Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
File:                     ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft (raw, json)
Hash identifier:          8Kmk+dzUvyNCkZ2bemfCm6PfaTWStpFM58ZjGDLUF3c=
Subject key identifier:   DF:5D:B2:8A:7B:87:5E:61:DC:58:DF:49:16:0D:49:61:D0:71:B6:71
Authority key identifier: 9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D
Certificate issuer:       /CN=9edc3ff166155e6988be8095fcb420001d8be21d
Certificate serial:       01935A67A0054D9DB279197B3E1B80F437E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
Manifest number:          1370
Signing time:             Sat 23 Nov 2024 19:02:40 +0000
Manifest this update:     Sat 23 Nov 2024 19:02:40 +0000
Manifest next update:     Sun 24 Nov 2024 19:02:40 +0000
Files and hashes:         1: UTUvCUbB1un8q0KnILlcjmsz8qM.roa (hash: DICVvqBLT6SWF5FclYwQps+qDTyua5zSXj72GPyAzZE=)
                          2: ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl (hash: 8EIUwGMrLUQDrXYS/bLptXEL96XnVOhXxntQOwCIeaE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 15:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:5a:67:a0:05:4d:9d:b2:79:19:7b:3e:1b:80:f4:37:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9edc3ff166155e6988be8095fcb420001d8be21d
        Validity
            Not Before: Nov 23 19:02:40 2024 GMT
            Not After : Nov 24 19:02:40 2024 GMT
        Subject: CN=df5db28a7b875e61dc58df49160d4961d071b671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8b:b0:2d:50:75:9b:95:5f:fe:85:8f:ed:20:
                    21:5f:5f:ae:01:23:c6:3e:ec:a6:8e:49:96:e9:54:
                    78:47:4a:87:ce:f5:8b:70:27:a2:a6:00:e2:6d:37:
                    93:ef:aa:2f:85:5a:14:b3:82:9b:ec:dd:0f:ed:65:
                    87:69:99:8f:e0:59:af:0a:39:76:4e:0a:80:df:08:
                    f7:f9:68:1c:d5:9f:ac:98:ac:de:4a:39:72:b6:35:
                    88:33:aa:74:46:9e:57:33:12:55:f3:46:05:4a:18:
                    5d:f2:ed:bb:20:4b:13:24:67:1a:28:70:cb:b8:dc:
                    9e:b8:fe:5b:cd:42:96:55:92:cb:19:31:18:54:4a:
                    79:d8:97:dd:44:fb:33:c0:b7:bf:58:fa:71:20:4d:
                    01:70:83:65:c0:86:e0:12:8c:e1:88:d7:0b:cb:ac:
                    99:fa:f0:74:b8:7f:49:91:76:de:96:b1:3c:40:21:
                    c6:34:88:44:4c:cc:20:5c:dd:15:37:12:04:19:8c:
                    11:0a:de:f9:2e:1e:dc:80:7e:54:b3:86:2c:88:34:
                    9a:a7:7b:52:95:0f:32:86:1a:4e:2e:87:14:8a:c3:
                    03:ac:3c:d1:56:04:59:52:50:06:7f:ba:58:f6:9f:
                    67:8c:d4:3c:5d:35:ec:71:4e:7a:14:c1:87:78:5e:
                    44:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5D:B2:8A:7B:87:5E:61:DC:58:DF:49:16:0D:49:61:D0:71:B6:71
            X509v3 Authority Key Identifier:
                keyid:9E:DC:3F:F1:66:15:5E:69:88:BE:80:95:FC:B4:20:00:1D:8B:E2:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntw_8WYVXmmIvoCV_LQgAB2L4h0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4ffcb0-bc57-4602-ad3d-524d144301ff/1/ntw_8WYVXmmIvoCV_LQgAB2L4h0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:50:8d:6d:61:67:40:19:57:3d:1b:c8:85:22:90:8f:ea:dd:
         b1:25:6a:75:51:38:ca:ac:a4:ee:2d:1d:db:45:f5:db:a4:c1:
         38:6b:17:86:15:97:60:34:6b:74:c3:45:6e:c9:99:24:42:dc:
         c7:6c:82:ee:8a:ab:37:63:8f:10:91:ec:7e:59:35:db:0a:a0:
         a0:0e:51:6c:48:c7:66:5f:af:e5:a9:e8:84:c4:c3:b4:e1:f7:
         05:5e:f0:6f:c4:9b:c4:02:42:a9:52:d2:ee:f9:46:a5:96:b7:
         d4:90:37:78:2c:4c:76:24:a9:36:01:32:01:f5:3a:3e:6c:4d:
         1e:0c:fb:97:54:1f:d3:bd:e2:fe:8f:ed:c5:92:95:ae:02:28:
         01:61:f9:a4:63:8b:a1:26:74:88:90:03:61:a1:81:21:53:14:
         83:f9:a8:c8:44:60:78:15:1b:bd:68:b3:fc:f8:04:ce:02:7c:
         3b:92:6b:e8:63:49:a7:77:49:11:05:8f:4f:4a:54:a9:2d:9b:
         a7:ba:02:2b:ae:6a:b5:59:ed:00:70:5a:a0:1d:72:b7:5d:64:
         65:ae:ec:59:a8:bf:dd:d4:55:36:90:9c:29:41:3c:d3:0e:63:
         ad:18:69:92:8d:4b:52:8b:ef:dc:82:d2:71:c2:1d:6d:e5:5f:
         24:3a:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:43:51 2024 by rpki-client on console-fra.rpki-client.org