Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
File: IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft (raw, json)
Hash identifier: 1SHuXo/v/oaH8traEf4f14vcse7wO8SdA+bhd77NUIY=
Subject key identifier: A9:34:82:B0:8C:46:B3:BC:2B:13:C1:C3:20:90:E3:B6:EA:B2:08:04
Authority key identifier: 21:9C:29:CF:C1:7C:5C:B6:0C:87:C7:BF:B0:8F:B7:16:B7:07:DA:D4
Certificate issuer: /CN=219c29cfc17c5cb60c87c7bfb08fb716b707dad4
Certificate serial: 01935877E3B0BF53BE9D86B9C3D4C417E282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
Manifest number: 136E
Signing time: Sat 23 Nov 2024 10:01:12 +0000
Manifest this update: Sat 23 Nov 2024 10:01:12 +0000
Manifest next update: Sun 24 Nov 2024 10:01:12 +0000
Files and hashes: 1: IZwpz8F8XLYMh8e_sI-3FrcH2tQ.crl (hash: SPXEmnbgQy+gt60OCthx2+yGzY6TDANPd/WaO5u29Zs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:e3:b0:bf:53:be:9d:86:b9:c3:d4:c4:17:e2:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219c29cfc17c5cb60c87c7bfb08fb716b707dad4
Validity
Not Before: Nov 23 10:01:12 2024 GMT
Not After : Nov 24 10:01:12 2024 GMT
Subject: CN=a93482b08c46b3bc2b13c1c32090e3b6eab20804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:5f:5e:53:ba:d7:99:f1:b7:bc:b1:35:15:
0f:5c:67:25:8e:9a:c9:c5:fe:69:b1:c4:0d:d0:20:
7b:0e:32:3c:b9:7e:6c:3b:9b:fc:66:66:0e:2e:81:
78:f3:7b:e1:cc:4c:0c:ff:0d:e1:59:17:7b:14:76:
d4:3e:98:e4:80:b2:c9:b1:ce:27:bd:0f:f0:5c:8a:
a0:38:1b:23:82:4a:f6:53:a7:b4:c8:5c:15:4f:02:
cf:22:96:2e:89:49:cd:2c:0d:66:93:f0:58:87:79:
12:34:58:12:07:fc:e6:41:32:32:89:6b:9a:88:21:
5d:e4:32:f1:21:ef:4d:4c:0e:d4:d9:c1:e4:d6:52:
bc:ca:ce:3d:64:23:1a:e3:b4:9f:b3:4f:16:d4:d7:
1b:47:03:89:78:43:bb:e3:ed:b6:2e:1a:dd:65:ba:
3c:ca:76:67:98:20:fc:33:47:5d:62:bc:a4:f0:89:
6a:72:13:23:a2:e8:a8:fd:7e:94:67:7d:fb:00:f1:
7f:30:a5:d9:44:11:8d:bb:c9:57:b8:57:ab:5d:66:
40:b0:46:d6:6a:2d:9c:9f:96:e6:58:1c:30:c5:80:
fb:7c:ba:3f:26:a5:db:ae:8f:dc:b6:d9:67:2b:7d:
78:44:63:94:4f:b6:ce:ad:85:47:3f:f5:b6:7a:d2:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:34:82:B0:8C:46:B3:BC:2B:13:C1:C3:20:90:E3:B6:EA:B2:08:04
X509v3 Authority Key Identifier:
keyid:21:9C:29:CF:C1:7C:5C:B6:0C:87:C7:BF:B0:8F:B7:16:B7:07:DA:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/99aa1a-c8e6-4e6e-88aa-f24531240883/1/IZwpz8F8XLYMh8e_sI-3FrcH2tQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:48:04:32:7b:0a:85:ef:e3:ac:48:95:61:08:72:c0:f6:39:
b7:0d:14:4a:a8:f3:9f:12:60:a7:b0:f7:ce:e6:37:35:5b:a9:
b5:5f:eb:4a:bf:a2:df:1e:ad:7a:d9:17:1d:10:f1:df:7a:76:
1e:cc:76:45:b3:e9:b1:94:a1:2c:0d:19:80:41:3a:3d:a8:c5:
d8:29:56:6a:9c:1f:1f:0e:5e:93:42:cf:66:db:dc:d4:69:b9:
6c:21:89:8d:03:43:09:b4:66:3d:48:af:5f:82:03:b1:59:5a:
b9:54:f5:73:2a:b9:90:10:3f:be:62:fd:23:50:a0:dd:28:85:
d1:00:26:1b:34:e2:58:75:fc:24:f5:c4:cb:c7:81:13:09:35:
8f:e6:74:04:66:40:d3:a8:68:94:38:38:ad:2c:03:32:c8:62:
f8:c2:cb:8f:86:db:bf:32:0a:2b:0d:6a:e0:67:be:77:b1:47:
6d:38:e0:79:e8:3a:92:38:25:09:50:e8:8e:6f:cb:39:db:c8:
42:43:26:c3:dd:6d:a0:92:cb:12:05:fb:96:ad:2a:10:e4:60:
7e:7e:98:d3:ac:54:38:20:43:86:a9:ea:9c:c7:aa:56:cb:b8:
da:6d:82:18:19:e4:5c:64:16:d9:b6:2a:c5:59:84:a1:f2:c5:
b2:22:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:05 2024 by rpki-client on console-fra.rpki-client.org