Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
File: qoXGfyIwng2EwwtUJSlyUyhgUVE.mft (raw, json)
Hash identifier: 4K40sbtaSIVonL2udCga3qE2IPaShx4Guj3RWLkziSc=
Subject key identifier: 14:5B:E4:62:11:3C:65:4C:D3:26:3F:A3:9E:9A:14:47:44:89:F4:57
Authority key identifier: AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
Certificate issuer: /CN=aa85c67f22309e0d84c30b542529725328605151
Certificate serial: 019364B23D95CF772C20F13E13BBE8CC37D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
Manifest number: 09F9
Signing time: Mon 25 Nov 2024 19:00:22 +0000
Manifest this update: Mon 25 Nov 2024 19:00:22 +0000
Manifest next update: Tue 26 Nov 2024 19:00:22 +0000
Files and hashes: 1: G0F4ia5XWql7dzuxj7PE0K6fg3w.roa (hash: RchBuBed7vvPkkiRlb4itemL6S+kY5xqe1EDUNk0rMk=)
2: qoXGfyIwng2EwwtUJSlyUyhgUVE.crl (hash: jh2ci8OL9S0QUzOh3caFHC6WtgBo2mjWC0uxxPzIcqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:b2:3d:95:cf:77:2c:20:f1:3e:13:bb:e8:cc:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85c67f22309e0d84c30b542529725328605151
Validity
Not Before: Nov 25 19:00:22 2024 GMT
Not After : Nov 26 19:00:22 2024 GMT
Subject: CN=145be462113c654cd3263fa39e9a14474489f457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f8:57:69:66:ca:20:43:ab:59:c4:94:ed:ed:
ce:b6:08:c4:bf:8c:c2:d1:51:9c:ea:d1:c2:e6:0f:
78:b1:b2:91:16:02:d0:89:90:e1:19:50:12:ad:2c:
6b:39:13:69:60:95:5f:48:b1:97:85:c2:bc:bb:7d:
4a:3c:fd:95:2d:c5:5a:72:41:15:3e:95:53:02:01:
8c:35:24:17:57:99:8d:d0:7a:11:b2:5a:07:9b:e8:
00:a0:af:f3:f3:d3:54:90:8d:fe:e4:7f:4a:ca:fc:
01:df:cd:7b:94:9d:c7:59:76:a0:c4:be:d5:e6:59:
89:7c:f8:2e:84:f3:38:3f:29:08:77:8b:12:c7:fa:
ad:d4:d2:4e:20:54:10:67:ce:c9:d9:e9:1c:77:e3:
4b:70:b5:c4:5a:b1:d8:c6:44:e0:0e:de:00:fc:ba:
97:2f:6c:b8:a8:b8:82:c1:c7:3a:9a:bc:d8:f3:dc:
96:29:e6:04:65:8f:18:e5:c7:33:8d:62:8f:da:f2:
47:55:e1:38:6e:ff:06:c6:a3:91:5a:91:2a:42:06:
78:0c:d5:bd:a9:5f:79:9a:9a:24:a5:aa:76:78:f2:
d5:62:19:04:4b:41:ad:f2:ee:d3:14:ff:d3:0c:06:
13:07:63:c2:d0:dc:ea:2c:c3:cd:b7:b3:6b:13:30:
e0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5B:E4:62:11:3C:65:4C:D3:26:3F:A3:9E:9A:14:47:44:89:F4:57
X509v3 Authority Key Identifier:
keyid:AA:85:C6:7F:22:30:9E:0D:84:C3:0B:54:25:29:72:53:28:60:51:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXGfyIwng2EwwtUJSlyUyhgUVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e79202-acab-4b1a-992b-2a2ed45e2712/1/qoXGfyIwng2EwwtUJSlyUyhgUVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a2:9d:67:99:1c:de:af:d7:06:29:69:e1:f3:53:6c:6f:05:
74:54:7d:e4:26:bb:68:b2:91:e2:a9:20:37:d3:d5:04:fd:a2:
c3:ba:19:5e:5e:8b:bc:6d:e5:4f:ef:f1:af:ea:f1:3d:42:91:
b8:36:a9:40:bc:92:e9:a3:55:65:65:3e:a7:22:81:a7:d6:32:
da:a3:45:ef:e1:01:72:2a:5a:a9:b3:1b:b9:e7:2a:25:33:7b:
26:ac:a3:1d:f2:a3:01:55:a3:73:1f:4c:19:79:42:0d:a9:66:
d9:aa:9e:00:37:7b:e5:47:95:d8:7c:54:3d:7a:66:1f:7f:ce:
d9:f1:fa:f3:ba:af:f6:f6:53:fc:4a:a1:f3:e6:c4:76:71:d0:
2b:1c:57:ca:81:4e:b9:48:38:43:a1:4d:e1:ab:79:7a:93:e9:
b6:d8:86:b4:16:89:d3:7c:82:2a:2a:04:9e:9d:3e:d4:97:63:
63:ad:f4:83:de:43:58:f4:74:b3:e1:7d:b3:b0:d2:de:21:98:
a8:cc:37:c6:4b:38:64:64:19:07:3b:0c:b6:d5:4e:86:cc:61:
46:40:88:8e:1c:f7:9d:e0:64:a6:20:8a:88:80:ee:ad:2e:66:
17:12:0c:77:90:2b:ae:4d:32:b2:53:db:b7:f7:ba:40:fe:dd:
1e:98:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:28:32 2024 by rpki-client on console-ams.rpki-client.org