Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
File: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft (raw, json)
Hash identifier: met8lnXmkrWsBRl8CIGtoF7ba/YIQLfHa9uKNum+WlE=
Subject key identifier: 3E:A4:E9:80:A3:3F:A2:D5:80:16:4A:49:B5:AE:3D:0E:26:9A:66:AC
Authority key identifier: 09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
Certificate issuer: /CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Certificate serial: 0193652020B94024AE9439174B8B59813230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
Manifest number: 1376
Signing time: Mon 25 Nov 2024 21:00:24 +0000
Manifest this update: Mon 25 Nov 2024 21:00:24 +0000
Manifest next update: Tue 26 Nov 2024 21:00:24 +0000
Files and hashes: 1: 0IflaylEo48sunKqv1OGmVOn5xk.roa (hash: pSkU4z0/6XP9e2uZ3jV0tZx2T+X6WXq4cmh1J2ZNgwE=)
2: CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl (hash: GpEobe2m0wpxQtzav85xVnzyhizQm3jeV/uDBp/dwRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:65:20:20:b9:40:24:ae:94:39:17:4b:8b:59:81:32:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094fa567c07a5a2e1f2c8cb2611f173697871f78
Validity
Not Before: Nov 25 21:00:24 2024 GMT
Not After : Nov 26 21:00:24 2024 GMT
Subject: CN=3ea4e980a33fa2d580164a49b5ae3d0e269a66ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f0:42:b2:03:e2:f1:d3:72:4f:7c:01:5e:58:
e6:c5:67:24:c1:4e:70:3f:18:91:e8:cf:db:9c:2f:
2a:fd:04:85:0b:1b:4d:93:92:a1:ed:ce:af:bb:46:
be:4b:4f:bd:53:01:44:7f:47:1a:e8:9c:75:4b:ca:
a3:21:27:f6:c3:82:0e:99:26:08:a6:7c:f7:0a:49:
68:64:bf:be:2c:94:b1:82:18:a0:56:36:fc:92:89:
b3:38:2a:0e:2c:b9:1f:d0:43:59:7e:63:b3:1d:e0:
4b:7b:1f:dc:1e:28:86:24:49:dd:0f:2f:66:ff:dc:
ba:09:75:6a:cc:44:2f:c6:ef:ea:73:f0:ae:fd:fd:
24:a3:da:4a:4e:e5:be:c8:70:23:34:72:ae:04:7c:
db:45:63:1f:d7:30:eb:54:ec:48:43:e1:9b:6e:d3:
a6:e1:0a:e5:dc:d4:a5:f0:2b:45:98:9a:39:47:30:
74:b9:98:5b:1e:ea:09:7e:7f:71:b1:94:19:7b:54:
fc:35:5d:e5:f0:96:05:34:7f:e9:50:be:05:c4:53:
25:b0:d7:60:ce:c7:c3:ce:fe:c3:99:d2:02:c5:02:
28:8d:47:7a:ef:d5:3a:f2:27:0c:a4:7c:d5:df:22:
20:4d:cb:0a:6a:f6:f7:2d:9e:9e:6c:99:44:a2:30:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A4:E9:80:A3:3F:A2:D5:80:16:4A:49:B5:AE:3D:0E:26:9A:66:AC
X509v3 Authority Key Identifier:
keyid:09:4F:A5:67:C0:7A:5A:2E:1F:2C:8C:B2:61:1F:17:36:97:87:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6dba83-a4a4-4991-b20b-aea252dc63b3/1/CU-lZ8B6Wi4fLIyyYR8XNpeHH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c5:a5:30:9e:f7:91:15:79:3e:60:63:07:84:4e:a3:9f:5d:
93:c0:6a:fb:69:e9:01:3d:ee:6b:fa:69:62:2e:da:e0:ef:f4:
bf:80:56:bd:ed:9c:e9:02:58:09:1d:e9:fc:e8:15:33:cf:04:
98:75:06:f8:08:ef:30:52:7e:b4:f4:d4:30:44:cb:bd:65:82:
b0:88:e7:dd:c5:21:20:38:c3:8f:75:2e:da:15:b1:5d:a8:39:
f7:0e:ac:a6:ca:26:5e:12:4a:43:58:53:4b:9c:65:cf:32:14:
37:5e:12:fa:91:a2:44:27:77:8d:6d:85:d4:19:3c:e5:38:37:
04:ba:cd:9b:b1:77:e7:4e:e2:fa:d8:df:b1:df:ed:b1:c6:8f:
38:26:4b:7a:1e:e3:c8:b4:a3:2b:4b:59:3c:5e:6f:92:ab:2e:
a4:a8:94:9e:fc:c7:19:77:3d:3f:b7:96:57:95:a0:cc:82:a3:
07:67:46:91:cf:a2:c3:9b:05:63:6c:39:d9:8c:e1:0d:02:a3:
e0:ec:c5:e1:8c:f4:01:7d:3f:a8:af:29:da:ff:67:1d:0a:16:
54:73:83:fa:cd:82:2c:34:19:a3:82:b6:ff:69:76:bc:a2:7b:
59:21:8e:50:65:89:21:59:3b:2e:cc:62:f2:dd:14:38:cd:f7:
c1:27:83:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:21:43 2024 by rpki-client on console-fra.rpki-client.org