Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File:                     BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier:          4d+U579nUgOstX3GTLXG3oJ1CFMpnKHAxloF3DHJSsY=
Subject key identifier:   45:A6:FD:08:5A:09:EE:E0:DA:69:F1:55:66:62:CC:F4:D3:1A:DA:C4
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer:       /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial:       01964EFEA785A9A6DB7D06BBE560AA99A1AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number:          1499
Signing time:             Sat 19 Apr 2025 17:00:33 +0000
Manifest this update:     Sat 19 Apr 2025 17:00:33 +0000
Manifest next update:     Sun 20 Apr 2025 17:00:33 +0000
Files and hashes:         1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: q4gyevKYTQBP820PLk0wpJxOAOtB5dJV23xr9QaF/Hc=)
                          2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 17:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:fe:a7:85:a9:a6:db:7d:06:bb:e5:60:aa:99:a1:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
        Validity
            Not Before: Apr 19 17:00:33 2025 GMT
            Not After : Apr 20 17:00:33 2025 GMT
        Subject: CN=45a6fd085a09eee0da69f1556662ccf4d31adac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:63:74:13:eb:45:54:60:96:29:8c:75:4f:
                    3c:db:06:de:ff:ac:62:f4:b6:3f:4f:de:85:69:7f:
                    17:94:e7:bf:03:81:4e:54:21:77:11:83:8e:16:cc:
                    ac:fc:05:02:b8:37:97:af:83:94:34:0e:2f:e0:ce:
                    10:0f:e2:1d:4c:96:ce:98:32:0d:96:82:e5:3d:b9:
                    cd:0f:ac:74:51:45:1e:d3:b5:54:04:1f:5b:5a:71:
                    00:a2:dd:bf:76:4a:02:be:80:d1:53:0b:5b:7b:3c:
                    6c:52:13:e2:60:ce:7c:1a:9f:fb:cd:a9:d9:08:13:
                    74:2f:89:13:c8:46:fc:fd:fb:bd:49:d2:ff:73:f5:
                    f6:3c:d8:67:92:c7:37:0d:1e:88:90:5e:52:16:fc:
                    51:a6:8b:99:02:b6:5a:32:f7:2b:f5:f6:8a:5e:cb:
                    b6:f3:19:cd:12:62:41:96:f6:26:46:77:09:1f:82:
                    fe:07:8c:84:72:e8:27:64:5e:62:e7:60:e6:d1:a2:
                    e7:37:32:af:49:7f:7d:d4:46:50:8e:e6:55:2d:11:
                    01:18:7a:68:6b:d1:f8:01:4a:7c:47:b0:3f:8b:03:
                    f4:a8:16:9f:7f:b0:92:f6:db:8d:17:ce:c4:46:52:
                    8a:2f:74:ac:c8:35:ab:ff:de:bd:fe:62:0f:2e:66:
                    54:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A6:FD:08:5A:09:EE:E0:DA:69:F1:55:66:62:CC:F4:D3:1A:DA:C4
            X509v3 Authority Key Identifier:
                keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e1:d1:a9:e3:89:83:30:4e:3a:63:4e:1c:21:24:a2:dd:64:
         46:af:ef:4d:ea:c8:40:92:dd:c0:0c:5f:fe:ff:9c:89:f2:96:
         c7:57:41:ee:14:cb:3b:86:cd:76:9f:c4:b6:8c:1e:e0:d9:4c:
         25:52:84:ba:1e:a2:b1:3b:54:02:89:8e:85:c0:0e:7f:6b:d1:
         23:28:6f:67:90:ca:5d:3e:c3:9b:2e:76:88:08:30:9c:2d:57:
         19:ef:ea:fc:0e:ef:38:8d:22:d6:32:1b:07:81:44:eb:25:48:
         6f:b6:8e:cb:e3:71:56:7c:9e:53:65:a5:c3:bd:b5:1c:86:fa:
         e1:22:4c:41:a0:47:17:27:84:85:66:91:eb:8d:f9:ff:98:59:
         23:d1:4d:4a:8d:45:19:d6:20:fb:f4:63:8e:d7:c2:4e:83:0a:
         a6:00:8e:80:2b:5f:c3:54:b5:3e:32:4d:c9:ed:45:b7:f1:7a:
         ef:12:fe:7b:cc:35:00:68:98:52:8c:16:76:a0:f9:70:76:b4:
         06:b2:3f:a2:30:ce:6e:bc:bb:a0:bf:41:2e:9f:ad:56:1f:72:
         36:dd:1b:91:30:ce:65:d1:ae:dc:1c:4b:1a:ab:1c:2d:b1:e1:
         c6:05:4f:a4:57:87:d3:2a:fa:c1:01:64:21:28:5b:be:65:d2:
         58:9a:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:51 2025 by rpki-client