Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
File: h19BKtsY1C-t0KhYc3GNrakx0cI.mft (raw, json)
Hash identifier: vzlGjTh1XT2nLn4APh+3ezVvK91/PMmzvUBfKGKLbYA=
Subject key identifier: 99:AD:4D:AC:57:AA:20:76:6E:4E:53:62:D0:AB:A9:82:49:A4:48:1E
Authority key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Certificate issuer: /CN=875f412adb18d42fadd0a85873718dada931d1c2
Certificate serial: 019353BEEEDE8F0B7DCF78816CBC7B637274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
Manifest number: 030D
Signing time: Fri 22 Nov 2024 12:00:42 +0000
Manifest this update: Fri 22 Nov 2024 12:00:42 +0000
Manifest next update: Sat 23 Nov 2024 12:00:42 +0000
Files and hashes: 1: h19BKtsY1C-t0KhYc3GNrakx0cI.crl (hash: 5/JwrWB/4j1ZZ8AUj4SXtm5qR19YUHLT9tGzBO6nckM=)
2: mBuEgeP9Zxm8y-ezeNy2wNRUre8.roa (hash: cEvkHt0QFypkVoKKxtB21hgRukatWGxYgCkisE0fhiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:be:ee:de:8f:0b:7d:cf:78:81:6c:bc:7b:63:72:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875f412adb18d42fadd0a85873718dada931d1c2
Validity
Not Before: Nov 22 12:00:42 2024 GMT
Not After : Nov 23 12:00:42 2024 GMT
Subject: CN=99ad4dac57aa20766e4e5362d0aba98249a4481e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:04:26:50:d1:fe:48:3b:57:28:13:91:4a:
cf:b6:7e:54:cc:11:d2:c2:b4:a0:17:17:35:b8:4c:
75:bc:d2:94:51:3f:08:17:56:d1:66:47:59:61:48:
64:74:ba:ad:f1:26:e8:51:68:04:af:a8:6d:1e:b9:
31:ad:f5:4c:7a:f6:20:9c:e2:fb:8d:42:d7:7c:f2:
a5:6e:87:bb:49:92:63:70:80:25:c7:07:b3:9d:d8:
33:73:a2:a0:46:21:ff:91:27:c8:69:20:74:20:5d:
30:25:a4:a4:18:9e:62:f1:bb:2d:15:59:a7:5e:a0:
38:16:6f:05:29:01:5a:d2:88:28:69:9c:17:79:38:
ef:d0:4f:ae:dd:71:0f:0d:e6:2b:1f:68:d2:5f:ba:
3f:72:aa:7b:58:09:08:cb:f3:a2:9a:d0:71:d1:0b:
77:f2:8e:43:89:b7:22:fc:cc:79:76:19:5c:b1:49:
58:25:b9:97:fd:c5:bf:1d:df:67:90:3b:93:b3:04:
af:4b:fe:89:f7:d3:70:80:d9:d1:3f:39:74:8f:a8:
6f:68:8f:63:7c:f6:58:51:9a:b7:b2:d9:7c:b3:36:
c5:30:ff:e6:09:c3:32:d3:3d:fd:41:03:e1:3d:6c:
b0:d4:fc:3e:17:c3:31:1e:11:88:4e:e1:84:ce:8e:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AD:4D:AC:57:AA:20:76:6E:4E:53:62:D0:AB:A9:82:49:A4:48:1E
X509v3 Authority Key Identifier:
keyid:87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d7:1a:7d:08:6e:87:62:87:9d:4e:19:ee:74:c4:db:16:57:
5c:16:da:91:e7:06:72:10:94:ab:07:99:b9:68:d1:b4:98:02:
f9:c6:89:d6:14:66:3b:62:9e:d8:45:50:dd:24:b9:13:43:79:
15:e5:80:06:47:91:a9:36:9a:23:61:bf:d0:58:64:37:fd:26:
7b:29:02:80:d1:ab:a5:bf:cb:00:68:40:a5:32:db:40:96:3d:
af:49:d8:54:56:e9:be:9f:c8:ce:b4:2d:5f:e8:14:db:a4:93:
b2:e3:85:52:11:06:f8:c4:73:fd:a7:52:20:87:f7:f6:a7:f4:
86:37:b7:13:f6:03:f7:ce:f6:2d:f9:6b:31:78:3a:f4:6b:32:
4b:4d:18:ac:94:96:68:7e:47:eb:fa:93:b0:7b:97:6f:41:11:
85:41:dc:0a:65:f4:6e:97:63:ed:60:c6:30:51:a0:e8:a1:13:
5b:59:6e:48:f8:2c:5b:92:32:2c:a0:f0:8d:30:1b:b4:df:82:
ad:56:22:64:a4:de:a7:86:c2:de:77:4b:ae:69:8e:6c:69:7a:
77:64:8e:af:76:3d:e6:66:d3:75:7d:44:69:c0:8f:04:26:21:
d0:4d:e7:9e:2b:0c:09:47:ac:b6:20:8c:76:5b:47:db:78:a4:
e1:aa:25:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:04:18 2024 by rpki-client on console-fra.rpki-client.org