Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
File: AquPiJLQHdTIQHJMu6uQwMpglDI.mft (raw, json)
Hash identifier: YukRA/AUd1+vd77fNc+1aWzo99vMDglbiq98n99JAQ0=
Subject key identifier: A7:86:2B:8B:32:95:4C:DB:24:5A:5A:37:BF:7F:E0:7F:09:19:C4:63
Authority key identifier: 02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
Certificate issuer: /CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Certificate serial: 019358772D24E7DF3091D4B6E7BA549BE68D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
Manifest number: 136D
Signing time: Sat 23 Nov 2024 10:00:25 +0000
Manifest this update: Sat 23 Nov 2024 10:00:25 +0000
Manifest next update: Sun 24 Nov 2024 10:00:25 +0000
Files and hashes: 1: AquPiJLQHdTIQHJMu6uQwMpglDI.crl (hash: r892pAHG52tCZ3EwoABWXfUTncBj6+gpKwywgDLRtKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:77:2d:24:e7:df:30:91:d4:b6:e7:ba:54:9b:e6:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ab8f8892d01dd4c840724cbbab90c0ca609432
Validity
Not Before: Nov 23 10:00:25 2024 GMT
Not After : Nov 24 10:00:25 2024 GMT
Subject: CN=a7862b8b32954cdb245a5a37bf7fe07f0919c463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:70:83:dc:41:71:19:7a:50:83:39:e1:b8:78:
29:97:98:0f:81:da:5f:6d:07:fd:c3:56:e0:98:07:
a8:8e:c5:98:3e:f9:5d:e9:10:6c:d6:f8:c8:5d:67:
f9:79:a1:99:c4:96:94:47:b4:6c:3a:60:3c:73:f4:
8f:52:4c:9e:82:59:79:08:b4:92:17:7f:f8:08:db:
41:3f:4a:6f:e6:12:2f:c9:7c:cb:63:c5:79:f0:71:
80:63:26:f3:39:16:92:9f:a8:a5:88:36:f3:54:ca:
7c:fc:a4:dd:aa:a3:f8:f9:d3:ee:48:12:bd:7a:04:
6b:5b:8c:6e:0b:4c:e6:9c:e8:fd:dc:d1:71:d2:87:
ba:08:57:32:1a:29:62:1d:71:f5:80:2f:4d:d6:c5:
93:59:3e:be:31:03:50:98:fd:32:f4:8a:d0:2e:0c:
8f:34:9c:12:27:96:41:e3:26:8a:2d:01:1d:98:1c:
9a:bb:19:db:d0:af:65:8f:76:02:8e:f2:ab:be:ae:
b1:a2:81:9c:08:10:fb:09:b6:c5:0e:1a:c0:0a:5b:
a7:30:3c:a7:0a:c0:87:5c:93:fb:aa:f1:54:03:43:
96:83:89:c2:01:a6:98:fe:b1:66:09:27:da:91:59:
a3:a7:c6:4b:a0:56:c7:22:44:02:a2:05:bd:e1:d5:
87:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:86:2B:8B:32:95:4C:DB:24:5A:5A:37:BF:7F:E0:7F:09:19:C4:63
X509v3 Authority Key Identifier:
keyid:02:AB:8F:88:92:D0:1D:D4:C8:40:72:4C:BB:AB:90:C0:CA:60:94:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AquPiJLQHdTIQHJMu6uQwMpglDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/613a95-b05a-4fc4-9d91-e3b77013fdb7/1/AquPiJLQHdTIQHJMu6uQwMpglDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:69:39:30:c2:91:2d:41:1c:63:c2:76:a4:43:56:a2:2d:da:
76:55:16:65:0c:04:a3:5e:f3:95:0d:32:90:0d:23:98:10:6d:
44:54:af:66:98:0e:e1:91:17:9a:f5:9c:9b:37:5c:86:c4:62:
af:02:d1:3a:d9:cb:8e:d8:65:94:22:47:06:d7:78:d6:a2:94:
7f:05:74:f6:5b:dd:f0:45:04:c8:59:df:cc:81:d0:90:16:54:
6e:77:fb:eb:59:d7:d6:bd:07:c1:cb:34:42:a6:a9:e2:79:f2:
d4:da:c3:e3:c5:c8:96:c4:54:95:0f:7d:f9:6c:a3:31:89:04:
0d:78:c4:db:59:5e:80:21:fa:bb:e8:88:b5:ba:43:ef:ad:d1:
f0:cf:07:f7:d8:20:f4:19:89:8e:96:65:ca:71:d4:dc:78:33:
bc:f7:de:4a:56:88:41:ca:56:4d:d5:0c:e4:c2:0f:64:7f:c9:
de:9f:8e:5f:4b:e0:6a:e2:d1:5c:f6:7b:9a:06:ed:a3:ae:bf:
44:ff:37:1e:7e:32:54:f4:79:9b:eb:64:c0:34:64:f5:7c:fd:
f4:a3:55:be:bd:45:88:48:8d:ea:38:8d:81:2a:8c:3d:63:c9:
b3:5c:2b:46:4f:f4:08:ac:cf:d5:c5:be:80:08:22:00:8a:7a:
91:ab:8a:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNYdy0k598wkdS257pUm+aNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYWI4Zjg4OTJkMDFkZDRjODQwNzI0Y2JiYWI5MGMwY2E2
MDk0MzIwHhcNMjQxMTIzMTAwMDI1WhcNMjQxMTI0MTAwMDI1WjAzMTEwLwYDVQQD
EyhhNzg2MmI4YjMyOTU0Y2RiMjQ1YTVhMzdiZjdmZTA3ZjA5MTljNDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnCD3EFxGXpQgznhuHgpl5gPgdpf
bQf9w1bgmAeojsWYPvld6RBs1vjIXWf5eaGZxJaUR7RsOmA8c/SPUkyegll5CLSS
F3/4CNtBP0pv5hIvyXzLY8V58HGAYybzORaSn6iliDbzVMp8/KTdqqP4+dPuSBK9
egRrW4xuC0zmnOj93NFx0oe6CFcyGiliHXH1gC9N1sWTWT6+MQNQmP0y9IrQLgyP
NJwSJ5ZB4yaKLQEdmByauxnb0K9lj3YCjvKrvq6xooGcCBD7CbbFDhrAClunMDyn
CsCHXJP7qvFUA0OWg4nCAaaY/rFmCSfakVmjp8ZLoFbHIkQCogW94dWHIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeGK4sylUzbJFpaN79/4H8JGcRjMB8GA1UdIwQY
MBaAFAKrj4iS0B3UyEByTLurkMDKYJQyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEt
ZTNiNzcwMTNmZGI3LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTNhOTUtYjA1YS00ZmM0LTlkOTEtZTNiNzcwMTNmZGI3
LzEvQXF1UGlKTFFIZFRJUUhKTXU2dVF3TXBnbERJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2k5MMKR
LUEcY8J2pENWoi3adlUWZQwEo17zlQ0ykA0jmBBtRFSvZpgO4ZEXmvWcmzdchsRi
rwLROtnLjthllCJHBtd41qKUfwV09lvd8EUEyFnfzIHQkBZUbnf761nX1r0Hwcs0
Qqap4nny1NrD48XIlsRUlQ99+WyjMYkEDXjE21legCH6u+iItbpD763R8M8H99gg
9BmJjpZlynHU3HgzvPfeSlaIQcpWTdUM5MIPZH/J3p+OX0vgauLRXPZ7mgbto66/
RP83Hn4yVPR5m+tkwDRk9Xz99KNVvr1FiEiN6jiNgSqMPWPJs1wrRk/0CKzP1cW+
gAgiAIp6kauKvw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:27 2024 by rpki-client on console-fra.rpki-client.org