Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
File: aweCDo1ADzwl3dC-G0bFTpVZYKE.mft (raw, json)
Hash identifier: ptE5oeTi6dFNPKH4ZeDnpFVE19ontFkGmhanQ5lFnyM=
Subject key identifier: A4:50:A2:74:5C:D8:71:71:BC:68:79:1A:B8:83:ED:73:5E:6E:11:DF
Authority key identifier: 6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
Certificate issuer: /CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Certificate serial: 01936AB4B3A39005C51D528A9BD2DA288F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
Manifest number: 0A95
Signing time: Tue 26 Nov 2024 23:00:47 +0000
Manifest this update: Tue 26 Nov 2024 23:00:47 +0000
Manifest next update: Wed 27 Nov 2024 23:00:47 +0000
Files and hashes: 1: aweCDo1ADzwl3dC-G0bFTpVZYKE.crl (hash: b/2NN+nDNyWQj3/ivjgPHn1imO449CaG+KeUF+g9hSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:b3:a3:90:05:c5:1d:52:8a:9b:d2:da:28:8f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b07820e8d400f3c25ddd0be1b46c54e955960a1
Validity
Not Before: Nov 26 23:00:47 2024 GMT
Not After : Nov 27 23:00:47 2024 GMT
Subject: CN=a450a2745cd87171bc68791ab883ed735e6e11df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:c5:ad:05:e5:57:2a:5c:be:b1:d9:80:53:
28:b1:7c:fe:10:2c:57:fc:f4:77:92:d7:cf:24:9a:
1e:a5:9d:a0:ca:f9:20:07:dd:12:15:9d:12:32:98:
d2:20:37:74:bb:45:88:d6:1f:dd:ad:ba:99:eb:a5:
d7:48:78:d2:58:67:b2:0b:d3:ca:9f:4c:87:1b:e0:
1f:57:78:f3:dd:aa:29:4f:a2:07:82:ba:59:c2:3b:
0c:1d:03:f3:08:7c:71:ce:ae:df:40:57:2a:27:98:
47:52:57:67:94:8a:bf:93:40:8f:1d:7a:9b:38:d5:
f9:b8:63:12:c1:08:f6:14:5a:3e:61:db:f8:0c:2a:
fa:b3:12:92:f1:e0:9d:1d:9f:57:48:f1:92:0a:d3:
ec:ab:31:8a:06:ee:d7:b3:51:d5:29:eb:0f:65:5b:
df:8e:57:51:fc:66:12:12:54:4b:48:21:eb:43:61:
1d:03:a0:37:c4:83:b1:05:06:3d:22:b9:fb:6b:60:
62:1b:d9:bd:67:a9:a8:0b:bd:be:ba:d3:65:67:81:
22:7d:08:da:f2:44:e1:97:af:a9:a3:88:15:b8:81:
e6:91:31:11:26:c0:4b:5d:a4:b9:d9:3c:9e:ce:e1:
29:c5:63:0e:b4:ee:ad:1b:15:61:91:e8:e0:88:b0:
a0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:50:A2:74:5C:D8:71:71:BC:68:79:1A:B8:83:ED:73:5E:6E:11:DF
X509v3 Authority Key Identifier:
keyid:6B:07:82:0E:8D:40:0F:3C:25:DD:D0:BE:1B:46:C5:4E:95:59:60:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aweCDo1ADzwl3dC-G0bFTpVZYKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bfc6b1-02af-4cb1-a06d-4d493082da1c/1/aweCDo1ADzwl3dC-G0bFTpVZYKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:d7:0d:d9:99:5a:ef:72:24:71:c8:7c:6d:c8:31:b5:bc:bf:
ec:5a:fc:ca:3d:97:61:51:79:ce:93:42:fc:14:63:f8:41:50:
a2:8a:1c:f7:f8:ec:84:65:76:a7:fd:bc:ae:9a:6a:86:6b:d5:
b3:54:83:4c:a2:6a:32:24:38:d4:23:4e:34:12:fc:d0:83:0a:
8e:00:37:1a:4a:aa:bc:b3:03:f4:66:31:72:1d:c6:64:4c:dc:
52:33:ca:e8:59:a4:2a:c6:4c:db:cf:a1:b7:90:cc:6f:c2:e0:
95:e0:78:86:ac:d0:2f:60:b2:6a:8f:77:3e:ee:f3:e3:97:ab:
b9:12:00:a2:74:ef:e9:bd:69:35:78:d4:d5:ee:c8:d1:63:34:
b7:f8:7b:0b:d2:f2:70:e9:cd:b0:f1:e8:77:83:ef:46:83:c9:
7d:4c:a4:40:b0:84:6c:3e:8b:c5:38:21:00:a3:f5:52:c5:70:
94:7b:7c:c6:fa:df:1c:d5:c5:c6:47:9b:38:0e:4a:6a:a7:af:
53:92:89:be:3c:e7:34:7d:fc:44:54:f2:ad:1b:27:fc:2f:be:
16:bb:e6:11:ee:c4:39:c2:0d:61:21:02:ca:90:4b:2b:e5:79:
df:c4:93:94:01:39:20:76:1d:a7:aa:6f:07:83:88:b5:8d:03:
20:24:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:35:08 2024 by rpki-client on console-fra.rpki-client.org