Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File:                     ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier:          OV/v6Ql62BpainnbTC4a25pBC/Fv2LtL6P8O4Qr8aMY=
Subject key identifier:   B3:CD:5B:C9:E8:27:D6:DD:14:90:76:2A:03:F0:FD:B7:ED:9B:B9:DF
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer:       /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial:       01901EC70EC609368E0BEBE1DD65EC6FAFB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number:          01B9
Signing time:             Sun 16 Jun 2024 02:01:20 +0000
Manifest this update:     Sun 16 Jun 2024 02:01:20 +0000
Manifest next update:     Mon 17 Jun 2024 02:01:20 +0000
Files and hashes:         1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: N4gdZGYT2xfCFOCdUZ/DaTMjTYTmL6lHZJdJR5+PaIM=)
                          2: ed0YQscq9C3I6l3x8omyLHWEbuQ.roa (hash: JQ0TZ/EAYX+qfJkVjE9Fu52DRFr6tc8TLcIybSnV2JU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:c7:0e:c6:09:36:8e:0b:eb:e1:dd:65:ec:6f:af:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
        Validity
            Not Before: Jun 16 02:01:20 2024 GMT
            Not After : Jun 17 02:01:20 2024 GMT
        Subject: CN=b3cd5bc9e827d6dd1490762a03f0fdb7ed9bb9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:52:3a:ab:39:b4:c2:35:47:27:16:88:2c:fe:
                    b8:37:72:0b:27:f2:42:98:ee:bc:ef:9c:e9:c9:ca:
                    88:00:92:c4:89:4e:65:2d:b2:f0:e3:34:78:c5:86:
                    cc:bc:1f:89:65:14:8d:3d:c4:75:9f:36:5f:7c:cf:
                    75:cb:ba:81:15:95:62:b8:f8:49:48:e9:43:74:9c:
                    a6:23:e9:9e:0d:83:dc:e5:a2:13:bd:73:36:0f:65:
                    b2:3e:b7:91:84:f3:50:49:88:07:ca:5c:f9:c2:58:
                    6c:8b:68:d2:e9:1c:f6:cd:4e:cd:4a:34:06:08:6d:
                    92:23:19:a4:87:2d:76:1b:73:79:53:62:2f:46:8d:
                    d9:ae:2c:d8:9b:e7:fe:93:e9:d3:39:23:a5:af:5f:
                    e9:25:84:04:5c:36:fc:5d:b7:a5:a1:3d:5f:9d:d7:
                    d8:79:1c:45:0f:9b:dc:b1:b7:da:6b:7b:c5:49:98:
                    64:c5:76:eb:6c:46:88:c0:a1:36:61:a0:87:de:51:
                    be:3a:f4:76:f3:13:b5:ef:00:58:7c:b0:7c:63:40:
                    4b:f2:09:0e:08:c9:bd:b9:77:75:8c:a1:f4:9f:18:
                    74:a5:54:13:5c:f6:9c:f9:15:63:56:92:7f:16:6e:
                    c3:7e:c7:f2:35:73:0e:ca:53:93:94:53:c2:2b:3b:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CD:5B:C9:E8:27:D6:DD:14:90:76:2A:03:F0:FD:B7:ED:9B:B9:DF
            X509v3 Authority Key Identifier:
                keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:56:4f:20:e5:ce:3d:fa:47:85:be:d7:a6:92:99:81:56:70:
         e3:05:8b:61:28:41:35:f4:9b:01:37:28:73:0f:e5:75:35:a8:
         86:13:e7:05:cb:d7:e8:cd:54:17:4c:72:19:a6:fe:62:09:d9:
         09:1e:32:a2:da:d4:79:10:6f:53:8a:5e:5a:b5:18:a4:c3:34:
         8f:fc:b7:39:1f:bf:3c:fb:87:3b:a5:e7:8d:6d:3b:c2:4b:cb:
         b6:d7:03:43:e3:66:bf:cd:d2:17:8c:70:38:3e:f4:dd:96:9c:
         c8:13:51:d4:8f:ac:40:7a:90:99:1d:ea:02:2e:ee:7b:f6:ff:
         d5:03:62:cd:84:8e:1e:45:ff:17:5d:7d:59:fc:59:78:a6:92:
         1a:ee:7a:63:c7:1f:5f:52:b6:c0:5a:23:f3:55:27:92:d9:3d:
         8f:99:b4:d6:b6:85:8e:b7:a4:eb:5c:2a:b5:46:00:ff:eb:2b:
         95:fd:6a:11:3a:90:1f:1b:1d:f7:ed:22:7b:60:fd:b3:c9:a1:
         2c:19:4d:fb:57:8f:97:cb:6d:0b:c9:2e:50:94:a2:01:42:08:
         ab:b9:bb:26:45:f8:df:94:38:21:37:e6:10:20:25:2e:35:27:
         e0:8d:4e:69:37:07:a0:d2:ba:63:48:c4:9b:67:c4:b5:ef:b9:
         54:ee:8f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:40:53 2024 by rpki-client on console-fra.rpki-client.org