Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: jgzuSol5SN7X0NbfWwWSIhLJFURnCdirbOU1ROXFjpA=
Subject key identifier: B4:2D:11:2D:13:22:77:C0:3D:A5:1D:5D:50:23:12:FD:F1:B0:B0:DC
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 01936AB45AED5383F987AC06284BE1D1E7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 0344
Signing time: Tue 26 Nov 2024 23:00:24 +0000
Manifest this update: Tue 26 Nov 2024 23:00:24 +0000
Manifest next update: Wed 27 Nov 2024 23:00:24 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: 8se0yERNXejggWPpndNkkqGA0Tw0wyIL88Z3fzKfY5U=)
2: AwBtLTQFZADJGYH5HuPb0kLHX88.roa (hash: qYVOwKMEjHVFKuUwpywsGBUL9B0nFT7sJ/x6D+6TMxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:5a:ed:53:83:f9:87:ac:06:28:4b:e1:d1:e7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Nov 26 23:00:24 2024 GMT
Not After : Nov 27 23:00:24 2024 GMT
Subject: CN=b42d112d132277c03da51d5d502312fdf1b0b0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:58:ea:27:5c:98:5b:5f:d2:af:ec:54:c7:64:
cb:98:84:a0:b8:ea:3d:ed:78:2e:d5:e7:46:8b:bb:
7d:39:99:72:5a:9a:56:90:e0:23:7d:40:28:97:45:
40:a6:1a:00:a2:7b:31:8c:0e:85:f5:e7:bd:43:8f:
7c:76:3f:4d:e2:67:dc:98:3f:90:38:c0:07:24:c4:
8c:90:30:fa:b0:25:be:2e:ba:0a:00:df:80:70:b1:
c8:3e:f5:a1:7d:77:4b:82:7e:9c:0c:53:ac:f6:3a:
75:52:d9:81:76:c2:b2:54:77:28:e1:6c:cb:b7:86:
d1:26:25:39:97:d3:9a:d9:2d:62:e5:9b:9c:0a:c7:
75:bc:87:a1:68:ea:94:71:35:52:ac:09:31:bb:84:
cf:b1:e5:a6:6b:fc:c5:a4:80:ec:16:c9:f1:fb:db:
f9:dd:e4:61:b3:c1:99:34:d2:49:75:19:fa:7a:e1:
9f:2f:99:2f:d4:d8:e6:ec:fc:51:15:88:16:b6:29:
6f:ea:d7:c7:a1:c4:0b:2f:c5:09:4e:4a:92:a3:cb:
1d:79:e3:07:d6:83:81:4d:03:88:19:65:f5:de:d8:
4b:ff:eb:4e:ba:95:93:f2:67:b2:76:32:d2:a7:47:
82:58:65:0e:0a:7d:7d:ce:df:6b:89:f9:3a:f6:b3:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2D:11:2D:13:22:77:C0:3D:A5:1D:5D:50:23:12:FD:F1:B0:B0:DC
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:36:96:66:0d:e6:03:bc:01:55:43:1f:17:ae:34:8b:a6:93:
82:f2:34:35:98:91:43:49:8a:d5:00:3c:3c:2f:7f:f8:81:ac:
3f:01:8e:cf:e1:d1:df:1d:6a:40:67:c5:cc:53:14:5c:bb:d6:
07:0a:79:1a:1d:94:7b:b3:d0:1b:62:4b:b9:11:59:f8:f7:2b:
d2:71:06:ab:b2:36:47:59:a9:02:9f:cc:40:bf:62:66:cb:2e:
2e:b7:20:23:6f:59:f9:8d:a6:d8:9a:45:e7:02:27:d5:d8:1a:
16:08:cf:4d:2d:05:70:bd:30:f9:76:13:e7:b5:b9:8f:50:a7:
45:f6:42:ad:bc:1b:69:37:77:2e:8d:6b:04:84:57:6f:bb:cf:
23:1f:95:3e:de:c2:7a:97:9d:b4:d0:f1:4f:29:c1:19:14:4e:
25:a5:60:67:9a:93:97:f2:84:d0:1c:33:24:2a:d6:23:33:70:
bd:a3:9b:95:c3:21:05:37:2e:3d:e2:11:be:e0:3d:51:10:54:
34:7a:ff:fe:8a:72:d4:a8:e4:de:0d:77:26:17:c8:90:6d:38:
af:fe:30:7d:ce:ce:2b:c2:60:60:ed:97:78:7f:af:71:83:5d:
25:4a:b3:34:6c:44:49:7c:57:a9:8e:b5:70:bd:c6:80:b7:b9:
63:98:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:29 2024 by rpki-client on console-ams.rpki-client.org