Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
File:                     Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json)
Hash identifier:          0o4Vo1+zWOlOayjHjMYJxE4Wx3ylLVPNYavCoGZUG4o=
Subject key identifier:   32:5B:50:45:97:A1:9F:54:9F:5E:7E:68:13:CE:04:F9:97:71:F0:43
Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20
Certificate issuer:       /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
Certificate serial:       019352AD6B70C36710736DACBCE9604E2292
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
Manifest number:          0FBF
Signing time:             Fri 22 Nov 2024 07:01:56 +0000
Manifest this update:     Fri 22 Nov 2024 07:01:56 +0000
Manifest next update:     Sat 23 Nov 2024 07:01:56 +0000
Files and hashes:         1: 6d67rMtr4GuH1dvCJNjz5D7iXoo.roa (hash: Pmk+Kfc5Rha3OaHR73ki2JxS/B/Xtt3nCaF6HyQJZpA=)
                          2: 7TA4HKU8tHPMW-7wBzMfHFpcSEI.roa (hash: a57g2nuSjfird+Ve4F9Cm7j3hnmnMuKRKXH7E49gWc4=)
                          3: 8WsEEEpSEME1nCLV-8kLVkvoLNQ.roa (hash: G5p+HkdeBDuP3NCYNn1lIoUBUJUkY4n/HuoyF14cfX8=)
                          4: 8XHn_vLuz90gRPnedNOpW1kR-0o.roa (hash: 6T9bvwVGF5NIvXD+TkhRd7XzXSk9xuAav1M0VVfbDp4=)
                          5: AS0AruYq4lE_v2ZJ-Rha3kHiBMM.roa (hash: N5H9wIRmR9546eXLVFoEQn78mwRlsSCIKvuP26s0c0A=)
                          6: CibdkQtkiLb9omkHWq4ZFBsDDGg.roa (hash: myOersjR4qqHdX37D6kmbi5qrSBVLAB++TQ1yk+kbKg=)
                          7: D7Mo2gwf7tQG8kp0_9LyoIB8b6k.roa (hash: ZjAnuoVUlDut5HNwy9bt6bd1KmShN2S4kISsZYkJOcc=)
                          8: LoRkGvz9LThHxXwKGQgVrtddnNI.roa (hash: aRLUfmUbe5YJHf44SL53xD/ND2SQiFe3wbhIVvRcPw0=)
                          9: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: l77fAJMalsh4D1l9++vJMHp9/QLQD82IQX84o/V8Av4=)
                          10: Ufm5aKQDckFgHXa2L4pyzkIn7Ko.roa (hash: 17WMT/Kc3TmwPw4R3B3GiujwE1WUgUcmYRWMfYv1jnY=)
                          11: X2ENaNYyr15tlWaCML2-bSSy-qc.roa (hash: 1awdwF9/MxgZWV2exW2A8jmMUPqtOvRbL8k5xWZ6YZg=)
                          12: ZkBcirLOhOnhqdoBl-ZW-f5Akn4.roa (hash: KxuWGoUbIgZK30+LO7jD06m5WlENSXW1D1LIk3p79iI=)
                          13: dZcXYq-ZyD60kg0PxYAYThvnBTs.roa (hash: nZBEmCZQA4iOJ169/8n4mn+1uWMCWZr9cZ1O2U7BNi4=)
                          14: mTm4M9w3TO8lxIo8RNq1v1NiG7U.roa (hash: g+gFzwKxOyN1bodR5eeW24ljNUjYvS8Se5DFJPvoBYw=)
                          15: odkcJSc-O6vGjZZo3w43QqD4Mw4.roa (hash: JICkCD1OEJwU37rzTClwR4lI+mM8Us1ZaAUFpWiHZ/U=)
                          16: vsReOO8tBFjruuoyhiZf8FwacBA.roa (hash: +0fblfxRsZqAfSQtuaHOOU86PtE/ccNN0R9t/+co4Kw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:52:ad:6b:70:c3:67:10:73:6d:ac:bc:e9:60:4e:22:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20
        Validity
            Not Before: Nov 22 07:01:56 2024 GMT
            Not After : Nov 23 07:01:56 2024 GMT
        Subject: CN=325b504597a19f549f5e7e6813ce04f99771f043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:8f:90:a8:bb:c0:4a:67:da:43:e7:20:e0:
                    64:48:fd:b7:01:20:98:e8:80:bc:c8:79:23:2e:bd:
                    99:4c:26:e0:56:50:98:c2:11:83:b0:d4:d0:b8:97:
                    b4:12:3c:04:cb:f4:75:e9:1c:3f:c0:98:49:c1:c9:
                    93:79:b7:e8:29:ee:64:a9:30:01:24:8f:41:67:f4:
                    d8:bb:e7:b8:d6:d8:09:75:b1:e2:aa:5d:d0:56:bc:
                    0b:9e:2b:08:ea:1f:9a:06:69:ec:16:27:9e:62:20:
                    92:ac:6e:c2:c1:45:d5:35:67:4e:06:fb:11:e0:e2:
                    94:0b:2a:14:78:0f:2a:24:88:81:39:9d:97:e7:18:
                    2d:33:64:ab:21:87:0a:e8:8e:95:45:13:75:c9:47:
                    25:ac:6c:52:8e:cc:c0:68:c2:bc:0f:23:70:87:d2:
                    d1:a4:6e:40:ad:6e:e8:2e:eb:fe:8f:f9:81:c7:43:
                    10:bc:2d:25:0c:3a:ff:db:6c:e3:20:7e:53:9e:6a:
                    2b:18:e3:c7:e9:77:d9:89:48:ea:bf:cc:66:02:ef:
                    83:f0:f3:b4:74:d5:71:5c:c2:7c:0a:fa:ce:a4:df:
                    63:70:e2:33:7e:07:ab:2b:bd:a6:98:0d:f8:ba:be:
                    1c:48:b4:3a:16:bb:cd:b0:09:92:e3:a0:28:16:c7:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5B:50:45:97:A1:9F:54:9F:5E:7E:68:13:CE:04:F9:97:71:F0:43
            X509v3 Authority Key Identifier:
                keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:38:df:65:ec:85:25:fd:1a:38:9b:0e:b8:f3:66:8f:f9:54:
         71:55:50:18:5a:ae:f1:e2:6b:0b:4c:69:dc:9d:b5:6f:87:33:
         25:fc:e2:c4:e7:5b:e1:db:d1:5a:bd:80:61:18:75:cb:5a:3c:
         64:20:63:06:f8:d7:be:96:dd:a3:5e:26:b4:ff:24:4e:55:ad:
         d9:6d:6e:00:cf:53:96:b4:99:8a:68:d6:56:42:86:e4:ca:c7:
         ec:2f:e2:9d:b5:59:2f:bb:ef:bf:78:0a:98:77:eb:cc:1b:2e:
         62:65:89:a3:e1:3a:bc:43:9d:ac:62:49:89:7e:93:cf:f0:1c:
         df:2b:8b:a5:6e:a7:1e:7d:0d:2a:82:31:6f:b8:14:c5:ec:ca:
         10:fd:75:14:1e:96:7b:ca:45:d8:47:f9:4f:67:8a:bd:0f:91:
         3b:a9:9d:24:ad:53:8e:9e:db:5d:48:8a:97:7e:1f:7c:d3:83:
         ed:02:78:fa:e2:ef:33:9f:67:1b:7a:8e:a9:b9:c6:27:8f:bf:
         ae:b1:71:3c:9f:a7:86:80:92:d7:b5:e5:0a:07:63:09:e6:15:
         b6:4f:dd:3e:06:0c:7b:89:29:47:11:f6:29:f4:f4:54:66:9e:
         fd:7a:09:dd:36:a4:c6:1c:8e:12:59:b1:b6:4d:10:bb:59:56:
         ba:3e:51:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNSrWtww2cQc22svOlgTiKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1
YTNjMjAwHhcNMjQxMTIyMDcwMTU2WhcNMjQxMTIzMDcwMTU2WjAzMTEwLwYDVQQD
EygzMjViNTA0NTk3YTE5ZjU0OWY1ZTdlNjgxM2NlMDRmOTk3NzFmMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH6PkKi7wEpn2kPnIOBkSP23ASCY
6IC8yHkjLr2ZTCbgVlCYwhGDsNTQuJe0EjwEy/R16Rw/wJhJwcmTebfoKe5kqTAB
JI9BZ/TYu+e41tgJdbHiql3QVrwLnisI6h+aBmnsFieeYiCSrG7CwUXVNWdOBvsR
4OKUCyoUeA8qJIiBOZ2X5xgtM2SrIYcK6I6VRRN1yUclrGxSjszAaMK8DyNwh9LR
pG5ArW7oLuv+j/mBx0MQvC0lDDr/22zjIH5TnmorGOPH6XfZiUjqv8xmAu+D8PO0
dNVxXMJ8CvrOpN9jcOIzfgerK72mmA34ur4cSLQ6FrvNsAmS46AoFsejoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJbUEWXoZ9Un15+aBPOBPmXcfBDMB8GA1UdIwQY
MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt
Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy
LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDjfZeyF
Jf0aOJsOuPNmj/lUcVVQGFqu8eJrC0xp3J21b4czJfzixOdb4dvRWr2AYRh1y1o8
ZCBjBvjXvpbdo14mtP8kTlWt2W1uAM9TlrSZimjWVkKG5MrH7C/inbVZL7vvv3gK
mHfrzBsuYmWJo+E6vEOdrGJJiX6Tz/Ac3yuLpW6nHn0NKoIxb7gUxezKEP11FB6W
e8pF2Ef5T2eKvQ+RO6mdJK1Tjp7bXUiKl34ffNOD7QJ4+uLvM59nG3qOqbnGJ4+/
rrFxPJ+nhoCS17XlCgdjCeYVtk/dPgYMe4kpRxH2KfT0VGae/XoJ3TakxhyOElmx
tk0Qu1lWuj5Rzw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:23:05 2024 by rpki-client on console-ams.rpki-client.org