Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
File: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft (raw, json)
Hash identifier: Xz0JDzTaGG7BOZxOXJ3jXboz5JoAAYZRV7VrSAW3AjQ=
Subject key identifier: C5:0A:E3:0D:AF:A9:DC:A1:8B:28:33:1A:9B:7F:4B:EE:A7:50:3A:43
Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Certificate serial: 0193549B7F784634BA2140C819EE1ABBDF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
Manifest number: 1371
Signing time: Fri 22 Nov 2024 16:01:37 +0000
Manifest this update: Fri 22 Nov 2024 16:01:37 +0000
Manifest next update: Sat 23 Nov 2024 16:01:37 +0000
Files and hashes: 1: 1-7Pca8BflNXHnRE5tquO5WPOWsQ.roa (hash: OLX9SclkMAdwoNxBfpLKWDWPM/kMni5pwd5w16pwo+s=)
2: d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl (hash: MgbcqqNmSR1t+uJO4TN2j10bYW0bg1C56rwNudGIhYQ=)
3: uEClDvqyPr1x6Hm-rdGkzJPICbY.roa (hash: 44+N1umP7sSdKnKPaFY6nsFi+b9ErSzLRD4FCQlLnTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:54:9b:7f:78:46:34:ba:21:40:c8:19:ee:1a:bb:df:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3
Validity
Not Before: Nov 22 16:01:37 2024 GMT
Not After : Nov 23 16:01:37 2024 GMT
Subject: CN=c50ae30dafa9dca18b28331a9b7f4beea7503a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:3b:3f:9d:83:fc:9e:ee:c0:e0:ec:b2:33:
32:06:16:e7:0c:77:b5:53:59:d6:75:af:4b:6e:25:
6f:f3:e7:d4:43:29:cd:f5:ca:d1:75:a5:23:79:1b:
e7:10:5f:02:13:83:a5:be:d7:f0:13:bf:ff:5a:27:
29:01:af:44:c2:6f:75:c8:82:cc:39:24:12:95:0c:
95:de:2f:7b:83:43:e1:78:42:01:17:82:11:69:be:
46:70:71:d9:1d:0f:94:35:26:2a:cc:f3:83:c2:96:
b3:1a:31:54:91:67:0b:61:e6:05:fd:b0:f1:8c:c6:
e9:a3:b8:b6:15:f1:dc:d6:9e:59:5a:58:72:9c:1c:
b1:d7:eb:23:85:ce:48:9d:a9:4a:38:bb:93:d2:b1:
8c:0a:b6:ba:28:43:4f:07:cf:b0:5d:93:64:31:6d:
55:bb:cf:39:0e:de:82:9c:5d:86:d9:ef:24:34:81:
97:c8:ee:5d:33:29:b9:03:93:57:c8:19:9d:f0:7d:
85:c6:b8:3c:c6:b0:7a:60:1c:2a:9d:65:71:e5:13:
2c:14:94:07:4b:24:d5:a9:25:e4:76:00:60:02:69:
94:cd:b9:04:80:14:88:e2:fb:dd:88:59:2f:c4:4f:
e8:60:1d:d7:51:e3:be:5a:34:ad:ea:e6:ce:0c:df:
55:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0A:E3:0D:AF:A9:DC:A1:8B:28:33:1A:9B:7F:4B:EE:A7:50:3A:43
X509v3 Authority Key Identifier:
keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:be:da:25:5a:0c:e4:86:ea:8e:c3:1f:26:f3:a9:6e:a8:e5:
cd:d6:6b:b1:54:76:e7:61:b8:4a:e6:2b:e2:87:2e:cf:ad:15:
d2:9d:29:65:8c:90:94:b1:ee:09:6e:3a:78:c3:73:50:b0:11:
54:a9:95:b7:56:33:f6:56:f0:b7:45:b7:f0:00:6e:a3:8c:ca:
7d:d7:74:83:29:e9:9a:d2:b6:ca:08:11:98:85:f0:84:af:1c:
12:5e:c9:77:1a:a1:cb:b8:46:72:b7:82:0e:d3:7c:1d:b3:07:
95:7a:47:c1:4e:83:f0:8f:f7:49:bf:f8:cd:c3:69:11:21:1d:
17:89:ef:bb:1f:c1:0e:6d:f5:7f:82:72:25:f2:1c:bd:b1:eb:
26:fc:85:15:e8:06:c4:3f:55:15:f8:c6:e7:3a:fe:fe:48:00:
4b:ea:75:8d:c0:c4:90:92:ca:e9:9f:0a:47:88:b1:b5:b5:0c:
53:96:9b:d0:60:49:71:ce:bd:ec:bc:cc:11:86:2b:d3:3d:1a:
7f:3d:1d:1b:67:e1:a3:1b:00:1d:c9:7a:86:4e:36:d7:21:90:
92:eb:75:79:f1:31:f2:20:0e:b3:81:15:6c:1e:e3:58:3b:60:
23:a6:a4:d1:c5:32:e3:4a:fa:2f:6d:11:4f:b0:a3:9d:a4:b7:
fc:9e:98:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:28 2024 by rpki-client on console-ams.rpki-client.org