Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier: QfU0W+rJV4vwviNVL1LBVauKjxwwGkb/YtF8c3YB1as=
Subject key identifier: DE:8D:A1:E2:89:08:A1:9D:BC:E3:A6:CA:BE:EC:57:26:65:D7:0A:00
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer: /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial: 01935688F027B037064BD4378D5BED5D8F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number: 0D0C
Signing time: Sat 23 Nov 2024 01:00:35 +0000
Manifest this update: Sat 23 Nov 2024 01:00:35 +0000
Manifest next update: Sun 24 Nov 2024 01:00:35 +0000
Files and hashes: 1: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: FRODFVk3FzL7xpx+JBVczU9X9DkcvVaufb0syvuo5Ug=)
2: gPGVQYrqRfLPiQuYuN9w-kkOWV4.roa (hash: pCQe11E/eIRm3WlEf1wseo167yVKPILg/pDc4RwtmAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:f0:27:b0:37:06:4b:d4:37:8d:5b:ed:5d:8f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Validity
Not Before: Nov 23 01:00:35 2024 GMT
Not After : Nov 24 01:00:35 2024 GMT
Subject: CN=de8da1e28908a19dbce3a6cabeec572665d70a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:67:d4:f5:3d:57:d9:48:d0:a2:c7:1c:6d:
10:92:f2:e5:78:a8:36:ff:d5:4b:b2:95:85:34:ea:
4f:0b:c7:85:f6:d5:3f:6e:7c:5f:25:5d:e0:49:3c:
6b:08:51:50:18:9e:0f:b8:8e:39:f6:5b:9c:38:ad:
7e:d3:17:44:31:a2:05:d7:2c:ca:8e:8b:de:69:4c:
7b:0c:5d:1a:b3:79:d7:d8:fb:df:9a:8c:a6:ba:2f:
7b:bd:57:23:1a:dd:46:b0:d6:66:cf:d7:fa:e0:42:
a0:87:a5:24:aa:ac:7b:38:10:89:76:db:85:c8:58:
e7:7d:55:4c:27:05:a3:30:83:ef:87:d0:3a:0b:b2:
52:9a:1e:0a:b1:35:cb:38:4c:cf:79:00:45:69:d7:
d0:49:72:86:a8:87:28:2a:cb:6d:74:3b:ee:0e:6b:
b4:73:88:dc:66:0e:1c:c7:c6:77:92:1e:db:af:78:
8c:12:74:fd:7b:ae:f4:fc:73:bd:e1:77:99:15:00:
04:2f:91:86:4b:54:2d:0e:3a:6e:eb:03:c0:be:43:
85:33:47:78:2a:f9:d0:95:7f:f0:18:cd:40:63:ed:
2d:73:8f:7d:44:39:b2:d1:2c:e5:65:8f:27:bb:e0:
48:13:31:c9:33:d0:83:b6:90:df:4d:ad:0d:aa:de:
40:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8D:A1:E2:89:08:A1:9D:BC:E3:A6:CA:BE:EC:57:26:65:D7:0A:00
X509v3 Authority Key Identifier:
keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:51:7b:bb:93:47:88:69:b8:54:cc:3c:79:ae:6b:4a:7b:3b:
3e:3a:55:cc:68:3b:ff:37:e8:bd:20:88:4b:7a:6a:c2:2c:cd:
65:89:79:2a:92:75:bc:99:8f:0d:6b:07:69:bf:56:24:e2:0b:
6b:4e:1d:02:ef:86:31:83:72:9d:49:52:ea:53:7d:8f:26:25:
89:af:7e:3c:86:45:50:a2:ac:2b:7b:d8:e7:25:db:ca:88:f5:
76:21:4e:72:c3:1e:e9:4d:23:64:18:93:8e:da:67:59:c8:8b:
04:78:35:46:31:b2:a3:9d:e4:17:21:2f:b9:ba:2b:6a:a9:dd:
86:d4:93:67:fe:35:24:5a:51:67:c6:b2:f0:e0:74:57:83:cb:
c5:9c:1e:a0:f3:9c:32:27:2f:32:52:1a:9a:e6:b3:cd:8f:d4:
22:bb:5e:c1:16:0c:44:21:28:61:a5:05:93:57:fb:69:4c:2f:
1a:fd:f3:ef:6f:20:71:e9:d3:16:94:b7:e6:36:c3:f5:7c:5c:
03:dd:6a:cd:0f:61:20:d4:3e:75:fe:43:b2:52:5a:1f:0f:b1:
83:f1:8b:46:b7:4b:1f:59:68:41:2e:bd:50:be:a4:d8:b0:ac:
eb:f7:a9:d9:2d:2b:30:db:67:a9:00:38:49:61:9a:e3:4a:ba:
7c:ec:7d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:22 2024 by rpki-client on console-ams.rpki-client.org