Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json)
Hash identifier: 6jaBZaqRt00UX+iiDnncWdaAiDgBL3WWpAXHFnBfaNY=
Subject key identifier: 33:A1:17:AA:82:26:FB:17:97:1F:13:FB:57:57:1B:9E:ED:B1:F9:DC
Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Certificate serial: 0193572D901645C80D23F5E9D19A1E273747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
Manifest number: 06C5
Signing time: Sat 23 Nov 2024 04:00:23 +0000
Manifest this update: Sat 23 Nov 2024 04:00:23 +0000
Manifest next update: Sun 24 Nov 2024 04:00:23 +0000
Files and hashes: 1: CCcqkF1Sdfcm7VcAN4Yhcrth0zg.roa (hash: 4npCwAiaBERfZADIT2iUlOb348ckfj0B7lXGGzoyxgA=)
2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: 0QUKvW/R/wB9us9bUas/R2SSnXXSuAz8md+iK9MAvLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:90:16:45:c8:0d:23:f5:e9:d1:9a:1e:27:37:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e
Validity
Not Before: Nov 23 04:00:23 2024 GMT
Not After : Nov 24 04:00:23 2024 GMT
Subject: CN=33a117aa8226fb17971f13fb57571b9eedb1f9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:b4:3f:82:f8:5c:53:6d:50:b4:17:ea:bd:
8b:a0:95:ea:c7:d2:6c:0e:7d:be:7f:d2:2e:fc:49:
f5:4f:18:92:2b:91:46:09:bf:ab:7c:a2:5c:ea:93:
79:63:a9:41:21:e6:18:9c:78:97:8f:03:99:94:67:
36:91:9e:fe:47:cd:46:ef:45:a2:30:75:f9:1e:c2:
ef:fc:ac:7c:b9:ac:01:b6:31:c4:9a:32:fb:cf:95:
96:a6:72:bc:78:e5:3a:86:a9:3c:08:91:59:4a:0a:
ac:83:3d:1a:2e:b5:b7:10:f8:31:59:e7:6c:33:41:
2d:4e:ca:d1:e7:f8:8b:80:8d:6d:bb:a2:24:11:0a:
0c:09:93:05:39:71:3f:45:85:d7:4e:ca:31:e3:d4:
1e:da:49:4d:19:b6:7b:b3:84:70:3c:74:dd:a9:4c:
5a:a7:60:7d:7d:10:62:8e:d3:29:ee:53:b6:9b:80:
4e:1f:61:7e:59:29:a2:55:c1:f2:a2:7a:37:04:e5:
5a:ab:3a:30:4b:b5:d0:7f:a0:85:5e:74:16:24:83:
1b:3a:86:0c:0b:65:fd:06:01:ed:59:b4:d1:02:6f:
b2:b0:97:e5:d0:15:4a:8e:c9:bd:4f:7b:b3:b2:da:
c1:7a:4a:b3:20:d6:92:8b:17:ac:4a:96:70:06:a3:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A1:17:AA:82:26:FB:17:97:1F:13:FB:57:57:1B:9E:ED:B1:F9:DC
X509v3 Authority Key Identifier:
keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5f:39:3f:76:3f:48:31:7d:38:f0:a0:fd:b5:c4:a4:1a:36:
6c:09:c2:35:c6:2c:4c:9f:32:d7:5b:43:a1:98:4e:e0:e7:2c:
4e:34:f1:ff:67:9f:5f:74:ea:1f:ab:d2:d2:85:70:90:37:9f:
35:ff:b3:2f:48:b1:4b:cb:ae:2f:75:5d:6c:b9:e5:fa:67:cd:
13:ea:c9:9c:c5:31:ba:be:5c:70:6c:65:ab:13:49:76:f6:24:
8c:d5:cb:42:88:a0:f7:c6:12:03:a7:b8:6f:7e:4f:8c:90:b3:
6c:90:31:ea:9b:f8:e4:68:c8:c7:a7:22:f0:bb:26:96:d7:62:
f5:57:af:1f:98:e9:99:17:cb:88:66:65:a5:68:7f:1e:b0:60:
e8:b8:d8:4c:59:6a:47:a8:f1:17:bd:30:43:f1:12:94:17:dc:
4a:02:9d:2e:e2:0f:8d:30:4e:4b:72:a7:ae:65:dc:eb:97:f7:
3c:27:85:f3:29:94:af:2d:48:a3:b9:1e:6b:90:a4:23:7a:08:
55:85:a4:da:0f:8f:14:db:13:57:88:83:a4:0d:38:a6:3d:4f:
bb:78:cd:70:2f:58:5e:5d:d7:9a:04:b0:d2:14:45:02:c0:67:
7c:38:d9:a5:99:29:7f:63:b5:62:2d:cd:3d:1e:14:f6:00:d9:
e9:93:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:44 2024 by rpki-client on console-fra.rpki-client.org