Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File: 3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier: tuyPLFz5l2+gThyJhKB8AiyAvqoMT7On016T7QPy+N8=
Subject key identifier: D0:FA:08:29:C3:8A:68:AD:6F:A9:23:FD:D5:43:6C:7D:7F:F6:AD:7E
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer: /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial: 019368C6589696FC720F774D9ED206C7F6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number: 0202
Signing time: Tue 26 Nov 2024 14:00:49 +0000
Manifest this update: Tue 26 Nov 2024 14:00:49 +0000
Manifest next update: Wed 27 Nov 2024 14:00:49 +0000
Files and hashes: 1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: 9ZezXBr0uW22V+wJvPN90BM3nno0la7RNmxHapuUmYA=)
2: Cmemwho5LQToP7xlvAzCInUQwnc.roa (hash: UeNrtWVRq+jsxf1Aimank/xElaVy+xdzgiFs+GsoZqg=)
3: fxuSU7_Dl7d3UBfvTamm5kxSfJA.roa (hash: ZLlmcw1g0eOQYx4Be9061L3iCCDQ49ttv4MlK+LQCGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:68:c6:58:96:96:fc:72:0f:77:4d:9e:d2:06:c7:f6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Validity
Not Before: Nov 26 14:00:49 2024 GMT
Not After : Nov 27 14:00:49 2024 GMT
Subject: CN=d0fa0829c38a68ad6fa923fdd5436c7d7ff6ad7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:8f:23:55:90:21:02:96:f0:55:69:24:47:
9b:df:8f:7d:45:3a:a8:ab:fd:e2:95:77:cf:c4:12:
7e:54:0e:1a:2a:88:a3:f4:2c:36:eb:16:3c:e4:87:
3d:b5:31:33:af:a8:29:fd:77:96:ce:ea:cf:ca:85:
00:3f:5e:50:83:e5:b6:29:3c:57:53:30:2b:70:f4:
bd:b1:f6:d5:d8:a0:30:a9:4b:33:9c:24:cc:3f:86:
1c:dc:f6:74:52:51:8d:23:89:1d:63:33:88:5d:c1:
96:6b:a7:e9:c4:d4:72:e3:ed:b1:c1:66:81:08:6b:
bf:49:2b:38:9a:f7:ce:bb:9e:e7:61:d7:d4:3b:8d:
00:40:e1:8c:79:0f:d3:0e:05:cc:61:73:8a:ea:30:
cc:2c:ec:e0:2d:fb:df:70:bb:a6:72:71:63:a6:28:
03:20:01:6f:27:c3:a1:07:1f:b5:b2:7e:9c:a4:4a:
f6:7b:ac:49:18:af:07:c3:85:66:8a:5b:ba:e4:6c:
c9:bd:6c:f8:e5:b6:d5:00:64:72:0e:3c:14:4d:ef:
03:ec:a3:77:88:36:8c:77:e3:80:75:86:23:b9:9f:
b2:48:1b:77:48:ee:52:f1:6b:3f:fb:dd:41:30:c6:
fa:35:b6:5b:3f:64:2c:4a:3c:41:3f:37:ff:30:6d:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FA:08:29:C3:8A:68:AD:6F:A9:23:FD:D5:43:6C:7D:7F:F6:AD:7E
X509v3 Authority Key Identifier:
keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:76:13:4a:97:ea:77:c6:52:fe:21:b7:49:3f:e0:b5:eb:61:
8a:79:f3:f1:99:a4:85:1f:39:30:86:0d:27:c8:03:c3:88:37:
a4:5d:12:ec:9a:21:aa:c4:94:8c:59:a2:53:7d:37:7a:03:27:
47:ef:4a:2c:9b:90:5c:ad:09:b9:e4:36:34:51:01:1c:4a:bd:
7e:78:d9:a2:5a:53:24:27:ad:42:bc:33:f5:dc:0d:9a:d0:43:
e2:e3:b8:ab:47:8b:00:af:a4:1e:c9:2d:ee:8d:11:38:44:03:
62:04:76:11:df:9d:72:0d:b1:9a:ac:d7:8b:4d:cb:0c:69:46:
f6:3d:07:f4:53:0c:79:37:cc:1e:27:f0:2c:f4:25:98:67:ff:
c4:07:e5:4f:39:ac:10:95:0e:5b:4a:c0:5b:fb:e4:dc:65:56:
77:aa:c0:a1:ff:51:9b:12:7a:42:64:dc:6e:09:51:dc:19:83:
72:23:d3:91:f1:38:02:9b:ee:7c:5e:09:ed:0a:ad:49:56:d1:
13:39:ff:f1:b1:02:fc:db:1d:40:18:ac:4b:63:24:cf:92:5c:
8d:f2:99:13:d9:46:2d:8a:c6:02:11:35:43:9b:c7:19:63:df:
7d:dc:03:cf:5d:d7:76:7c:0d:4e:ab:01:a6:25:49:66:d0:8f:
79:25:c2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 17:39:10 2024 by rpki-client on console-ams.rpki-client.org