Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier: y9kY8FIPX4af/eMxsD3h6aTmZlhM6RAXbr8izJuRNmQ=
Subject key identifier: 81:36:DF:DB:BB:54:D4:34:E4:A9:64:AF:65:98:6E:2D:8E:A1:DA:FF
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 0193549D0EF2B9ADD37EC4CCB9745A05E358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number: 1129
Signing time: Fri 22 Nov 2024 16:03:19 +0000
Manifest this update: Fri 22 Nov 2024 16:03:19 +0000
Manifest next update: Sat 23 Nov 2024 16:03:19 +0000
Files and hashes: 1: 7gH_SvDbI1yZlOsPvBHhN34RP14.roa (hash: BOmuntwbCzHhITNJG7ctsk77wIJN9fs6Mo2YHXfbZAg=)
2: GSwT5zT5bvwMj_-xAxrfstapxdo.roa (hash: LEyEiAVzllrSp6NUFOD/aw2smssJ7idccBL7YhHn3zQ=)
3: fiB5WWwFcrhstL35ZsbpSygG5W0.roa (hash: BgonEgsdYULHysPGc65YHg7xgFd6b+LUbgis5baV8y4=)
4: kOvO8CR_FX7pVsgJaG4WEow0tck.roa (hash: x179Uh3yeutyEEuJ423CR/TaAO4vJutHT35xrdoMILs=)
5: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: tzYhjp8+llyoG+2X6vToNc+XRhYGfMJ5YpIInxI99wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9d:0e:f2:b9:ad:d3:7e:c4:cc:b9:74:5a:05:e3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Nov 22 16:03:19 2024 GMT
Not After : Nov 23 16:03:19 2024 GMT
Subject: CN=8136dfdbbb54d434e4a964af65986e2d8ea1daff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:78:22:1c:64:48:71:8a:34:1c:dd:06:13:b9:
89:fd:78:70:be:b3:af:f4:70:5b:d4:80:68:bf:9a:
1a:3b:46:ed:90:ce:57:2e:6d:4a:0b:65:4a:95:98:
43:65:14:9d:06:e8:3a:91:67:ca:41:39:75:53:f2:
04:e2:42:03:02:ad:a9:9c:dc:8f:ef:39:61:fb:c2:
53:11:0a:19:e1:bb:54:e0:a0:c3:d4:b2:89:86:0d:
18:39:e3:6d:5e:30:44:50:92:56:55:42:57:eb:79:
2f:bd:2c:34:5f:03:6b:95:12:bd:1b:8c:2a:31:70:
d1:7a:e4:3d:1e:50:ca:d1:c7:f2:d7:c2:3d:4c:04:
57:b1:2f:71:d7:05:09:b6:64:79:bb:fc:f7:91:2a:
d3:d6:ad:11:34:e3:be:ef:a6:a1:f2:49:4b:ab:48:
83:92:8a:20:8c:33:3a:f7:57:8f:08:77:43:52:29:
c9:a8:6b:00:86:e3:46:b5:21:53:9d:68:17:72:dd:
09:b5:59:6a:0e:1a:2b:6b:00:a4:b9:c7:ab:de:2a:
c7:30:91:45:a7:7d:fe:5e:67:49:fa:2e:63:78:aa:
59:0f:2d:e3:1e:7f:be:4b:1a:1f:85:37:70:c3:e7:
42:0a:16:98:24:7e:fe:bb:97:55:35:59:d7:18:9f:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:36:DF:DB:BB:54:D4:34:E4:A9:64:AF:65:98:6E:2D:8E:A1:DA:FF
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5a:36:9e:f7:08:c0:29:15:bc:ad:fb:9f:28:28:f6:1b:5e:
d6:6b:63:0b:e6:99:5a:73:e1:39:77:58:94:13:04:e9:2d:da:
66:89:91:41:05:22:80:bd:15:dd:c5:52:e1:9b:e3:6d:fe:52:
cb:ea:0d:51:eb:c5:23:cd:61:09:2b:02:fd:8f:da:97:f0:0a:
2f:53:e9:3d:ed:23:3b:a0:cb:50:d8:46:ca:50:d6:c1:6d:f5:
20:ea:2e:11:5e:a6:03:cb:35:9c:d8:5b:a2:c0:12:ff:2f:84:
e6:b1:e5:f2:be:10:7b:3d:dd:0a:51:a1:b1:72:00:97:26:15:
9b:b0:48:fa:16:d4:37:28:ee:65:6e:38:aa:ef:7e:d2:49:cf:
ad:dc:ef:4b:09:84:c4:00:cb:02:e6:41:48:da:50:eb:ee:ff:
8c:16:0c:14:bd:33:10:b4:bc:cf:c8:5c:48:46:63:d9:8a:b9:
dd:26:d6:66:ae:76:ad:18:ff:7f:ae:e3:27:04:cb:7a:27:c3:
48:43:79:9c:48:2f:df:d4:89:de:75:ba:fd:1f:03:31:7f:12:
bd:b5:5d:44:13:99:12:91:e3:42:95:80:3f:39:8b:c8:90:36:
91:c1:86:03:e6:e6:b0:b6:5b:30:13:a6:db:53:92:a9:77:ea:
39:97:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:53 2024 by rpki-client on console-fra.rpki-client.org