Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
File: NHK1U_DLCxOQDUwuDmx3msoD47E.mft (raw, json)
Hash identifier: JB+Tg6YCoim/xilvQWp9u3NfhgkcTg8yrflf7q+eM24=
Subject key identifier: F8:24:07:08:CF:47:B4:0F:6B:3E:4A:4F:F7:59:12:3B:AB:48:98:D9
Authority key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Certificate issuer: /CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Certificate serial: 0193553F8D1C803B565585D51E5EB4F21FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
Manifest number: 109D
Signing time: Fri 22 Nov 2024 19:00:48 +0000
Manifest this update: Fri 22 Nov 2024 19:00:48 +0000
Manifest next update: Sat 23 Nov 2024 19:00:48 +0000
Files and hashes: 1: MWrvKBMZl5XF8CiM3VDB7xqelrU.roa (hash: qvsELfLBDsDjLeKQmhFcg3xejo6n0fGM5mSXWGZLdkE=)
2: NHK1U_DLCxOQDUwuDmx3msoD47E.crl (hash: U1yhSgZQTwbBdwneidZMehbIDduQ6XbuAr+BpvvUEnA=)
3: Rj8HOl-qGs0SFqBl3XF2l3Lo1ws.roa (hash: NsDWk8sy8Xq9cHOI1copURDWOX1ZnG8z9J1HMFqap6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:3f:8d:1c:80:3b:56:55:85:d5:1e:5e:b4:f2:1f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Validity
Not Before: Nov 22 19:00:48 2024 GMT
Not After : Nov 23 19:00:48 2024 GMT
Subject: CN=f8240708cf47b40f6b3e4a4ff759123bab4898d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:61:06:d0:f7:aa:bb:25:8d:08:13:61:c3:
eb:b9:08:a4:02:ae:da:f5:e8:2f:fe:2d:ff:84:0b:
a6:49:47:7a:90:db:87:ad:cb:d1:ee:6a:cf:06:01:
d3:ec:ed:9f:2b:27:f9:31:c7:a3:72:6e:b6:92:ed:
0e:26:49:8a:ba:b5:e8:a3:90:d3:aa:35:de:5d:2b:
a6:3a:03:a4:dc:25:c1:76:bb:04:79:d4:2b:1c:5f:
a6:a3:50:9a:3c:60:fe:1c:6a:79:1c:2d:33:a3:e1:
5d:64:e7:39:e0:82:41:8e:93:80:da:30:65:db:0a:
95:a6:a0:00:71:ae:ca:8a:23:4f:ba:2d:bc:7e:83:
f2:8f:d0:68:a9:0d:ef:70:15:2a:33:a3:d4:56:54:
26:bc:71:ce:ee:10:e8:55:af:86:3a:94:de:6d:04:
ac:50:4a:d9:17:d3:25:9d:30:5c:63:14:cb:2b:53:
c4:c3:3d:da:97:08:a6:22:c0:72:33:0e:c0:4d:ae:
94:65:a5:58:87:22:1c:cc:f7:60:9d:a4:54:67:79:
c5:f6:86:32:be:d7:b3:ed:c4:e0:b5:69:45:fc:57:
a2:95:1b:84:76:8b:5f:21:79:3d:a0:15:54:54:dd:
54:c3:0c:2a:bf:1a:ee:06:53:12:2a:10:79:f6:ab:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:24:07:08:CF:47:B4:0F:6B:3E:4A:4F:F7:59:12:3B:AB:48:98:D9
X509v3 Authority Key Identifier:
keyid:34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:e2:d4:5d:ed:6b:4d:34:02:ac:be:64:eb:8e:d7:8b:e4:db:
8b:bf:df:c7:4a:41:6b:e3:46:7f:e6:41:a0:d5:b1:ff:62:3d:
14:1b:70:f2:7d:d4:94:57:83:38:cb:66:70:b1:6a:f1:8c:21:
aa:c4:c0:f6:14:9e:ff:74:13:2c:5e:41:18:e0:5c:c9:b1:4e:
1e:89:a4:bb:18:6f:c2:a1:1e:b2:92:38:36:52:08:d2:64:9a:
ac:0d:80:7c:ab:09:54:66:73:d8:df:0b:37:33:6d:d9:35:4f:
94:33:4e:e4:44:31:b8:19:01:6e:61:8f:69:c8:a7:fd:fc:b8:
a0:95:90:65:4e:d2:e8:9f:02:f1:58:65:7c:bc:63:ee:f3:80:
25:5e:b0:0c:37:50:11:0a:09:4f:68:3c:5a:1e:17:65:d8:99:
5b:95:e0:e2:3a:7e:41:bf:24:45:2a:6e:a4:f4:c8:db:65:e5:
13:8a:92:23:87:0f:ef:d7:14:1b:20:a1:1d:ba:a5:19:c3:07:
a4:83:a3:23:b7:0c:47:d8:c6:99:3a:3e:09:f6:49:10:65:dd:
a5:80:31:16:8c:79:f1:4e:79:a4:76:97:06:86:84:9c:0b:d1:
99:c7:cb:7d:03:3f:52:b1:bf:55:5e:0b:f7:71:60:4c:f2:5a:
d7:04:cd:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNVP40cgDtWVYXVHl608h/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NzJiNTUzZjBjYjBiMTM5MDBkNGMyZTBlNmM3NzlhY2Ew
M2UzYjEwHhcNMjQxMTIyMTkwMDQ4WhcNMjQxMTIzMTkwMDQ4WjAzMTEwLwYDVQQD
EyhmODI0MDcwOGNmNDdiNDBmNmIzZTRhNGZmNzU5MTIzYmFiNDg5OGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OthBtD3qrsljQgTYcPruQikAq7a
9egv/i3/hAumSUd6kNuHrcvR7mrPBgHT7O2fKyf5Mcejcm62ku0OJkmKurXoo5DT
qjXeXSumOgOk3CXBdrsEedQrHF+mo1CaPGD+HGp5HC0zo+FdZOc54IJBjpOA2jBl
2wqVpqAAca7KiiNPui28foPyj9BoqQ3vcBUqM6PUVlQmvHHO7hDoVa+GOpTebQSs
UErZF9MlnTBcYxTLK1PEwz3alwimIsByMw7ATa6UZaVYhyIczPdgnaRUZ3nF9oYy
vtez7cTgtWlF/FeilRuEdotfIXk9oBVUVN1UwwwqvxruBlMSKhB59qvvZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgkBwjPR7QPaz5KT/dZEjurSJjZMB8GA1UdIwQY
MBaAFDRytVPwywsTkA1MLg5sd5rKA+OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmIt
MGQyMDUyNWVkYzc0LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wNWVkMmYtYzRmNy00NDE3LWE0ZmItMGQyMDUyNWVkYzc0
LzEvTkhLMVVfRExDeE9RRFV3dURteDNtc29ENDdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAweLUXe1r
TTQCrL5k647Xi+Tbi7/fx0pBa+NGf+ZBoNWx/2I9FBtw8n3UlFeDOMtmcLFq8Ywh
qsTA9hSe/3QTLF5BGOBcybFOHomkuxhvwqEespI4NlII0mSarA2AfKsJVGZz2N8L
NzNt2TVPlDNO5EQxuBkBbmGPacin/fy4oJWQZU7S6J8C8VhlfLxj7vOAJV6wDDdQ
EQoJT2g8Wh4XZdiZW5Xg4jp+Qb8kRSpupPTI22XlE4qSI4cP79cUGyChHbqlGcMH
pIOjI7cMR9jGmTo+CfZJEGXdpYAxFox58U55pHaXBoaEnAvRmcfLfQM/UrG/VV4L
93FgTPJa1wTNPQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:19:48 2024 by rpki-client on console-fra.rpki-client.org