Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json)
Hash identifier: 4+w/6/LVRZcuWwrqyLoL9A9GM1OL6HpOuJLdxWJm+3Q=
Subject key identifier: 69:8E:8D:59:AF:6A:EC:91:1F:82:B5:BB:CD:2F:60:95:66:FC:BF:61
Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1
Certificate serial: 0193584061F45F652C1D0EE70F981CB73D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
Manifest number: 0271
Signing time: Sat 23 Nov 2024 09:00:34 +0000
Manifest this update: Sat 23 Nov 2024 09:00:34 +0000
Manifest next update: Sun 24 Nov 2024 09:00:34 +0000
Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: tRH5n5YyCClYautvWTIOhPYN4X8cPM2e17M3oqTK2xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:58:40:61:f4:5f:65:2c:1d:0e:e7:0f:98:1c:b7:3d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1
Validity
Not Before: Nov 23 09:00:34 2024 GMT
Not After : Nov 24 09:00:34 2024 GMT
Subject: CN=698e8d59af6aec911f82b5bbcd2f609566fcbf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e5:f0:07:46:31:05:7c:19:db:34:bc:97:38:
15:02:eb:38:fc:e5:0c:70:fc:4f:58:28:84:62:69:
8a:2d:11:98:21:b5:f8:01:68:b5:5e:40:1b:7c:5e:
50:cd:9d:76:07:8a:a6:d7:12:c0:53:27:0e:40:28:
77:b0:fb:cd:f1:3d:6b:00:2a:09:75:c2:a6:d0:ef:
d9:03:93:42:2c:9d:1d:3b:18:2b:e9:44:ff:03:0d:
bd:0c:07:d2:bc:a8:c9:f3:8e:45:20:ef:41:7f:cd:
52:2d:73:56:9b:de:58:16:88:52:af:4c:8a:f6:54:
e5:ae:ee:11:7d:05:9d:9c:9e:6f:02:c6:d2:e2:83:
62:8e:6a:52:8a:68:05:1a:c9:42:89:6d:fd:b2:35:
0e:48:32:02:ba:05:51:21:de:5b:c7:a4:d9:e5:2d:
e4:08:6f:62:4c:d4:64:d3:56:fe:e0:f8:88:db:03:
53:51:ee:11:fe:c6:52:54:15:fc:de:f5:11:52:6a:
5c:d1:af:46:3e:42:9a:ae:6f:b4:11:24:6d:b4:e8:
ed:b9:91:e1:75:ee:2f:6e:70:7f:89:f6:20:76:5e:
4b:8c:b6:87:d7:fd:f4:1f:f3:a1:87:18:fc:89:5e:
39:da:8e:d9:33:30:d2:7c:f8:78:a7:94:9c:49:8a:
11:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:8D:59:AF:6A:EC:91:1F:82:B5:BB:CD:2F:60:95:66:FC:BF:61
X509v3 Authority Key Identifier:
keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:99:24:17:9d:94:67:cc:eb:9b:ba:63:35:78:f2:5d:3e:97:
cf:e1:34:a2:2f:bb:d0:a9:64:4b:f6:48:c1:1a:f6:18:0f:86:
8f:4e:9c:59:27:5b:f5:55:6f:6d:c2:58:f2:ea:3c:84:85:9d:
d9:36:87:9f:e0:9f:54:a4:57:73:60:ba:63:06:42:f8:2e:1c:
95:35:99:5c:8d:be:7c:8b:87:ba:01:88:84:5a:a3:ec:f9:e7:
59:40:f2:17:1f:6e:04:45:a7:dd:ef:a5:51:85:49:70:ad:30:
66:37:34:57:20:17:3e:91:6a:66:86:49:62:aa:d6:29:a3:17:
35:8e:8a:21:23:bd:95:87:f9:76:86:d0:f4:1a:88:66:87:ad:
10:92:27:bf:5b:79:b8:6c:5a:3a:82:2a:6c:44:4b:c5:15:a7:
36:2f:2a:d8:eb:8e:2e:72:7d:98:97:4e:8c:a7:ae:ab:68:82:
2f:c6:10:d4:f8:5a:03:cd:d6:ff:d5:b9:6f:06:cb:c0:3c:84:
ed:3e:2d:33:98:74:c5:7e:dc:43:c7:2c:95:13:8d:e9:21:15:
7d:92:ab:c0:3c:fa:1e:20:f3:bb:8c:d7:00:a0:61:c0:03:e5:
09:69:63:ff:a7:38:0d:7b:9c:32:d8:5f:a8:ce:ab:0b:ce:a6:
58:0a:9d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:45 2024 by rpki-client on console-fra.rpki-client.org