Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: lVexu9VI0vFhWx/Q+Oqqmg4fm8twc7jKATN+ItDG5qY=
Subject key identifier: 6F:C5:08:E1:5B:DA:96:5F:56:36:1E:02:9F:16:8A:92:B2:85:0E:A0
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 0193523E0B6DF87B5F76A9980A4807EC2F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 1091
Signing time: Fri 22 Nov 2024 05:00:18 +0000
Manifest this update: Fri 22 Nov 2024 05:00:18 +0000
Manifest next update: Sat 23 Nov 2024 05:00:18 +0000
Files and hashes: 1: C-7UZ8BlMnxUKqQrGDOhJhB0sek.roa (hash: XyKx8gnK0kxECPD5Ym37+XZ1ckasRXiOcpVOj0QeiJM=)
2: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: UbzRkXdyzbnHPuvazLwqNo/PIaov+SjhYJqkmNzNoFw=)
3: Xfi0N5f5vFQu5hGV8WPJ0FlZwxU.roa (hash: I0nR3kt2SFLPkwlKUMcSNqWrWG9ooLPGX7z4kajNfYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:52:3e:0b:6d:f8:7b:5f:76:a9:98:0a:48:07:ec:2f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Nov 22 05:00:18 2024 GMT
Not After : Nov 23 05:00:18 2024 GMT
Subject: CN=6fc508e15bda965f56361e029f168a92b2850ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cb:a4:a1:ee:9a:bd:f0:9a:8b:37:5f:b6:f7:
2e:c2:fc:94:a3:9a:8a:3a:e5:1a:d9:9f:6a:d2:81:
68:f0:5f:11:f3:50:13:63:e5:6f:b4:51:1f:7c:9c:
a8:78:6f:1f:41:8d:e7:79:5c:d6:45:e3:48:02:3a:
a4:e5:b6:a5:89:f2:43:ec:df:b6:14:73:1b:aa:10:
2d:e7:ff:7c:e0:5d:63:d3:65:58:f5:3b:51:23:60:
55:cf:35:ab:26:50:5e:24:97:b7:fe:b0:19:5b:18:
fa:26:50:69:41:ec:88:08:3a:4b:f4:a0:92:af:fa:
34:cc:e5:35:19:1f:58:2b:0d:68:98:ad:04:25:03:
73:23:cc:6e:d4:9c:d9:96:12:76:3f:64:ae:3d:cd:
b9:6d:23:ac:c0:20:3d:d1:cd:89:87:df:36:72:cf:
4a:2a:08:96:2a:e3:17:e8:b0:50:e1:c3:cd:3b:82:
81:7a:d6:12:fd:64:26:63:4a:d7:c5:a8:36:b1:47:
16:09:5c:07:9d:17:42:9b:89:8b:da:5d:99:30:53:
57:d2:47:18:19:c1:eb:03:65:77:0f:2c:81:19:b2:
c0:23:fa:82:36:4e:52:9a:b8:9f:f9:55:51:0c:a8:
a5:a1:b0:38:c8:4e:64:03:37:19:29:d5:9d:e8:3f:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C5:08:E1:5B:DA:96:5F:56:36:1E:02:9F:16:8A:92:B2:85:0E:A0
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e6:c6:ca:cd:c7:90:1b:3b:d7:0c:c5:95:b0:c6:ba:dc:bd:
b6:96:9b:a1:67:63:4e:13:19:57:22:f6:aa:5b:3e:3e:a2:2b:
ad:e1:4c:20:42:d8:92:74:8d:a6:d8:25:75:4d:4d:a0:ba:88:
a8:41:b5:17:a2:01:73:f0:3a:18:c1:36:e2:77:9b:6d:da:2a:
8c:c6:9e:30:55:b1:f6:b4:49:fc:bc:22:31:76:79:d1:67:d6:
2f:09:4f:96:72:04:1f:79:11:ca:15:ce:ac:b8:d4:7b:ec:8d:
dd:95:e1:2c:7a:2c:da:e1:80:3c:9c:7b:b3:e1:cb:36:76:ae:
e6:34:8e:42:36:4a:dc:6c:67:12:dc:68:62:96:37:aa:d9:bc:
04:15:ad:d3:d8:50:ba:9d:c9:02:47:bb:5a:de:53:50:53:ef:
a0:9f:91:1b:be:ca:c5:a6:0d:fc:27:3b:0f:c2:89:d1:66:2b:
76:7a:27:ee:17:d5:df:46:c4:65:4b:a6:14:ef:72:3a:57:f0:
7a:dd:bd:8a:2e:dc:91:74:32:db:35:c8:14:0e:78:82:2c:db:
8d:7c:d0:3f:5d:8d:0a:1a:a9:0d:a6:da:4c:2b:53:36:42:aa:
8c:d8:c2:02:52:2e:84:1c:46:34:10:9c:16:74:69:95:de:00:
6a:20:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:47:11 2024 by rpki-client on console-fra.rpki-client.org