Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
File: Mgax0ge2XA69PyP6djABbYe0E0k.mft (raw, json)
Hash identifier: BSxSFVG2Je/Dw/y/A7zpEXQadOYYPaRtzzLjcPg5M+g=
Subject key identifier: 87:56:71:C4:D4:24:FA:F5:CF:40:87:3B:61:8B:C4:FA:4B:7F:94:DE
Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Certificate serial: 0193516293B100075604737E334D8D4E12EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
Manifest number: 038C
Signing time: Fri 22 Nov 2024 01:00:34 +0000
Manifest this update: Fri 22 Nov 2024 01:00:34 +0000
Manifest next update: Sat 23 Nov 2024 01:00:34 +0000
Files and hashes: 1: Mgax0ge2XA69PyP6djABbYe0E0k.crl (hash: RE3KFs+lKfr79wJnDqGK2TlfQAwyGjN5dZfoJjj4mQU=)
2: UD67o1HhlLWeIcw0bTjX3trp_CI.roa (hash: OUPpZro8aOFeFisRMTIfLNsk6dCNtIqDMsp6d/uAhdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:62:93:b1:00:07:56:04:73:7e:33:4d:8d:4e:12:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349
Validity
Not Before: Nov 22 01:00:34 2024 GMT
Not After : Nov 23 01:00:34 2024 GMT
Subject: CN=875671c4d424faf5cf40873b618bc4fa4b7f94de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:17:b1:a5:13:56:67:a3:4a:5f:9c:c0:ae:
05:b6:41:6e:54:25:71:48:f7:26:a0:87:59:ed:5a:
66:a1:45:42:52:9f:f5:e5:9c:ac:5c:8c:79:43:7d:
ec:82:11:da:b9:73:6f:25:79:3e:0a:21:64:c8:7e:
13:bb:95:e8:66:13:88:21:dd:da:32:f6:d5:06:2c:
2a:3e:ac:19:f3:72:1a:7b:08:56:57:f1:3e:17:cb:
ae:ef:2c:8a:94:a2:68:40:3e:0f:c8:51:df:b2:c0:
e7:b0:d6:cc:0a:db:e2:c2:60:87:71:79:90:7e:b6:
04:cb:9b:c6:b2:d1:4d:d5:43:8a:95:41:23:27:da:
b3:d8:e5:94:a2:bf:66:ff:b4:2e:08:63:57:ba:9a:
20:aa:f4:6e:57:6f:82:0b:7f:e5:66:1c:30:52:d5:
27:4e:f9:07:d8:37:ae:2b:bb:0c:73:66:16:f6:16:
5e:0f:95:6f:fc:0e:11:0e:dc:65:7f:0a:63:1c:44:
40:2f:a3:b8:a1:35:0d:a9:01:a9:61:1c:46:47:7e:
28:f8:4e:1a:c9:17:08:af:e0:b7:46:e6:f3:b1:1b:
8b:0b:ad:60:ee:1f:bd:eb:cd:f7:f2:5f:10:f5:b0:
a7:b1:a7:a1:59:08:57:9f:f3:eb:28:79:98:bd:2f:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:71:C4:D4:24:FA:F5:CF:40:87:3B:61:8B:C4:FA:4B:7F:94:DE
X509v3 Authority Key Identifier:
keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:39:ce:26:88:97:cf:6d:5a:ea:6e:c3:b0:1e:7f:ba:37:ce:
dd:dc:c6:6d:ef:f2:f0:56:2f:ad:23:90:b0:c7:82:22:ff:ab:
ee:59:2b:2b:2d:1f:65:c4:7b:70:2f:99:67:e3:d1:34:ef:2d:
ed:28:f4:da:06:b4:32:da:02:a5:25:cd:a8:d2:88:44:6c:aa:
45:d9:15:3e:2d:a9:b8:f8:ad:63:80:75:97:cc:7e:40:82:ac:
6c:71:f0:44:c6:31:70:91:03:3d:0b:b8:00:e5:e3:c8:b7:79:
bb:5a:5f:d1:22:43:83:69:09:7d:60:14:c1:de:a4:65:89:e8:
8b:2d:e1:a8:13:62:ee:b6:36:e7:6b:09:39:50:c7:44:d9:eb:
1c:b8:f6:28:7f:cd:0e:44:d9:18:d5:7a:f9:a2:94:4f:d9:dc:
3a:a3:9f:b7:dc:f8:a7:a2:6c:7e:a3:9a:d4:1b:1c:62:10:88:
fc:32:4c:34:6f:1e:53:57:85:b2:a5:d2:b1:a8:81:3d:8d:28:
dc:d5:59:bf:ee:a9:a0:d1:8f:95:16:67:e7:9c:7b:cb:4e:b8:
65:d3:ee:f7:24:94:d8:be:a6:d9:58:e5:5c:33:5f:20:16:d8:
53:80:c3:21:0e:0d:0e:8b:50:eb:55:05:ec:3f:37:e2:8d:8e:
5c:8d:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:33:08 2024 by rpki-client on console-fra.rpki-client.org