Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
File: sy7is5cSN3tL_snmasfm6Qjvzuw.mft (raw, json)
Hash identifier: DzLkPCCHNWVHnyv2Mv8vh59MWW7BZb3y9ndA32vASZc=
Subject key identifier: 14:37:BF:35:A1:0A:15:EE:A9:2C:76:27:EC:15:AA:0F:3B:85:6C:55
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 0193561AD08854215EA77747BFB43469CFA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
Manifest number: 1377
Signing time: Fri 22 Nov 2024 23:00:18 +0000
Manifest this update: Fri 22 Nov 2024 23:00:18 +0000
Manifest next update: Sat 23 Nov 2024 23:00:18 +0000
Files and hashes: 1: Stz5RHccsjUSL5Z27vYClLIpRvo.roa (hash: FAxWe9YOik2ybqOTJ7NpXUakrysBGt/U3YpDbK1bEYI=)
2: sy7is5cSN3tL_snmasfm6Qjvzuw.crl (hash: zsi4mf6f334FUQeGbKirqwLWuufxx215CyHSZKz7KdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:1a:d0:88:54:21:5e:a7:77:47:bf:b4:34:69:cf:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Nov 22 23:00:18 2024 GMT
Not After : Nov 23 23:00:18 2024 GMT
Subject: CN=1437bf35a10a15eea92c7627ec15aa0f3b856c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:bd:26:7a:d6:b3:df:80:c6:e5:cc:39:d1:
06:24:2e:62:7c:77:c5:a5:2c:d6:87:a1:69:c9:78:
bc:fd:4e:41:a1:56:0b:e5:9d:a3:5e:e4:be:83:cc:
6d:d2:27:80:c0:81:d7:6e:a4:a7:b3:b9:55:55:03:
1a:49:e5:a6:a5:9b:44:22:2d:9b:29:26:51:95:94:
68:5e:80:f2:34:92:fa:9c:e6:65:25:98:34:80:c8:
b9:3f:49:85:3c:2f:08:48:f1:2f:3c:d0:b2:3e:b2:
a9:89:72:e9:a6:83:1f:bf:93:52:b6:44:59:ef:12:
68:da:c2:62:bd:96:a3:04:fe:f8:8b:76:99:6c:c0:
1c:62:2a:67:9f:54:91:aa:82:d4:e9:4c:ee:05:ac:
11:c8:1d:2c:fc:b7:6f:8e:1b:65:ed:af:48:c1:0e:
71:df:4a:fa:17:58:e9:1f:2d:52:e6:9e:27:5a:2f:
03:2e:6f:9b:f1:72:31:b1:ea:d5:02:6f:a5:c1:37:
9e:a4:28:a6:9d:ef:1f:e3:86:e5:d8:b7:9c:e3:48:
07:0c:f8:60:53:ab:9a:42:14:28:96:90:d5:4d:95:
75:b9:9e:bb:7c:93:85:15:4b:96:89:7d:23:d5:a8:
08:fb:92:6c:3f:cb:2c:b6:aa:f9:f2:b4:36:d7:52:
12:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:37:BF:35:A1:0A:15:EE:A9:2C:76:27:EC:15:AA:0F:3B:85:6C:55
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:47:3e:4a:08:5d:96:13:4e:14:96:68:8c:39:da:e4:44:cd:
3d:62:84:99:c9:c5:e7:a3:69:51:d7:46:f5:c1:fd:27:79:f5:
11:c3:fb:08:c9:fc:54:cc:d8:db:78:d5:3e:11:0e:b8:5e:6d:
93:03:c4:7f:fd:ee:aa:e2:ad:ec:f6:3c:46:8a:f0:19:76:e6:
97:e0:f5:57:b1:91:2c:19:a4:c7:35:20:0c:04:49:e9:3d:03:
5a:e1:86:95:55:ec:a4:fa:0c:c6:95:90:37:28:67:4a:c1:14:
56:fb:6a:3c:5f:e1:4a:14:9b:fd:ba:ce:7c:65:37:00:e4:60:
06:4a:0c:c5:5b:2c:d6:b1:f7:7e:d3:fc:4b:8b:40:66:a0:25:
a8:8e:79:53:11:f3:de:aa:95:fd:a8:18:8e:b5:99:ee:0a:48:
32:f7:6b:11:de:62:26:03:8f:47:05:ff:58:2d:3d:e3:f0:f3:
7e:61:b7:60:7a:d6:3f:c3:48:24:e9:91:2a:61:f4:31:ef:b4:
bf:8d:01:50:73:29:46:e3:18:92:c8:74:3a:0d:2d:88:96:52:
6b:3e:b9:33:91:66:5a:6e:0e:f4:e1:7a:4b:b0:f9:6c:c4:47:
11:20:13:b8:ab:ba:a2:4d:44:7b:38:0b:30:ec:84:8f:5b:d9:
41:b6:a1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:12:25 2024 by rpki-client on console-fra.rpki-client.org