Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
File:                     TkMMADsADTVe0WnlXYzPOTg34go.mft (raw, json)
Hash identifier:          OuhkMsnQJWEFIt888vrm6YBX7M1y3EEQ7q6TRIFImTM=
Subject key identifier:   90:8C:F7:66:D6:F6:9A:28:77:05:80:A3:C4:84:1F:A3:C0:1C:BE:3D
Authority key identifier: 4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A
Certificate issuer:       /CN=4e430c003b000d355ed169e55d8ccf393837e20a
Certificate serial:       019035859EC505E32BB783CF7F358C87555A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
Manifest number:          0956
Signing time:             Thu 20 Jun 2024 12:01:07 +0000
Manifest this update:     Thu 20 Jun 2024 12:01:07 +0000
Manifest next update:     Fri 21 Jun 2024 12:01:07 +0000
Files and hashes:         1: TkMMADsADTVe0WnlXYzPOTg34go.crl (hash: PM+HP5yBWU6vVpIZ0BBtUtN/dSgBSiZH1hcSE8P4SGY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 11:48:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:35:85:9e:c5:05:e3:2b:b7:83:cf:7f:35:8c:87:55:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e430c003b000d355ed169e55d8ccf393837e20a
        Validity
            Not Before: Jun 20 12:01:07 2024 GMT
            Not After : Jun 21 12:01:07 2024 GMT
        Subject: CN=908cf766d6f69a28770580a3c4841fa3c01cbe3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b4:af:e3:a6:a7:f7:b1:ed:bb:e4:dd:f5:64:
                    f9:a3:31:33:fc:dd:16:22:06:43:63:e8:8a:a2:24:
                    d4:09:7b:3e:0b:c0:f5:19:da:8f:78:06:fd:e9:2b:
                    8e:4c:e4:12:5b:e6:90:65:3d:2c:cf:df:36:04:31:
                    b4:56:be:bb:ca:6f:ee:ab:a8:0d:73:bb:4e:36:1d:
                    cd:1f:20:b6:fb:04:0c:28:16:81:e3:99:64:14:9a:
                    0a:b2:71:f4:ef:71:1c:eb:d6:9d:a9:23:4c:ed:19:
                    3f:19:06:aa:09:d3:87:3a:c9:f2:a8:2e:04:a6:55:
                    bd:7a:18:c5:cf:ee:a7:08:61:95:fe:8d:5f:d3:14:
                    e6:eb:e5:0f:19:e1:c0:22:40:82:66:ba:2f:d4:57:
                    37:ca:d4:b9:c5:21:df:af:39:91:ca:6b:9d:6f:b9:
                    07:c1:5c:9c:52:fa:65:61:ad:d6:bc:85:71:40:b0:
                    60:3c:05:45:64:07:d8:be:5a:04:5f:37:6d:b2:f9:
                    e5:60:7b:a5:90:5a:15:9c:54:68:86:e2:f9:4e:fd:
                    10:92:16:a7:81:e8:44:1d:78:5a:2e:23:f4:aa:9e:
                    c2:fc:ef:c1:8d:bc:25:f6:0e:11:3c:8d:78:fc:61:
                    c1:17:1f:43:6a:80:5f:04:90:06:e7:89:e8:b0:e0:
                    6d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:8C:F7:66:D6:F6:9A:28:77:05:80:A3:C4:84:1F:A3:C0:1C:BE:3D
            X509v3 Authority Key Identifier:
                keyid:4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:70:52:5b:61:4f:cb:f2:14:09:52:51:86:1c:df:5d:57:1c:
         af:3f:d6:1d:ae:18:32:00:21:6c:2a:b3:01:a5:27:e3:d0:a2:
         89:17:ba:61:cc:9e:1c:f1:01:c3:f4:64:68:55:ae:d2:a9:13:
         57:96:14:72:4e:8d:d6:90:64:fa:42:e1:38:97:e7:3c:e5:84:
         17:ab:a8:e3:ec:a0:cb:15:64:de:6f:e7:36:37:ce:cd:42:4c:
         c1:1b:ea:c5:71:4b:8f:98:a7:80:57:68:cc:3e:e6:f2:42:b1:
         1d:ae:a2:97:08:11:00:0b:25:cd:ab:56:30:29:d9:14:47:39:
         6d:9b:f9:63:f6:ed:2a:b1:9d:28:65:df:7d:75:12:35:4d:59:
         eb:bf:bf:98:70:8b:6e:2c:f1:91:19:eb:80:b0:d8:ae:71:9c:
         48:a8:5d:f9:09:15:b5:4b:1f:00:59:af:83:3a:a8:48:2a:6d:
         5f:3e:43:e1:0c:03:12:d7:29:7e:51:64:b7:2b:e6:40:e1:ea:
         3c:3b:ab:28:cd:84:ff:8c:74:d2:b3:27:9e:0c:56:17:65:bc:
         d4:a2:16:f5:2e:62:fb:43:b5:42:d0:be:59:ce:60:c6:3b:9a:
         45:9d:8e:16:db:28:0a:e0:fb:6a:69:f5:2c:ef:41:59:68:f6:
         96:1c:52:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 13:25:51 2024 by rpki-client on console-fra.rpki-client.org