Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File:                     n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier:          20ENgoNygjKbhEggJIoCHzBpwqMy38GQLaOOxtqWFmU=
Subject key identifier:   27:A6:0D:40:6E:C2:69:09:36:7C:65:F6:FC:21:B7:AB:92:BD:AA:35
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer:       /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial:       018F87B6C6D143E9E4A206D873C1D6C3CF70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number:          0A24
Signing time:             Fri 17 May 2024 18:00:53 +0000
Manifest this update:     Fri 17 May 2024 18:00:53 +0000
Manifest next update:     Sat 18 May 2024 18:00:53 +0000
Files and hashes:         1: M23JB57n_ov9n-1slXJitgt8Vv8.roa (hash: 1H9UeWevdkcR/mcszQOSuDPT/pk7XARCNr/amBBT+q8=)
                          2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: 5+BCwh9D/dhXrkcO9TAWij+RcFR5tMMKJc74xt2D0mA=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:c6:d1:43:e9:e4:a2:06:d8:73:c1:d6:c3:cf:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
        Validity
            Not Before: May 17 18:00:53 2024 GMT
            Not After : May 18 18:00:53 2024 GMT
        Subject: CN=27a60d406ec26909367c65f6fc21b7ab92bdaa35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:cd:05:88:b5:36:7f:05:bc:17:f8:eb:e4:
                    51:40:a2:bd:c1:a5:4e:0b:da:fb:02:8a:b7:2c:8e:
                    39:b4:8d:62:d0:72:ed:dc:f6:26:78:fb:92:d5:d2:
                    b8:7f:d4:4b:b0:a7:94:74:ab:55:0e:66:2c:a9:5c:
                    72:6c:d7:e6:a7:05:e1:3c:63:c1:7d:d5:e0:4d:25:
                    1d:9e:a3:36:f8:c2:2b:2a:39:5e:2d:28:06:cb:82:
                    ad:19:72:2f:a8:9a:87:35:4c:51:7d:a9:8a:81:30:
                    4c:d0:bb:54:d2:59:1b:7a:9e:d8:d4:3f:02:25:14:
                    86:15:44:b6:00:85:d1:6b:8e:a3:7b:41:91:54:af:
                    a7:aa:8b:b4:99:40:83:92:7f:7d:d3:ff:7c:74:89:
                    ba:58:8c:2f:6d:8e:be:42:99:ab:13:aa:53:52:21:
                    94:e9:29:9e:58:fd:e2:03:27:8c:cd:64:e6:20:91:
                    2b:1c:9c:7f:41:62:eb:77:c2:3f:28:29:49:fd:8a:
                    54:a8:3c:65:84:1d:a2:2e:2b:f8:5d:ff:5e:d2:b2:
                    d6:57:17:8a:fa:de:83:48:b0:c3:17:53:40:88:6c:
                    8d:b8:8a:06:28:80:ea:f7:45:9c:27:f9:3b:53:03:
                    2c:94:16:15:92:76:44:64:25:fa:82:eb:3d:ae:64:
                    bd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A6:0D:40:6E:C2:69:09:36:7C:65:F6:FC:21:B7:AB:92:BD:AA:35
            X509v3 Authority Key Identifier:
                keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4b:89:fd:76:67:bd:20:b4:c8:6c:9e:73:a8:8a:6e:34:24:
         79:23:6a:c5:e0:f0:90:e7:b1:b2:c0:e0:80:d2:35:f1:9b:32:
         27:d3:4c:f6:26:89:3e:5e:91:77:f6:17:01:2c:89:0c:0d:68:
         84:5e:53:3f:f5:22:67:0a:1d:3f:de:78:b7:14:dc:03:f1:ec:
         2f:ea:f7:53:5b:4e:f7:26:3f:92:ea:46:30:b7:48:4b:db:c7:
         10:c8:b4:13:b6:43:84:fd:e1:0b:02:63:75:0e:bd:67:93:35:
         fa:b4:42:1d:b2:11:11:78:dc:48:e3:ec:bd:f9:82:d6:a9:b4:
         45:06:00:7f:3d:29:74:6d:3c:5b:64:12:3a:2a:af:ec:37:e3:
         38:13:29:e3:88:80:30:b9:66:87:94:07:fe:d2:2c:f7:26:f2:
         68:a9:60:d0:ad:19:fc:5c:58:93:52:e7:19:01:65:b6:61:db:
         9c:74:96:e4:03:66:0a:83:cf:d5:a4:86:90:47:ea:43:a3:06:
         de:e5:de:df:77:f9:27:45:f8:75:30:0c:3f:ef:28:51:bd:1e:
         60:72:04:5c:d8:76:d5:0f:2f:3f:d5:d6:d4:3b:43:e2:5c:67:
         22:40:34:3c:34:9d:0e:9b:98:ba:37:45:14:4e:84:98:89:bc:
         21:ef:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 23:51:46 2024 by rpki-client on console-ams.rpki-client.org