Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: sY6HCONQrr/pxKyQ1V3QNSXqrdJQPBWX3WSyJpH0af8=
Subject key identifier: 02:FB:33:0C:A6:60:5A:5D:EA:6F:60:9F:E0:60:62:42:B0:A7:EA:44
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 0193568899763151963D61D04C49DB1CDE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 0C67
Signing time: Sat 23 Nov 2024 01:00:12 +0000
Manifest this update: Sat 23 Nov 2024 01:00:12 +0000
Manifest next update: Sun 24 Nov 2024 01:00:12 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: k9MCAJZcTvDZ5i2plmGMhH7kJVDTgeRSF+r0NAREaps=)
2: lo2c5L0YOiTtusts_UImo8E5XTo.roa (hash: ED3vtnr+Xoin0XLoi9WVNs1xFAPK1p/ytlllVHcDwTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:99:76:31:51:96:3d:61:d0:4c:49:db:1c:de:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Nov 23 01:00:12 2024 GMT
Not After : Nov 24 01:00:12 2024 GMT
Subject: CN=02fb330ca6605a5dea6f609fe0606242b0a7ea44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c5:b7:da:18:87:a6:af:24:39:60:90:41:67:
30:80:9e:49:9e:d3:34:6a:68:5d:56:0a:6d:5a:31:
db:68:1b:8f:32:0f:14:bb:af:00:a1:fe:a9:40:b6:
bf:e1:5a:d3:ec:81:e5:95:83:51:c4:57:98:70:5c:
0a:9e:c3:4a:2f:09:43:d2:12:21:c1:f1:c0:59:68:
68:87:08:47:94:71:fb:e7:03:c8:e0:3c:44:28:ee:
c7:f1:4e:62:a2:fe:11:79:57:6b:81:86:06:43:02:
b8:6d:41:14:c5:2e:ac:4a:60:2c:b8:bd:1f:ce:74:
de:65:36:8d:6d:7d:33:c2:c9:85:b2:3b:fa:3c:af:
1b:8f:27:f1:fa:97:b4:fd:c1:b8:a8:e6:cd:57:e9:
f4:81:0c:63:e6:fa:c0:31:6d:a0:2f:28:f0:ed:0d:
25:19:74:3d:dd:bb:9b:69:42:6e:1e:ec:11:63:dd:
67:26:15:4a:b9:dd:e0:8b:7d:9e:b4:14:b1:8a:f5:
9d:86:40:72:bb:d2:0e:8b:97:1b:1c:93:c8:a0:ca:
5b:30:54:c3:0a:78:a1:cc:46:ba:82:a6:2d:c3:6f:
5c:49:ef:b3:04:89:e9:90:18:41:b6:c7:4f:9b:0f:
4a:eb:06:bf:57:5e:ea:2e:98:7d:28:23:52:96:0d:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FB:33:0C:A6:60:5A:5D:EA:6F:60:9F:E0:60:62:42:B0:A7:EA:44
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:11:52:bf:c1:cd:56:f6:e0:d2:b4:d3:68:e2:cd:35:25:e5:
68:fc:1b:ad:3a:dd:4e:09:4d:37:fb:aa:53:c2:3b:c0:30:39:
0f:bd:3f:ba:a7:60:04:b8:d5:1a:e9:ea:52:bc:f7:72:32:69:
cb:db:ba:db:f4:6e:ea:ae:f3:b3:22:dc:95:0f:75:4a:b4:9c:
37:80:69:b7:a3:34:2f:79:03:c2:e8:bb:9a:53:f1:7a:0b:71:
5c:6e:16:97:ff:d2:0e:c3:9e:49:a3:58:5a:39:a3:29:1f:a3:
56:5c:b8:dd:a1:15:e0:de:f2:b7:c6:3d:da:db:27:ce:6e:ab:
fa:e7:e0:03:e6:22:36:b7:d4:99:ed:0d:dd:46:af:9a:65:54:
89:ac:6d:0f:1b:05:46:00:cd:bf:37:10:d5:c6:12:13:25:17:
11:e9:7d:e1:fc:18:33:a2:e9:7f:82:14:4d:8c:eb:c4:cd:a5:
6a:81:09:8f:2a:85:d9:c3:bb:dd:36:a0:8a:93:c5:b2:f1:3d:
d1:17:2c:ca:31:44:6f:54:97:1a:55:7b:35:a1:9f:ac:0f:d3:
f2:6e:3a:86:ce:a0:be:25:7e:a3:22:a8:40:5c:53:fb:e4:ab:
2c:29:33:21:ee:f3:77:77:da:e0:4f:7b:73:0b:da:2f:89:61:
aa:1e:16:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:33:44 2024 by rpki-client on console-ams.rpki-client.org