Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
File:                     tznE4_6GnZeDui2t9mDczQ-lNwc.mft (raw, json)
Hash identifier:          2j46CvhJYW+wjOI6/bhfl9E/X0HRPEfGR6QF81hxoZo=
Subject key identifier:   89:13:3B:14:74:B6:CC:0E:A9:C5:93:65:05:91:30:65:29:D3:5F:28
Authority key identifier: B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07
Certificate issuer:       /CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
Certificate serial:       01901BFF21292005CFDD2E0DFAE8BD59B409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
Manifest number:          0C10
Signing time:             Sat 15 Jun 2024 13:03:43 +0000
Manifest this update:     Sat 15 Jun 2024 13:03:43 +0000
Manifest next update:     Sun 16 Jun 2024 13:03:43 +0000
Files and hashes:         1: tznE4_6GnZeDui2t9mDczQ-lNwc.crl (hash: Yf/UfjqOeMqpplXhPbrizBPEpq8HSpH5HvkF3s3HsO4=)
                          2: v6PTi9n_jlJgnQNnPn9q43-2ne4.roa (hash: xOCKK9nROZqddeKjTuTHELl4lvw96hnuAUMOJ1TF4ws=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:ff:21:29:20:05:cf:dd:2e:0d:fa:e8:bd:59:b4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b739c4e3fe869d9783ba2dadf660dccd0fa53707
        Validity
            Not Before: Jun 15 13:03:43 2024 GMT
            Not After : Jun 16 13:03:43 2024 GMT
        Subject: CN=89133b1474b6cc0ea9c593650591306529d35f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:a2:ee:16:1d:5e:4c:16:db:1a:5d:f7:13:
                    1a:e8:e2:bb:71:e2:26:37:1c:a1:23:37:ec:eb:17:
                    87:a0:a2:86:ec:d9:76:85:86:4a:08:98:7a:04:8e:
                    23:72:a6:f4:8d:d3:e9:b1:81:97:40:6f:09:cc:9c:
                    55:9e:94:54:ea:03:c1:4e:3c:e6:36:90:90:35:c5:
                    44:b0:d7:b3:c5:f2:7e:89:26:90:6f:a3:f3:30:7c:
                    3f:3e:b4:fd:e8:00:6c:f5:83:81:0e:8d:a9:2e:9d:
                    8c:67:50:80:fb:50:c2:08:52:06:56:74:59:a1:cc:
                    ac:e0:ef:14:0e:29:54:f6:bb:66:37:18:17:28:19:
                    de:60:85:bc:93:50:b9:cf:4a:97:18:96:0e:03:06:
                    e3:56:17:f1:e4:6f:c4:9b:4a:9e:ab:2f:12:da:96:
                    34:79:1c:82:ed:09:f8:e4:43:f0:37:87:a9:8f:2e:
                    84:18:af:f2:9a:e3:e6:fa:8b:2f:70:60:1f:9e:e8:
                    89:70:6d:01:ff:ca:02:2a:67:45:3b:fe:36:93:c3:
                    a8:ce:8e:25:cb:08:37:49:6e:a2:31:34:71:22:69:
                    61:ed:30:f3:4a:26:0f:ae:e3:d4:8f:bf:e6:45:73:
                    61:70:f7:07:39:ee:6b:05:e0:cc:6e:ef:ac:81:45:
                    c3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:13:3B:14:74:B6:CC:0E:A9:C5:93:65:05:91:30:65:29:D3:5F:28
            X509v3 Authority Key Identifier:
                keyid:B7:39:C4:E3:FE:86:9D:97:83:BA:2D:AD:F6:60:DC:CD:0F:A5:37:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tznE4_6GnZeDui2t9mDczQ-lNwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/21b558-7e89-41a2-825d-072262e30fc5/1/tznE4_6GnZeDui2t9mDczQ-lNwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:02:4f:76:c6:24:35:ac:fc:56:5b:f3:08:7f:bb:8d:b3:3e:
         77:80:0c:06:a5:fb:be:98:b7:aa:65:dd:2b:ac:90:2a:28:4b:
         50:c2:ce:1d:de:92:e4:5e:7a:87:96:6d:d7:c2:3a:75:45:08:
         e5:8a:bf:bd:09:7f:07:da:3b:c5:3f:9a:d7:77:02:13:b9:79:
         b9:d6:1f:55:92:3b:59:6a:2e:1c:3c:b5:52:43:a1:b6:0e:3b:
         65:58:9b:99:97:f5:7c:9c:c8:39:ad:86:4c:5b:42:2f:b6:ff:
         1d:51:c8:39:e6:e4:49:56:c5:18:d8:82:94:59:4f:06:60:58:
         11:32:60:80:94:ef:a2:e7:f1:f3:8a:7d:7a:73:a9:86:92:e7:
         65:be:91:76:72:69:f4:95:ba:78:2b:bc:54:a4:0c:b9:56:81:
         1d:82:a4:4d:ac:24:bc:7c:8b:fc:0f:a5:9a:be:d7:60:58:4c:
         47:c6:54:94:1d:93:5f:bd:e2:98:50:3d:9e:4c:f3:a5:07:8b:
         f6:ba:ae:23:97:a8:6e:fe:9d:38:bc:12:e2:3b:a0:77:ca:8c:
         af:d8:24:ca:1d:8e:f3:6b:5f:e7:35:24:a5:ba:a8:17:5c:86:
         7c:35:5b:2d:f1:ff:60:54:4e:40:2a:85:38:1b:96:59:13:a9:
         9e:5a:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:26:30 2024 by rpki-client on console-fra.rpki-client.org