Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
File: AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft (raw, json)
Hash identifier: ltSVjz4P+aW3izlnAmD1pIvZ8XSDN5dRKFm8h8TOyqo=
Subject key identifier: 12:CA:C0:BA:3A:9A:BA:A9:38:12:44:C9:41:5E:08:49:FB:F6:AA:C5
Authority key identifier: 00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
Certificate issuer: /CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Certificate serial: 019350F49AF5C771903F8E113812D0D45521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
Manifest number: 02DB
Signing time: Thu 21 Nov 2024 23:00:27 +0000
Manifest this update: Thu 21 Nov 2024 23:00:27 +0000
Manifest next update: Fri 22 Nov 2024 23:00:27 +0000
Files and hashes: 1: 3OFqB22SQbu8hbA6h_SbN-8VdE4.roa (hash: wa7d1uX4axouVCqI1Vy2jrvGNKka8gXWrFvK5JxPSYs=)
2: AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl (hash: bRpii6tcT1kXGw8p7Bb4v3BwQp943zFXN/xIdoAONwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:50:f4:9a:f5:c7:71:90:3f:8e:11:38:12:d0:d4:55:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ccfa2c166f86c3cd01c6ebae193745e1eb0f29
Validity
Not Before: Nov 21 23:00:27 2024 GMT
Not After : Nov 22 23:00:27 2024 GMT
Subject: CN=12cac0ba3a9abaa9381244c9415e0849fbf6aac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:f7:24:e0:c1:cb:02:15:88:3f:b0:2e:95:
c7:0f:04:55:44:3e:ce:32:e7:eb:52:f5:3d:83:59:
4c:80:36:92:c5:b5:80:cd:d8:05:2a:ea:83:1a:00:
76:f3:26:0e:03:c0:72:3c:bd:91:15:3b:e0:39:09:
d0:f9:ab:10:40:5c:56:03:31:41:7f:9b:ec:b4:96:
cc:c6:4b:83:eb:e2:62:8d:76:8c:c9:49:04:62:98:
0e:0b:93:a2:cc:0b:e0:53:b3:9c:4f:44:c9:ca:40:
c3:6a:c3:43:2f:c7:9b:33:b1:a8:6a:95:41:b2:c5:
c4:3f:a6:a2:b2:5a:3a:1a:21:8f:35:1c:d0:35:91:
7e:f4:a1:d9:4d:e4:38:d0:58:19:cc:4d:3c:08:ed:
d6:ee:83:a7:bb:e5:15:43:93:75:73:f8:5b:94:cc:
62:8a:4c:44:f9:a6:d5:ce:e5:25:b2:b0:fc:d7:f8:
82:03:dc:56:d2:be:92:7f:eb:d0:7e:50:df:fb:c9:
98:de:28:33:9d:35:12:58:df:7f:a1:00:f9:77:63:
c3:ba:89:0e:e8:ea:b9:8d:6b:4e:ec:ff:6a:db:d8:
ea:3b:fd:de:ec:bf:f5:a6:ab:f2:d6:3e:ae:c6:00:
24:b5:84:1a:2f:04:e8:fc:08:0e:49:52:bc:39:2c:
29:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:CA:C0:BA:3A:9A:BA:A9:38:12:44:C9:41:5E:08:49:FB:F6:AA:C5
X509v3 Authority Key Identifier:
keyid:00:CC:FA:2C:16:6F:86:C3:CD:01:C6:EB:AE:19:37:45:E1:EB:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AMz6LBZvhsPNAcbrrhk3ReHrDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/47e909-7744-4db3-b691-a7b9c7115c1e/1/AMz6LBZvhsPNAcbrrhk3ReHrDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:85:33:eb:03:57:7d:2a:e8:e2:26:01:ec:f3:83:03:ea:c3:
76:7c:77:33:80:f0:e9:38:f9:d3:c2:a3:65:66:ba:dc:52:be:
a0:18:3a:c4:ba:68:b1:7b:d3:aa:9f:fb:45:cc:53:b7:ca:da:
96:84:3d:e4:4a:12:db:0c:2e:d8:58:6a:f9:34:69:86:97:b9:
8b:88:89:80:b2:a4:5a:56:96:41:a6:e5:37:e0:a9:d9:20:bf:
8b:b3:37:7f:e3:fc:8b:dd:5f:47:fa:9a:6c:43:7e:c2:b5:ee:
e5:45:02:da:2d:ee:68:ae:09:16:79:aa:10:60:13:7d:b9:6e:
05:67:a3:86:44:36:d6:fb:eb:7d:1d:01:14:0f:01:86:a8:cd:
8d:50:69:ce:f0:ac:c6:99:32:72:84:6f:97:a3:65:74:07:ae:
46:f5:2b:02:5b:c2:85:5f:3c:75:f2:2c:f1:fe:a3:4e:c7:34:
cb:e0:c8:4c:a3:78:d9:e5:e7:4e:cf:e7:53:c1:27:c1:62:6f:
70:a5:92:a2:71:de:77:a3:0e:40:95:31:ae:2e:e9:ce:f0:24:
ab:a0:ca:0d:62:c8:b3:23:0c:92:35:ed:4d:99:ec:aa:75:68:
ff:16:62:68:5a:ab:5e:60:a1:22:3a:26:13:e8:e7:80:32:18:
4e:e5:56:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:47 2024 by rpki-client on console-ams.rpki-client.org