Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
File: bchbZ4jkUMBUE0row2V0iyP3Qmc.mft (raw, json)
Hash identifier: IdOA0930mN842Hi3uldjtPecmjL4gSffzmtMLNnUf3Y=
Subject key identifier: D1:8D:E4:2C:16:84:52:7A:6F:EF:0C:7D:4D:B2:D0:85:DC:05:0F:C6
Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
Certificate issuer: /CN=6dc85b6788e450c054134ae8c365748b23f74267
Certificate serial: 0193568A33FDADAB0B8C6DC450E2D4D9176E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
Manifest number: 04EA
Signing time: Sat 23 Nov 2024 01:01:58 +0000
Manifest this update: Sat 23 Nov 2024 01:01:58 +0000
Manifest next update: Sun 24 Nov 2024 01:01:58 +0000
Files and hashes: 1: NFAa9NhiOkNEDTFzlMLx2-FYBTo.roa (hash: D+hqSc9AGs8/0rb1PIJWbIlCilWv4UaD3CRAWBCX26Q=)
2: bchbZ4jkUMBUE0row2V0iyP3Qmc.crl (hash: MBaOpLsOK1bAUt/zqSZqq3hdFWQ+WMCa0cLg76vPoGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:8a:33:fd:ad:ab:0b:8c:6d:c4:50:e2:d4:d9:17:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267
Validity
Not Before: Nov 23 01:01:58 2024 GMT
Not After : Nov 24 01:01:58 2024 GMT
Subject: CN=d18de42c1684527a6fef0c7d4db2d085dc050fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b0:7e:12:a2:1d:10:3f:82:df:7c:6c:de:4b:
57:25:7a:e4:ff:60:46:4f:18:d0:fd:25:6b:41:00:
b6:61:3e:f4:6e:c2:47:b5:ab:0d:6b:b3:44:d1:ff:
08:87:e7:b9:5f:5f:ce:03:c1:58:91:47:b5:13:05:
0f:be:96:81:5d:58:12:8d:69:b1:99:95:4b:7d:d5:
bf:07:0e:d5:32:df:06:90:db:4c:45:5e:69:00:13:
08:8e:1e:7e:bf:c2:74:4d:20:c7:d8:6a:d3:1c:63:
7d:8b:71:f6:b8:9c:73:37:45:e4:69:cf:8f:77:70:
f4:f9:4f:8a:c2:79:ce:16:ab:d9:f7:04:b5:d5:a7:
3b:fe:08:0c:8a:d2:a1:c0:51:de:1b:f1:98:5a:10:
31:71:90:2f:80:55:70:ad:b8:ea:de:e2:eb:98:08:
33:1d:bb:26:42:f6:de:03:9f:ba:26:0b:a9:a9:12:
9b:af:06:91:56:58:60:17:e4:5c:f9:bc:a9:97:04:
86:c1:8a:5b:80:bb:2a:03:6d:8e:f6:00:bb:a5:c2:
03:97:da:87:9f:f9:60:82:18:5e:cf:4d:71:05:e2:
fb:b6:55:bb:31:4e:08:a7:3c:d4:19:cb:99:fe:78:
36:31:8b:d4:26:e0:94:6a:ba:72:91:f0:e2:af:5c:
df:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8D:E4:2C:16:84:52:7A:6F:EF:0C:7D:4D:B2:D0:85:DC:05:0F:C6
X509v3 Authority Key Identifier:
keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:fd:61:0e:1e:f8:85:4a:8d:f2:d2:1d:46:db:b3:45:7d:79:
f7:aa:57:70:cf:94:0b:f1:02:ae:b8:a0:01:4d:51:0c:fd:44:
e3:ed:77:5d:90:25:8d:4e:6e:2b:a9:05:48:8e:a8:19:ac:01:
b0:b2:a5:60:25:45:88:4c:df:33:8f:89:77:44:5b:e3:16:e4:
9d:89:cf:c2:e8:4c:41:c7:80:5f:eb:fd:6c:70:52:15:0d:5d:
70:6a:cd:51:c2:a9:44:5b:4b:9e:83:38:65:d6:c4:5c:cf:24:
0c:db:f2:91:54:16:7b:0e:2b:33:7a:2f:50:d6:65:c6:f3:93:
4f:0d:b2:ad:fd:a3:0a:c8:ab:93:75:27:b5:00:33:0e:ce:4d:
44:ae:f8:39:9b:44:78:67:85:fe:9d:7a:75:94:e0:cf:39:9f:
c6:76:69:e7:c7:38:ff:65:87:70:a8:76:20:62:98:cf:89:a8:
00:18:18:12:6f:cd:1e:d5:9b:45:7d:56:6e:25:d7:43:19:48:
48:96:1a:4d:e1:32:41:f2:a4:a2:03:b5:41:63:3f:0d:ec:17:
21:69:8a:9d:44:93:40:62:40:d8:c3:de:32:54:ee:c4:b4:ad:
42:d2:a0:a9:e4:91:96:06:6f:fa:15:79:c7:67:da:9f:46:3f:
47:b5:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:02 2024 by rpki-client on console-fra.rpki-client.org