Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
File: LKYTd0lZnAPHtHLxQscZaAAGtuY.mft (raw, json)
Hash identifier: wH4i/mV3R4CIwj5OHSuLwb0AGgqhnOOul04kU6vknB8=
Subject key identifier: 8B:FE:67:8A:AB:DE:AC:91:10:3C:11:F1:72:E0:8F:6C:33:BD:17:AF
Authority key identifier: 2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
Certificate issuer: /CN=2ca6137749599c03c7b472f142c719680006b6e6
Certificate serial: 019356890A05860F52C82EAB40FB32EFE2A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
Manifest number: 1004
Signing time: Sat 23 Nov 2024 01:00:41 +0000
Manifest this update: Sat 23 Nov 2024 01:00:41 +0000
Manifest next update: Sun 24 Nov 2024 01:00:41 +0000
Files and hashes: 1: LKYTd0lZnAPHtHLxQscZaAAGtuY.crl (hash: +Ee4Dp67F9a/2/K2EFwprjvBeEmO9Go3DMMHuWkbjeg=)
2: eUmwH2Njm9Tde52InLiStJ-3jio.roa (hash: Q12eDS1fydr78YXs8pfGMhKKNdAoxhioLl1Tg/McMIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:89:0a:05:86:0f:52:c8:2e:ab:40:fb:32:ef:e2:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca6137749599c03c7b472f142c719680006b6e6
Validity
Not Before: Nov 23 01:00:41 2024 GMT
Not After : Nov 24 01:00:41 2024 GMT
Subject: CN=8bfe678aabdeac91103c11f172e08f6c33bd17af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:ab:bd:1d:96:29:02:0d:58:21:d7:82:d4:
b1:77:bd:c1:de:2b:11:66:bc:07:9d:93:79:ee:84:
19:04:7f:4f:cb:f5:06:ba:b5:02:4d:b5:05:85:b2:
d4:eb:07:ce:d9:29:46:21:ea:05:d3:e5:a0:33:c2:
36:ec:aa:00:8f:22:0b:fc:e4:5e:21:99:f3:7d:38:
5c:b3:f8:1e:4b:e2:1e:40:8f:82:62:ad:77:be:aa:
20:09:2a:22:49:5a:8f:b7:84:01:30:4a:0e:39:bd:
92:79:d2:8a:cf:f8:ba:cc:87:e7:4b:d0:c9:45:47:
65:95:28:bf:c6:88:31:4a:92:dd:1f:0e:a8:cb:32:
79:05:84:1c:2d:2a:a8:b1:1f:e3:6e:84:93:f9:7e:
9c:d5:87:61:60:e2:54:12:4e:a9:01:dc:38:75:ca:
56:00:69:32:30:43:f7:d8:81:10:03:3e:16:33:28:
3d:d9:3e:d0:b7:f6:cc:f7:d9:e4:4b:e1:c6:1a:52:
c5:63:b6:e2:57:38:a7:d1:c5:fc:82:db:32:95:32:
a9:14:7d:c1:c6:4f:05:29:57:fd:41:00:ed:36:aa:
e7:55:77:65:f3:97:21:5f:e6:19:f3:7d:8f:60:98:
0d:87:da:0b:d7:c7:cd:9e:d1:b2:66:44:03:b7:81:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FE:67:8A:AB:DE:AC:91:10:3C:11:F1:72:E0:8F:6C:33:BD:17:AF
X509v3 Authority Key Identifier:
keyid:2C:A6:13:77:49:59:9C:03:C7:B4:72:F1:42:C7:19:68:00:06:B6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LKYTd0lZnAPHtHLxQscZaAAGtuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/6fcf66-8e8c-4dbb-8cf0-5019d2c388db/1/LKYTd0lZnAPHtHLxQscZaAAGtuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:52:f6:e8:8e:ef:b5:5e:52:ac:b1:17:10:a6:e4:36:6f:62:
00:00:be:0f:08:18:61:d6:68:55:f1:61:a3:59:3f:9f:82:a9:
db:6b:28:91:f6:84:e3:5c:ae:a7:45:f6:c4:a0:25:0a:83:5d:
78:75:74:d2:75:98:fe:c2:db:c8:79:be:d5:cf:4f:37:0b:94:
ee:ab:32:0e:17:db:9b:0e:a9:7c:f7:cb:4c:73:cf:ef:87:82:
bb:65:c4:e1:1f:03:16:64:f1:53:b1:6b:52:00:5a:49:ad:c7:
84:f2:ec:f2:75:53:12:20:60:ee:3c:98:44:a2:c9:0f:d0:a3:
7b:ec:c5:40:91:5a:b3:c4:67:85:cd:97:95:a9:b3:49:71:13:
d6:b6:c0:18:4b:3f:e0:0f:9e:b2:cd:93:3f:17:81:03:2c:b0:
7f:2a:ab:5f:08:f0:e1:92:a9:a6:29:a6:57:c9:bb:8a:c9:27:
32:53:d2:65:03:d4:e7:36:5c:9b:65:73:57:5d:7e:2f:41:dc:
8b:ad:29:a5:10:78:cb:c6:73:45:32:4c:dc:a4:bd:53:77:d4:
c2:4c:91:49:e3:0c:6d:f0:99:0e:71:a1:03:84:8a:0a:60:a4:
40:07:7b:b7:59:36:11:59:65:d6:27:8c:1d:87:23:dd:48:d9:
9a:a9:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:34 2024 by rpki-client on console-fra.rpki-client.org