Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File:                     Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier:          1mit6yCm6BUOUWHMLY3yHc7vBTWN4ssdpwy2ouf0UCc=
Subject key identifier:   3F:F5:65:1F:80:2E:E7:4C:AF:68:E4:49:5F:47:AB:87:AE:FC:41:08
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer:       /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial:       0190452F484FAAE5F70F7692152651064698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number:          8B
Signing time:             Sun 23 Jun 2024 13:00:44 +0000
Manifest this update:     Sun 23 Jun 2024 13:00:44 +0000
Manifest next update:     Mon 24 Jun 2024 13:00:44 +0000
Files and hashes:         1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: oVd+QWTq6neRTzVbp8KWrxbHf7STVG5O5ZU1FfWP8V8=)
                          2: qAvVMsRQkZFBfvnWhMrflMWmGQo.roa (hash: AU416K9q8ri0uwtBA0G3uCKQdUSM33O2xQRHH5YRC4w=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 24 Jun 2024 13:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:45:2f:48:4f:aa:e5:f7:0f:76:92:15:26:51:06:46:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
        Validity
            Not Before: Jun 23 13:00:44 2024 GMT
            Not After : Jun 24 13:00:44 2024 GMT
        Subject: CN=3ff5651f802ee74caf68e4495f47ab87aefc4108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:96:04:df:ac:c1:d5:29:b6:a4:e9:31:87:
                    f9:16:41:43:43:19:29:9c:74:7a:0d:83:ac:df:9b:
                    be:99:9c:98:e5:cb:40:c2:2f:95:79:d0:dd:98:c9:
                    3d:e6:60:f0:f3:d9:e8:4e:f3:fd:eb:6e:65:9d:8b:
                    3b:ac:52:e5:49:72:63:c6:7b:29:af:8b:db:59:da:
                    52:3a:04:8a:c9:fe:2d:a1:97:5d:25:e1:51:32:5c:
                    c0:e1:3c:bd:4c:e5:72:ef:3d:39:ab:ac:3d:92:4f:
                    90:61:f0:f2:2e:77:2d:a7:3d:b4:ab:1a:d8:c2:a2:
                    36:b5:45:a3:d6:59:58:6f:0f:76:0c:5c:45:e8:c6:
                    40:9b:cc:4a:70:2a:93:dc:d5:d4:52:3a:4e:a3:d5:
                    75:c9:ba:1d:58:25:b1:2e:29:5f:eb:6d:f4:5f:ac:
                    ca:5e:38:5e:c7:4f:a2:fb:59:67:3f:f4:13:39:ae:
                    6f:05:5c:68:e2:a9:fd:7a:e9:e7:0e:64:d8:11:68:
                    d2:d6:6b:d2:7e:1a:78:22:d8:36:01:5f:d2:13:75:
                    fe:cc:5c:2a:0a:a9:22:9a:57:3f:fe:5c:0d:77:f4:
                    2c:43:b7:97:82:1c:64:ea:72:04:55:1f:7a:2a:a9:
                    16:67:2d:a9:09:d7:70:eb:a6:f6:47:52:0e:ad:75:
                    24:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F5:65:1F:80:2E:E7:4C:AF:68:E4:49:5F:47:AB:87:AE:FC:41:08
            X509v3 Authority Key Identifier:
                keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b2:70:26:ff:ae:3c:5e:bb:0c:15:5f:80:47:dc:7b:70:24:
         d3:37:bf:f5:69:d7:e8:3e:f0:13:4a:4d:61:7c:64:a1:16:86:
         e3:fc:e7:6a:88:c5:dc:bc:a4:07:3b:46:46:06:6d:00:9b:d9:
         c7:8c:df:00:96:da:77:b4:21:23:14:44:fd:4d:61:73:8b:b5:
         84:89:82:ac:f8:23:3b:7f:46:3b:05:35:22:ae:e9:7d:18:f4:
         bd:52:e6:31:c4:25:ab:a7:e7:8a:46:69:21:5b:98:ca:bc:c0:
         dc:0e:e9:84:09:4b:a6:b5:02:49:9e:f1:e0:21:be:9f:8e:b1:
         4a:ce:fe:8e:e2:2f:82:bf:f7:8e:57:dc:9e:89:eb:78:d6:e6:
         ac:07:0a:42:af:90:0d:05:94:33:f1:69:94:36:fe:25:9e:55:
         4b:12:4b:56:dc:62:79:82:29:e8:1f:c3:0c:a6:e4:b5:53:6f:
         8a:19:f0:48:03:e7:84:5b:73:91:06:b1:e0:8b:bf:81:42:a5:
         29:73:68:af:c5:a8:5e:2c:93:92:b6:72:c1:c6:ea:ed:49:a6:
         b2:a1:86:d5:ce:f8:53:f0:6b:21:b5:55:11:4d:2d:cb:d0:f7:
         b7:34:5b:7b:86:a9:89:0a:3f:46:6e:74:ac:97:55:d0:4d:a2:
         c8:0c:66:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:32:42 2024 by rpki-client on console-ams.rpki-client.org