Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
File:                     Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json)
Hash identifier:          VWwF5/slynw2q5lhdlGlrduh751rHkQFJiaxpOwbnik=
Subject key identifier:   52:50:AD:73:90:3E:57:E6:56:3B:BC:5F:E7:BE:29:39:A5:4A:EB:02
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       0190524605747535C5337F122540DF3A36F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
Manifest number:          0E2F
Signing time:             Wed 26 Jun 2024 02:00:38 +0000
Manifest this update:     Wed 26 Jun 2024 02:00:38 +0000
Manifest next update:     Thu 27 Jun 2024 02:00:38 +0000
Files and hashes:         1: 7TA4HKU8tHPMW-7wBzMfHFpcSEI.roa (hash: a57g2nuSjfird+Ve4F9Cm7j3hnmnMuKRKXH7E49gWc4=)
                          2: 8WsEEEpSEME1nCLV-8kLVkvoLNQ.roa (hash: G5p+HkdeBDuP3NCYNn1lIoUBUJUkY4n/HuoyF14cfX8=)
                          3: 8XHn_vLuz90gRPnedNOpW1kR-0o.roa (hash: 6T9bvwVGF5NIvXD+TkhRd7XzXSk9xuAav1M0VVfbDp4=)
                          4: CibdkQtkiLb9omkHWq4ZFBsDDGg.roa (hash: myOersjR4qqHdX37D6kmbi5qrSBVLAB++TQ1yk+kbKg=)
                          5: D7Mo2gwf7tQG8kp0_9LyoIB8b6k.roa (hash: ZjAnuoVUlDut5HNwy9bt6bd1KmShN2S4kISsZYkJOcc=)
                          6: LoRkGvz9LThHxXwKGQgVrtddnNI.roa (hash: aRLUfmUbe5YJHf44SL53xD/ND2SQiFe3wbhIVvRcPw0=)
                          7: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: HycjTbt2T0j+6tKtCd7dB3N3ymuq7HkhmSMV5x8ePRU=)
                          8: Y8kqMxI_845F85LtcCBTI0WWIFk.roa (hash: cLX21b50BbztEbbMFtxDihlDOrg59lveMCbwbof277Q=)
                          9: ZkBcirLOhOnhqdoBl-ZW-f5Akn4.roa (hash: KxuWGoUbIgZK30+LO7jD06m5WlENSXW1D1LIk3p79iI=)
                          10: dZcXYq-ZyD60kg0PxYAYThvnBTs.roa (hash: nZBEmCZQA4iOJ169/8n4mn+1uWMCWZr9cZ1O2U7BNi4=)
                          11: lt8f4_OzN5S5VgiVeMwXs-OvlvY.roa (hash: 7VBS4e4bUM0at7ZYHqkEIBK080ptDPwCBgWaHPzoPcs=)
                          12: mTm4M9w3TO8lxIo8RNq1v1NiG7U.roa (hash: g+gFzwKxOyN1bodR5eeW24ljNUjYvS8Se5DFJPvoBYw=)
                          13: odkcJSc-O6vGjZZo3w43QqD4Mw4.roa (hash: JICkCD1OEJwU37rzTClwR4lI+mM8Us1ZaAUFpWiHZ/U=)
                          14: uAqfaMDJVl3wC5VHg5wGDauZJv0.roa (hash: nbMfLRoWpozukxfVggULpwrotnrbBLPhCNiwMIZ1Ro8=)
                          15: vsReOO8tBFjruuoyhiZf8FwacBA.roa (hash: +0fblfxRsZqAfSQtuaHOOU86PtE/ccNN0R9t/+co4Kw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:46:05:74:75:35:c5:33:7f:12:25:40:df:3a:36:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Jun 26 02:00:38 2024 GMT
            Not After : Jun 27 02:00:38 2024 GMT
        Subject: CN=5250ad73903e57e6563bbc5fe7be2939a54aeb02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3a:c7:0a:aa:0f:6d:c7:2b:b4:f3:de:ce:26:
                    0d:c1:12:a9:72:49:f2:26:55:6a:8c:c1:08:34:60:
                    bb:62:65:df:6c:69:c8:4d:6a:f5:63:7b:33:7f:96:
                    be:fa:75:9f:ec:b0:1b:fb:45:3f:a1:5e:24:24:46:
                    81:0d:47:d6:9e:a2:5c:dc:c1:3a:2c:7d:4a:9e:ab:
                    f8:30:f8:30:b6:7c:1c:07:b1:f5:a4:65:86:92:69:
                    69:be:78:43:cd:89:40:8d:41:c1:93:da:60:a2:e2:
                    d8:d8:d1:81:50:e2:b2:9d:9b:c6:a7:cc:ed:5b:8f:
                    c8:5c:b4:20:1a:3c:40:74:25:d0:3f:de:24:2c:22:
                    93:44:1d:30:a0:85:41:92:85:99:d9:45:47:2b:64:
                    fd:c2:58:60:31:00:91:65:00:64:a9:f2:a0:a7:a1:
                    8e:de:3a:61:65:db:62:73:58:f0:23:ca:13:c9:c8:
                    5f:34:69:71:b3:2c:04:68:fe:0a:84:34:26:84:b4:
                    83:50:6f:84:da:02:ed:7f:76:ec:41:cc:fa:be:81:
                    ed:76:5d:bc:2a:3a:59:60:8d:ad:05:c5:fc:44:4e:
                    ee:ab:9b:a2:37:8b:8d:50:e2:58:67:57:60:e0:8d:
                    04:db:d3:70:c1:54:dc:cc:13:43:07:f2:6c:93:83:
                    23:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:50:AD:73:90:3E:57:E6:56:3B:BC:5F:E7:BE:29:39:A5:4A:EB:02
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d6:61:45:7f:56:83:e9:0e:50:f0:67:42:cb:9f:43:90:39:
         3b:f4:85:e8:db:36:7c:b1:f9:75:ac:38:27:b1:75:cd:41:1f:
         a2:44:4c:17:b8:8e:6d:91:f1:76:ff:78:ae:7c:27:a5:3b:b8:
         c1:14:d0:4c:e1:48:ac:b2:01:05:56:3b:84:de:0f:a7:75:4c:
         64:ee:65:2e:f6:86:c5:d1:c2:07:4b:2c:c0:09:d1:e1:26:4a:
         d5:67:a6:19:ad:26:c0:41:b1:21:53:cd:98:62:31:57:62:28:
         93:08:df:d4:bf:86:aa:08:08:1c:ea:1d:5e:58:b9:f1:c6:42:
         8a:3c:c8:db:6d:b3:ef:3a:88:78:dd:06:57:1e:10:c4:a7:92:
         59:e1:24:bb:1d:3f:1c:51:11:9d:fa:7d:51:c6:da:13:cd:4f:
         0d:cf:7e:3e:96:61:91:ba:90:38:86:ab:cb:48:c9:26:ad:e2:
         a6:33:07:ea:6f:5b:3b:b1:f3:43:6e:c9:ba:32:d5:f5:d9:00:
         aa:e5:ad:64:2f:9c:18:c8:04:26:95:46:4e:1f:13:4e:05:3a:
         d3:f0:4e:1d:f0:09:30:64:c7:af:65:1b:3b:95:d2:91:c5:8c:
         dd:99:40:01:8b:14:5d:60:70:12:9d:12:fc:64:48:04:67:7e:
         5a:25:8a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 04:50:48 2024 by rpki-client on console-ams.rpki-client.org