Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
File: lXbbt2mVtJUKhsXwfKjbPrSWePY.mft (raw, json)
Hash identifier: zHGCa5+NN1+TH2we4w1rtgI7rGAcPBgwAg84M51Zi10=
Subject key identifier: 97:BF:F7:62:D2:FF:A1:1C:38:22:BE:DB:7E:93:57:B0:2A:F9:94:31
Authority key identifier: 95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
Certificate issuer: /CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Certificate serial: 01923A38BC0BE9742E7B6BD282CEC3D2CB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
Manifest number: 1D
Signing time: Sat 28 Sep 2024 20:00:49 +0000
Manifest this update: Sat 28 Sep 2024 20:00:49 +0000
Manifest next update: Sun 29 Sep 2024 20:00:49 +0000
Files and hashes: 1: PDG-xmyMt-cYcwLirS_UlHIvtjw.roa (hash: Dr6Lk50/7pX/Vs9J3n8JzHGotGI5Mo8sBqBiyo/xdj0=)
2: lXbbt2mVtJUKhsXwfKjbPrSWePY.crl (hash: fTAkeCE0HhkJrGy4RmzU3rsQkRftF1hxmcY3ukGIzFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3a:38:bc:0b:e9:74:2e:7b:6b:d2:82:ce:c3:d2:cb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9576dbb76995b4950a86c5f07ca8db3eb49678f6
Validity
Not Before: Sep 28 20:00:49 2024 GMT
Not After : Sep 29 20:00:49 2024 GMT
Subject: CN=97bff762d2ffa11c3822bedb7e9357b02af99431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b4:55:c2:c5:93:02:23:a9:7f:8a:ad:da:e6:
90:b2:e0:18:5b:4d:89:9a:ed:ed:41:d7:69:17:1b:
4d:fe:49:80:a0:4f:a2:ad:a0:43:e8:36:4d:cd:8a:
dc:aa:c7:69:1c:35:60:fc:3f:dd:97:93:ef:ce:0e:
ae:00:d7:12:90:1f:b4:8e:9e:11:08:50:63:56:b3:
b9:68:b9:c0:a8:51:3a:34:77:17:39:5f:7b:5b:65:
1b:2c:eb:e4:e0:ea:93:ec:f7:48:a6:95:60:34:cb:
ca:a7:21:66:ac:8f:8f:17:32:fb:db:89:e9:77:85:
e6:df:ab:30:23:c6:d7:59:1f:f5:99:b6:3a:fa:e3:
0a:4f:9f:27:1e:70:29:d7:cc:b3:3f:ae:23:ad:5d:
bd:f3:34:57:8e:88:47:db:6a:07:44:b1:91:81:0d:
25:b2:7e:8f:13:28:19:03:cd:dd:17:fd:df:97:ce:
03:11:ba:8a:20:5c:c6:63:76:bc:71:34:73:75:3f:
ab:dd:b6:a2:12:dc:e1:13:c0:04:a8:62:24:62:7d:
9c:f5:0b:47:a9:7d:76:86:6f:42:f5:ee:3f:bd:20:
ff:36:5e:57:9e:5d:57:71:86:1a:e5:2c:e3:34:75:
5f:83:ba:05:dd:99:33:42:ae:44:d5:4d:3b:00:1d:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BF:F7:62:D2:FF:A1:1C:38:22:BE:DB:7E:93:57:B0:2A:F9:94:31
X509v3 Authority Key Identifier:
keyid:95:76:DB:B7:69:95:B4:95:0A:86:C5:F0:7C:A8:DB:3E:B4:96:78:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXbbt2mVtJUKhsXwfKjbPrSWePY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/09263c-a5cc-44d6-91c4-61802d9c9344/1/lXbbt2mVtJUKhsXwfKjbPrSWePY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:50:77:5e:43:e4:fa:b9:97:64:5a:2d:ff:62:38:9c:25:92:
a6:06:52:bf:38:cb:ed:86:69:b4:e6:b7:d8:35:78:8c:ed:94:
86:d6:44:c2:5d:83:c9:83:1b:39:2e:0b:8a:f7:30:f8:0a:68:
b2:d3:d0:8f:5a:89:1b:a3:a0:44:a5:76:2c:fa:3b:7d:a2:06:
7d:d0:55:85:13:f4:6b:1a:2c:20:89:07:45:ca:8a:92:51:1f:
d3:3e:74:12:8a:6d:c0:57:79:dd:85:6c:42:6e:2c:8d:d7:22:
e6:cd:ce:04:36:dc:e6:cd:87:f1:64:70:71:fa:df:9d:89:7d:
84:94:58:71:9f:bc:8c:ab:cf:9c:bf:3d:ef:e8:3a:2e:d8:19:
d3:5c:6f:21:65:a4:ca:73:37:be:b7:3c:4a:73:80:44:f4:15:
0e:d1:dc:88:63:2b:38:12:8c:00:fe:54:2d:4d:12:aa:4e:c4:
61:f4:2c:50:ca:0e:03:46:7a:d7:c3:91:7f:ab:c3:f8:ff:2f:
e7:9c:b6:08:76:54:a9:51:e6:cc:25:5c:1f:38:0f:0e:9a:e7:
4f:02:7b:25:0a:f5:32:04:6d:e8:2c:f1:16:c3:25:d7:fd:17:
4b:8d:16:43:d0:1f:45:8b:64:3d:7a:c2:46:71:d0:32:9d:8b:
22:f8:1d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:14:31 2024 by rpki-client on console-fra.rpki-client.org