Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
File: JmXBf6AosxNI9jD2tW30Is4GKzs.mft (raw, json)
Hash identifier: KL0RB+SP2gtJCcKzq7uam5YPB5h8mlcRuT3Zv5KfAAc=
Subject key identifier: 27:1E:B0:48:9A:44:C5:C7:F4:C1:53:BD:3C:96:D3:8B:33:12:BC:2E
Authority key identifier: 26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
Certificate issuer: /CN=2665c17fa028b31348f630f6b56df422ce062b3b
Certificate serial: 019356BF99D0C436D19BBDADEB2FBBF4B7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
Manifest number: 1376
Signing time: Sat 23 Nov 2024 02:00:17 +0000
Manifest this update: Sat 23 Nov 2024 02:00:17 +0000
Manifest next update: Sun 24 Nov 2024 02:00:17 +0000
Files and hashes: 1: JmXBf6AosxNI9jD2tW30Is4GKzs.crl (hash: wwZuSjUhKbmrk+eMHOm3xmPWA8L7c9+Sm1e/TUhV94Y=)
2: dxsE05AugyoEt1g_r_sAh_2Csjk.roa (hash: 1B3OSuzZnEmSiwaFdCaGO+tgezCL7D/7W/a+FtxJmfI=)
3: ldtOLu8U6qp4EFdvlThR5Moa9Do.roa (hash: pPurCdJ4gRIKL1o8lc1wz63eAH4fwTZkxoZMCETDGhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:bf:99:d0:c4:36:d1:9b:bd:ad:eb:2f:bb:f4:b7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2665c17fa028b31348f630f6b56df422ce062b3b
Validity
Not Before: Nov 23 02:00:17 2024 GMT
Not After : Nov 24 02:00:17 2024 GMT
Subject: CN=271eb0489a44c5c7f4c153bd3c96d38b3312bc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:e4:af:32:8b:0c:77:fd:a7:f6:db:7e:39:d0:
d1:0e:5c:0c:2f:62:00:ea:3c:bc:e6:78:ad:d6:87:
2e:a7:04:3a:a2:0c:dd:57:71:ca:96:94:6e:9b:81:
f4:93:73:da:51:bf:8d:2d:b6:43:e8:f1:6e:fd:87:
8b:bd:38:ea:13:68:e4:5d:48:1a:a5:a5:22:a2:d3:
eb:f5:a7:4a:41:b5:06:ac:a7:0f:65:82:51:00:3d:
8f:bd:fe:37:ce:1e:44:86:62:33:b1:f9:3a:7e:70:
69:9c:17:41:84:73:77:58:2e:03:97:99:2d:00:af:
22:cd:91:8c:01:d6:73:34:0c:2c:2c:e5:1d:ea:1b:
3b:18:69:1e:63:50:dc:21:3b:de:22:27:53:46:14:
e8:ea:ae:d8:77:d4:6f:e7:46:a4:49:75:f9:2e:b6:
ca:74:04:49:2e:1a:b8:bf:6d:1b:cd:1d:86:82:4d:
c7:67:8f:07:94:6e:2f:c0:54:78:4f:bd:e5:59:ec:
8d:26:d1:36:ed:b7:0c:93:b3:29:f5:f1:43:07:18:
47:29:ce:f7:6b:5f:58:96:d3:48:14:87:60:77:83:
77:ca:81:f7:88:0e:03:9a:e9:2c:1e:1c:f6:92:07:
06:b7:4a:a4:e5:cb:fc:b1:5b:ad:e7:7c:7d:19:d8:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1E:B0:48:9A:44:C5:C7:F4:C1:53:BD:3C:96:D3:8B:33:12:BC:2E
X509v3 Authority Key Identifier:
keyid:26:65:C1:7F:A0:28:B3:13:48:F6:30:F6:B5:6D:F4:22:CE:06:2B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmXBf6AosxNI9jD2tW30Is4GKzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/fc90a0-804c-40fa-b27a-c383a9010005/1/JmXBf6AosxNI9jD2tW30Is4GKzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f0:e8:84:4a:82:11:31:7c:55:e6:f6:9f:09:8e:15:f7:f7:
d9:58:bb:35:15:a1:26:e6:94:5a:46:e6:fc:7a:89:19:24:c3:
c6:49:84:f3:c3:01:b6:ec:89:f0:81:49:13:fa:3b:72:d2:a9:
a8:b7:d9:52:d0:08:ec:de:88:6f:b4:89:5c:dd:c5:1b:f9:4b:
8e:9f:b6:79:96:14:2a:7a:05:ed:64:a5:c3:b3:2d:3d:ee:e4:
55:5d:9f:39:96:75:5a:56:df:be:0e:87:70:e6:c0:b1:b9:a1:
43:5a:9f:c8:ef:09:44:23:02:b7:35:fc:45:27:0d:dd:b1:0f:
d3:88:d3:89:71:9b:db:0c:a9:67:87:03:aa:c5:b6:87:a2:34:
5a:85:1f:58:7e:87:41:da:d8:b5:d3:57:ad:d3:57:dd:50:44:
e0:c2:72:32:02:20:49:2a:e7:47:c4:11:28:9d:b3:a0:71:37:
ba:e9:d4:e2:85:ec:59:52:57:cf:35:e2:a9:5b:1d:90:7a:31:
4f:97:7d:23:5d:f2:44:6e:e3:32:b3:a4:13:6c:86:4d:9d:70:
ac:5f:39:40:27:74:90:24:b6:f4:2d:83:b2:b8:c6:95:1a:07:
d4:82:5e:0e:46:51:87:e5:38:69:f8:ab:1e:cc:3b:6b:9e:43:
f2:6d:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:41 2024 by rpki-client on console-fra.rpki-client.org