Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
File:                     H6_KU6xU5X5SwBATiiEnlMZw4M0.mft (raw, json)
Hash identifier:          qedwQVO2Odp2XSTAgpwjU42P/Prl+0aQfsclXm6tX4s=
Subject key identifier:   59:D9:56:6B:9E:70:09:7F:C6:CD:79:CE:4D:D7:B8:7E:53:7A:6B:34
Authority key identifier: 1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD
Certificate issuer:       /CN=1fafca53ac54e57e52c010138a212794c670e0cd
Certificate serial:       018F885B33712756D74561859AFC644595D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
Manifest number:          01CE
Signing time:             Fri 17 May 2024 21:00:29 +0000
Manifest this update:     Fri 17 May 2024 21:00:29 +0000
Manifest next update:     Sat 18 May 2024 21:00:29 +0000
Files and hashes:         1: H6_KU6xU5X5SwBATiiEnlMZw4M0.crl (hash: pBKtmFZoAKTJxHb/8jJ2vkVHQbG2cVH6PLWCk93i9+I=)
                          2: g_1xa2QB__VMgGcaaZC4kfLupoI.roa (hash: nFH82JXdMcckLTpfXpzIdjHHm4hRQUgXZUF5AJonqZ8=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:88:5b:33:71:27:56:d7:45:61:85:9a:fc:64:45:95:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fafca53ac54e57e52c010138a212794c670e0cd
        Validity
            Not Before: May 17 21:00:29 2024 GMT
            Not After : May 18 21:00:29 2024 GMT
        Subject: CN=59d9566b9e70097fc6cd79ce4dd7b87e537a6b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:81:3c:e1:0b:6a:ac:c5:8b:2c:41:db:7d:18:
                    ea:90:61:f9:89:50:a0:78:af:44:cb:bb:54:18:29:
                    19:cd:67:8d:61:45:18:2d:85:7b:ef:b3:a4:64:f8:
                    14:eb:17:48:fd:a7:4e:12:9b:fd:71:49:5c:a5:73:
                    51:7c:92:c9:bd:dd:a8:37:82:45:2e:05:8d:bc:76:
                    d9:1d:9b:9e:8f:42:04:a7:6d:00:f2:cf:17:8e:e1:
                    cd:ea:42:c6:3e:c7:27:fa:f7:05:34:0b:bb:77:5a:
                    6d:b5:41:7e:48:31:3f:8c:7a:61:cf:14:f2:fd:4d:
                    10:48:0b:32:e9:07:ca:48:f9:78:ec:eb:8b:42:ea:
                    27:d4:2b:2c:d5:ae:ff:ef:0f:bb:2e:f3:4c:85:43:
                    1c:7a:4d:2f:e0:39:8c:aa:58:15:00:6d:ae:a6:c2:
                    a4:10:e9:da:f0:7a:27:96:78:a1:38:e9:5f:d3:6d:
                    18:e7:93:db:02:5d:a0:01:08:8c:51:47:6b:1e:94:
                    58:cf:45:39:74:81:a3:03:7d:ab:13:12:59:7a:ad:
                    dd:6c:78:b2:45:22:10:ef:ef:99:30:b3:61:89:21:
                    fc:f1:25:d4:b2:e2:2b:5d:22:2f:5c:1a:86:2f:d4:
                    a3:32:93:f9:47:6c:1d:f0:cf:0a:df:c4:57:08:af:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D9:56:6B:9E:70:09:7F:C6:CD:79:CE:4D:D7:B8:7E:53:7A:6B:34
            X509v3 Authority Key Identifier:
                keyid:1F:AF:CA:53:AC:54:E5:7E:52:C0:10:13:8A:21:27:94:C6:70:E0:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6_KU6xU5X5SwBATiiEnlMZw4M0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/768e29-24c5-4fa7-9b36-c995d2ec9e94/1/H6_KU6xU5X5SwBATiiEnlMZw4M0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:8e:61:91:e6:c4:00:4c:e1:0a:4a:a4:1d:b7:35:08:8c:6a:
         d2:fa:81:c6:f4:c8:53:15:7a:5c:0d:9c:48:11:ab:07:d9:f0:
         aa:bf:10:3f:8d:26:d7:c4:f7:f2:14:8a:07:36:ff:1d:ec:0b:
         9c:e8:2b:32:9a:c2:72:64:17:f8:3c:43:48:38:5a:19:49:b4:
         52:5b:22:7f:23:31:d8:20:e7:75:de:51:1b:af:40:5c:10:37:
         bc:a3:d0:bd:48:35:e7:1a:9c:96:93:45:c9:75:22:31:f8:cd:
         c5:9d:3a:40:68:9e:cd:4e:7d:8c:47:f1:23:8f:50:21:3e:cc:
         f0:ec:3a:e1:d2:b0:42:57:be:13:f4:95:ab:73:96:73:20:c7:
         f7:75:07:b5:11:7c:5e:c5:59:2a:be:53:0f:c8:f0:c1:de:f5:
         d2:55:98:20:d8:51:ea:11:cb:72:c0:b2:da:cc:93:c8:29:f5:
         2a:62:e9:68:e6:59:c6:ed:13:ff:7c:21:2f:70:ec:86:79:6c:
         d8:80:72:4a:48:55:3c:a7:9e:da:27:e3:77:f4:c2:aa:f7:29:
         ff:07:26:0f:cd:7e:49:1a:5a:5d:84:fe:29:62:6f:c5:33:8c:
         81:3e:1c:aa:81:84:75:2f:34:44:02:90:65:f2:47:e2:73:da:
         4e:55:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:13:28 2024 by rpki-client on console-ams.rpki-client.org