Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
File: UzkLE8nvSvz9CBJBEeb2PcMBZao.mft (raw, json)
Hash identifier: gageSwBo5C5roZK6cS61zmIXun/U7XPIuvarRUAPv20=
Subject key identifier: F8:AC:BF:5E:35:9C:7F:EB:41:14:AD:9F:3D:7E:B1:E0:96:D2:00:61
Authority key identifier: 53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
Certificate issuer: /CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Certificate serial: 0193572DFD23BA96EA450E189851776E2EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
Manifest number: 1343
Signing time: Sat 23 Nov 2024 04:00:51 +0000
Manifest this update: Sat 23 Nov 2024 04:00:51 +0000
Manifest next update: Sun 24 Nov 2024 04:00:51 +0000
Files and hashes: 1: UzkLE8nvSvz9CBJBEeb2PcMBZao.crl (hash: 0F2DaBiJlRHpzmeGI7gRkh5cy0A9m9mOPET2+VstGpM=)
2: gecfs4h459ZmHC8jyPITfaxQ-Mc.roa (hash: UbPFMr4ZgA/pyMWslD2T+IwgJUqlNLC0EhJraYsEqK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:57:2d:fd:23:ba:96:ea:45:0e:18:98:51:77:6e:2e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53390b13c9ef4afcfd08124111e6f63dc30165aa
Validity
Not Before: Nov 23 04:00:51 2024 GMT
Not After : Nov 24 04:00:51 2024 GMT
Subject: CN=f8acbf5e359c7feb4114ad9f3d7eb1e096d20061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:52:d7:80:14:33:20:b6:35:5e:2b:9a:37:f0:
85:a7:9e:62:17:bf:69:15:cc:0a:bb:8e:2f:26:8a:
2b:9e:9d:92:00:18:44:8e:0e:69:79:46:52:b8:5e:
c6:27:34:fd:3c:26:26:7b:33:07:ee:23:a8:13:4c:
cd:17:b9:01:ba:3a:1d:b2:31:db:1e:cc:85:fa:78:
43:ff:b0:c6:ee:5e:a6:b8:e6:b8:4d:b1:08:2d:e2:
21:ad:67:61:ce:17:61:f9:04:6d:c9:50:84:d2:30:
14:29:a6:67:4e:da:2c:21:cb:59:a8:bb:a4:66:b9:
2c:62:a3:85:7d:ba:ae:5c:10:e4:75:aa:ff:d4:ea:
ca:20:a9:93:a3:17:45:75:bd:8a:bf:98:ef:4c:b0:
e7:23:48:c2:7b:52:c6:14:cf:9f:7e:7d:4a:60:6c:
2c:fc:81:70:28:e9:90:5d:8d:49:b0:c1:94:fe:17:
fd:b8:79:97:7a:9b:51:d0:b8:02:70:c6:23:57:6c:
bd:7a:81:9f:9d:61:a4:1f:e9:87:75:d6:22:20:92:
2b:69:47:62:0a:8f:1d:02:f2:f8:7a:04:58:c2:e4:
42:11:dd:29:20:af:98:f2:65:f8:ce:42:4f:29:29:
db:c6:32:cc:7f:5b:ff:2c:4e:56:88:86:d2:09:aa:
1a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AC:BF:5E:35:9C:7F:EB:41:14:AD:9F:3D:7E:B1:E0:96:D2:00:61
X509v3 Authority Key Identifier:
keyid:53:39:0B:13:C9:EF:4A:FC:FD:08:12:41:11:E6:F6:3D:C3:01:65:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzkLE8nvSvz9CBJBEeb2PcMBZao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/89c4ab-984b-4f6c-bdd0-33d7ac370979/1/UzkLE8nvSvz9CBJBEeb2PcMBZao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:4c:06:16:40:c0:a8:b7:1b:7a:8a:ad:dc:f1:f7:50:62:21:
a1:92:ed:d0:39:be:3f:f2:e7:be:7b:c8:9c:5e:0c:13:73:f3:
64:dd:04:d3:1e:67:4a:47:6a:0f:a2:a6:0e:69:e0:ba:9f:99:
4e:89:27:30:e1:69:b2:27:cf:6b:e4:b4:79:4b:d8:18:f2:32:
e7:7d:0f:9a:96:8c:22:e9:08:b7:0a:b6:1e:00:3a:78:76:ec:
2a:20:a5:8e:ac:16:96:ed:e5:8f:32:b5:38:45:9e:44:b2:c6:
2a:89:3c:36:5c:23:8a:e8:3e:df:aa:cd:4d:17:14:bb:6a:76:
55:15:7f:4c:c9:03:a8:5a:49:e4:1c:ac:4b:9b:cc:8d:97:b7:
82:e8:6a:fe:95:a1:56:50:fb:5b:39:01:0b:7c:7e:58:92:d7:
02:e1:84:25:14:61:4d:a2:70:29:22:bb:86:44:bd:6e:54:31:
4c:aa:b9:d9:f7:a7:1e:f0:51:31:31:e9:71:15:9f:4a:3c:38:
76:6c:ea:46:a6:e2:7e:b9:f2:7a:bf:39:7b:7f:3e:09:4d:74:
c9:42:d6:62:a6:52:f9:f1:d2:65:f6:c7:8b:29:a3:24:43:2d:
36:4b:24:20:91:39:1b:8f:3b:b2:b2:26:6b:2e:27:10:7a:23:
b0:a5:09:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:13:59 2024 by rpki-client on console-ams.rpki-client.org