Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File:                     Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier:          wp/EVQqC7CitaEEMC2PHsR+uYujRBMdCyxn5Qi/UlGg=
Subject key identifier:   57:2F:25:30:CA:44:E8:42:F7:FC:DE:D9:53:85:C1:98:E0:A6:E9:CA
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer:       /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial:       01901DB3CAC2177C8A808B6292E17DDC2CB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number:          76
Signing time:             Sat 15 Jun 2024 21:00:40 +0000
Manifest this update:     Sat 15 Jun 2024 21:00:40 +0000
Manifest next update:     Sun 16 Jun 2024 21:00:40 +0000
Files and hashes:         1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: NHJLANSN0GvXEEqGfTXZm8lXpuubf9y/prtdiyiV1L4=)
                          2: bvazcZgPnff4-IRbY0vSQckaULI.roa (hash: 9IWRN2rpOPieEFQHWVf0Hujx2sgtnDNNpDSZlVONpR0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:b3:ca:c2:17:7c:8a:80:8b:62:92:e1:7d:dc:2c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
        Validity
            Not Before: Jun 15 21:00:40 2024 GMT
            Not After : Jun 16 21:00:40 2024 GMT
        Subject: CN=572f2530ca44e842f7fcded95385c198e0a6e9ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0f:e9:89:25:0d:64:8d:df:4a:0a:f3:8e:05:
                    90:44:bc:f4:54:dd:a3:56:c7:20:0d:e9:c3:54:0c:
                    bc:2c:a2:4b:11:b8:18:12:a1:ee:01:5b:ef:aa:03:
                    a1:75:8d:50:3f:b8:09:9e:0c:b4:fb:6a:28:2f:31:
                    94:bf:2b:b7:3e:41:c2:57:42:6f:64:ba:dc:2a:05:
                    e4:75:42:83:bd:75:3d:0d:0b:cd:91:3e:d7:79:bc:
                    7b:02:98:33:bf:6a:96:50:cb:0d:5b:3d:22:aa:25:
                    c9:ef:85:b1:93:7c:da:0f:69:18:70:74:c2:ce:5b:
                    4d:1d:42:f5:9f:ac:30:91:f2:28:01:ff:37:ec:b4:
                    aa:7d:72:8b:14:5c:45:8d:1f:ee:5b:ce:1f:df:3d:
                    27:6e:7f:2e:e3:48:1e:a0:f8:5a:b7:e4:b9:38:c9:
                    f4:79:ff:aa:34:df:5a:fe:95:6f:13:54:02:e1:35:
                    77:4b:db:e2:b5:85:26:8e:b2:c0:5e:18:ef:a6:6d:
                    85:8f:9f:8e:aa:aa:15:23:d9:8c:6c:e6:82:14:69:
                    24:7c:c7:00:d8:a1:db:70:61:a6:6a:e8:dd:ce:96:
                    20:9d:e0:03:42:79:e6:91:68:12:36:71:eb:54:af:
                    aa:dd:42:e5:7a:50:45:39:4c:15:f4:1c:8a:b4:a9:
                    35:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2F:25:30:CA:44:E8:42:F7:FC:DE:D9:53:85:C1:98:E0:A6:E9:CA
            X509v3 Authority Key Identifier:
                keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c8:42:68:73:ef:71:38:b0:95:73:89:94:92:8e:01:cf:1c:
         2b:03:87:13:ff:0e:65:56:ed:af:24:af:1d:42:6f:5c:1a:83:
         9d:5c:08:29:23:8d:0b:b4:56:2b:cb:45:a3:a4:19:be:5b:77:
         89:d7:a5:fb:50:58:99:1f:36:7d:c9:8a:79:ad:6f:92:3b:8f:
         cb:48:1b:40:44:b8:0e:16:39:fb:50:af:cd:31:11:31:96:f8:
         69:bf:d4:be:09:0b:95:ae:7a:b5:95:a8:ab:d8:2e:96:e1:e9:
         58:4b:8a:05:38:90:5f:94:c2:6c:df:52:f9:9c:f6:21:07:f0:
         b0:40:b6:8b:95:30:67:f5:55:ae:55:6d:ce:a4:68:16:23:ca:
         8e:e7:28:71:f5:e5:80:da:7c:97:a2:f3:76:f7:75:75:0f:2e:
         dd:e6:69:83:9e:4d:af:f3:1d:7c:87:15:41:1f:67:af:39:40:
         02:98:b2:c9:20:ca:7a:af:15:04:40:b9:49:81:2e:27:20:9d:
         c3:4d:47:96:c1:c0:5a:b1:52:d6:7b:3f:ca:fd:a2:1b:d8:cc:
         b4:ac:3e:b4:df:27:fe:80:b1:2f:8c:07:09:7d:b6:2d:29:31:
         e4:65:08:99:82:94:a9:ff:8c:a5:d1:1a:62:f2:a2:34:04:72:
         94:bb:75:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:43:54 2024 by rpki-client on console-ams.rpki-client.org