Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: dpEFOV0KEGjvgWQUzmXB9uLWx91Jt4JnZ48edJdsDQ0=
Subject key identifier: 37:0A:AF:C7:7C:C8:30:13:EC:6B:FE:79:D0:AA:18:FB:18:D8:30:7E
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 0193549BA8D0499DD57AEDBF5C387672246C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 10AD
Signing time: Fri 22 Nov 2024 16:01:47 +0000
Manifest this update: Fri 22 Nov 2024 16:01:47 +0000
Manifest next update: Sat 23 Nov 2024 16:01:47 +0000
Files and hashes: 1: 1-EbYyYVCvILZeyHtEcWQtNLUYT0.roa (hash: evU/6mzOSoDSbf9gAICrAAru3xbqNMyYIjgClh0VNr4=)
2: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: wRPlqJ2Qau/X/ZdZdCHalK2K6UUs8OWUcFIeWg2b8BY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:a8:d0:49:9d:d5:7a:ed:bf:5c:38:76:72:24:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Nov 22 16:01:47 2024 GMT
Not After : Nov 23 16:01:47 2024 GMT
Subject: CN=370aafc77cc83013ec6bfe79d0aa18fb18d8307e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:48:20:a7:2f:4b:0a:8b:72:83:62:58:3a:
93:53:a6:ef:c3:47:0d:e9:6b:a2:ff:4d:e8:84:68:
c7:b1:79:08:d5:2a:9c:bf:14:3b:5c:35:38:87:79:
9b:76:25:ff:9e:a7:ca:34:7b:23:53:91:44:45:92:
02:b4:c1:58:04:83:10:98:7c:9b:2b:6c:9e:20:0c:
04:12:38:4e:ea:cb:89:ad:d8:19:4b:ea:07:06:0a:
64:a3:bc:26:bc:d9:3d:15:a5:d2:84:ec:f0:1f:1b:
09:f6:30:ff:bc:10:19:88:f1:0e:18:99:ec:23:5b:
42:15:93:ba:dc:7b:ae:8f:69:02:e6:02:92:9a:40:
e3:14:76:b5:ad:c6:f2:c5:9e:63:91:0d:cf:05:22:
0c:d3:93:9e:72:93:34:a1:ee:58:52:9e:07:da:de:
47:c3:f9:fe:b6:7c:9b:fa:09:0c:35:52:57:00:43:
d1:75:a7:f4:4b:14:2d:89:6a:6b:f3:c4:68:37:8b:
b0:c2:82:45:14:a4:bd:91:8d:70:46:64:9e:92:4f:
46:06:c0:79:f9:64:5a:ad:00:e5:51:72:51:43:d1:
5d:62:42:13:b4:86:7e:a0:bc:0a:6b:ba:4a:c9:8d:
59:51:99:37:c9:7e:c2:c5:e8:72:95:7b:5a:87:0e:
0e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0A:AF:C7:7C:C8:30:13:EC:6B:FE:79:D0:AA:18:FB:18:D8:30:7E
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:bb:8a:fd:30:4a:b8:d4:4d:23:03:0c:cb:f3:f2:16:4d:47:
03:cc:31:26:75:d1:4d:b0:c4:d2:0b:c1:17:6f:e3:74:c5:4c:
fd:7e:86:27:71:3c:8c:df:23:6e:d8:c6:96:9e:ec:ba:83:a7:
97:fb:df:38:a3:60:ac:ed:53:3b:53:71:55:00:a6:6a:7e:e6:
29:64:cb:65:08:43:99:d4:29:ee:40:be:8f:69:68:1d:18:b9:
13:b5:78:ba:ba:0e:42:e5:fb:d4:3e:ea:58:3d:a3:06:8d:df:
d3:44:a4:4d:10:76:25:85:dc:70:9e:d2:d0:7e:99:d2:12:e1:
2c:a0:8a:ea:1d:79:20:73:25:80:16:87:be:da:df:e3:cf:cd:
ed:79:8c:f1:4d:ac:17:f5:85:95:3e:a4:10:ce:e5:a8:27:c0:
bb:48:ae:80:be:f3:6d:a2:f1:7e:b9:62:49:7b:31:dc:78:3c:
82:d6:48:7b:7e:66:36:0d:e3:c9:37:3b:74:f3:09:dc:2c:cf:
86:ed:eb:c0:ae:94:23:06:fe:e2:c9:aa:50:c5:04:75:67:65:
e6:a8:a0:67:1a:fd:b5:96:d1:ab:2d:30:51:91:52:6b:58:b8:
7e:e5:1d:78:6c:34:92:53:89:1a:a0:cf:fa:92:8b:c3:ee:4b:
a6:b7:91:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:20 2024 by rpki-client on console-ams.rpki-client.org