Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File: A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier: NOod2NPktqZfhFC+i3aInvbINcftyM07tOEhZQVj2IU=
Subject key identifier: 90:C4:09:DB:21:58:39:8A:10:63:6F:5E:82:B8:1F:8C:50:D7:06:10
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer: /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial: 0193640E21FA839FCEB378E58ED87BE982AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number: 1378
Signing time: Mon 25 Nov 2024 16:01:07 +0000
Manifest this update: Mon 25 Nov 2024 16:01:07 +0000
Manifest next update: Tue 26 Nov 2024 16:01:07 +0000
Files and hashes: 1: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: 1VulyqURvnyYBpCPZCMtrRhxQk+jI0G8e50LxpbcXic=)
2: VQHhcz9UCoVjWha7otp83EgCwNo.roa (hash: ciToPuQ1CfJmGy/mYcpReaRnQDE512kaueLB/UIO934=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:0e:21:fa:83:9f:ce:b3:78:e5:8e:d8:7b:e9:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Validity
Not Before: Nov 25 16:01:07 2024 GMT
Not After : Nov 26 16:01:07 2024 GMT
Subject: CN=90c409db2158398a10636f5e82b81f8c50d70610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:7a:a5:cb:b7:50:46:29:05:a8:c0:62:07:
53:4d:97:a0:44:51:ef:b3:90:aa:2d:72:0e:5b:3b:
3d:0e:e2:b1:06:d4:07:72:98:95:32:67:59:15:9c:
9d:c2:07:b7:5d:02:7c:8e:eb:eb:1f:70:30:d0:c7:
4a:05:2d:42:64:88:1f:72:55:8f:0d:1e:d9:0a:f8:
aa:81:6b:cd:65:da:71:a1:99:81:b3:ef:e9:d3:1e:
b5:82:2b:91:ac:e0:26:c6:6a:71:db:09:8e:61:cb:
7e:64:30:ff:97:71:b2:4c:f5:2e:eb:e2:18:31:13:
55:cd:4d:cb:fb:40:06:60:14:64:57:9a:a7:ae:08:
08:11:6d:b1:26:98:cd:9d:04:b4:1a:be:51:35:89:
c2:a0:d9:ff:1b:8e:30:1b:8d:91:15:3a:0f:41:75:
8d:51:48:81:46:ed:92:01:1a:3d:e9:84:a0:ab:2d:
d5:84:d1:84:91:23:fb:a7:f1:a7:e7:98:1b:a4:cf:
d1:92:63:ab:cf:b6:46:0b:04:c0:f7:72:9f:6f:28:
62:22:e9:79:a6:13:2c:e6:ff:43:a3:72:cc:09:80:
bd:89:c8:b8:d2:5b:45:89:d1:8b:31:a2:a9:a0:83:
f5:2c:71:49:c2:6d:d7:4d:58:70:37:0f:1a:81:75:
52:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C4:09:DB:21:58:39:8A:10:63:6F:5E:82:B8:1F:8C:50:D7:06:10
X509v3 Authority Key Identifier:
keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:87:f3:ae:14:d1:ee:a7:7b:af:89:71:d6:db:9d:08:fc:f2:
1e:4a:db:f3:75:e6:6b:7a:a2:1f:de:c6:f3:6d:ba:a2:a9:57:
08:db:33:24:53:a7:5f:96:b7:dd:d7:38:b9:08:61:09:b6:fa:
67:81:a9:77:b4:c8:c2:a3:30:2a:a3:37:b1:06:b2:33:bb:ff:
68:bd:8f:3b:cf:01:84:43:66:10:0b:4c:a2:e7:06:57:fa:26:
38:63:2d:ca:97:0b:d9:37:80:47:bf:7f:4c:8b:33:37:92:0d:
99:01:9b:66:6e:3b:d1:7f:d8:5a:f8:78:8e:1c:1f:10:2a:7e:
0a:3c:ff:3a:8d:e0:d6:82:b1:c4:a5:c1:28:fb:34:06:c1:88:
db:33:66:ae:d4:af:07:70:e0:1e:55:8e:9c:df:35:7d:d4:58:
c4:d8:ae:01:00:da:12:60:e9:12:8a:b8:dd:d8:5c:9a:c5:67:
f8:9f:71:04:e9:48:7e:bc:d5:fd:37:02:38:14:f8:66:c2:92:
54:aa:3f:2b:81:cd:3f:f2:97:83:b4:29:8e:ba:70:db:7e:d6:
a2:fa:c7:87:8f:be:41:d2:86:27:fb:c1:ba:e1:d6:dc:87:6e:
30:25:30:3a:fe:a2:ec:fa:62:32:77:ff:19:e6:38:09:32:2e:
df:cb:49:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNkDiH6g5/Os3jljth76YKqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZjgzODgzNzJkYzMzMmM3Y2M2Zjc3NjZhZDc4ZDU4YTIz
YjI1NDQwHhcNMjQxMTI1MTYwMTA3WhcNMjQxMTI2MTYwMTA3WjAzMTEwLwYDVQQD
Eyg5MGM0MDlkYjIxNTgzOThhMTA2MzZmNWU4MmI4MWY4YzUwZDcwNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+F6pcu3UEYpBajAYgdTTZegRFHv
s5CqLXIOWzs9DuKxBtQHcpiVMmdZFZydwge3XQJ8juvrH3Aw0MdKBS1CZIgfclWP
DR7ZCviqgWvNZdpxoZmBs+/p0x61giuRrOAmxmpx2wmOYct+ZDD/l3GyTPUu6+IY
MRNVzU3L+0AGYBRkV5qnrggIEW2xJpjNnQS0Gr5RNYnCoNn/G44wG42RFToPQXWN
UUiBRu2SARo96YSgqy3VhNGEkSP7p/Gn55gbpM/RkmOrz7ZGCwTA93KfbyhiIul5
phMs5v9Do3LMCYC9ici40ltFidGLMaKpoIP1LHFJwm3XTVhwNw8agXVScwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDECdshWDmKEGNvXoK4H4xQ1wYQMB8GA1UdIwQY
MBaAFAP4OINy3DMsfMb3dmrXjViiOyVEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQt
OTQ1NTg1OGU5YzA2LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85ZTExNjUtYzYxMC00OTg4LWE0OWQtOTQ1NTg1OGU5YzA2
LzEvQV9nNGczTGNNeXg4eHZkMmF0ZU5XS0k3SlVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANofzrhTR
7qd7r4lx1tudCPzyHkrb83Xma3qiH97G8226oqlXCNszJFOnX5a33dc4uQhhCbb6
Z4Gpd7TIwqMwKqM3sQayM7v/aL2PO88BhENmEAtMoucGV/omOGMtypcL2TeAR79/
TIszN5INmQGbZm470X/YWvh4jhwfECp+Cjz/Oo3g1oKxxKXBKPs0BsGI2zNmrtSv
B3DgHlWOnN81fdRYxNiuAQDaEmDpEoq43dhcmsVn+J9xBOlIfrzV/TcCOBT4ZsKS
VKo/K4HNP/KXg7Qpjrpw237WovrHh4++QdKGJ/vBuuHW3IduMCUwOv6i7PpiMnf/
GeY4CTIu38tJAg==
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:30:08 2024 by rpki-client on console-ams.rpki-client.org