Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json)
Hash identifier: JVDi+oUtlKTQHvo3ZveMhA/RaAUkzlx3+a6Zo/DldEE=
Subject key identifier: BB:F4:68:91:56:1A:E9:7E:0E:D6:19:10:91:1A:A2:71:7A:93:62:B5
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial: 019357D2E4661B0882C83CB522A80B93F97E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
Manifest number: 04B2
Signing time: Sat 23 Nov 2024 07:00:58 +0000
Manifest this update: Sat 23 Nov 2024 07:00:58 +0000
Manifest next update: Sun 24 Nov 2024 07:00:58 +0000
Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: GESNJKhmzbdJh9BZ/RQoTRc8rbQ4XXmylZmCAbdHjyU=)
2: WZeukVirhnQk-1y4K7ye09bgafQ.roa (hash: LM0/l4oNKmhIu3tMYSLtAUGP8/5HsdyNAUuoRXsMUfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:d2:e4:66:1b:08:82:c8:3c:b5:22:a8:0b:93:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Validity
Not Before: Nov 23 07:00:58 2024 GMT
Not After : Nov 24 07:00:58 2024 GMT
Subject: CN=bbf46891561ae97e0ed61910911aa2717a9362b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:a2:65:f7:84:58:54:aa:61:70:0a:84:6f:
32:6f:d0:b3:72:81:12:71:12:3b:90:76:74:7b:ff:
22:26:ee:5a:72:95:83:20:9f:be:59:45:0e:96:f8:
20:3b:79:a4:08:3d:62:a0:0d:56:84:12:c8:b5:35:
66:37:50:3a:f3:8b:1e:3d:fa:b8:94:18:46:b9:db:
85:3a:6c:aa:8e:19:cc:bd:06:61:27:47:6b:da:50:
1c:f1:60:e1:fd:2e:46:20:27:48:88:e6:59:54:58:
06:85:92:3d:42:71:14:c4:ea:54:1b:5b:1a:8f:43:
eb:3d:7b:cc:c7:ea:6f:36:49:60:56:ca:78:45:98:
59:48:57:38:70:28:ad:12:7c:02:07:af:74:f9:4a:
dd:49:07:b6:74:da:a9:17:7b:b1:40:f9:65:07:ba:
57:79:4f:07:64:3b:1a:d4:14:29:b0:5f:ff:27:ca:
1f:97:73:4c:f9:a2:d0:8f:7c:d1:57:87:21:a0:03:
ae:96:e5:83:f0:3d:fd:08:6c:ac:66:97:2d:67:fe:
4a:bf:37:ac:36:a2:99:55:ff:69:f3:34:7e:2c:8a:
7f:77:55:fa:6b:ba:85:19:c7:c3:81:34:73:4d:a2:
10:41:e7:83:61:c4:99:40:c1:b1:99:1e:a9:de:f4:
c8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F4:68:91:56:1A:E9:7E:0E:D6:19:10:91:1A:A2:71:7A:93:62:B5
X509v3 Authority Key Identifier:
keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:92:b7:96:f7:1d:73:f4:23:d3:bc:4a:bb:57:1a:3d:72:72:
eb:8d:ab:10:a5:e0:70:e3:da:41:6c:cf:69:b8:25:83:56:fc:
ef:9a:d8:2d:cb:9f:bb:6d:21:b4:9f:35:aa:91:d0:e3:13:12:
f7:7d:8f:90:47:7d:61:46:ff:ad:6e:66:aa:00:ad:90:e7:24:
67:61:9a:a9:f2:cc:b1:cb:c8:8a:d5:bb:d6:51:4d:13:2e:86:
99:08:6b:a0:7d:8e:a7:8b:03:14:ab:1b:bf:8f:6f:8b:9f:ad:
07:20:34:61:81:d5:7e:d7:82:fe:e1:fa:57:74:ce:41:ef:fe:
e9:87:60:e7:de:6d:4b:90:6c:46:54:9b:a0:cf:13:c2:cb:f1:
11:6e:31:b3:cd:ac:fd:53:a3:75:c1:10:1c:43:98:0e:b5:6b:
21:30:fd:4d:2c:e1:07:53:e9:e1:f2:11:08:79:cb:84:47:ac:
54:cc:da:53:19:d2:ae:c6:10:1b:69:0f:bc:af:70:b0:d6:8c:
98:9c:26:3d:c0:3c:24:42:93:06:76:0c:26:60:a8:d1:52:de:
b9:d8:5b:73:82:e8:b7:42:5f:5b:1f:72:c4:ad:19:ec:73:46:
69:3a:7b:e7:c0:42:2e:2d:a4:2a:3b:06:05:f5:eb:08:2a:52:
d0:9b:d4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:15 2024 by rpki-client on console-ams.rpki-client.org