000
Manifest this update:     Sat 15 Jun 2024 10:01:06 +0000
Manifest next update:     Sun 16 Jun 2024 10:01:06 +0000
Files and hashes:         1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: lXs+wsVIWL5Fdvsi6xJ27/zjf5VHHe59qDy486eYbpM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:57:f0:8d:2b:44:33:07:35:a0:42:83:2e:da:79:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
        Validity
            Not Before: Jun 15 10:01:06 2024 GMT
            Not After : Jun 16 10:01:06 2024 GMT
        Subject: CN=0e3119601212e1bfc784618a99146e070d5096ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:05:98:79:e3:c0:5b:a5:6a:08:48:aa:ca:
                    fb:cc:c2:9b:39:d5:f5:32:a2:82:06:a3:ca:fe:f0:
                    19:61:a6:ab:c6:da:15:9d:c1:c1:8a:4d:de:8b:ee:
                    eb:b5:01:ff:e0:7c:95:86:80:69:3a:4e:cf:ca:ea:
                    59:68:98:06:68:81:d8:21:a3:f1:8b:ef:18:c5:98:
                    0e:10:78:c8:49:07:83:49:94:8d:86:9a:25:b3:96:
                    1c:cc:99:0b:1b:4c:6e:71:3f:e0:49:74:d4:50:9e:
                    e9:d6:91:1e:06:ea:b6:24:a9:39:9c:8b:47:bb:62:
                    9f:e4:cc:45:13:71:59:ff:37:00:67:76:d6:f4:51:
                    5a:84:81:41:e2:fa:82:58:ae:20:ac:58:69:8a:4e:
                    5b:3c:c9:e8:e0:ce:50:b9:2d:55:9d:bc:04:fb:b0:
                    f8:66:8e:5b:cd:6f:aa:9d:6e:3a:b0:55:c9:ab:23:
                    5e:ec:94:6e:03:48:3f:b7:2c:be:f6:63:8c:ce:08:
                    56:31:b8:aa:02:ae:a7:fc:24:bb:5f:81:26:67:88:
                    60:aa:99:9d:34:8c:d8:ea:7b:57:05:d9:b6:ef:cb:
                    a5:c2:8c:c4:38:fc:13:44:e3:f1:19:2d:fa:19:88:
                    37:9f:0a:95:f3:a2:6a:d4:2b:75:5c:53:72:d9:28:
                    45:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:31:19:60:12:12:E1:BF:C7:84:61:8A:99:14:6E:07:0D:50:96:ED
            X509v3 Authority Key Identifier:
                keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:bb:7f:f2:18:96:08:b7:19:9a:19:f5:82:22:a6:f5:a1:7c:
         ab:df:5e:c3:f9:30:db:8a:de:d1:09:57:39:ec:a8:67:50:6d:
         12:ae:0b:a0:5f:56:7c:e5:a9:95:6e:53:17:cb:fe:c6:85:4e:
         d0:9d:a4:c3:e6:42:43:3d:06:8c:68:92:72:a4:ba:97:2a:7c:
         78:38:49:69:01:e2:b1:6c:00:41:25:54:63:3a:18:02:33:d7:
         a2:43:f7:40:c9:94:df:7c:9a:0d:05:66:c0:40:de:4c:fe:b7:
         b7:f4:76:63:82:dc:cc:9e:8d:63:40:17:e1:b3:39:4f:2f:d9:
         d8:2f:ff:fd:22:00:94:62:73:53:3d:d0:55:7b:db:fe:e4:0e:
         99:47:7b:d1:eb:52:da:d2:1e:27:e1:f8:92:5b:09:66:b5:d5:
         41:22:2b:75:d6:3b:e1:94:cd:b8:c6:39:56:2d:79:e9:fa:c3:
         26:58:b0:c1:9e:1a:3d:65:86:ad:46:3a:36:00:fb:fb:1b:44:
         32:16:c4:9a:60:71:64:4a:27:a0:9c:ad:27:2f:6c:e1:49:22:
         c4:e5:27:e7:77:52:ea:9d:c0:f6:c1:62:d4:57:04:e3:6f:4a:
         45:b9:42:a8:da:48:3c:56:8b:b7:06:54:35:a7:65:dc:f0:77:
         5d:a0:47:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:23:58 2024 by rpki-client on console-fra.rpki-client.org