Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: D0ubg1FbqmWoKjW7rJCd4VtrCCddzKbXWjw29hg/fl0=
Subject key identifier: 24:B9:C9:A4:00:B4:E4:B4:34:0B:BD:19:ED:5D:07:4C:8D:E1:C6:2A
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 0193549CB376D90D3D42562C85BBE3C164D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 136F
Signing time: Fri 22 Nov 2024 16:02:55 +0000
Manifest this update: Fri 22 Nov 2024 16:02:55 +0000
Manifest next update: Sat 23 Nov 2024 16:02:55 +0000
Files and hashes: 1: 854DDS2vZaAXNJFxhQQsr1FRO3s.roa (hash: Rfs9NBNDMmkltNRoUssb84pN0fOFl4Iv0vK2yPeq0NY=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: 3j+Wb+DNnHJcVu5VuQgfGhN0HRlM9j27CPmGo5j+VsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9c:b3:76:d9:0d:3d:42:56:2c:85:bb:e3:c1:64:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Nov 22 16:02:55 2024 GMT
Not After : Nov 23 16:02:55 2024 GMT
Subject: CN=24b9c9a400b4e4b4340bbd19ed5d074c8de1c62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:d3:25:36:3a:9f:b8:db:80:2c:4e:7d:6a:
1a:fb:16:f5:15:87:26:96:0f:95:43:9f:83:b1:c9:
be:88:b0:13:c0:88:2b:9a:74:06:e0:1f:75:99:c6:
f4:af:f2:94:7e:85:e4:98:a5:ae:c7:10:27:46:16:
fe:df:98:77:a7:6d:9b:50:22:fd:b2:a3:6a:1f:44:
ef:b7:76:e3:e0:95:69:82:1b:95:30:29:a8:2a:51:
9e:20:e7:b0:f5:cd:b7:33:7c:72:cc:64:a9:5a:c3:
23:71:43:fc:08:7f:49:fa:a1:25:02:e5:65:63:72:
d6:08:32:43:b6:30:48:9a:6b:d6:f6:d5:41:3b:83:
07:77:2a:92:c6:99:5c:a4:ae:5a:f8:db:28:53:35:
6f:84:be:2c:69:40:ba:c3:92:c2:98:93:00:ea:b8:
f4:7f:b7:5c:7a:32:2b:88:28:1d:de:2b:d4:41:a5:
03:3e:ff:f9:ce:32:87:8d:8c:a9:3b:6d:e3:44:6d:
9f:1a:42:81:63:a6:49:84:3d:f5:4c:f3:92:d1:02:
5f:03:f9:da:ac:6f:46:83:eb:5e:56:f4:a9:11:8c:
2c:9a:04:26:49:c1:fc:b0:16:d4:0c:76:01:57:e7:
15:f9:1f:6f:4c:64:6f:92:0f:8b:6d:3d:b5:8e:e4:
4a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B9:C9:A4:00:B4:E4:B4:34:0B:BD:19:ED:5D:07:4C:8D:E1:C6:2A
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d1:cc:f1:85:e9:fb:05:12:e2:08:8b:a2:2c:15:3a:28:3b:
1f:1a:02:9e:f8:7f:d2:26:fa:67:0d:57:a0:cb:98:6a:58:8a:
08:eb:9f:29:c9:3d:23:d6:04:01:7d:9f:b9:31:51:07:2b:43:
ed:58:1b:0b:88:7b:64:8b:fe:c8:ee:ac:18:b6:48:3a:c1:d1:
85:f1:42:79:ba:50:3e:c7:1b:cd:d3:2b:a0:bc:a3:a8:77:00:
7e:7f:e1:31:da:70:f5:a6:2c:35:a4:9e:da:77:cf:80:11:6e:
77:19:50:f3:54:0e:2c:e6:8b:c4:23:64:4b:78:c1:28:57:e3:
1d:68:a3:9d:03:bc:42:6e:e3:84:50:a5:13:df:95:5d:48:5b:
05:c7:ad:bc:e2:a5:1e:79:ce:b5:e4:d6:b8:fd:6a:10:31:c3:
cf:22:ac:fd:fc:4c:37:a6:79:98:48:14:18:50:93:08:52:cb:
73:0a:4d:37:61:12:8d:53:0e:db:85:85:dd:d3:cb:17:5e:23:
4e:a0:30:57:cc:be:9b:12:48:98:b6:23:56:73:0b:ea:c2:15:
e0:8b:5a:c1:9b:a9:fb:12:8f:99:08:f6:fd:06:ad:51:db:df:
df:31:6c:4a:82:67:9d:ef:dd:b9:82:10:0c:e9:06:46:f6:27:
2c:93:1f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:27 2024 by rpki-client on console-ams.rpki-client.org