Manifest
$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
File: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft (raw, json)
Hash identifier: 9xr6ay4qOTI3PHNphivnLb/jy/Nl0BExhS4jh4ZNVh4=
Subject key identifier: 48:4C:21:1E:37:C9:30:28:52:63:BF:85:7B:68:16:66:D3:2E:C3:B7
Authority key identifier: 89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
Certificate issuer: /CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Certificate serial: 7A26D1EE4A86031B7FB9D1D088E4BED440F9C98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
Manifest number: 0119
Signing time: Sun 02 Feb 2025 01:41:46 +0000
Manifest this update: Sun 02 Feb 2025 01:36:44 +0000
Manifest next update: Mon 03 Feb 2025 05:23:44 +0000
Files and hashes: 1: 89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl (hash: bMKiXNoImfr+bXvGaNOyoJLGy6TlVySAXeqG+WDLIH8=)
Validation: OK
Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:26:d1:ee:4a:86:03:1b:7f:b9:d1:d0:88:e4:be:d4:40:f9:c9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89aa977a3bc5b6b7ac462955d75a2a30287e2577
Validity
Not Before: Feb 2 01:36:44 2025 GMT
Not After : Feb 3 05:23:44 2025 GMT
Subject: CN=484C211E37C930285263BF857B681666D32EC3B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:ca:00:13:dd:6a:a7:db:a0:e3:ed:dc:56:
63:9d:60:7c:19:49:e3:14:90:f7:e5:e0:13:0b:5a:
f6:e9:af:f6:7c:9a:80:df:6c:76:4a:bb:70:64:5f:
1c:02:2f:08:a0:a8:f1:d2:e6:b7:af:29:e8:20:d3:
bc:60:83:66:82:ff:92:53:e9:ab:70:a5:f2:3d:29:
bb:81:39:aa:f9:2f:22:4a:25:e1:6e:f8:c0:71:ea:
31:43:41:b7:77:70:3a:a5:76:d9:ca:25:ff:58:c0:
8a:54:01:7d:e8:9d:b2:e0:87:f9:cb:a1:01:03:e7:
b9:aa:64:7e:78:55:a3:63:cd:47:cb:6a:43:af:e4:
65:d6:58:bd:83:06:7c:da:76:a8:da:e3:b6:15:6a:
05:d3:2a:6b:d8:74:2a:27:3f:f1:cf:49:97:f8:4c:
91:11:d0:ec:92:ab:c8:23:86:58:b2:73:3a:61:60:
fa:f8:b4:95:de:82:e5:c0:be:15:2c:44:49:c3:fa:
e4:7d:8d:2a:e0:72:19:1e:6a:21:48:bb:60:ad:fa:
66:e5:9a:6b:ae:39:fa:1e:03:53:22:f8:66:f2:b6:
dc:a9:3e:7b:32:96:6d:6f:c7:a4:43:97:7b:7b:af:
18:34:86:80:5a:70:a0:93:53:8b:16:0c:59:5f:77:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:21:1E:37:C9:30:28:52:63:BF:85:7B:68:16:66:D3:2E:C3:B7
X509v3 Authority Key Identifier:
keyid:89:AA:97:7A:3B:C5:B6:B7:AC:46:29:55:D7:5A:2A:30:28:7E:25:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaqXejvFtresRilV11oqMCh-JXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5448e6aa260641a197b8251ac0c3e630/1/89AA977A3BC5B6B7AC462955D75A2A30287E2577.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ec:7a:9f:71:c6:85:c2:05:0e:1d:71:6b:52:92:a8:92:70:
00:07:aa:44:bf:64:81:fa:db:4e:1b:39:0c:93:d9:20:85:67:
de:e1:47:f2:dc:52:d4:0f:0c:bb:60:3a:71:a9:5b:9e:00:ac:
ce:34:fc:04:51:cb:7a:e8:65:3f:f4:42:31:3b:87:34:d7:37:
db:22:8b:63:f9:bb:61:ad:11:d5:4a:5a:fd:85:6b:19:ab:85:
6c:39:be:40:a3:7b:9b:cd:91:e4:41:ce:a7:69:cf:bb:54:c0:
df:0a:9e:f8:1b:5f:7e:f1:3c:51:65:4c:e9:9d:a9:0b:65:0d:
90:3a:f9:a4:f2:9a:6e:5b:a2:19:66:f8:96:d5:6a:b5:04:0b:
3e:2f:9a:f2:72:11:98:b9:f0:c2:7f:77:e7:a5:21:0d:97:15:
48:dd:2e:32:4f:bf:94:29:cd:d9:19:72:1c:90:0b:ea:de:3e:
19:20:70:a2:6b:ef:69:b8:2e:d7:f1:8e:90:7b:a7:10:75:6c:
b0:7b:95:7b:ee:7e:fa:4a:74:34:d8:74:81:82:78:15:c2:a5:
9d:c4:d8:19:57:82:89:d8:6c:f2:48:3c:89:e6:a6:f6:74:b4:
27:75:a4:25:46:11:6b:20:18:ac:05:d2:4f:f5:73:36:da:45:
fb:f7:f3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 06:47:56 2025 by rpki-client