Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File: 1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier: cCIF8fF8cfouHns7+Aq9aEMxP4vcuA9Dt5nnvwaHIfk=
Subject key identifier: D5:29:40:C8:44:ED:32:1E:04:D0:D5:DB:54:42:BE:93:FA:69:CC:C6
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer: /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial: 01935688F4C6BE4771A9D2264E72A5F1C910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number: 1370
Signing time: Sat 23 Nov 2024 01:00:36 +0000
Manifest this update: Sat 23 Nov 2024 01:00:36 +0000
Manifest next update: Sun 24 Nov 2024 01:00:36 +0000
Files and hashes: 1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: UQtCd24i3sVnHLv9pRKYKQM+bWM0coN13IMx14jYAXE=)
2: aYHNYlRBIOdg14UribFBq7vPmzE.roa (hash: YKxowAQ1A3UaAYmJ6nkIJieUMg1EEoi8NUxQZjnV5UM=)
3: nn7Mk89YuCe-kl2VsB_TgaqWMms.roa (hash: 4rqXWGm2WSca98waaluzkh1zTvyQTV4QClEyqR24/5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:88:f4:c6:be:47:71:a9:d2:26:4e:72:a5:f1:c9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Validity
Not Before: Nov 23 01:00:36 2024 GMT
Not After : Nov 24 01:00:36 2024 GMT
Subject: CN=d52940c844ed321e04d0d5db5442be93fa69ccc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2b:eb:e3:44:6c:22:9e:1b:17:8b:ca:a4:07:
83:12:47:25:7b:b6:da:41:84:be:85:74:2c:09:c6:
9e:60:04:b4:bc:d8:cf:0e:17:0d:45:25:13:eb:3e:
dd:15:c6:2d:84:7b:d4:dc:ba:c0:80:4f:b2:7a:d8:
63:e4:3b:7a:a2:ef:56:68:ab:e1:c2:99:ff:26:f2:
7a:85:c6:52:86:c8:32:71:af:62:ad:bf:93:98:76:
7b:62:7c:b8:38:80:d8:5f:95:a4:0f:67:b9:97:34:
4e:e1:be:d5:67:bd:63:8a:00:67:45:43:da:27:86:
77:1f:9b:19:4a:69:c1:a5:a7:c3:ab:14:46:23:d9:
d5:51:f2:b0:7e:f0:7d:fe:e2:77:2f:64:13:3e:8f:
0e:f9:ee:78:17:19:9f:5c:f3:be:11:81:5f:d8:13:
b0:be:64:ca:57:4b:7e:12:3e:68:d5:00:da:fe:92:
00:a8:a5:82:e3:f6:10:fc:79:c4:af:e7:b5:e4:79:
67:80:80:8b:92:f2:9c:30:a4:69:32:2a:4e:32:68:
14:32:49:1d:c6:e0:e0:44:94:c9:42:e0:91:38:e8:
fa:c6:4c:68:9f:a3:09:1b:c0:48:eb:66:f9:d0:57:
6b:71:5f:d5:62:c8:9d:33:c0:80:76:bb:7f:2c:3e:
e3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:29:40:C8:44:ED:32:1E:04:D0:D5:DB:54:42:BE:93:FA:69:CC:C6
X509v3 Authority Key Identifier:
keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:63:04:10:ce:5c:56:04:ab:c2:27:c7:b4:4a:eb:06:3e:26:
46:4e:a0:cf:7f:82:58:9d:61:7c:4a:14:8f:4b:8d:96:8b:ca:
d8:c9:95:78:7a:98:18:20:6b:a5:e8:86:da:a0:7d:14:3e:de:
1e:fb:e4:2d:5c:03:5a:54:43:e1:3d:cc:90:9f:7f:e8:64:76:
f4:f9:14:63:a4:b3:2c:33:e6:bf:f6:10:a2:59:55:35:87:07:
d7:a2:a9:ff:13:67:6d:fb:d5:74:1d:ac:b2:5a:ea:d1:56:4d:
25:ba:55:7f:ac:26:17:7d:31:20:ad:fc:a5:29:68:90:e5:7a:
57:30:0e:fc:ce:1d:eb:b0:a5:ef:a3:bf:89:aa:2d:ba:6f:8b:
2f:e1:91:8d:7f:4a:a3:d4:c6:5c:cc:a2:a7:83:96:46:a5:8b:
ea:35:8f:07:7c:5e:fa:90:7a:f6:76:35:42:7e:7d:29:4c:a1:
f1:82:f0:62:89:63:06:0a:cf:cc:be:01:44:9b:9a:14:f6:75:
be:3e:c8:34:2a:27:bb:6d:dd:ba:29:51:aa:ae:e5:1f:0d:7f:
79:34:aa:af:87:bc:50:6f:3a:a6:14:ab:7b:c2:ab:85:fc:8f:
93:6b:7a:cd:53:d9:76:da:b7:46:49:f3:1e:4d:bd:9f:bc:ec:
fd:bf:f8:89
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZNWiPTGvkdxqdImTnKl8ckQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZmJjODQxNTgyMTQ4NmU4ZmUwODYwYjViZWMzZTkyODNi
ODAzODUwHhcNMjQxMTIzMDEwMDM2WhcNMjQxMTI0MDEwMDM2WjAzMTEwLwYDVQQD
EyhkNTI5NDBjODQ0ZWQzMjFlMDRkMGQ1ZGI1NDQyYmU5M2ZhNjljY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyvr40RsIp4bF4vKpAeDEkcle7ba
QYS+hXQsCcaeYAS0vNjPDhcNRSUT6z7dFcYthHvU3LrAgE+yethj5Dt6ou9WaKvh
wpn/JvJ6hcZShsgyca9irb+TmHZ7Yny4OIDYX5WkD2e5lzRO4b7VZ71jigBnRUPa
J4Z3H5sZSmnBpafDqxRGI9nVUfKwfvB9/uJ3L2QTPo8O+e54FxmfXPO+EYFf2BOw
vmTKV0t+Ej5o1QDa/pIAqKWC4/YQ/HnEr+e15HlngICLkvKcMKRpMipOMmgUMkkd
xuDgRJTJQuCROOj6xkxon6MJG8BI62b50FdrcV/VYsidM8CAdrt/LD7jPwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNUpQMhE7TIeBNDV21RCvpP6aczGMB8GA1UdIwQY
MBaAFPj7yEFYIUhuj+CGC1vsPpKDuAOFMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1QdklRVmdoU0c2UDRJWUxXLXcta29PNEE0VS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvMzYxYzU3LWVhNDItNDdlMi1hNjhm
LWVjOTY3YjUxMWQ3Zi8xLzEtUHZJUVZnaFNHNlA0SVlMVy13LWtvTzRBNFUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBhLzM2MWM1Ny1lYTQyLTQ3ZTItYTY4Zi1lYzk2N2I1MTFk
N2YvMS8xLVB2SVFWZ2hTRzZQNElZTFctdy1rb080QTRVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGME
EM5cVgSrwifHtErrBj4mRk6gz3+CWJ1hfEoUj0uNlovK2MmVeHqYGCBrpeiG2qB9
FD7eHvvkLVwDWlRD4T3MkJ9/6GR29PkUY6SzLDPmv/YQollVNYcH16Kp/xNnbfvV
dB2sslrq0VZNJbpVf6wmF30xIK38pSlokOV6VzAO/M4d67Cl76O/iaotum+LL+GR
jX9Ko9TGXMyip4OWRqWL6jWPB3xe+pB69nY1Qn59KUyh8YLwYoljBgrPzL4BRJua
FPZ1vj7INConu23duilRqq7lHw1/eTSqr4e8UG86phSre8KrhfyPk2t6zVPZdtq3
RknzHk29n7zs/b/4iQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:11 2024 by rpki-client on console-ams.rpki-client.org