Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File:                     n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier:          rshzKeg2ZrGWoxFTjzdY86//zMDnzECJpL9tCW1rlJY=
Subject key identifier:   C5:37:F1:40:8C:A3:53:2D:A3:78:0E:DC:7A:4E:11:88:C8:32:B7:B3
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer:       /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial:       019358E4F6A0FC980854B9D04B6074F7CAD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number:          0C1E
Signing time:             Sat 23 Nov 2024 12:00:20 +0000
Manifest this update:     Sat 23 Nov 2024 12:00:20 +0000
Manifest next update:     Sun 24 Nov 2024 12:00:20 +0000
Files and hashes:         1: M23JB57n_ov9n-1slXJitgt8Vv8.roa (hash: 1H9UeWevdkcR/mcszQOSuDPT/pk7XARCNr/amBBT+q8=)
                          2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: CuK1Dc+yH385PA/Do15G/icce6t/BFTS2NqRK2JPV4U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:58:e4:f6:a0:fc:98:08:54:b9:d0:4b:60:74:f7:ca:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
        Validity
            Not Before: Nov 23 12:00:20 2024 GMT
            Not After : Nov 24 12:00:20 2024 GMT
        Subject: CN=c537f1408ca3532da3780edc7a4e1188c832b7b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:3e:94:54:4d:c8:be:f9:88:9f:5f:14:d5:
                    88:2f:d5:2f:e4:58:27:95:57:fd:74:bc:23:f3:ea:
                    d7:e5:aa:59:02:0d:13:8e:a9:50:fc:7e:82:b1:d5:
                    97:1d:25:86:7d:77:de:b1:63:0b:38:69:c4:e4:f4:
                    3f:c7:ed:39:ef:7e:f0:a8:92:b2:33:fa:7b:50:91:
                    49:d2:23:08:85:69:51:5f:a7:34:84:f6:bd:96:f3:
                    4d:69:69:96:76:65:a2:a4:46:44:cf:77:47:21:94:
                    77:cc:0b:64:72:53:69:65:39:84:a2:1f:17:3a:70:
                    5f:f0:72:7a:10:73:51:7a:16:ba:ea:f7:1a:69:1a:
                    32:24:57:92:58:04:f1:97:a9:ba:96:a3:5f:04:42:
                    d5:07:40:d2:10:b0:cb:7b:9f:d1:0d:10:1d:f4:43:
                    c9:cc:a2:b0:7e:27:b1:54:3a:ad:d1:6b:3b:8f:c5:
                    d2:09:bb:54:91:e9:e6:54:30:c5:46:14:16:bb:c7:
                    6d:49:66:93:52:8a:9d:e2:80:2b:c1:de:fb:1e:91:
                    68:37:34:da:72:4c:72:da:45:f5:e6:e1:7b:85:b6:
                    26:a1:2e:31:f3:35:9d:a7:5b:70:25:48:97:1b:5d:
                    33:67:49:34:e8:b1:a3:e3:aa:57:da:22:42:5f:90:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:37:F1:40:8C:A3:53:2D:A3:78:0E:DC:7A:4E:11:88:C8:32:B7:B3
            X509v3 Authority Key Identifier:
                keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:df:02:9a:bc:62:b5:1d:d7:42:c3:de:48:fe:07:37:be:
         fe:94:ec:4e:32:1b:42:1b:56:92:ae:06:6f:a7:c3:5e:b9:1e:
         13:b3:36:95:00:31:aa:c5:2c:e4:17:20:bc:88:6a:c7:5a:a5:
         69:8c:e7:70:15:28:69:43:5f:9c:63:e7:91:94:63:b8:16:07:
         53:20:67:95:ae:62:eb:1e:7b:d1:ca:5f:b2:38:c5:c7:63:87:
         b3:d6:03:ad:3f:0b:b4:d3:f5:e2:5a:93:76:f2:17:df:d1:16:
         31:40:91:16:74:8a:d8:5e:ef:db:44:4f:bf:7b:45:20:10:d0:
         b6:60:5d:65:d9:51:69:98:2f:2b:75:d4:3b:03:07:60:21:8f:
         7e:88:67:6f:fd:dc:56:6d:f4:3d:df:49:03:97:e2:4d:56:4d:
         c1:92:67:cd:4b:a2:89:17:b7:ff:34:77:70:54:18:d0:d1:f9:
         bf:69:04:3e:f1:39:47:51:f7:c0:42:33:d1:98:3c:ef:8b:ac:
         fe:03:f1:f9:3a:cd:31:be:d3:4c:69:f7:b0:18:3b:2a:54:00:
         08:1d:32:67:e6:ea:55:57:1e:65:36:a8:60:94:cf:95:fa:71:
         f0:d6:f0:6e:6c:92:5b:cc:cd:1b:ee:d3:42:a6:d4:37:fc:4b:
         9e:00:4d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:15:19 2024 by rpki-client on console-fra.rpki-client.org