Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File: IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier: A4DRfwzGPJDGyo1xbP5MHmd6wc8V+2D6UTj5N6DODzM=
Subject key identifier: 44:32:7C:E9:11:74:E2:64:77:49:3A:27:AB:AD:2C:C1:A3:69:72:C4
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer: /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial: 01935199C375D389665572FDCDE9E7845B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number: 01B8
Signing time: Fri 22 Nov 2024 02:00:51 +0000
Manifest this update: Fri 22 Nov 2024 02:00:51 +0000
Manifest next update: Sat 23 Nov 2024 02:00:51 +0000
Files and hashes: 1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: 8Wt2+ad4OZjGWCqh3mJcsTEZyE8ZjQKLtVve8sS4O8w=)
2: llS158VdlyHZXXeSo7RlSzVfdfs.roa (hash: g2BLDk0KQunvtL8zt+eiXJgWnnJ7PEW/yD0ES4Jl8oE=)
3: xT4qcPuaW6B5KNdQYd3P0fRcyLc.roa (hash: u3M88tNUz/XBnIItK/vDOiLCFXCpzRfuGN79Rcw3TaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:51:99:c3:75:d3:89:66:55:72:fd:cd:e9:e7:84:5b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Validity
Not Before: Nov 22 02:00:51 2024 GMT
Not After : Nov 23 02:00:51 2024 GMT
Subject: CN=44327ce91174e26477493a27abad2cc1a36972c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:37:21:dd:14:0c:12:a5:f6:89:b2:08:62:27:
59:ff:18:18:f7:47:dc:73:6b:a2:5c:99:53:3c:db:
dc:65:21:03:dc:f8:fd:67:50:b5:a6:1f:e3:18:f9:
dd:a9:81:54:50:40:16:0c:70:2d:ff:ef:fd:a5:27:
d2:80:3d:ea:59:5c:15:bd:02:37:71:b7:55:6e:c8:
52:ab:99:d9:3a:7b:41:d8:69:af:4f:1d:cb:6b:53:
14:7d:30:38:65:52:d1:72:15:50:fb:e3:e3:34:8d:
a6:22:24:4f:a6:66:84:45:64:df:25:7a:5c:4c:b7:
98:cb:eb:fb:c8:6b:ce:3c:23:94:5c:c7:ad:ea:e0:
d1:3b:da:6b:2e:39:c3:f3:2d:a7:3d:2c:c4:2b:4d:
51:fd:d4:44:28:bc:d9:73:f7:ee:ea:9d:2e:7c:60:
4d:bb:db:24:69:f0:68:bb:64:a3:d1:1d:6e:9a:e6:
14:8a:17:fd:d0:39:92:8a:12:9a:95:0d:40:cb:5a:
9a:5d:b3:62:56:e2:cf:ac:2e:c0:6c:04:4d:1b:17:
08:cf:a0:1e:63:fc:6e:47:d6:65:60:ba:dc:86:b5:
a5:0f:ea:02:6f:58:e4:d0:9c:f8:1a:c6:6a:5c:5f:
f5:f2:08:99:7c:54:63:45:5b:df:2d:5a:a3:df:21:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:32:7C:E9:11:74:E2:64:77:49:3A:27:AB:AD:2C:C1:A3:69:72:C4
X509v3 Authority Key Identifier:
keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:5a:c6:23:d5:7f:a7:9e:8a:6d:71:a0:83:ee:64:29:93:ab:
6a:85:fe:73:99:78:5f:08:16:a9:78:a6:f0:a5:18:cc:12:02:
b3:ab:eb:69:d6:1a:25:2b:9e:d5:00:b4:5e:4f:8c:41:51:e1:
12:57:c8:40:9f:0d:5f:e7:67:a8:f9:cd:93:76:a4:2a:77:7e:
66:c5:b9:34:1c:6e:ff:3b:48:63:ac:96:ca:35:2e:63:1f:91:
2d:5b:06:11:5b:aa:52:a8:1d:1f:66:21:e1:8e:1a:6b:f9:ac:
10:5e:d6:0e:f9:18:eb:9a:a9:0c:e5:a7:e2:73:81:2f:a4:0f:
80:4b:78:a3:b4:ec:1f:a1:b4:03:48:8e:d0:28:55:15:57:f7:
b6:51:48:f3:fc:92:d9:b9:ee:52:ff:83:9e:68:91:f6:cc:0a:
13:91:26:5a:79:76:2e:ee:97:60:ec:05:cb:31:b2:bb:ad:8e:
5e:83:5f:38:c1:10:b4:fc:12:6e:31:df:e7:30:43:0e:74:09:
ff:78:16:00:9a:5a:a5:5b:a3:c5:09:a1:28:f1:02:ee:d3:53:
bb:e5:9b:4f:df:fa:57:46:ae:b3:36:b7:18:40:26:5c:3b:52:
6d:d4:1f:ad:ba:cb:ea:a9:a3:40:7d:6c:2c:79:e6:1b:8f:5f:
1e:d5:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:52:26 2024 by rpki-client on console-ams.rpki-client.org