Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: 0ZTD4STaUUMwREPHlFRFfOWCNMqEkJrE/GSVavwEfDw=
Subject key identifier: F8:15:C5:50:72:FB:FA:C7:42:C2:46:BF:45:E2:BC:BF:DC:C6:ED:16
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 01935878FAB143E554A59B353D722FF5FD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 045A
Signing time: Sat 23 Nov 2024 10:02:23 +0000
Manifest this update: Sat 23 Nov 2024 10:02:23 +0000
Manifest next update: Sun 24 Nov 2024 10:02:23 +0000
Files and hashes: 1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: YYeeEOtdNNEZSUZsQ0Aoj/GnnxRnEo73BC/kD0Umr4E=)
2: juWAiVlr57M8p4pTpksQQxSDgDY.roa (hash: e6zrFC4DFFbDmWxnOPVCDczMhCo+PQ0lksznJTk7cWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:78:fa:b1:43:e5:54:a5:9b:35:3d:72:2f:f5:fd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Nov 23 10:02:23 2024 GMT
Not After : Nov 24 10:02:23 2024 GMT
Subject: CN=f815c55072fbfac742c246bf45e2bcbfdcc6ed16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:15:c4:36:92:9c:0e:79:f6:e7:a3:5f:a8:
da:6e:76:36:fe:94:81:e5:78:b2:3f:be:98:22:f5:
06:e2:66:32:68:06:2a:9d:e1:69:14:9b:3f:9c:4a:
7d:57:cc:5d:66:e4:26:16:25:7d:49:b3:7d:44:1d:
01:98:27:a7:be:e2:9c:42:a4:04:c1:b6:33:df:61:
3c:35:52:1e:9a:55:be:37:de:bc:66:cc:c6:ae:9f:
b3:03:68:2d:f0:6d:f5:80:17:3a:c3:42:eb:16:88:
4d:7e:8f:97:26:eb:1f:1c:b1:64:6c:c7:86:9b:6b:
60:90:73:40:65:1f:b6:5f:91:5c:c0:30:4c:5a:2f:
f9:af:b7:05:42:87:41:15:0e:dc:b0:35:09:1d:34:
11:8d:64:c8:0e:d2:61:7f:2e:57:25:d7:4e:be:98:
e6:6d:b8:e7:c0:85:13:e2:bd:9a:9a:f0:db:71:b2:
de:9c:c3:f9:0e:4c:95:c3:bf:e0:76:07:62:6a:0c:
c9:ad:4d:e1:b7:7f:8e:be:3d:d4:75:74:2b:22:9a:
aa:df:24:00:5c:c6:37:40:c9:0e:b3:90:6d:46:c4:
ce:b3:43:6a:26:c5:0e:a9:59:f6:15:db:3b:4a:f8:
97:d6:da:a8:45:a6:45:d9:80:33:33:58:28:c8:be:
b1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:15:C5:50:72:FB:FA:C7:42:C2:46:BF:45:E2:BC:BF:DC:C6:ED:16
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ee:9a:71:44:a5:a3:e1:17:c2:31:e8:32:10:37:ef:87:c8:
98:dd:78:b6:99:8a:72:5b:17:e7:c6:21:4e:97:a3:55:be:84:
aa:25:c8:66:58:3b:9b:1d:3b:e2:44:79:bf:fe:3e:06:66:9e:
b6:7b:44:ee:91:fa:9d:a1:32:1e:98:3d:4b:af:1f:18:51:1e:
9a:32:bb:9c:d3:9f:b2:11:64:4c:23:31:8d:1e:35:7d:cf:fc:
16:76:ae:32:a2:c4:14:f6:cc:c7:dc:b8:31:f3:6e:a4:09:07:
78:2f:0f:9b:ea:28:e8:0d:95:91:70:80:2d:23:f4:4c:12:a4:
9a:81:4d:b6:30:7d:ac:36:82:51:2e:af:0d:5a:a3:27:67:3b:
a2:ef:40:4c:6f:06:ec:ea:88:8d:82:bd:45:a1:f0:42:89:ee:
36:11:0b:c2:48:7c:01:19:9a:d4:22:37:97:87:36:96:df:e6:
36:4a:d8:3f:eb:12:de:7e:31:98:9e:8a:c7:f9:bf:12:4a:68:
ab:4a:98:db:79:03:d3:9b:4e:f3:15:c3:1f:4b:ec:56:c0:6f:
16:a7:e1:43:ab:e2:d2:b4:93:b1:cc:94:54:7a:ec:c6:78:2b:
ed:5f:cf:51:a2:77:0f:4d:63:7b:d1:12:fe:5c:a4:7c:09:76:
82:0f:4e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:11 2024 by rpki-client on console-fra.rpki-client.org