Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
File:                     H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft (raw, json)
Hash identifier:          cA2q5ED9N9P/2PiRLbzTbJdcoCpIKDMwArIaA0pS1k8=
Subject key identifier:   F8:E4:3C:4D:8E:FA:48:CC:82:E1:10:83:7D:88:14:02:CA:5D:35:58
Authority key identifier: 1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61
Certificate issuer:       /CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
Certificate serial:       018F51DB5D73E216DE6DD38C35C09B431B7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
Manifest number:          115B
Signing time:             Tue 07 May 2024 07:01:21 +0000
Manifest this update:     Tue 07 May 2024 07:01:21 +0000
Manifest next update:     Wed 08 May 2024 07:01:21 +0000
Files and hashes:         1: H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl (hash: 0ka34VRmCtokcV+yKWbZtKizyFeatalChv92TCX3w90=)
                          2: Tc6sOrZBz8gEnPlSRHquvQaE6KY.roa (hash: XVBH61L14NlfYZI8gL672VrYdg+bAEoYa+uKnTnIg6Q=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 05:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:51:db:5d:73:e2:16:de:6d:d3:8c:35:c0:9b:43:1b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f688f9857d9e440c1058dc8959e49f8b3183f61
        Validity
            Not Before: May  7 07:01:21 2024 GMT
            Not After : May  8 07:01:21 2024 GMT
        Subject: CN=f8e43c4d8efa48cc82e110837d881402ca5d3558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:41:1d:a4:b8:1c:51:5d:b6:4f:12:4d:2a:05:
                    14:59:68:db:af:ac:bf:8b:29:60:9a:8b:5d:18:3d:
                    69:03:4d:c4:37:d4:74:c8:ae:d2:bb:20:ab:13:2c:
                    c0:b2:9f:58:9f:e9:aa:67:b0:56:cd:7b:4e:a0:ce:
                    2c:60:fd:53:55:bb:cc:27:b2:b3:9f:3c:8b:ea:6e:
                    86:24:b8:0a:e3:04:5a:8b:fd:70:27:21:65:ba:45:
                    7f:61:c2:e7:2c:88:a6:04:00:68:d5:ee:f4:b7:35:
                    98:d2:d6:fb:47:1c:4a:07:0f:b2:bb:c1:e1:de:08:
                    1c:b5:f2:24:ae:32:d8:0a:6c:76:27:73:fb:96:46:
                    64:3a:13:75:54:56:a9:5c:48:86:b2:c7:9b:eb:a0:
                    8b:d3:11:bf:41:99:bf:15:a8:2d:62:01:c4:c4:7d:
                    1f:15:cf:bd:dd:bd:2c:60:c9:f8:0d:b7:55:11:93:
                    02:cf:5d:50:38:7d:61:85:0c:3e:2a:36:99:2d:b3:
                    c6:95:4f:ca:90:40:41:22:1c:20:ed:a8:cd:36:4f:
                    01:71:ad:fd:e5:85:8e:47:90:3c:0e:b0:0e:46:a3:
                    60:99:5d:96:86:d6:c8:af:b4:9b:59:48:c0:5e:72:
                    6d:50:62:48:3c:7d:a2:39:49:f2:34:e6:04:20:44:
                    9f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E4:3C:4D:8E:FA:48:CC:82:E1:10:83:7D:88:14:02:CA:5D:35:58
            X509v3 Authority Key Identifier:
                keyid:1F:68:8F:98:57:D9:E4:40:C1:05:8D:C8:95:9E:49:F8:B3:18:3F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/057780-52e8-4777-8a25-021c2e0735b1/1/H2iPmFfZ5EDBBY3IlZ5J-LMYP2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:ef:22:d1:51:db:9f:65:2a:fa:b5:60:89:80:aa:13:28:9c:
         ff:2d:4a:d5:bc:e2:b0:5c:e1:86:01:93:31:01:b8:45:b4:78:
         da:23:de:fe:0d:5b:11:6e:e3:14:c8:ac:a4:1b:11:1d:36:97:
         df:86:b7:1f:10:ce:45:e1:e7:82:bc:19:7f:53:75:cc:37:24:
         24:1a:c2:46:2e:cd:da:47:fb:15:17:7b:c6:08:6d:21:cc:96:
         c6:12:9c:49:cf:73:f8:75:22:b5:8b:47:1c:e8:a6:b7:af:30:
         44:50:be:c9:b6:6e:9c:9f:0b:65:e6:0c:3c:ef:00:ca:29:cb:
         25:8c:0a:00:2d:c6:ed:33:8d:18:09:93:68:18:c8:2a:11:93:
         b1:26:07:a8:0d:33:44:26:34:b4:31:65:11:76:bf:fe:b5:fe:
         e8:09:67:a4:89:a9:bb:36:80:74:cf:27:3e:ee:4b:f2:5e:df:
         16:bf:0b:26:68:71:3f:a5:97:cb:2e:c7:29:f1:1e:57:55:97:
         9c:5c:a0:2c:98:3b:ea:c8:bf:22:b4:37:01:84:24:86:f5:24:
         39:45:b5:84:88:d4:74:c4:dc:01:b6:44:8a:f7:7c:3d:dc:c7:
         d5:f5:b9:af:c0:25:21:c0:74:61:c8:23:d7:7d:d3:bf:2e:8a:
         2c:46:c1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 12:09:12 2024 by rpki-client on console-ams.rpki-client.org