Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
File:                     H2_gB5F-tjJ74wYamvbsVI01MGY.mft (raw, json)
Hash identifier:          e/HSHRTM9QEZct5l/SjK6NF/M4HUE2ByJFO1Dxr1gUc=
Subject key identifier:   48:09:3D:AB:63:78:27:12:E7:D4:FF:63:F6:CE:E7:B1:6E:DB:EF:73
Authority key identifier: 1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66
Certificate issuer:       /CN=1f6fe007917eb6327be3061a9af6ec548d353066
Certificate serial:       019511D98CBA1B933D9273F091B0AEA9E742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
Manifest number:          0514
Signing time:             Mon 17 Feb 2025 03:00:24 +0000
Manifest this update:     Mon 17 Feb 2025 03:00:24 +0000
Manifest next update:     Tue 18 Feb 2025 03:00:24 +0000
Files and hashes:         1: H2_gB5F-tjJ74wYamvbsVI01MGY.crl (hash: 5CWiiCtvZqkcXghUHBmC3H5dXnwec9JZcqfsXeQ7pts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 17 Feb 2025 23:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:11:d9:8c:ba:1b:93:3d:92:73:f0:91:b0:ae:a9:e7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6fe007917eb6327be3061a9af6ec548d353066
        Validity
            Not Before: Feb 17 03:00:24 2025 GMT
            Not After : Feb 18 03:00:24 2025 GMT
        Subject: CN=48093dab63782712e7d4ff63f6cee7b16edbef73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:23:da:d6:f1:64:2e:9a:a1:78:dd:14:1b:
                    27:ff:1f:19:5a:6e:e1:1f:f3:a3:cf:4e:1d:54:b7:
                    60:db:75:9c:cc:3e:c7:c3:9f:c4:34:6a:f1:23:51:
                    d2:ef:e3:a6:a2:30:79:0e:d6:2e:97:f3:67:a8:4b:
                    89:72:69:d5:69:13:d2:7c:bb:e5:e5:f4:e5:cd:be:
                    f0:89:10:c4:7b:34:b5:e2:f2:f1:af:dd:74:78:3a:
                    a5:6e:c5:ec:b9:89:63:20:6a:3f:98:dc:28:60:b8:
                    65:ac:64:92:b3:10:b4:c7:b2:df:ab:e7:79:07:a2:
                    a6:35:0a:c4:92:0f:1a:e1:83:a1:11:ae:b6:ce:70:
                    2e:a1:42:48:34:e3:9d:12:5d:7d:37:f8:ec:27:c1:
                    a0:da:01:a0:9e:42:73:20:1e:b9:a3:d4:6b:6e:d7:
                    59:18:88:5f:6b:5e:8f:76:8e:d1:ac:73:03:8a:3e:
                    1c:6b:37:ab:24:15:60:0b:5a:cd:a3:6e:ef:ac:60:
                    b5:83:7d:fb:8e:d3:7b:c3:e5:1d:30:fe:35:13:af:
                    57:46:8f:b8:f3:84:7c:90:f5:21:17:6a:18:f7:0d:
                    f5:3d:20:f7:c8:5b:3b:a6:b1:83:9e:59:39:63:84:
                    43:e0:9b:22:b3:e9:12:c3:61:e3:a0:60:c1:4b:62:
                    b7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:09:3D:AB:63:78:27:12:E7:D4:FF:63:F6:CE:E7:B1:6E:DB:EF:73
            X509v3 Authority Key Identifier:
                keyid:1F:6F:E0:07:91:7E:B6:32:7B:E3:06:1A:9A:F6:EC:54:8D:35:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2_gB5F-tjJ74wYamvbsVI01MGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1555b8-853d-43d6-8124-09b3b8722688/1/H2_gB5F-tjJ74wYamvbsVI01MGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:b8:7f:b9:82:c9:af:a9:df:26:80:d9:2c:6d:18:91:5f:1f:
         a1:95:90:d7:93:7b:4f:b0:b6:01:83:98:08:f5:f3:27:ec:1d:
         d5:e5:48:33:e3:a2:3c:25:e0:b3:36:2c:64:6b:96:f7:f1:c4:
         09:4d:7f:24:b0:0b:0a:63:e0:a7:fe:98:e6:4d:0a:cd:4c:f8:
         24:d8:bb:f0:aa:40:98:d6:f3:70:d4:5c:af:58:13:dc:a1:d4:
         70:95:b3:b8:c6:0f:4e:83:d7:d1:65:bf:21:ca:5e:95:fb:92:
         26:7e:6a:08:29:cf:17:27:5b:44:22:1e:0f:6f:81:92:95:49:
         91:6f:41:de:06:01:78:bf:7d:34:b6:03:e6:7b:fb:3f:0e:ab:
         dc:06:5e:6e:13:73:12:26:dd:67:11:26:e2:e0:94:38:b3:b5:
         74:78:05:24:bc:5f:24:35:f9:44:ae:ce:91:ff:fe:ea:79:b7:
         3f:5c:f8:cf:e5:2c:49:0b:7f:d2:a9:5e:39:d3:96:42:6d:17:
         39:26:fd:e2:c4:84:97:9a:67:c2:fc:66:3a:2b:27:da:24:90:
         3b:99:8f:01:c5:09:a2:8b:31:7f:63:00:72:7c:3a:ba:28:f9:
         18:9f:6d:83:47:ee:fe:61:c2:1c:8b:85:67:67:93:66:76:02:
         d6:d7:1f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:26 2025 by rpki-client