Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File:                     H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier:          vtAKoaBl7Rwr3ehqqF2xDqvcbphOj/AKjuSkDvsVksc=
Subject key identifier:   CA:C4:65:CB:62:32:64:67:4E:D1:B6:34:16:2E:A2:C4:DB:BE:A1:E6
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer:       /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial:       018F86A3C21F7B6448C85CB16BC938B11BC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number:          0235
Signing time:             Fri 17 May 2024 13:00:29 +0000
Manifest this update:     Fri 17 May 2024 13:00:29 +0000
Manifest next update:     Sat 18 May 2024 13:00:29 +0000
Files and hashes:         1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: 3mDYGqyFPmsa+pKxoEO9vcGn+/oXTjg1OZJZ2Bm4Y/4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:c2:1f:7b:64:48:c8:5c:b1:6b:c9:38:b1:1b:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
        Validity
            Not Before: May 17 13:00:29 2024 GMT
            Not After : May 18 13:00:29 2024 GMT
        Subject: CN=cac465cb623264674ed1b634162ea2c4dbbea1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fe:c3:18:d9:a4:ff:77:25:67:b3:6e:32:86:
                    2e:bc:ab:a2:9d:38:97:b3:15:77:a2:79:9c:9b:19:
                    43:65:f8:b3:a8:ec:3d:0f:86:ee:f4:6c:a4:5d:f0:
                    0b:ea:34:93:5f:7f:3a:0a:9c:6c:ee:e5:72:48:06:
                    f1:da:3d:19:07:5d:83:07:86:af:56:5a:8c:94:dc:
                    53:eb:fb:8a:fc:93:61:6e:12:b9:ac:6b:3c:8b:a3:
                    dc:c6:e2:81:f0:d4:ad:bc:56:18:39:8b:66:8c:38:
                    4b:06:99:c5:8f:c4:6b:11:14:ce:fa:43:50:a9:69:
                    f0:fc:10:b2:98:1b:b1:70:cc:1a:d4:91:59:a3:4e:
                    30:d8:be:a7:20:30:86:a1:38:70:13:b9:ce:9c:58:
                    bc:24:7b:ba:1d:70:41:5e:f8:7a:82:73:0a:5c:8a:
                    2b:87:c2:77:33:5e:07:f4:9b:3f:e4:02:b1:bc:22:
                    15:5d:58:3f:ff:0d:70:37:a3:9e:98:90:b2:a9:1b:
                    f7:48:ee:bf:2e:b6:a0:43:cf:4c:5a:c5:e6:17:e1:
                    5c:84:b5:8e:13:4c:a1:12:18:cc:d1:70:5c:ee:d0:
                    b8:fe:e7:1f:82:35:4d:35:ce:2e:8b:82:f7:73:74:
                    62:21:5f:e8:83:ad:50:bd:c5:2e:8a:f7:09:8a:09:
                    af:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C4:65:CB:62:32:64:67:4E:D1:B6:34:16:2E:A2:C4:DB:BE:A1:E6
            X509v3 Authority Key Identifier:
                keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:df:a2:f1:6d:29:69:8f:46:7e:58:3a:fa:12:b1:08:ef:4c:
         2f:c4:b0:b0:29:55:9a:13:e6:4e:26:1d:f8:5b:0a:88:25:b9:
         20:2c:90:f5:d4:d7:fd:22:3d:b6:ff:69:06:6d:51:7b:2d:4a:
         03:6b:75:6e:53:7d:64:24:31:49:c2:a5:2d:98:12:be:19:8a:
         86:4e:e9:4b:10:17:26:aa:14:3b:d6:6d:8c:cc:9f:1b:65:64:
         52:1d:c3:23:c3:e8:7d:6f:41:c1:36:d1:c9:0d:94:cb:c6:00:
         cb:7e:09:27:b9:a0:c9:ba:73:4a:48:f8:3e:f0:4f:59:5b:b6:
         36:fa:93:08:cc:b2:d2:2c:be:f8:4c:6d:8a:29:92:71:b6:f5:
         bb:6c:25:50:2b:97:d8:6c:fd:02:67:cf:91:07:08:2a:13:5d:
         e4:88:a2:5d:50:7e:82:b0:6f:ee:17:e2:a1:8a:7b:df:b2:d8:
         d3:7d:c5:56:4a:7f:3c:9d:7a:18:71:c4:b6:ad:5f:5d:4e:c9:
         71:90:aa:15:0b:1a:ba:4e:55:64:d2:3b:8e:f6:1c:92:f7:2e:
         70:2e:e9:0e:87:a9:a2:01:73:d0:b3:ff:e4:e9:b6:1e:63:7f:
         c4:d3:ac:e1:c9:10:4a:15:c8:5c:98:0a:df:61:0e:66:38:68:
         51:03:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 17:53:10 2024 by rpki-client on console-ams.rpki-client.org