Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: myCvcbxqxwP787EfCfIGMXiz0QL6rTVj9MjSoPM6G7g=
Subject key identifier: C3:25:7E:80:42:08:FA:0D:C8:4C:3A:92:0A:F9:7F:3D:3C:2C:31:41
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 019369D931BCEB30DFFCA6806EA43625744A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0A61
Signing time: Tue 26 Nov 2024 19:01:01 +0000
Manifest this update: Tue 26 Nov 2024 19:01:01 +0000
Manifest next update: Wed 27 Nov 2024 19:01:01 +0000
Files and hashes: 1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: yY1pnz47hVCXEjHcrCFPYaipSBha9Nrmsc+DgBhHQGI=)
2: pC6yRAfa60mlwMKETDehcpW2U9c.roa (hash: QQqhJCza+iG1UZUu6HHUaNT/m/maihxDma99p4FSgO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:69:d9:31:bc:eb:30:df:fc:a6:80:6e:a4:36:25:74:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Nov 26 19:01:01 2024 GMT
Not After : Nov 27 19:01:01 2024 GMT
Subject: CN=c3257e804208fa0dc84c3a920af97f3d3c2c3141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:e0:a3:d2:bb:14:d9:2b:0b:bf:bc:c9:6e:
f4:e5:79:14:c3:b3:f2:32:57:3b:fe:cd:12:64:18:
4d:3b:31:62:5e:2c:16:86:06:56:25:eb:24:e3:57:
06:ca:a5:05:a9:db:6e:21:af:15:c3:df:cc:23:99:
38:8d:42:d4:f5:83:0d:1f:b1:6e:33:5a:6f:f8:75:
cd:03:0c:4d:92:f8:16:c7:f3:f1:3a:5d:6c:f3:9d:
99:2e:14:3b:78:59:29:5a:6c:4f:dd:41:27:05:dd:
b3:05:c9:e1:4c:80:b0:dc:e1:92:14:46:24:be:67:
64:cd:9d:4b:ce:52:d9:6a:6a:5a:13:b9:fb:1a:d5:
a8:7f:9e:aa:df:07:41:84:e5:7a:09:32:f3:02:09:
35:e1:94:d9:4a:1d:fe:82:c6:3f:18:e0:ff:5f:af:
e5:b4:55:77:26:43:c4:40:b7:7d:1d:de:55:38:49:
14:31:16:71:62:8e:0f:57:a5:b5:1d:b7:bf:ca:fa:
76:82:d2:19:0f:a7:46:d7:01:e1:92:bf:1f:f6:07:
c9:b9:fb:00:29:7f:58:a1:91:a3:2c:85:40:8c:e9:
72:eb:98:6e:0c:12:4c:bd:80:c0:a6:51:77:1a:a1:
8f:8e:84:c7:81:14:d8:b6:92:27:eb:60:66:f9:e4:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:25:7E:80:42:08:FA:0D:C8:4C:3A:92:0A:F9:7F:3D:3C:2C:31:41
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c6:c6:07:54:5d:67:fa:10:aa:90:cd:e5:27:e7:9c:29:68:
40:d9:75:ef:34:2f:2f:ce:27:05:fb:19:c3:07:e1:38:45:db:
a8:28:a2:2e:0b:55:d6:b9:c6:bd:c7:25:4d:60:2d:48:8e:e9:
d4:2e:56:fe:da:c1:ce:6b:56:df:14:d1:06:60:78:fe:1e:27:
f8:2a:55:e0:40:15:b8:56:26:c0:c0:e5:2b:c4:5a:b3:e6:38:
65:e8:9a:56:3a:12:cd:a8:ec:b3:51:5f:87:2f:03:42:5a:93:
55:9e:be:e0:62:b0:52:0b:11:20:b3:e0:67:e4:a0:36:1f:a9:
73:cf:17:60:1d:a2:f5:cc:e8:36:ac:1d:e1:56:a3:1c:2f:c0:
55:5c:e2:4a:58:a9:7d:d6:5e:93:40:b2:0a:fe:f8:2d:e9:0a:
80:88:85:eb:c2:c8:e0:ed:53:aa:65:a5:e6:cd:e5:39:c7:61:
b5:36:eb:8d:59:38:d2:2b:20:95:54:a2:51:ef:be:47:37:a0:
c0:68:26:f8:97:a3:66:51:64:e2:3d:f0:15:04:7c:f6:c3:4c:
2b:eb:bb:bf:7e:78:35:d0:da:ee:ce:83:38:8a:80:bd:2e:b4:
fe:f4:50:60:01:f4:20:b4:b2:bb:f9:4e:a9:18:b4:16:60:7e:
9b:21:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:12:39 2024 by rpki-client on console-ams.rpki-client.org