Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: rT+5vD9rCOQENrXdgY5ghjM4hNXXZWyaIIXsCOhG7QU=
Subject key identifier: B0:97:95:51:02:F6:17:94:32:70:FB:6C:55:75:5D:2A:B8:2E:9A:B9
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 019356F66CB7B1CDCC06195D42BC423233B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 0DE1
Signing time: Sat 23 Nov 2024 03:00:10 +0000
Manifest this update: Sat 23 Nov 2024 03:00:10 +0000
Manifest next update: Sun 24 Nov 2024 03:00:10 +0000
Files and hashes: 1: 7iSXQzRJAcMf_gTmIY-Yq9VjHLU.roa (hash: ZPfafDzxxJq72xsg/V75gIDRGxuHUM2TPUxUeO6rrrw=)
2: 8B_n18TjZnpdH4VSmAfWWyMTG9Y.roa (hash: xfalGS2aRYaAWrLcQWp+OZwpjT/MXkx3b+hGvsDOqxw=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: oc0KXN6P090Bg7unJAaZYrNS8428XubEcAiO2ALB9PQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:56:f6:6c:b7:b1:cd:cc:06:19:5d:42:bc:42:32:33:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Nov 23 03:00:10 2024 GMT
Not After : Nov 24 03:00:10 2024 GMT
Subject: CN=b097955102f617943270fb6c55755d2ab82e9ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:48:a8:a8:7b:3f:10:fa:fa:7b:6d:73:e2:
39:23:96:a0:9d:9d:14:c1:eb:95:9e:ba:53:db:68:
e7:51:66:4d:89:5d:52:db:2e:f3:e1:c3:b6:2b:1d:
c3:4a:79:87:5e:23:de:fa:de:dd:e8:76:54:b9:35:
0e:6f:9a:4b:6e:8c:66:7a:08:e4:15:5d:e7:15:6e:
96:a7:d8:58:84:34:6f:d7:be:92:e0:53:86:c7:ca:
4c:bd:a1:89:ad:36:e9:4c:f8:23:6b:91:24:8f:2e:
29:3c:c0:18:21:3a:94:20:20:3d:00:de:d9:b3:27:
11:db:ca:c0:20:90:1f:59:cf:4c:00:9b:0c:04:f2:
54:ea:41:25:93:94:f4:a0:04:07:28:5c:dd:2c:73:
dc:de:1b:6b:e9:ee:50:78:9e:02:65:80:a9:07:d6:
05:24:70:68:b2:15:aa:db:63:ba:3a:05:04:9f:e6:
94:f7:db:30:ec:4a:a3:e5:5d:94:f0:3f:3e:dc:aa:
86:d2:77:13:16:71:50:1c:1c:d5:1f:3e:dc:61:1b:
77:79:f3:6b:4c:76:88:8e:99:b4:45:f5:61:b9:10:
0b:4e:5b:d1:8e:59:06:06:a7:02:dc:54:97:74:82:
ab:a8:13:df:40:48:35:b2:eb:0b:36:23:8a:1c:c0:
10:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:97:95:51:02:F6:17:94:32:70:FB:6C:55:75:5D:2A:B8:2E:9A:B9
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c0:35:2a:d6:07:84:5d:af:b2:79:e5:48:e2:0b:c0:49:58:
13:77:2c:24:56:ab:45:ea:68:29:58:d8:a6:5c:b4:e2:c7:41:
ab:4c:8e:d1:9c:59:13:a4:c2:c0:9c:9d:7d:21:2f:bd:75:f1:
e7:87:d1:f2:c6:e6:2e:42:5b:0e:67:67:96:49:fd:82:7f:10:
56:6d:a6:21:5d:cd:a5:61:11:29:8c:eb:38:de:8c:78:47:49:
37:da:be:85:2b:62:91:53:94:63:96:32:ea:64:4c:1e:70:74:
73:f2:64:79:36:56:ea:75:7c:59:8f:88:cc:4c:ea:8e:8c:77:
99:72:04:f0:de:41:97:17:fc:65:3f:44:bb:66:aa:fd:e4:a7:
28:f0:16:7e:42:6e:93:f8:3b:4c:5c:91:0f:40:50:83:eb:17:
ac:88:e5:23:b6:08:f2:01:13:1c:5e:39:5f:70:fa:99:3a:5e:
1d:49:5b:ee:1a:73:a5:50:c5:08:7c:99:39:9f:13:93:8b:84:
0c:5c:77:f2:b9:ac:de:be:62:99:54:04:ae:d6:a9:6e:31:ea:
b9:4b:6c:03:22:98:1e:0d:bf:b2:f9:e9:20:68:1b:a0:39:74:
1d:39:76:88:c5:af:b7:92:93:95:c2:d1:92:20:a5:bc:34:81:
91:0a:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:49 2024 by rpki-client on console-ams.rpki-client.org